last executing test programs: 1m57.808403642s ago: executing program 1 (id=1809): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r0) r4 = add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000200)=0xc) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 1m57.795886773s ago: executing program 1 (id=1810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000001000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be004432fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/image_size', 0x1a1081, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000000010104001000000000000032eb0000619ad332afa6ef07cfeb6cbe68efa8c5c44ec1cd9cf340cd2e3e7781d21b891affff59940b1afdf8d74545f728fb292e60f73389537e597622e8a5d398f79d01b9880774282807f774b4cda702bc167736eb3a7f2b42a379d2596703f1ffe3c5420e184a26b06fc628c2d6aae95e98265c14acb3ac339aced0ae"], 0x14}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x11e, 0x400, 0x3, 0x319}, &(0x7f0000000140), &(0x7f0000000400)) close_range(r9, 0xffffffffffffffff, 0x0) 1m57.698284871s ago: executing program 1 (id=1811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)='%pS \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xffff, '\x00', r5, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = msgget$private(0x0, 0x0) msgrcv(r7, 0x0, 0x0, 0x1, 0x2000) msgrcv(r7, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_SET(r7, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010000100caebb9a297399a5600000000", @ANYRES32=0x0, @ANYBLOB="84270000240100001400030074756e6c30000000000000000000000008002900449d000014001680100001800c0009"], 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000ae71e9b70500000a58000000060a010400000000000000000a0000010900010073797a31000000002c000480280001800e000100696d6d65646961746500000014000280080002800400028008000140000000140900020073797a3200000000140000001100010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m56.839717999s ago: executing program 1 (id=1821): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=""/68, 0x44}, 0x8}], 0x1, 0x10003, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r3}}, 0x20) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @link_local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "e675910f0547f567a5afbe81b11967155e46616ed4dd5c55", "15df9c8340e53b20e91b913c5bc01a3a1deb091c6f52dada80e8eb5b17692de5"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd33fef29588362bc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffe}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000040)={0x2, [0x8001, 0x5], 0xec}, 0x10) 1m55.950002921s ago: executing program 1 (id=1828): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x22d6, &(0x7f0000000180)={0x0, 0xa982, 0x40, 0x3, 0x320}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000200), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) mq_timedsend(r4, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) 1m55.949489791s ago: executing program 1 (id=1829): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) unshare(0x2c020400) tee(r1, r1, 0xfffffffffffffc01, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 15) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='ata_eh_link_autopsy_qc\x00', r4}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_io_uring_setup(0x1539, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000240)=[{0x0, 0x2d, 0x61, 0x3}, {0x4, 0x6, 0xa, 0x3}, {0x12, 0x5, 0x2, 0x80000000}, {0x7fff, 0x9, 0x9, 0xcc24}, {0x8, 0x8, 0x5, 0x89f8}]}) 1m55.949286201s ago: executing program 32 (id=1829): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0x9}}}, 0x24}}, 0x14000000) r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) unshare(0x2c020400) tee(r1, r1, 0xfffffffffffffc01, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 15) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='ata_eh_link_autopsy_qc\x00', r4}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_io_uring_setup(0x1539, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000240)=[{0x0, 0x2d, 0x61, 0x3}, {0x4, 0x6, 0xa, 0x3}, {0x12, 0x5, 0x2, 0x80000000}, {0x7fff, 0x9, 0x9, 0xcc24}, {0x8, 0x8, 0x5, 0x89f8}]}) 10.312925182s ago: executing program 3 (id=3644): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000140)={0x0, 0x334c, 0x10, 0x3, 0x2de, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x10000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 9.477556079s ago: executing program 3 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) 9.409926224s ago: executing program 3 (id=3661): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x4}, 0x94) (async) r2 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x7fa, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) (async, rerun: 32) getsockname$l2tp(r3, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x19, 0xe7b, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) socket(0x1a, 0x1, 0x9408) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) (async, rerun: 64) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001001b0000000c00098008000200000000001c000980080002000e00000008000200e5d8000008000200060000005c0004800900010073797a31000000002c000780080002000300000008000400f50c00000800020005000000080001000000000008000100100000000900010073797a31000000001300010062726f6164636173742d6c696e6b0000e8000280080001000300000008000200020000004c000380080002008100000008000200ff01000008000100000400000800010008000000080002000000000008000100ffff00000800020005000000080002005d0000000800010001000100040004002c0003800800020007000000080001000000000008000100aede010008000100ff7f000008000100810000001c0003800800010007000000080001000600000008000200050000003c000380080002000200000008000100b73500000800010007000000080002000002000008000100ae0d0000080002000700000008000100090000001400028008000100fdffffff08000100060000000c000980080002005b0000006000058008000100657468000800010065746800070001006962"], 0x2ac}}, 0x0) 9.409538794s ago: executing program 3 (id=3662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/71) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fstat(r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe00000008"], 0xcee02) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002a00)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0x10e0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x1, 0x1}, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 9.389830036s ago: executing program 3 (id=3664): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x53000000}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x3, 0xc9a}}}, {0x0, 0xfd, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)={0x1b, 0x0, 0x0, 0xe65, 0x0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x1b, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6ad9f145, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @alu={0x7, 0x0, 0x5, 0x7, 0x3, 0xc, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @generic={0x6a, 0x8, 0x3, 0xe, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xbc, &(0x7f00000009c0)=""/188, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0xb, 0x12380, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, r5, r6, r7], &(0x7f0000000c80)=[{0x1, 0x1, 0x3, 0x6}, {0x2, 0x4, 0x8, 0x4}, {0x1, 0x5, 0x10, 0xf}, {0x2, 0x2, 0x7, 0xa}, {0x3, 0x5, 0x1, 0x2}, {0x4, 0x5, 0x4, 0xb}], 0x10, 0xa1cb}, 0x94) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600010003600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290567f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6b7d4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x24000800) 9.170253563s ago: executing program 3 (id=3668): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) 9.128787197s ago: executing program 33 (id=3668): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)='o', 0x1}], 0x1}}], 0x1, 0x44810) 3.950077072s ago: executing program 6 (id=3735): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2.826682452s ago: executing program 2 (id=3743): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x8010, 0xffffffffffffffff, 0xd0c6f000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x20000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r5}, 0x38) socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x2, 0x0, 0x1, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) 2.661697566s ago: executing program 2 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 2.581624952s ago: executing program 2 (id=3747): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="54bcab2b490f01f352624cd858e600b593a24cda6e011c4c93549bee0e96366776c22de08b5cbaef"], 0x48) r2 = dup(r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x2b}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000010000000000fb6f1462a2653a18d1aa0665f6e676e52c6d87fdbccca5ca5dad94295eb26036c05ffcca58a93e6d631a41e39047e01acda5b67b15479df9d77d8e7cc2664f30e154bb35075cfd6d387c5aecd7878da84d6ef9b2ce9c1f9b3b5446abfed60e383d282b1b98cf29b67d51e58b83693b84d5ca6b7c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYRES64=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) setresuid(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setuid(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mmap(&(0x7f0000d51000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0) 1.73883863s ago: executing program 2 (id=3753): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffff8) r7 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r6, &(0x7f0000000580)='.request_key_auth\x00', &(0x7f00000005c0)={'syz', 0x1}, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0xe, 0x7fff, 0x0, 0x4, r4, 0x98d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x3, &(0x7f0000000740)=@raw=[@ldst={0x3, 0x2, 0x6, 0x0, 0x1, 0x18, 0x10}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5e7}], &(0x7f0000000780)='GPL\x00', 0x7ff, 0x0, &(0x7f00000007c0), 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x5, 0xfffffffd, 0x2}, 0x10, 0x0, r5, 0x7, &(0x7f00000008c0)=[r13, r12, r12, r4, r12], &(0x7f0000000a80)=[{0x3, 0x2, 0xf}, {0x0, 0x2, 0xa, 0x3}, {0x0, 0x4, 0x1ff, 0x1}, {0x1, 0x5, 0xf, 0x4}, {0x5, 0x4, 0xa, 0xb}, {0x3, 0x3, 0x9, 0x5}, {0x0, 0x3, 0x7, 0x5}], 0x10, 0x1}, 0x94) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000001c0)='/;ev/vcsu#\x00CVq\x80\xfb\xc0\xe6C\xff\x9d9xg\x13\xd2\xd7C\xa2\xcd-z_\by\x94\x9c\x1c;\xf9ICX\xc5d\xe1Z\x06\x11i\xc5F\x1c\xf0\xf0\xf1\x7f\xd3\xb9\x18>*\xee \x99\xc2\n-\x8a?o\x00'/85, 0xffffffffffffffff) 1.530483286s ago: executing program 0 (id=3755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r4, r0}, 0xc) 1.449875533s ago: executing program 0 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 1.426394325s ago: executing program 0 (id=3757): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x28, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 1.390427088s ago: executing program 0 (id=3759): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 1.287255906s ago: executing program 0 (id=3760): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 1.051014995s ago: executing program 5 (id=3762): syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000100003000000000000", @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a"], 0x58}, 0x1, 0x2}, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 893.895938ms ago: executing program 6 (id=3763): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="54bcab2b490f01f352624cd858e600b593a24cda6e011c4c93549bee0e96366776c22de08b5cbaef"], 0x48) r2 = dup(r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x2b, 0x0, @local, @local, {[@hopopts={0x3c}, @dstopts={0x2b}], {{0x0, 0xfffd, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000010000000000fb6f1462a2653a18d1aa0665f6e676e52c6d87fdbccca5ca5dad94295eb26036c05ffcca58a93e6d631a41e39047e01acda5b67b15479df9d77d8e7cc2664f30e154bb35075cfd6d387c5aecd7878da84d6ef9b2ce9c1f9b3b5446abfed60e383d282b1b98cf29b67d51e58b83693b84d5ca6b7c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYRES64=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) setresuid(0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setuid(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x18, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) mmap(&(0x7f0000d51000/0x4000)=nil, 0x4000, 0x1, 0x31, 0xffffffffffffffff, 0x0) 628.372109ms ago: executing program 2 (id=3764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x1, 0x70bd29, 0x25dfdbfc, {0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0xa, 0x0, [0xff, 0x1, 0x2, 0xffff, 0x8, 0x8, 0x4, 0x2, 0x1, 0x2, 0xfffffffb, 0x2, 0xa929, 0x1, 0xbe3, 0x5]}, {0x0, 0x0, [0x5, 0x7, 0x7fff, 0x0, 0x7, 0x9, 0xaf3, 0x3, 0xa, 0x4, 0xab, 0x7f, 0x40, 0x6, 0x2, 0x400]}, {0x2, 0x0, [0xe59, 0x400, 0x7bb, 0x400, 0x81, 0x8000, 0x1, 0x2, 0x1, 0x888b, 0x4, 0x1, 0x1ff, 0x3, 0x401, 0x4653b162]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) 523.560007ms ago: executing program 4 (id=3765): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd4", 0xaf}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 493.2135ms ago: executing program 4 (id=3766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x1, 0x80000000, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x64, 0x0, 0xf8, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x7, [{@broadcast, 0x8}, {@local, 0x6}]}, @ssrr={0x89, 0x1b, 0xda, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @broadcast]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "47eafb80a4f79a276dcd"}]}, @timestamp={0x44, 0x1c, 0xab, 0x0, 0x9, [0x1, 0xffff0001, 0x4, 0x7, 0x2, 0x180]}, @noop, @ssrr={0x89, 0x13, 0x50, [@local, @broadcast, @empty, @private=0xa010102]}, @generic={0x44, 0x9, "0bcb1fcae5e45d"}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff2}, {0x5, 0x2}, {0x10, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00d8d1}, 0x20000801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = io_uring_setup(0x42bf, &(0x7f0000000b40)={0x0, 0x8cc3d, 0x800, 0x0, 0x100027e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000006c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 378.930279ms ago: executing program 0 (id=3767): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) 335.963023ms ago: executing program 4 (id=3768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r3, r0}, 0xc) 288.926956ms ago: executing program 4 (id=3769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 288.790826ms ago: executing program 4 (id=3770): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (fail_nth: 2) 265.284808ms ago: executing program 2 (id=3771): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f00000003c0)=""/4096, 0x1000) 209.869553ms ago: executing program 4 (id=3772): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), &(0x7f0000000300)) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000140)={0x0, 0x334c, 0x10, 0x3, 0x2de, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x3, 0x10000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 175.057306ms ago: executing program 5 (id=3773): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 158.034157ms ago: executing program 5 (id=3774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000"], 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) 135.568038ms ago: executing program 5 (id=3775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 93.796042ms ago: executing program 5 (id=3776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000026000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b708000000000000006d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x1f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba5df485855", 0x0, 0x8000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) (async) r5 = socket(0x400000010, 0x3, 0x0) write(r5, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r7 = epoll_create1(0x0) r8 = eventfd2(0x0, 0x0) (async) epoll_pwait2(r7, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000b80)) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000180)={0x20000005}) (rerun: 64) 82.391273ms ago: executing program 6 (id=3777): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r1 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f", 0xbc}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 80.101213ms ago: executing program 5 (id=3778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x1, 0x80000000, {{0x24, 0x4, 0x2, 0x7, 0x90, 0x64, 0x0, 0xf8, 0x2f, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x7, [{@broadcast, 0x8}, {@local, 0x6}]}, @ssrr={0x89, 0x1b, 0xda, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @multicast1, @broadcast]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "47eafb80a4f79a276dcd"}]}, @timestamp={0x44, 0x1c, 0xab, 0x0, 0x9, [0x1, 0xffff0001, 0x4, 0x7, 0x2, 0x180]}, @noop, @ssrr={0x89, 0x13, 0x50, [@local, @broadcast, @empty, @private=0xa010102]}, @generic={0x44, 0x9, "0bcb1fcae5e45d"}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff2}, {0x5, 0x2}, {0x10, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc00d8d1}, 0x20000801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r5 = io_uring_setup(0x42bf, &(0x7f0000000b40)={0x0, 0x8cc3d, 0x800, 0x0, 0x100027e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000006c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 31.928847ms ago: executing program 6 (id=3779): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x402c8c0}, 0x40000) 16.786788ms ago: executing program 6 (id=3780): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x4, 0x2}]}) 0s ago: executing program 6 (id=3781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00'}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x3fa, 0x1, 0x70bd29, 0x25dfdbfc, {0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4044840}, 0xc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000400)='8', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) r5 = inotify_init() readv(r5, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000280)=[{0xa, 0x0, [0xff, 0x1, 0x2, 0xffff, 0x8, 0x8, 0x4, 0x2, 0x1, 0x2, 0xfffffffb, 0x2, 0xa929, 0x1, 0xbe3, 0x5]}, {0x0, 0x0, [0x5, 0x7, 0x7fff, 0x0, 0x7, 0x9, 0xaf3, 0x3, 0xa, 0x4, 0xab, 0x7f, 0x40, 0x6, 0x2, 0x400]}, {0x2, 0x0, [0xe59, 0x400, 0x7bb, 0x400, 0x81, 0x8000, 0x1, 0x2, 0x1, 0x888b, 0x4, 0x1, 0x1ff, 0x3, 0x401, 0x4653b162]}], 0xffffffffffffffff, 0x1, 0x1, 0xd8}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) kernel console output (not intermixed with test programs): _page_fault+0x26/0x30 [ 200.467974][T12417] RIP: 0010:__put_user_4+0xd/0x20 [ 200.467998][T12417] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 200.468013][T12417] RSP: 0018:ffffc90011647c18 EFLAGS: 00050206 [ 200.468029][T12417] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000000 [ 200.468042][T12417] RDX: 00000000000001b5 RSI: 0000000000000000 RDI: ffff8881197b9cbc [ 200.468079][T12417] RBP: 0000000000000000 R08: 0001ffff86847f7f R09: 0000000000000000 [ 200.468104][T12417] R10: 0000000000008946 R11: 0000000000000000 R12: ffff8881197b9ca8 [ 200.468117][T12417] R13: ffff8881197b9c00 R14: ffff8881197b9cbc R15: ffff8881197b9ca8 [ 200.468134][T12417] bt_sock_ioctl+0x209/0x510 [ 200.468219][T12417] ? _parse_integer_limit+0x170/0x190 [ 200.468241][T12417] ? _parse_integer+0x27/0x40 [ 200.468260][T12417] ? kstrtoull+0x111/0x140 [ 200.468279][T12417] sock_do_ioctl+0x70/0x220 [ 200.468305][T12417] sock_ioctl+0x41b/0x610 [ 200.468397][T12417] ? __pfx_sock_ioctl+0x10/0x10 [ 200.468422][T12417] do_vfs_ioctl+0xa79/0xe10 [ 200.468460][T12417] ? selinux_file_ioctl+0x1bd/0x3a0 [ 200.468478][T12417] ? __fget_files+0x184/0x1c0 [ 200.468500][T12417] __se_sys_ioctl+0x82/0x140 [ 200.468544][T12417] __x64_sys_ioctl+0x43/0x50 [ 200.468574][T12417] x64_sys_call+0x1816/0x2ff0 [ 200.468641][T12417] do_syscall_64+0xd2/0x200 [ 200.468663][T12417] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.468698][T12417] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 200.468821][T12417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.468841][T12417] RIP: 0033:0x7f07276aebe9 [ 200.468857][T12417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.468872][T12417] RSP: 002b:00007f072610f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.468890][T12417] RAX: ffffffffffffffda RBX: 00007f07278d5fa0 RCX: 00007f07276aebe9 [ 200.468902][T12417] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000004 [ 200.468985][T12417] RBP: 00007f072610f090 R08: 0000000000000000 R09: 0000000000000000 [ 200.468999][T12417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.469009][T12417] R13: 00007f07278d6038 R14: 00007f07278d5fa0 R15: 00007ffd2c8fccc8 [ 200.469026][T12417] [ 200.852531][T12425] random: crng reseeded on system resumption [ 200.963554][T12439] random: crng reseeded on system resumption [ 201.002690][T12441] delete_channel: no stack [ 201.011999][T12441] delete_channel: no stack [ 201.056522][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2817'. [ 201.083691][T12443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12443 comm=syz.4.2817 [ 201.158129][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2820'. [ 201.204513][T12454] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12454 comm=syz.3.2820 [ 201.247420][T12458] random: crng reseeded on system resumption [ 201.334053][T12478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2832'. [ 201.345098][T12478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2832'. [ 201.370421][T12481] FAULT_INJECTION: forcing a failure. [ 201.370421][T12481] name failslab, interval 1, probability 0, space 0, times 0 [ 201.383186][T12481] CPU: 1 UID: 0 PID: 12481 Comm: syz.0.2833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.383213][T12481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.383239][T12481] Call Trace: [ 201.383245][T12481] [ 201.383251][T12481] __dump_stack+0x1d/0x30 [ 201.383271][T12481] dump_stack_lvl+0xe8/0x140 [ 201.383289][T12481] dump_stack+0x15/0x1b [ 201.383372][T12481] should_fail_ex+0x265/0x280 [ 201.383392][T12481] should_failslab+0x8c/0xb0 [ 201.383412][T12481] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 201.383517][T12481] ? sidtab_sid2str_get+0xa0/0x130 [ 201.383537][T12481] kmemdup_noprof+0x2b/0x70 [ 201.383638][T12481] sidtab_sid2str_get+0xa0/0x130 [ 201.383657][T12481] security_sid_to_context_core+0x1eb/0x2e0 [ 201.383750][T12481] security_sid_to_context+0x27/0x40 [ 201.383798][T12481] selinux_lsmprop_to_secctx+0x67/0xf0 [ 201.383816][T12481] security_lsmprop_to_secctx+0x43/0x80 [ 201.383839][T12481] audit_log_task_context+0x77/0x190 [ 201.383913][T12481] audit_log_task+0xf4/0x250 [ 201.383942][T12481] audit_seccomp+0x61/0x100 [ 201.383967][T12481] ? __seccomp_filter+0x68c/0x10d0 [ 201.383990][T12481] __seccomp_filter+0x69d/0x10d0 [ 201.384087][T12481] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.384114][T12481] ? vfs_write+0x7e8/0x960 [ 201.384141][T12481] __secure_computing+0x82/0x150 [ 201.384166][T12481] syscall_trace_enter+0xcf/0x1e0 [ 201.384217][T12481] do_syscall_64+0xac/0x200 [ 201.384244][T12481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.384267][T12481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 201.384293][T12481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.384346][T12481] RIP: 0033:0x7f43b778ebe9 [ 201.384362][T12481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.384379][T12481] RSP: 002b:00007f43b61f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 201.384399][T12481] RAX: ffffffffffffffda RBX: 00007f43b79b5fa0 RCX: 00007f43b778ebe9 [ 201.384412][T12481] RDX: 0000000000008002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 201.384431][T12481] RBP: 00007f43b61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.384445][T12481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.384458][T12481] R13: 00007f43b79b6038 R14: 00007f43b79b5fa0 R15: 00007fff8eb78278 [ 201.384485][T12481] [ 202.153954][T12501] random: crng reseeded on system resumption [ 202.240579][T12515] netlink: 'syz.3.2844': attribute type 4 has an invalid length. [ 202.431424][T12528] 9pnet_virtio: no channels available for device [ 202.856304][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 202.856320][ T29] audit: type=1326 audit(202.838:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 202.886294][ T29] audit: type=1326 audit(202.838:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 202.909240][ T29] audit: type=1326 audit(202.848:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 202.932556][ T29] audit: type=1326 audit(202.848:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 202.955542][ T29] audit: type=1326 audit(202.848:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 202.978379][ T29] audit: type=1326 audit(202.848:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 203.001399][ T29] audit: type=1326 audit(202.848:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 203.024409][ T29] audit: type=1326 audit(202.848:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12529 comm="syz.0.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 203.055212][ T29] audit: type=1326 audit(203.038:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 203.078221][ T29] audit: type=1326 audit(203.038:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12537 comm="syz.0.2851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 203.142868][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2852'. [ 203.172574][T12540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12540 comm=syz.3.2852 [ 203.546689][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 203.663952][T12569] tunl0: entered promiscuous mode [ 203.669783][T12569] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 204.021027][T12575] 9pnet_virtio: no channels available for device [ 204.300891][T12587] netlink: 'syz.5.2865': attribute type 4 has an invalid length. [ 204.737730][T12608] siw: device registration error -23 [ 204.778457][T12612] loop0: detected capacity change from 0 to 512 [ 204.789869][T12612] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 204.798174][T12612] EXT4-fs (loop0): orphan cleanup on readonly fs [ 204.805025][T12612] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2875: Failed to acquire dquot type 1 [ 204.816677][T12612] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2875: bg 0: block 40: padding at end of block bitmap is not set [ 204.831520][T12612] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 204.840795][T12612] EXT4-fs (loop0): 1 truncate cleaned up [ 204.846772][T12612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 204.867183][T12612] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 205.040599][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 205.078109][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.163677][T12629] syzkaller0: entered promiscuous mode [ 205.169149][T12629] syzkaller0: entered allmulticast mode [ 205.340630][T12651] netlink: 'syz.3.2886': attribute type 4 has an invalid length. [ 205.341430][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 205.965889][T12688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2902'. [ 205.999383][T12688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12688 comm=syz.0.2902 [ 206.118866][T12697] netlink: 'syz.4.2905': attribute type 4 has an invalid length. [ 206.204593][T12711] siw: device registration error -23 [ 206.291310][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2904'. [ 207.330274][T12757] loop0: detected capacity change from 0 to 128 [ 207.344252][T12757] syz.0.2925: attempt to access beyond end of device [ 207.344252][T12757] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 207.629102][T12771] 9pnet_virtio: no channels available for device [ 207.739227][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2930'. [ 207.772601][T12774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12774 comm=syz.3.2930 [ 208.104726][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 208.310672][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 208.310688][ T29] audit: type=1326 audit(208.288:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.339824][ T29] audit: type=1326 audit(208.298:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.416390][ T29] audit: type=1326 audit(208.298:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.439349][ T29] audit: type=1326 audit(208.298:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.462282][ T29] audit: type=1326 audit(208.298:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.485197][ T29] audit: type=1326 audit(208.298:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.508154][ T29] audit: type=1326 audit(208.298:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.530981][ T29] audit: type=1326 audit(208.298:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.553864][ T29] audit: type=1326 audit(208.298:7250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.576766][ T29] audit: type=1326 audit(208.298:7251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12796 comm="syz.2.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 208.602917][T12797] siw: device registration error -23 [ 208.631841][T12801] loop0: detected capacity change from 0 to 512 [ 208.647693][T12801] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 208.679818][T12805] siw: device registration error -23 [ 208.723388][T12799] siw: device registration error -23 [ 208.740071][T12801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.826450][T12818] siw: device registration error -23 [ 209.161859][T12831] 9pnet_virtio: no channels available for device [ 209.329468][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.463783][T12841] netlink: 'syz.3.2955': attribute type 4 has an invalid length. [ 209.583614][T12856] siw: device registration error -23 [ 209.608023][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2959'. [ 209.625207][T12859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12859 comm=syz.2.2959 [ 209.716233][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 209.943142][T12883] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 209.964871][T12883] SELinux: failed to load policy [ 210.073856][T12888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12888 comm=syz.5.2971 [ 210.087403][T12888] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 210.626334][T12916] netlink: 'syz.0.2980': attribute type 4 has an invalid length. [ 210.756821][T12921] siw: device registration error -23 [ 210.827486][T12934] FAULT_INJECTION: forcing a failure. [ 210.827486][T12934] name failslab, interval 1, probability 0, space 0, times 0 [ 210.840273][T12934] CPU: 1 UID: 0 PID: 12934 Comm: syz.3.2986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.840298][T12934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.840310][T12934] Call Trace: [ 210.840325][T12934] [ 210.840333][T12934] __dump_stack+0x1d/0x30 [ 210.840452][T12934] dump_stack_lvl+0xe8/0x140 [ 210.840475][T12934] dump_stack+0x15/0x1b [ 210.840489][T12934] should_fail_ex+0x265/0x280 [ 210.840511][T12934] should_failslab+0x8c/0xb0 [ 210.840586][T12934] __kmalloc_noprof+0xa5/0x3e0 [ 210.840613][T12934] ? bpf_ctx_init+0x87/0x170 [ 210.840633][T12934] bpf_ctx_init+0x87/0x170 [ 210.840649][T12934] bpf_prog_test_run_sk_lookup+0x1b4/0x6d0 [ 210.840667][T12934] ? kstrtouint+0x76/0xc0 [ 210.840759][T12934] ? __rcu_read_unlock+0x4f/0x70 [ 210.840784][T12934] ? __pfx_bpf_prog_test_run_sk_lookup+0x10/0x10 [ 210.840804][T12934] bpf_prog_test_run+0x227/0x390 [ 210.840850][T12934] __sys_bpf+0x4b9/0x7b0 [ 210.840878][T12934] __x64_sys_bpf+0x41/0x50 [ 210.840903][T12934] x64_sys_call+0x2aea/0x2ff0 [ 210.840925][T12934] do_syscall_64+0xd2/0x200 [ 210.841003][T12934] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.841027][T12934] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.841095][T12934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.841117][T12934] RIP: 0033:0x7f6e91c2ebe9 [ 210.841134][T12934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.841149][T12934] RSP: 002b:00007f6e9068f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.841166][T12934] RAX: ffffffffffffffda RBX: 00007f6e91e55fa0 RCX: 00007f6e91c2ebe9 [ 210.841178][T12934] RDX: 0000000000000031 RSI: 0000200000000500 RDI: 000000000000000a [ 210.841223][T12934] RBP: 00007f6e9068f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.841236][T12934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.841248][T12934] R13: 00007f6e91e56038 R14: 00007f6e91e55fa0 R15: 00007ffc15197808 [ 210.841264][T12934] [ 211.601834][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'. [ 212.399575][T12984] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 212.436392][T12983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3003'. [ 212.588520][T12999] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3007'. [ 212.601456][T12999] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3007'. [ 212.633529][T13005] netlink: 'syz.2.3005': attribute type 4 has an invalid length. [ 212.691373][T13008] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3009'. [ 212.800126][T13008] FAULT_INJECTION: forcing a failure. [ 212.800126][T13008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.813441][T13008] CPU: 0 UID: 0 PID: 13008 Comm: syz.3.3009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.813468][T13008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.813553][T13008] Call Trace: [ 212.813560][T13008] [ 212.813630][T13008] __dump_stack+0x1d/0x30 [ 212.813653][T13008] dump_stack_lvl+0xe8/0x140 [ 212.813673][T13008] dump_stack+0x15/0x1b [ 212.813691][T13008] should_fail_ex+0x265/0x280 [ 212.813709][T13008] should_fail_alloc_page+0xf2/0x100 [ 212.813812][T13008] __alloc_frozen_pages_noprof+0xff/0x360 [ 212.813843][T13008] alloc_pages_mpol+0xb3/0x250 [ 212.813885][T13008] folio_alloc_mpol_noprof+0x39/0x80 [ 212.813916][T13008] shmem_get_folio_gfp+0x3cf/0xd60 [ 212.813948][T13008] ? simple_xattr_get+0xb9/0x120 [ 212.813982][T13008] shmem_write_begin+0xa8/0x190 [ 212.814013][T13008] generic_perform_write+0x184/0x490 [ 212.814042][T13008] shmem_file_write_iter+0xc5/0xf0 [ 212.814067][T13008] do_iter_readv_writev+0x499/0x540 [ 212.814102][T13008] vfs_writev+0x2df/0x8b0 [ 212.814229][T13008] __se_sys_pwritev2+0xfc/0x1c0 [ 212.814256][T13008] __x64_sys_pwritev2+0x67/0x80 [ 212.814285][T13008] x64_sys_call+0x2c55/0x2ff0 [ 212.814304][T13008] do_syscall_64+0xd2/0x200 [ 212.814329][T13008] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.814355][T13008] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.814489][T13008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.814510][T13008] RIP: 0033:0x7f6e91c2ebe9 [ 212.814522][T13008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.814537][T13008] RSP: 002b:00007f6e9068f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 212.814554][T13008] RAX: ffffffffffffffda RBX: 00007f6e91e55fa0 RCX: 00007f6e91c2ebe9 [ 212.814565][T13008] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007 [ 212.814621][T13008] RBP: 00007f6e9068f090 R08: 0000000000000000 R09: 0000000000000001 [ 212.814634][T13008] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000001 [ 212.814647][T13008] R13: 00007f6e91e56038 R14: 00007f6e91e55fa0 R15: 00007ffc15197808 [ 212.814672][T13008] [ 213.319916][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 213.319932][ T29] audit: type=1326 audit(213.308:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.385808][ T29] audit: type=1326 audit(213.338:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.408918][ T29] audit: type=1326 audit(213.338:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.431799][ T29] audit: type=1326 audit(213.338:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.454757][ T29] audit: type=1326 audit(213.338:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.477608][ T29] audit: type=1326 audit(213.338:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.500595][ T29] audit: type=1326 audit(213.338:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.523477][ T29] audit: type=1326 audit(213.338:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.546528][ T29] audit: type=1326 audit(213.338:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f43b778ebe9 code=0x7ffc0000 [ 213.569510][ T29] audit: type=1326 audit(213.338:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13020 comm="syz.0.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43b778ec23 code=0x7ffc0000 [ 213.605902][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.632698][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.161391][T13050] lo speed is unknown, defaulting to 1000 [ 214.229513][T13050] chnl_net:caif_netlink_parms(): no params data found [ 214.267265][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.274383][T13050] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.281824][T13050] bridge_slave_0: entered allmulticast mode [ 214.288153][T13050] bridge_slave_0: entered promiscuous mode [ 214.294676][T13070] netlink: 'syz.2.3028': attribute type 298 has an invalid length. [ 214.303073][T13050] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.310154][T13050] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.317419][T13050] bridge_slave_1: entered allmulticast mode [ 214.323905][T13050] bridge_slave_1: entered promiscuous mode [ 214.344201][T13050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.354799][T13050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.377485][T13050] team0: Port device team_slave_0 added [ 214.381783][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3027'. [ 214.384340][T13050] team0: Port device team_slave_1 added [ 214.409314][T13050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.416316][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.442361][T13050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.453747][T13050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.460714][T13050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.486602][T13050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.513299][T13050] hsr_slave_0: entered promiscuous mode [ 214.519468][T13050] hsr_slave_1: entered promiscuous mode [ 214.525283][T13050] debugfs: 'hsr0' already exists in 'hsr' [ 214.531026][T13050] Cannot create hsr debugfs directory [ 214.587781][T13050] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.640919][T13050] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.702932][T13050] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.750686][T13050] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.815306][T13082] lo speed is unknown, defaulting to 1000 [ 214.823031][T13050] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.834165][T13050] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.846531][T13050] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.870232][T13050] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 214.901603][T13050] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.908684][T13050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.915962][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.923055][T13050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.944160][T13091] FAULT_INJECTION: forcing a failure. [ 214.944160][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 214.955446][T13050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.956818][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.0.3032 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.956844][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.956887][T13091] Call Trace: [ 214.956893][T13091] [ 214.956905][T13091] __dump_stack+0x1d/0x30 [ 214.956927][T13091] dump_stack_lvl+0xe8/0x140 [ 214.956946][T13091] dump_stack+0x15/0x1b [ 214.956962][T13091] should_fail_ex+0x265/0x280 [ 214.957053][T13091] should_failslab+0x8c/0xb0 [ 214.957077][T13091] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 214.957106][T13091] ? bpf_insn_prepare_dump+0x61/0x490 [ 214.957154][T13091] kmemdup_noprof+0x2b/0x70 [ 214.957178][T13091] bpf_insn_prepare_dump+0x61/0x490 [ 214.957201][T13091] bpf_obj_get_info_by_fd+0xfdf/0x1e30 [ 214.957243][T13091] __sys_bpf+0x508/0x7b0 [ 214.957307][T13091] __x64_sys_bpf+0x41/0x50 [ 214.957430][T13091] x64_sys_call+0x2aea/0x2ff0 [ 214.957450][T13091] do_syscall_64+0xd2/0x200 [ 214.957495][T13091] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.957519][T13091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.957600][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.957636][T13091] RIP: 0033:0x7f43b778ebe9 [ 214.957651][T13091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.957667][T13091] RSP: 002b:00007f43b61f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.957686][T13091] RAX: ffffffffffffffda RBX: 00007f43b79b5fa0 RCX: 00007f43b778ebe9 [ 214.957735][T13091] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 000000000000000f [ 214.957748][T13091] RBP: 00007f43b61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.957760][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.957772][T13091] R13: 00007f43b79b6038 R14: 00007f43b79b5fa0 R15: 00007fff8eb78278 [ 214.957791][T13091] [ 215.161199][T13050] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.318945][T13050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.430857][T13050] veth0_vlan: entered promiscuous mode [ 215.437060][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3041'. [ 215.448311][T13117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3041'. [ 215.460546][T13050] veth1_vlan: entered promiscuous mode [ 215.467494][T13117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3041'. [ 215.508692][T13050] veth0_macvtap: entered promiscuous mode [ 215.525365][T13050] veth1_macvtap: entered promiscuous mode [ 215.545346][T13050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.560636][T13050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.572367][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.588553][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.603336][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.620904][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.775709][T13145] netlink: 'syz.3.3025': attribute type 4 has an invalid length. [ 215.849032][T13155] 9pnet_virtio: no channels available for device [ 216.540661][T13179] bond1: entered promiscuous mode [ 216.545707][T13179] bond1: entered allmulticast mode [ 216.551495][T13179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.573027][T13179] bond1 (unregistering): Released all slaves [ 216.586960][T13180] bond1: entered promiscuous mode [ 216.592089][T13180] bond1: entered allmulticast mode [ 216.597841][T13180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.610024][T13180] bond1 (unregistering): Released all slaves [ 216.788600][T13206] syz_tun: entered allmulticast mode [ 216.798787][T13206] dvmrp8: entered allmulticast mode [ 216.808651][T13210] FAULT_INJECTION: forcing a failure. [ 216.808651][T13210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.811600][T13212] syz_tun: entered allmulticast mode [ 216.821880][T13210] CPU: 1 UID: 0 PID: 13210 Comm: syz.4.3071 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.821906][T13210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.821918][T13210] Call Trace: [ 216.821926][T13210] [ 216.821934][T13210] __dump_stack+0x1d/0x30 [ 216.821955][T13210] dump_stack_lvl+0xe8/0x140 [ 216.821974][T13210] dump_stack+0x15/0x1b [ 216.822032][T13210] should_fail_ex+0x265/0x280 [ 216.822117][T13210] should_fail+0xb/0x20 [ 216.822171][T13210] should_fail_usercopy+0x1a/0x20 [ 216.822193][T13210] _copy_from_iter+0xd2/0xe80 [ 216.822217][T13210] ? __build_skb_around+0x1a0/0x200 [ 216.822291][T13210] ? __alloc_skb+0x223/0x320 [ 216.822322][T13210] netlink_sendmsg+0x471/0x6b0 [ 216.822346][T13210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.822416][T13210] __sock_sendmsg+0x145/0x180 [ 216.822513][T13210] ____sys_sendmsg+0x31e/0x4e0 [ 216.822615][T13210] ___sys_sendmsg+0x17b/0x1d0 [ 216.822646][T13210] __x64_sys_sendmsg+0xd4/0x160 [ 216.822671][T13210] x64_sys_call+0x191e/0x2ff0 [ 216.822692][T13210] do_syscall_64+0xd2/0x200 [ 216.822754][T13210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.822778][T13210] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.822803][T13210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.822865][T13210] RIP: 0033:0x7f07276aebe9 [ 216.822880][T13210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.822897][T13210] RSP: 002b:00007f072610f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.822931][T13210] RAX: ffffffffffffffda RBX: 00007f07278d5fa0 RCX: 00007f07276aebe9 [ 216.823011][T13210] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 216.823022][T13210] RBP: 00007f072610f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.823032][T13210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.823043][T13210] R13: 00007f07278d6038 R14: 00007f07278d5fa0 R15: 00007ffd2c8fccc8 [ 216.823061][T13210] [ 217.050599][T13212] dvmrp1: entered allmulticast mode [ 217.058552][T13211] syz_tun: left allmulticast mode [ 217.145781][T13229] siw: device registration error -23 [ 217.231978][T13231] siw: device registration error -23 [ 217.380445][T13249] lo speed is unknown, defaulting to 1000 [ 217.564955][T13198] syz_tun: left allmulticast mode [ 217.571734][T13198] dvmrp8: left allmulticast mode [ 217.720472][T13260] siw: device registration error -23 [ 217.738646][T13262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 218.054699][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'. [ 218.364852][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.432403][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.482240][T13291] lo speed is unknown, defaulting to 1000 [ 218.498210][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.522178][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3101'. [ 218.548867][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.574845][T13291] chnl_net:caif_netlink_parms(): no params data found [ 218.623351][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 218.623364][ T29] audit: type=1400 audit(218.608:8588): avc: denied { read } for pid=3030 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 218.686064][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.693229][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.700577][T13291] bridge_slave_0: entered allmulticast mode [ 218.707140][T13291] bridge_slave_0: entered promiscuous mode [ 218.715559][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.722644][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.729719][ T29] audit: type=1326 audit(218.708:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.752618][ T29] audit: type=1326 audit(218.708:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.775648][ T29] audit: type=1326 audit(218.718:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.780448][T13291] bridge_slave_1: entered allmulticast mode [ 218.798466][ T29] audit: type=1326 audit(218.718:8592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.832364][ T29] audit: type=1326 audit(218.718:8593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.855315][ T29] audit: type=1326 audit(218.718:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.865966][T13291] bridge_slave_1: entered promiscuous mode [ 218.878348][ T29] audit: type=1326 audit(218.718:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.907466][ T29] audit: type=1326 audit(218.728:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.930453][ T29] audit: type=1326 audit(218.728:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13303 comm="syz.2.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 218.988062][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.008278][ T41] bridge_slave_1: left allmulticast mode [ 219.013997][ T41] bridge_slave_1: left promiscuous mode [ 219.019774][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.162853][T13342] FAULT_INJECTION: forcing a failure. [ 219.162853][T13342] name failslab, interval 1, probability 0, space 0, times 0 [ 219.175605][T13342] CPU: 0 UID: 0 PID: 13342 Comm: syz.0.3109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 219.175621][T13342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.175628][T13342] Call Trace: [ 219.175633][T13342] [ 219.175638][T13342] __dump_stack+0x1d/0x30 [ 219.175740][T13342] dump_stack_lvl+0xe8/0x140 [ 219.175821][T13342] dump_stack+0x15/0x1b [ 219.175830][T13342] should_fail_ex+0x265/0x280 [ 219.175900][T13342] should_failslab+0x8c/0xb0 [ 219.175993][T13342] kmem_cache_alloc_node_noprof+0x57/0x320 [ 219.176010][T13342] ? __alloc_skb+0x101/0x320 [ 219.176028][T13342] __alloc_skb+0x101/0x320 [ 219.176097][T13342] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 219.176188][T13342] alloc_skb_with_frags+0x7d/0x470 [ 219.176199][T13342] ? avc_has_perm_noaudit+0x1b1/0x200 [ 219.176214][T13342] sock_alloc_send_pskb+0x43a/0x4f0 [ 219.176231][T13342] hci_sock_sendmsg+0x129/0x910 [ 219.176297][T13342] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 219.176321][T13342] __sock_sendmsg+0x145/0x180 [ 219.176370][T13342] sock_write_iter+0x165/0x1b0 [ 219.176395][T13342] aio_write+0x2e5/0x410 [ 219.176467][T13342] io_submit_one+0xacd/0x11d0 [ 219.176485][T13342] __se_sys_io_submit+0xfb/0x280 [ 219.176501][T13342] __x64_sys_io_submit+0x43/0x50 [ 219.176513][T13342] x64_sys_call+0x2d5d/0x2ff0 [ 219.176535][T13342] do_syscall_64+0xd2/0x200 [ 219.176550][T13342] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.176563][T13342] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.176579][T13342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.176627][T13342] RIP: 0033:0x7f43b778ebe9 [ 219.176637][T13342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.176646][T13342] RSP: 002b:00007f43b61f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 219.176658][T13342] RAX: ffffffffffffffda RBX: 00007f43b79b5fa0 RCX: 00007f43b778ebe9 [ 219.176665][T13342] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f43b61b3000 [ 219.176672][T13342] RBP: 00007f43b61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.176691][T13342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.176697][T13342] R13: 00007f43b79b6038 R14: 00007f43b79b5fa0 R15: 00007fff8eb78278 [ 219.176709][T13342] [ 219.421429][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.430964][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.441198][ T41] bond0 (unregistering): Released all slaves [ 219.449770][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.474943][T13291] team0: Port device team_slave_0 added [ 219.483123][ T41] tipc: Left network mode [ 219.486636][T13291] team0: Port device team_slave_1 added [ 219.499273][T13346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 219.510766][ T41] hsr_slave_0: left promiscuous mode [ 219.518377][ T41] hsr_slave_1: left promiscuous mode [ 219.527394][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.535028][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.547289][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.554846][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.565435][T13353] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13353 comm=+}[@ [ 219.580485][ T41] veth1_macvtap: left promiscuous mode [ 219.585964][ T41] veth0_macvtap: left promiscuous mode [ 219.592835][ T41] veth1_vlan: left promiscuous mode [ 219.612177][T13360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13360 comm=+}[@ [ 219.624272][T13360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13360 comm=+}[@ [ 219.715645][ T41] team0 (unregistering): Port device team_slave_1 removed [ 219.728287][ T41] team0 (unregistering): Port device team_slave_0 removed [ 219.783850][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.790853][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.816859][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.832289][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.839349][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.865289][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.923395][T13291] hsr_slave_0: entered promiscuous mode [ 219.932635][T13291] hsr_slave_1: entered promiscuous mode [ 219.949581][T13291] debugfs: 'hsr0' already exists in 'hsr' [ 219.955342][T13291] Cannot create hsr debugfs directory [ 220.344283][T13291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.353524][T13291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.364261][T13291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.373862][T13291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.417940][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.434676][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.445523][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.452656][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.466887][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.474047][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.569441][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.685459][T13291] veth0_vlan: entered promiscuous mode [ 220.693102][T13291] veth1_vlan: entered promiscuous mode [ 220.707112][T13291] veth0_macvtap: entered promiscuous mode [ 220.714820][T13291] veth1_macvtap: entered promiscuous mode [ 220.725175][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.735767][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.747443][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.762127][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.773728][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.789229][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.819603][T13505] lo speed is unknown, defaulting to 1000 [ 220.825451][T13505] lo speed is unknown, defaulting to 1000 [ 220.832912][T13505] lo speed is unknown, defaulting to 1000 [ 220.840228][T13505] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 220.852798][T13505] lo speed is unknown, defaulting to 1000 [ 220.859031][T13505] lo speed is unknown, defaulting to 1000 [ 220.865682][T13505] lo speed is unknown, defaulting to 1000 [ 220.872860][T13505] lo speed is unknown, defaulting to 1000 [ 220.878989][T13505] lo speed is unknown, defaulting to 1000 [ 220.885863][T13505] lo speed is unknown, defaulting to 1000 [ 221.068163][T13522] netlink: 'syz.4.3142': attribute type 4 has an invalid length. [ 221.477926][T13547] siw: device registration error -23 [ 221.652821][T13561] veth1_to_bond: entered allmulticast mode [ 221.664011][T13561] veth1_to_bond: left allmulticast mode [ 222.015673][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3161'. [ 222.237536][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3166'. [ 222.329859][T13608] veth0_to_team: entered promiscuous mode [ 223.693284][T13679] FAULT_INJECTION: forcing a failure. [ 223.693284][T13679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.706557][T13679] CPU: 0 UID: 0 PID: 13679 Comm: syz.2.3197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.706584][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.706595][T13679] Call Trace: [ 223.706600][T13679] [ 223.706607][T13679] __dump_stack+0x1d/0x30 [ 223.706657][T13679] dump_stack_lvl+0xe8/0x140 [ 223.706675][T13679] dump_stack+0x15/0x1b [ 223.706690][T13679] should_fail_ex+0x265/0x280 [ 223.706712][T13679] should_fail_alloc_page+0xf2/0x100 [ 223.706790][T13679] __alloc_frozen_pages_noprof+0xff/0x360 [ 223.706823][T13679] alloc_pages_mpol+0xb3/0x250 [ 223.706879][T13679] folio_alloc_mpol_noprof+0x39/0x80 [ 223.706972][T13679] shmem_get_folio_gfp+0x3cf/0xd60 [ 223.707001][T13679] ? simple_xattr_get+0xb9/0x120 [ 223.707033][T13679] shmem_write_begin+0xa8/0x190 [ 223.707107][T13679] generic_perform_write+0x184/0x490 [ 223.707133][T13679] shmem_file_write_iter+0xc5/0xf0 [ 223.707202][T13679] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 223.707224][T13679] vfs_write+0x527/0x960 [ 223.707251][T13679] ksys_write+0xda/0x1a0 [ 223.707323][T13679] __x64_sys_write+0x40/0x50 [ 223.707346][T13679] x64_sys_call+0x27fe/0x2ff0 [ 223.707367][T13679] do_syscall_64+0xd2/0x200 [ 223.707467][T13679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 223.707489][T13679] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 223.707505][T13679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.707586][T13679] RIP: 0033:0x7f1a0799ebe9 [ 223.707595][T13679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.707681][T13679] RSP: 002b:00007f1a063de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 223.707692][T13679] RAX: ffffffffffffffda RBX: 00007f1a07bc6090 RCX: 00007f1a0799ebe9 [ 223.707699][T13679] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 000000000000000b [ 223.707706][T13679] RBP: 00007f1a063de090 R08: 0000000000000000 R09: 0000000000000000 [ 223.707713][T13679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.707720][T13679] R13: 00007f1a07bc6128 R14: 00007f1a07bc6090 R15: 00007ffff8bc4418 [ 223.707731][T13679] [ 224.122016][T13683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 224.538019][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 224.538035][ T29] audit: type=1400 audit(224.518:9280): avc: denied { write } for pid=13698 comm="syz.2.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.570971][T13700] SELinux: failed to load policy [ 224.716598][ T29] audit: type=1326 audit(224.698:9281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.739647][ T29] audit: type=1326 audit(224.698:9282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.762665][ T29] audit: type=1326 audit(224.698:9283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.785544][ T29] audit: type=1326 audit(224.698:9284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.808405][ T29] audit: type=1326 audit(224.698:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.831203][ T29] audit: type=1326 audit(224.698:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.854251][ T29] audit: type=1326 audit(224.698:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.877180][ T29] audit: type=1326 audit(224.698:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 224.900128][ T29] audit: type=1326 audit(224.698:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.2.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 225.215381][T13736] netlink: 'syz.4.3216': attribute type 21 has an invalid length. [ 225.334145][T13755] FAULT_INJECTION: forcing a failure. [ 225.334145][T13755] name failslab, interval 1, probability 0, space 0, times 0 [ 225.346812][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.0.3226 Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.346913][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.346922][T13755] Call Trace: [ 225.346929][T13755] [ 225.346935][T13755] __dump_stack+0x1d/0x30 [ 225.346954][T13755] dump_stack_lvl+0xe8/0x140 [ 225.346970][T13755] dump_stack+0x15/0x1b [ 225.346987][T13755] should_fail_ex+0x265/0x280 [ 225.347055][T13755] should_failslab+0x8c/0xb0 [ 225.347075][T13755] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 225.347098][T13755] ? __d_alloc+0x3d/0x340 [ 225.347120][T13755] __d_alloc+0x3d/0x340 [ 225.347183][T13755] d_alloc_parallel+0x53/0xc60 [ 225.347252][T13755] ? selinux_inode_permission+0x62d/0x740 [ 225.347301][T13755] ? make_vfsuid+0x49/0xa0 [ 225.347321][T13755] ? lockref_get_not_dead+0x120/0x1c0 [ 225.347344][T13755] ? __rcu_read_unlock+0x4f/0x70 [ 225.347425][T13755] __lookup_slow+0x8c/0x250 [ 225.347452][T13755] lookup_slow+0x3c/0x60 [ 225.347590][T13755] walk_component+0x1ec/0x220 [ 225.347613][T13755] path_lookupat+0xfe/0x2a0 [ 225.347637][T13755] filename_lookup+0x147/0x340 [ 225.347775][T13755] filename_setxattr+0x56/0x400 [ 225.347853][T13755] path_setxattrat+0x2c9/0x310 [ 225.347886][T13755] __x64_sys_lsetxattr+0x71/0x90 [ 225.347982][T13755] x64_sys_call+0x2877/0x2ff0 [ 225.348054][T13755] do_syscall_64+0xd2/0x200 [ 225.348077][T13755] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 225.348098][T13755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.348148][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.348169][T13755] RIP: 0033:0x7f43b778ebe9 [ 225.348182][T13755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.348197][T13755] RSP: 002b:00007f43b61f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 225.348290][T13755] RAX: ffffffffffffffda RBX: 00007f43b79b5fa0 RCX: 00007f43b778ebe9 [ 225.348301][T13755] RDX: 0000200000000140 RSI: 00002000000003c0 RDI: 0000200000000000 [ 225.348311][T13755] RBP: 00007f43b61f7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.348321][T13755] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 225.348332][T13755] R13: 00007f43b79b6038 R14: 00007f43b79b5fa0 R15: 00007fff8eb78278 [ 225.348352][T13755] [ 225.351798][T13756] netlink: 'syz.5.3223': attribute type 21 has an invalid length. [ 225.593974][T13756] FAULT_INJECTION: forcing a failure. [ 225.593974][T13756] name failslab, interval 1, probability 0, space 0, times 0 [ 225.606618][T13756] CPU: 0 UID: 0 PID: 13756 Comm: syz.5.3223 Not tainted syzkaller #0 PREEMPT(voluntary) [ 225.606689][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.606702][T13756] Call Trace: [ 225.606709][T13756] [ 225.606718][T13756] __dump_stack+0x1d/0x30 [ 225.606737][T13756] dump_stack_lvl+0xe8/0x140 [ 225.606798][T13756] dump_stack+0x15/0x1b [ 225.606815][T13756] should_fail_ex+0x265/0x280 [ 225.606836][T13756] should_failslab+0x8c/0xb0 [ 225.606859][T13756] kmem_cache_alloc_noprof+0x50/0x310 [ 225.606944][T13756] ? skb_clone+0x151/0x1f0 [ 225.607023][T13756] skb_clone+0x151/0x1f0 [ 225.607045][T13756] dev_queue_xmit_nit+0x146/0x680 [ 225.607142][T13756] dev_hard_start_xmit+0xd3/0x3e0 [ 225.607159][T13756] ? validate_xmit_skb+0x746/0x910 [ 225.607178][T13756] __dev_queue_xmit+0x10f9/0x2000 [ 225.607219][T13756] ? __dev_queue_xmit+0x182/0x2000 [ 225.607240][T13756] ? selinux_socket_sock_rcv_skb+0x219/0x620 [ 225.607278][T13756] __netlink_deliver_tap+0x3c3/0x500 [ 225.607316][T13756] ? netlink_attachskb+0x2d0/0x610 [ 225.607409][T13756] netlink_sendskb+0x126/0x150 [ 225.607437][T13756] netlink_unicast+0x2a2/0x690 [ 225.607464][T13756] netlink_ack+0x4c8/0x500 [ 225.607562][T13756] netlink_rcv_skb+0x192/0x220 [ 225.607580][T13756] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 225.607614][T13756] rtnetlink_rcv+0x1c/0x30 [ 225.607675][T13756] netlink_unicast+0x5bd/0x690 [ 225.607891][T13756] netlink_sendmsg+0x58b/0x6b0 [ 225.607914][T13756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.607932][T13756] __sock_sendmsg+0x145/0x180 [ 225.607989][T13756] ____sys_sendmsg+0x31e/0x4e0 [ 225.608012][T13756] ___sys_sendmsg+0x17b/0x1d0 [ 225.608041][T13756] __x64_sys_sendmsg+0xd4/0x160 [ 225.608067][T13756] x64_sys_call+0x191e/0x2ff0 [ 225.608101][T13756] do_syscall_64+0xd2/0x200 [ 225.608138][T13756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 225.608163][T13756] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.608189][T13756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.608253][T13756] RIP: 0033:0x7f652fc6ebe9 [ 225.608341][T13756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.608430][T13756] RSP: 002b:00007f652e6ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.608450][T13756] RAX: ffffffffffffffda RBX: 00007f652fe96090 RCX: 00007f652fc6ebe9 [ 225.608463][T13756] RDX: 0000000024000800 RSI: 0000200000000000 RDI: 000000000000000a [ 225.608476][T13756] RBP: 00007f652e6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 225.608489][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.608502][T13756] R13: 00007f652fe96128 R14: 00007f652fe96090 R15: 00007fff13edf228 [ 225.608519][T13756] [ 225.959853][ T3308] block device autoloading is deprecated and will be removed. [ 225.978303][T13781] netlink: 'syz.3.3233': attribute type 4 has an invalid length. [ 226.006090][T13786] FAULT_INJECTION: forcing a failure. [ 226.006090][T13786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.019307][T13786] CPU: 1 UID: 0 PID: 13786 Comm: syz.0.3236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.019397][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.019407][T13786] Call Trace: [ 226.019412][T13786] [ 226.019418][T13786] __dump_stack+0x1d/0x30 [ 226.019436][T13786] dump_stack_lvl+0xe8/0x140 [ 226.019452][T13786] dump_stack+0x15/0x1b [ 226.019506][T13786] should_fail_ex+0x265/0x280 [ 226.019603][T13786] should_fail+0xb/0x20 [ 226.019618][T13786] should_fail_usercopy+0x1a/0x20 [ 226.019639][T13786] copy_fpstate_to_sigframe+0x628/0x7d0 [ 226.019707][T13786] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 226.019739][T13786] ? kmem_cache_free+0xdf/0x300 [ 226.019764][T13786] ? x86_task_fpu+0x36/0x60 [ 226.019848][T13786] get_sigframe+0x34d/0x490 [ 226.019863][T13786] ? get_signal+0xdc8/0xf70 [ 226.019896][T13786] x64_setup_rt_frame+0xa8/0x580 [ 226.019966][T13786] arch_do_signal_or_restart+0x27c/0x480 [ 226.019992][T13786] irqentry_exit_to_user_mode+0x5e/0xa0 [ 226.020024][T13786] irqentry_exit+0x12/0x50 [ 226.020044][T13786] exc_general_protection+0x15b/0x1f0 [ 226.020108][T13786] asm_exc_general_protection+0x26/0x30 [ 226.020130][T13786] RIP: 0033:0x7f43b7767739 [ 226.020146][T13786] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 226.020162][T13786] RSP: 002b:00007f43b61f67c8 EFLAGS: 00010283 [ 226.020179][T13786] RAX: 0000000000000999 RBX: 00007f43b61f6d30 RCX: 00007f43b7978120 [ 226.020194][T13786] RDX: 9999999999999999 RSI: 00007f43b7811b31 RDI: 9999999999999999 [ 226.020215][T13786] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 226.020227][T13786] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 226.020239][T13786] R13: 00007f43b61f6eb0 R14: 9999999999999999 R15: 0000000000000000 [ 226.020264][T13786] [ 226.763309][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 226.772643][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 226.785513][T13815] ip6gretap0: entered promiscuous mode [ 226.792045][T13815] batadv_slave_1: entered promiscuous mode [ 227.308638][T13835] syzkaller1: entered promiscuous mode [ 227.314234][T13835] syzkaller1: entered allmulticast mode [ 227.573434][T13855] netlink: 'syz.0.3256': attribute type 4 has an invalid length. [ 227.609028][T13861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.616576][T13861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.636879][T13867] loop0: detected capacity change from 0 to 128 [ 227.644117][T13867] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.695780][T13867] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.707902][T13861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.715332][T13861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.034654][T13900] block device autoloading is deprecated and will be removed. [ 228.302790][T13915] netlink: 'syz.2.3279': attribute type 4 has an invalid length. [ 228.551785][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 229.153264][T13958] 9pnet_virtio: no channels available for device [ 229.538604][T13968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'. [ 229.613544][T13966] netlink: 'syz.3.3294': attribute type 10 has an invalid length. [ 229.621443][T13966] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3294'. [ 229.868962][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'. [ 229.884898][T13974] siw: device registration error -23 [ 229.986107][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3299'. [ 230.078595][T13989] loop0: detected capacity change from 0 to 512 [ 230.086235][T13989] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 230.104246][T13989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.382001][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 230.382011][ T29] audit: type=1326 audit(230.368:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.411196][ T29] audit: type=1326 audit(230.368:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.434499][ T29] audit: type=1326 audit(230.368:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.457613][ T29] audit: type=1326 audit(230.368:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.480648][ T29] audit: type=1326 audit(230.368:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.503613][ T29] audit: type=1326 audit(230.368:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.526641][ T29] audit: type=1326 audit(230.368:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.549648][ T29] audit: type=1326 audit(230.368:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.572537][ T29] audit: type=1326 audit(230.368:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.595565][ T29] audit: type=1326 audit(230.368:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14000 comm="syz.2.3305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 230.966134][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.005024][T14028] loop0: detected capacity change from 0 to 2048 [ 231.273479][T14046] lo speed is unknown, defaulting to 1000 [ 231.762533][T14066] netlink: 'syz.3.3324': attribute type 4 has an invalid length. [ 232.217194][T14078] lo speed is unknown, defaulting to 1000 [ 232.279101][T14078] chnl_net:caif_netlink_parms(): no params data found [ 232.323992][T14078] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.331224][T14078] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.339562][T14078] bridge_slave_0: entered allmulticast mode [ 232.346107][T14078] bridge_slave_0: entered promiscuous mode [ 232.354107][T14078] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.361270][T14078] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.368562][T14078] bridge_slave_1: entered allmulticast mode [ 232.376467][T14078] bridge_slave_1: entered promiscuous mode [ 232.397899][T14078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.408770][T14078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.571000][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.584649][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.601335][T14100] netlink: 'syz.3.3330': attribute type 10 has an invalid length. [ 232.609231][T14100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3330'. [ 232.618540][ T4327] bond0 (unregistering): Released all slaves [ 232.675082][T14078] team0: Port device team_slave_0 added [ 232.690758][ T36] infiniband syz2: ib_query_port failed (-19) [ 232.691357][T14078] team0: Port device team_slave_1 added [ 232.715949][T14107] random: crng reseeded on system resumption [ 232.739631][T14078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.746604][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.772594][T14078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.789479][T14078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.796444][T14078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.822474][T14078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.851017][ T4327] hsr_slave_0: left promiscuous mode [ 232.857528][ T4327] hsr_slave_1: left promiscuous mode [ 232.883985][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.923509][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.086707][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 233.098686][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 233.172805][T14078] hsr_slave_0: entered promiscuous mode [ 233.188600][T14078] hsr_slave_1: entered promiscuous mode [ 233.201523][T14078] debugfs: 'hsr0' already exists in 'hsr' [ 233.207281][T14078] Cannot create hsr debugfs directory [ 233.574420][T14078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.593477][T14078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.612462][T14078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.627042][T14078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.677759][T14192] syzkaller0: entered promiscuous mode [ 233.683308][T14192] syzkaller0: entered allmulticast mode [ 233.703477][T14192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3345'. [ 233.737511][T14192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14192 comm=syz.2.3345 [ 233.764612][T14078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.791782][T14078] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.802354][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.809429][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.839319][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.846389][ T4436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.977881][T14078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.988365][T14078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.056518][T14213] 9pnet_virtio: no channels available for device [ 234.623999][T14078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.876981][T14226] siw: device registration error -23 [ 234.977081][T14078] veth0_vlan: entered promiscuous mode [ 235.014011][T14078] veth1_vlan: entered promiscuous mode [ 235.062214][T14078] veth0_macvtap: entered promiscuous mode [ 235.085073][T14078] veth1_macvtap: entered promiscuous mode [ 235.101974][T14078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.122770][T14078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.134452][ T4432] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.162372][ T4432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.218742][ T4432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.233004][ T4432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.887100][T14265] siw: device registration error -23 [ 236.032269][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 236.125679][T14279] syzkaller0: entered promiscuous mode [ 236.131218][T14279] syzkaller0: entered allmulticast mode [ 236.133199][T14282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3368'. [ 236.192834][T14279] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14279 comm=syz.2.3368 [ 236.210165][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 236.210178][ T29] audit: type=1400 audit(236.198:9916): avc: denied { write } for pid=14273 comm="syz.4.3366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 236.225221][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3366'. [ 236.257347][ T29] audit: type=1326 audit(236.228:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.280380][ T29] audit: type=1326 audit(236.228:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.303384][ T29] audit: type=1326 audit(236.228:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.326230][ T29] audit: type=1326 audit(236.228:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.341356][T14295] siw: device registration error -23 [ 236.349051][ T29] audit: type=1326 audit(236.228:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.377138][ T29] audit: type=1326 audit(236.228:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.399894][ T29] audit: type=1326 audit(236.228:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.422736][ T29] audit: type=1326 audit(236.228:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.445636][ T29] audit: type=1326 audit(236.228:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz.3.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23f872ebe9 code=0x7ffc0000 [ 236.880264][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 237.375429][T14329] siw: device registration error -23 [ 237.412781][T14331] syzkaller0: entered promiscuous mode [ 237.418281][T14331] syzkaller0: entered allmulticast mode [ 237.430177][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 237.448878][T14331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14331 comm=syz.2.3386 [ 237.839976][T14347] netlink: 'syz.4.3392': attribute type 4 has an invalid length. [ 238.905418][T14382] tunl0: entered promiscuous mode [ 238.919799][T14382] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 239.090889][T14389] tunl0: entered promiscuous mode [ 239.096742][T14389] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 239.831882][T14413] loop0: detected capacity change from 0 to 512 [ 239.839509][T14413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 239.861796][T14413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.639909][T14438] tunl0: entered promiscuous mode [ 240.645593][T14438] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 240.670266][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.999213][T14450] FAULT_INJECTION: forcing a failure. [ 240.999213][T14450] name failslab, interval 1, probability 0, space 0, times 0 [ 241.011984][T14450] CPU: 0 UID: 0 PID: 14450 Comm: syz.2.3425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.012003][T14450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.012010][T14450] Call Trace: [ 241.012013][T14450] [ 241.012018][T14450] __dump_stack+0x1d/0x30 [ 241.012031][T14450] dump_stack_lvl+0xe8/0x140 [ 241.012042][T14450] dump_stack+0x15/0x1b [ 241.012080][T14450] should_fail_ex+0x265/0x280 [ 241.012092][T14450] should_failslab+0x8c/0xb0 [ 241.012106][T14450] kmem_cache_alloc_noprof+0x50/0x310 [ 241.012122][T14450] ? dup_fd+0x3a/0x540 [ 241.012134][T14450] dup_fd+0x3a/0x540 [ 241.012213][T14450] ? _raw_spin_unlock+0x26/0x50 [ 241.012232][T14450] ksys_unshare+0x346/0x6d0 [ 241.012321][T14450] ? ksys_write+0x192/0x1a0 [ 241.012382][T14450] __x64_sys_unshare+0x1f/0x30 [ 241.012397][T14450] x64_sys_call+0x2911/0x2ff0 [ 241.012479][T14450] do_syscall_64+0xd2/0x200 [ 241.012493][T14450] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.012566][T14450] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.012580][T14450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.012657][T14450] RIP: 0033:0x7f1a0799ebe9 [ 241.012666][T14450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.012676][T14450] RSP: 002b:00007f1a063ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 241.012698][T14450] RAX: ffffffffffffffda RBX: 00007f1a07bc5fa0 RCX: 00007f1a0799ebe9 [ 241.012711][T14450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004020400 [ 241.012723][T14450] RBP: 00007f1a063ff090 R08: 0000000000000000 R09: 0000000000000000 [ 241.012797][T14450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.012805][T14450] R13: 00007f1a07bc6038 R14: 00007f1a07bc5fa0 R15: 00007ffff8bc4418 [ 241.012815][T14450] [ 241.220651][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 241.220666][ T29] audit: type=1326 audit(241.208:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14453 comm="syz.5.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652fc6ebe9 code=0x7ffc0000 [ 241.251570][ T29] audit: type=1326 audit(241.208:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.274659][ T29] audit: type=1326 audit(241.208:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.297712][ T29] audit: type=1326 audit(241.208:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.320837][ T29] audit: type=1326 audit(241.208:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.343782][ T29] audit: type=1326 audit(241.208:10228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.366800][ T29] audit: type=1326 audit(241.208:10229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.389891][ T29] audit: type=1326 audit(241.208:10230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.412934][ T29] audit: type=1326 audit(241.208:10231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 241.435898][ T29] audit: type=1326 audit(241.208:10232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14455 comm="syz.2.3428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 242.020794][T14477] lo speed is unknown, defaulting to 1000 [ 242.143399][T14477] loop0: detected capacity change from 0 to 164 [ 242.293035][T14497] siw: device registration error -23 [ 242.412472][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3445'. [ 242.569026][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3452'. [ 242.940740][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3453'. [ 243.427959][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3465'. [ 243.467853][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 243.476894][T14553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3467'. [ 243.929907][T14556] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 243.938198][T14556] netlink: 'gtp': attribute type 30 has an invalid length. [ 243.950112][ T4432] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.958952][ T4432] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.968124][ T4432] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.977043][ T4432] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.040871][T14560] netlink: 'syz.0.3470': attribute type 11 has an invalid length. [ 244.048691][T14560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3470'. [ 244.160186][T14568] loop0: detected capacity change from 0 to 512 [ 244.173421][T14568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 244.304649][T14578] netlink: 'syz.3.3475': attribute type 4 has an invalid length. [ 244.984153][T14599] siw: device registration error -23 [ 245.007337][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 245.038060][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 245.059783][T14607] loop0: detected capacity change from 0 to 512 [ 245.069393][T14609] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 245.069393][T14609] program syz.2.3486 not setting count and/or reply_len properly [ 245.091363][T14607] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 245.102448][T14609] FAULT_INJECTION: forcing a failure. [ 245.102448][T14609] name failslab, interval 1, probability 0, space 0, times 0 [ 245.115135][T14609] CPU: 1 UID: 0 PID: 14609 Comm: syz.2.3486 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.115159][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.115243][T14609] Call Trace: [ 245.115249][T14609] [ 245.115256][T14609] __dump_stack+0x1d/0x30 [ 245.115275][T14609] dump_stack_lvl+0xe8/0x140 [ 245.115291][T14609] dump_stack+0x15/0x1b [ 245.115305][T14609] should_fail_ex+0x265/0x280 [ 245.115323][T14609] should_failslab+0x8c/0xb0 [ 245.115346][T14609] __kmalloc_noprof+0xa5/0x3e0 [ 245.115422][T14609] ? bio_kmalloc+0x41/0x50 [ 245.115454][T14609] bio_kmalloc+0x41/0x50 [ 245.115497][T14609] blk_rq_map_user_iov+0x58a/0x14a0 [ 245.115597][T14609] ? __pmu_ctx_sched_in+0x8a/0xb0 [ 245.115665][T14609] blk_rq_map_user_io+0x18f/0x260 [ 245.115685][T14609] ? alloc_pages_mpol+0x201/0x250 [ 245.115756][T14609] ? alloc_pages_noprof+0xa9/0x130 [ 245.115785][T14609] ? sg_build_indirect+0x3a5/0x450 [ 245.115814][T14609] sg_common_write+0xb06/0xc30 [ 245.115900][T14609] sg_write+0x6b5/0x750 [ 245.116008][T14609] vfs_writev+0x406/0x8b0 [ 245.116035][T14609] ? __pfx_sg_write+0x10/0x10 [ 245.116108][T14609] do_writev+0xe7/0x210 [ 245.116136][T14609] __x64_sys_writev+0x45/0x50 [ 245.116161][T14609] x64_sys_call+0x1e9a/0x2ff0 [ 245.116178][T14609] do_syscall_64+0xd2/0x200 [ 245.116203][T14609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.116307][T14609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.116328][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.116425][T14609] RIP: 0033:0x7f1a0799ebe9 [ 245.116440][T14609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.116470][T14609] RSP: 002b:00007f1a063ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 245.116490][T14609] RAX: ffffffffffffffda RBX: 00007f1a07bc5fa0 RCX: 00007f1a0799ebe9 [ 245.116504][T14609] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000005 [ 245.116515][T14609] RBP: 00007f1a063ff090 R08: 0000000000000000 R09: 0000000000000000 [ 245.116552][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.116563][T14609] R13: 00007f1a07bc6038 R14: 00007f1a07bc5fa0 R15: 00007ffff8bc4418 [ 245.116582][T14609] [ 245.151936][T14607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.392275][T14617] random: crng reseeded on system resumption [ 245.567444][T14629] 9pnet: Could not find request transport: ΀WdÆ6vK{FC~rg9Y+ [ 245.567444][T14629] "~RpO5~1)C;!ݸle쇁 [ 245.681360][T14636] syzkaller0: entered promiscuous mode [ 245.686902][T14636] syzkaller0: entered allmulticast mode [ 245.692133][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3489'. [ 245.705634][T14636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14636 comm=syz.2.3497 [ 245.924363][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.260571][T14653] loop0: detected capacity change from 0 to 512 [ 246.280718][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 246.280733][ T29] audit: type=1326 audit(246.248:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f097014ec77 code=0x7ffc0000 [ 246.309808][ T29] audit: type=1326 audit(246.248:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f097014d550 code=0x7ffc0000 [ 246.332817][ T29] audit: type=1326 audit(246.248:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f097014e7eb code=0x7ffc0000 [ 246.355715][ T29] audit: type=1326 audit(246.248:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f097014d84a code=0x7ffc0000 [ 246.378556][ T29] audit: type=1326 audit(246.248:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f097014d84a code=0x7ffc0000 [ 246.401350][ T29] audit: type=1326 audit(246.248:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f097014d457 code=0x7ffc0000 [ 246.424342][ T29] audit: type=1326 audit(246.248:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14652 comm="syz.0.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f097015038a code=0x7ffc0000 [ 246.531379][ T29] audit: type=1326 audit(246.488:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652fc6ebe9 code=0x7ffc0000 [ 246.554386][ T29] audit: type=1326 audit(246.488:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652fc6ebe9 code=0x7ffc0000 [ 246.577591][ T29] audit: type=1326 audit(246.498:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14659 comm="syz.5.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652fc6ebe9 code=0x7ffc0000 [ 246.602707][T14653] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 246.621785][T14653] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.646149][T14653] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3503: Failed to acquire dquot type 1 [ 246.681681][T14653] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3503: bg 0: block 40: padding at end of block bitmap is not set [ 246.718499][T14653] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 246.748869][T14653] EXT4-fs (loop0): 1 truncate cleaned up [ 246.769004][T14653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.840777][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.937109][T14671] syzkaller0: entered promiscuous mode [ 246.942670][T14671] syzkaller0: entered allmulticast mode [ 247.021755][T14671] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14671 comm=syz.0.3508 [ 247.391524][T14692] netlink: 'syz.3.3516': attribute type 4 has an invalid length. [ 247.913114][T14704] __nla_validate_parse: 2 callbacks suppressed [ 247.913129][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3518'. [ 248.042997][T14708] syzkaller0: entered promiscuous mode [ 248.048574][T14708] syzkaller0: entered allmulticast mode [ 248.059528][T14708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14708 comm=syz.0.3520 [ 248.122684][T14711] random: crng reseeded on system resumption [ 248.287273][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3529'. [ 248.362989][T14737] loop0: detected capacity change from 0 to 512 [ 248.399173][T14737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.402394][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3525'. [ 248.544605][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.595321][T14745] syzkaller0: entered promiscuous mode [ 248.601296][T14745] syzkaller0: entered allmulticast mode [ 248.614066][T14745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14745 comm=syz.2.3534 [ 248.837966][T14751] syzkaller0: entered promiscuous mode [ 248.843525][T14751] syzkaller0: entered allmulticast mode [ 248.870545][T14752] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 249.014872][T14760] netlink: 'syz.2.3540': attribute type 11 has an invalid length. [ 249.022776][T14760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3540'. [ 249.030981][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3541'. [ 249.086364][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 249.168559][T14775] syzkaller0: entered promiscuous mode [ 249.174149][T14775] syzkaller0: entered allmulticast mode [ 249.183928][T14783] FAULT_INJECTION: forcing a failure. [ 249.183928][T14783] name failslab, interval 1, probability 0, space 0, times 0 [ 249.196690][T14783] CPU: 0 UID: 0 PID: 14783 Comm: syz.5.3551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.196717][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.196729][T14783] Call Trace: [ 249.196773][T14783] [ 249.196780][T14783] __dump_stack+0x1d/0x30 [ 249.196800][T14783] dump_stack_lvl+0xe8/0x140 [ 249.196819][T14783] dump_stack+0x15/0x1b [ 249.196834][T14783] should_fail_ex+0x265/0x280 [ 249.196853][T14783] should_failslab+0x8c/0xb0 [ 249.196933][T14783] kmem_cache_alloc_node_noprof+0x57/0x320 [ 249.196957][T14783] ? __alloc_skb+0x101/0x320 [ 249.196995][T14783] __alloc_skb+0x101/0x320 [ 249.197043][T14783] tcp_stream_alloc_skb+0x2d/0x1d0 [ 249.197073][T14783] tcp_connect+0x15f1/0x2290 [ 249.197102][T14783] tcp_sendmsg_fastopen+0x209/0x520 [ 249.197127][T14783] tcp_sendmsg_locked+0x26e1/0x2c00 [ 249.197173][T14783] ? mntput_no_expire+0x6f/0x460 [ 249.197203][T14783] ? __rcu_read_unlock+0x4f/0x70 [ 249.197223][T14783] ? avc_has_perm_noaudit+0x1b1/0x200 [ 249.197249][T14783] ? avc_has_perm+0xf7/0x180 [ 249.197303][T14783] ? _raw_spin_unlock_bh+0x36/0x40 [ 249.197354][T14783] ? __pfx_tcp_sendmsg+0x10/0x10 [ 249.197377][T14783] tcp_sendmsg+0x2f/0x50 [ 249.197399][T14783] inet6_sendmsg+0x76/0xd0 [ 249.197496][T14783] __sock_sendmsg+0x8b/0x180 [ 249.197519][T14783] __sys_sendto+0x268/0x330 [ 249.197543][T14783] __x64_sys_sendto+0x76/0x90 [ 249.197562][T14783] x64_sys_call+0x2d05/0x2ff0 [ 249.197582][T14783] do_syscall_64+0xd2/0x200 [ 249.197657][T14775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14775 comm=syz.2.3546 [ 249.197656][T14783] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 249.197681][T14783] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 249.197761][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.197782][T14783] RIP: 0033:0x7f652fc6ebe9 [ 249.197798][T14783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.197815][T14783] RSP: 002b:00007f652e6cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 249.197875][T14783] RAX: ffffffffffffffda RBX: 00007f652fe95fa0 RCX: 00007f652fc6ebe9 [ 249.197888][T14783] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000006 [ 249.197900][T14783] RBP: 00007f652e6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 249.197912][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.197924][T14783] R13: 00007f652fe96038 R14: 00007f652fe95fa0 R15: 00007fff13edf228 [ 249.197944][T14783] [ 249.356835][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3554'. [ 249.709138][T14820] netlink: 37 bytes leftover after parsing attributes in process `syz.2.3564'. [ 249.732082][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3558'. [ 249.805876][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'. [ 249.978023][T14832] syzkaller0: entered promiscuous mode [ 249.983546][T14832] syzkaller0: entered allmulticast mode [ 249.993032][T14832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14832 comm=syz.2.3569 [ 250.148220][T14845] loop0: detected capacity change from 0 to 512 [ 250.161294][T14845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 250.169980][T14845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 250.176740][T14845] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3575: Failed to acquire dquot type 1 [ 250.188678][T14845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3575: bg 0: block 40: padding at end of block bitmap is not set [ 250.203480][T14845] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 250.212551][T14845] EXT4-fs (loop0): 1 truncate cleaned up [ 250.218711][T14845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.244899][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.285395][T14855] tun0: tun_chr_ioctl cmd 1074025677 [ 250.291122][T14855] tun0: linktype set to 774 [ 250.735527][T14867] 9pnet_virtio: no channels available for device [ 251.274652][T14881] tun0: tun_chr_ioctl cmd 1074025677 [ 251.280339][T14881] tun0: linktype set to 774 [ 251.291344][T14883] random: crng reseeded on system resumption [ 251.330228][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 251.330318][ T29] audit: type=1326 audit(251.318:10612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14889 comm="syz.5.3595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652fc6ebe9 code=0x7ffc0000 [ 251.364735][ T29] audit: type=1326 audit(251.318:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.387881][ T29] audit: type=1326 audit(251.318:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.411011][ T29] audit: type=1326 audit(251.318:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.434031][ T29] audit: type=1326 audit(251.318:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.457213][ T29] audit: type=1326 audit(251.318:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.480336][ T29] audit: type=1326 audit(251.318:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.503479][ T29] audit: type=1326 audit(251.318:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.526470][ T29] audit: type=1326 audit(251.318:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.549476][ T29] audit: type=1326 audit(251.318:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14891 comm="syz.4.3596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd4248ebe9 code=0x7ffc0000 [ 251.655626][T14907] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.663337][T14907] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 251.690136][T14913] random: crng reseeded on system resumption [ 251.723712][T14911] syzkaller0: entered promiscuous mode [ 251.729307][T14911] syzkaller0: entered allmulticast mode [ 251.739195][T14911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14911 comm=syz.3.3604 [ 252.023426][T14924] 9pnet_virtio: no channels available for device [ 252.592433][T14935] block device autoloading is deprecated and will be removed. [ 252.798399][T14942] 9pnet_virtio: no channels available for device [ 253.050719][T14952] smc: net device bond0 applied user defined pnetid SYZ0 [ 253.067275][T14952] smc: net device bond0 erased user defined pnetid SYZ0 [ 253.097165][T14957] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 253.179939][T14947] FAULT_INJECTION: forcing a failure. [ 253.179939][T14947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.193087][T14947] CPU: 1 UID: 0 PID: 14947 Comm: syz.4.3615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.193192][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.193199][T14947] Call Trace: [ 253.193204][T14947] [ 253.193209][T14947] __dump_stack+0x1d/0x30 [ 253.193222][T14947] dump_stack_lvl+0xe8/0x140 [ 253.193233][T14947] dump_stack+0x15/0x1b [ 253.193242][T14947] should_fail_ex+0x265/0x280 [ 253.193276][T14947] should_fail+0xb/0x20 [ 253.193361][T14947] should_fail_usercopy+0x1a/0x20 [ 253.193374][T14947] _copy_to_user+0x20/0xa0 [ 253.193390][T14947] simple_read_from_buffer+0xb5/0x130 [ 253.193437][T14947] proc_fail_nth_read+0x10e/0x150 [ 253.193453][T14947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.193538][T14947] vfs_read+0x1a5/0x770 [ 253.193549][T14947] ? __rcu_read_unlock+0x4f/0x70 [ 253.193562][T14947] ? __fget_files+0x184/0x1c0 [ 253.193577][T14947] ksys_read+0xda/0x1a0 [ 253.193603][T14947] __x64_sys_read+0x40/0x50 [ 253.193615][T14947] x64_sys_call+0x27bc/0x2ff0 [ 253.193626][T14947] do_syscall_64+0xd2/0x200 [ 253.193641][T14947] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 253.193725][T14947] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 253.193739][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.193751][T14947] RIP: 0033:0x7efd4248d5fc [ 253.193834][T14947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.193970][T14947] RSP: 002b:00007efd40ed6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.193982][T14947] RAX: ffffffffffffffda RBX: 00007efd426b6090 RCX: 00007efd4248d5fc [ 253.193990][T14947] RDX: 000000000000000f RSI: 00007efd40ed60a0 RDI: 0000000000000004 [ 253.194008][T14947] RBP: 00007efd40ed6090 R08: 0000000000000000 R09: 0000000000000000 [ 253.194015][T14947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.194021][T14947] R13: 00007efd426b6128 R14: 00007efd426b6090 R15: 00007fff43108ee8 [ 253.194033][T14947] [ 253.458010][T14973] tun0: tun_chr_ioctl cmd 1074025677 [ 253.463503][T14973] tun0: linktype set to 774 [ 253.472197][T14973] __nla_validate_parse: 4 callbacks suppressed [ 253.472211][T14973] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3629'. [ 253.505472][T14974] netlink: 'syz.0.3628': attribute type 4 has an invalid length. [ 253.561043][T14974] loop0: detected capacity change from 0 to 128 [ 253.568047][T14974] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.584423][T14974] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.115226][T14999] SELinux: failed to load policy [ 254.207181][T15004] 9pnet_virtio: no channels available for device [ 254.470601][T15008] syzkaller0: entered promiscuous mode [ 254.476114][T15008] syzkaller0: entered allmulticast mode [ 254.535432][T15008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15008 comm=syz.0.3640 [ 254.639711][T15026] loop0: detected capacity change from 0 to 512 [ 254.656387][T15026] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 254.689945][T15026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.832064][T15031] vhci_hcd: invalid port number 96 [ 254.837231][T15031] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 254.908642][T15049] tun0: tun_chr_ioctl cmd 1074025677 [ 254.914321][T15049] tun0: linktype set to 774 [ 255.074139][T15058] bond_slave_0: entered promiscuous mode [ 255.079872][T15058] bond_slave_1: entered promiscuous mode [ 255.086723][T15058] macvtap1: entered allmulticast mode [ 255.092238][T15058] bond0: entered allmulticast mode [ 255.097347][T15058] bond_slave_0: entered allmulticast mode [ 255.103128][T15058] bond_slave_1: entered allmulticast mode [ 255.109970][T15058] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 255.118345][T15058] bond0: left allmulticast mode [ 255.123296][T15058] bond_slave_0: left allmulticast mode [ 255.128768][T15058] bond_slave_1: left allmulticast mode [ 255.134290][T15058] bond_slave_0: left promiscuous mode [ 255.139692][T15058] bond_slave_1: left promiscuous mode [ 255.152684][T15059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.161693][T15059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.470687][T15076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3662'. [ 255.500698][T14078] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.793108][ T4436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.871934][ T4436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.928192][T15095] lo speed is unknown, defaulting to 1000 [ 255.936685][ T4436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.014242][ T4436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.135580][ T4436] bridge_slave_1: left allmulticast mode [ 256.141307][ T4436] bridge_slave_1: left promiscuous mode [ 256.146996][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.159836][ T4436] bridge_slave_0: left allmulticast mode [ 256.165472][ T4436] bridge_slave_0: left promiscuous mode [ 256.171219][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.218231][ T4436] ip6gretap0 (unregistering): left promiscuous mode [ 256.242943][ T4436] dvmrp1 (unregistering): left allmulticast mode [ 256.301362][ T4436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.311516][ T4436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.321079][ T4436] bond0 (unregistering): Released all slaves [ 256.332520][T15095] chnl_net:caif_netlink_parms(): no params data found [ 256.346842][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 256.346857][ T29] audit: type=1400 audit(256.328:10862): avc: denied { mount } for pid=15127 comm="syz.4.3682" name="/" dev="hugetlbfs" ino=46618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 256.403148][T15128] 9pnet_fd: Insufficient options for proto=fd [ 256.404962][ T29] audit: type=1400 audit(256.388:10863): avc: denied { mounton } for pid=15127 comm="syz.4.3682" path="/108/file1" dev="hugetlbfs" ino=46618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 256.445891][T15095] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.453503][T15095] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.460888][T15095] bridge_slave_0: entered allmulticast mode [ 256.467574][T15095] bridge_slave_0: entered promiscuous mode [ 256.476847][T15095] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.484146][T15095] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.491552][T15140] loop0: detected capacity change from 0 to 1024 [ 256.491579][T15095] bridge_slave_1: entered allmulticast mode [ 256.504566][T15095] bridge_slave_1: entered promiscuous mode [ 256.506798][T15140] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 256.518780][ T4436] batadv_slave_1: left promiscuous mode [ 256.527113][ T4436] hsr_slave_0: left promiscuous mode [ 256.539676][ T4436] hsr_slave_1: left promiscuous mode [ 256.545325][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.552777][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.564072][ T29] audit: type=1400 audit(256.548:10864): avc: denied { unmount } for pid=13291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 256.591367][ T4436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.598797][ T4436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.623781][ T4436] veth1_macvtap: left promiscuous mode [ 256.633556][ T4436] veth0_macvtap: left promiscuous mode [ 256.732520][ T4436] team0 (unregistering): Port device team_slave_1 removed [ 256.744993][ T4436] team0 (unregistering): Port device team_slave_0 removed [ 256.825343][T15143] lo speed is unknown, defaulting to 1000 [ 256.842922][T15095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.852063][T15139] lo speed is unknown, defaulting to 1000 [ 256.892412][T15095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.924963][T15095] team0: Port device team_slave_0 added [ 256.932871][T15095] team0: Port device team_slave_1 added [ 256.966812][T15095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.973900][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.999901][T15095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.031794][T15095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.038777][T15095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.064820][T15095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.135709][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'. [ 257.217539][T15095] hsr_slave_0: entered promiscuous mode [ 257.228127][T15095] hsr_slave_1: entered promiscuous mode [ 257.234017][ T29] audit: type=1326 audit(257.208:10865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.238740][T15095] debugfs: 'hsr0' already exists in 'hsr' [ 257.257098][ T29] audit: type=1326 audit(257.218:10866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.262829][T15095] Cannot create hsr debugfs directory [ 257.308207][ T29] audit: type=1326 audit(257.278:10867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.331321][ T29] audit: type=1326 audit(257.278:10868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.354283][ T29] audit: type=1326 audit(257.278:10869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.377308][ T29] audit: type=1326 audit(257.278:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.400441][ T29] audit: type=1326 audit(257.278:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15186 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f097014ebe9 code=0x7ffc0000 [ 257.702130][T15095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 257.730664][T15212] loop0: detected capacity change from 0 to 128 [ 257.731701][T15095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 257.824724][T15212] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.846834][T15095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 257.896186][T15095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 257.913487][T15212] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.026180][T15095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.063743][T15095] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.095880][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.102992][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.165780][ T4456] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.172889][ T4456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.286409][T15095] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.296828][T15095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.546089][T15095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.690715][T15095] veth0_vlan: entered promiscuous mode [ 258.700551][T15095] veth1_vlan: entered promiscuous mode [ 258.716361][T15095] veth0_macvtap: entered promiscuous mode [ 258.725340][T15095] veth1_macvtap: entered promiscuous mode [ 258.736518][T15095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.751289][T15095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.763330][ T4438] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.772444][ T4438] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.786049][ T4438] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.795190][ T4438] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.880508][T15284] FAULT_INJECTION: forcing a failure. [ 258.880508][T15284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.893624][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.5.3701 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.893692][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.893704][T15284] Call Trace: [ 258.893710][T15284] [ 258.893717][T15284] __dump_stack+0x1d/0x30 [ 258.893835][T15284] dump_stack_lvl+0xe8/0x140 [ 258.893855][T15284] dump_stack+0x15/0x1b [ 258.893871][T15284] should_fail_ex+0x265/0x280 [ 258.893930][T15284] should_fail+0xb/0x20 [ 258.893949][T15284] should_fail_usercopy+0x1a/0x20 [ 258.893971][T15284] _copy_from_user+0x1c/0xb0 [ 258.893998][T15284] ___sys_sendmsg+0xc1/0x1d0 [ 258.894082][T15284] __x64_sys_sendmsg+0xd4/0x160 [ 258.894171][T15284] x64_sys_call+0x191e/0x2ff0 [ 258.894190][T15284] do_syscall_64+0xd2/0x200 [ 258.894216][T15284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 258.894296][T15284] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 258.894386][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.894407][T15284] RIP: 0033:0x7f652fc6ebe9 [ 258.894422][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.894437][T15284] RSP: 002b:00007f652e6cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.894456][T15284] RAX: ffffffffffffffda RBX: 00007f652fe95fa0 RCX: 00007f652fc6ebe9 [ 258.894469][T15284] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 258.894551][T15284] RBP: 00007f652e6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 258.894561][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.894572][T15284] R13: 00007f652fe96038 R14: 00007f652fe95fa0 R15: 00007fff13edf228 [ 258.894587][T15284] [ 259.327094][T15316] FAULT_INJECTION: forcing a failure. [ 259.327094][T15316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.340342][T15316] CPU: 1 UID: 0 PID: 15316 Comm: syz.4.3713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.340408][T15316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.340421][T15316] Call Trace: [ 259.340427][T15316] [ 259.340434][T15316] __dump_stack+0x1d/0x30 [ 259.340524][T15316] dump_stack_lvl+0xe8/0x140 [ 259.340540][T15316] dump_stack+0x15/0x1b [ 259.340557][T15316] should_fail_ex+0x265/0x280 [ 259.340615][T15316] should_fail+0xb/0x20 [ 259.340647][T15316] should_fail_usercopy+0x1a/0x20 [ 259.340666][T15316] copy_fpstate_to_sigframe+0x628/0x7d0 [ 259.340758][T15316] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 259.340788][T15316] ? x86_task_fpu+0x36/0x60 [ 259.340815][T15316] get_sigframe+0x34d/0x490 [ 259.340833][T15316] ? get_signal+0xdc8/0xf70 [ 259.340908][T15316] x64_setup_rt_frame+0xa8/0x580 [ 259.340938][T15316] arch_do_signal_or_restart+0x27c/0x480 [ 259.340963][T15316] exit_to_user_mode_loop+0x7a/0x100 [ 259.340985][T15316] do_syscall_64+0x1d6/0x200 [ 259.341017][T15316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 259.341047][T15316] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.341069][T15316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.341163][T15316] RIP: 0033:0x7efd4248ebe7 [ 259.341175][T15316] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 259.341202][T15316] RSP: 002b:00007efd40ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 259.341222][T15316] RAX: 0000000000000013 RBX: 00007efd426b5fa0 RCX: 00007efd4248ebe9 [ 259.341235][T15316] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 259.341248][T15316] RBP: 00007efd40ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.341262][T15316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.341292][T15316] R13: 00007efd426b6038 R14: 00007efd426b5fa0 R15: 00007fff43108ee8 [ 259.341307][T15316] [ 259.562808][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3709'. [ 259.657615][T15330] FAULT_INJECTION: forcing a failure. [ 259.657615][T15330] name failslab, interval 1, probability 0, space 0, times 0 [ 259.670502][T15330] CPU: 1 UID: 0 PID: 15330 Comm: syz.0.3717 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.670526][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 259.670537][T15330] Call Trace: [ 259.670542][T15330] [ 259.670563][T15330] __dump_stack+0x1d/0x30 [ 259.670583][T15330] dump_stack_lvl+0xe8/0x140 [ 259.670603][T15330] dump_stack+0x15/0x1b [ 259.670621][T15330] should_fail_ex+0x265/0x280 [ 259.670643][T15330] should_failslab+0x8c/0xb0 [ 259.670745][T15330] kmem_cache_alloc_noprof+0x50/0x310 [ 259.670771][T15330] ? security_inode_alloc+0x37/0x100 [ 259.670853][T15330] security_inode_alloc+0x37/0x100 [ 259.670878][T15330] inode_init_always_gfp+0x4b7/0x500 [ 259.670912][T15330] ? __pfx_sock_alloc_inode+0x10/0x10 [ 259.670939][T15330] alloc_inode+0x58/0x170 [ 259.670957][T15330] __sock_create+0x122/0x5b0 [ 259.671037][T15330] ? should_failslab+0x8c/0xb0 [ 259.671114][T15330] sock_create_kern+0x38/0x50 [ 259.671144][T15330] start_sync_thread+0x8ff/0x1650 [ 259.671171][T15330] ? __pfx_sync_thread_backup+0x10/0x10 [ 259.671240][T15330] ip_vs_genl_set_daemon+0x44c/0x490 [ 259.671271][T15330] genl_family_rcv_msg_doit+0x143/0x1b0 [ 259.671303][T15330] genl_rcv_msg+0x422/0x460 [ 259.671362][T15330] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 259.671391][T15330] netlink_rcv_skb+0x123/0x220 [ 259.671407][T15330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 259.671439][T15330] genl_rcv+0x28/0x40 [ 259.671479][T15330] netlink_unicast+0x5bd/0x690 [ 259.671509][T15330] netlink_sendmsg+0x58b/0x6b0 [ 259.671607][T15330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.671630][T15330] __sock_sendmsg+0x145/0x180 [ 259.671712][T15330] ____sys_sendmsg+0x31e/0x4e0 [ 259.671733][T15330] ___sys_sendmsg+0x17b/0x1d0 [ 259.671766][T15330] __x64_sys_sendmsg+0xd4/0x160 [ 259.671811][T15330] x64_sys_call+0x191e/0x2ff0 [ 259.671829][T15330] do_syscall_64+0xd2/0x200 [ 259.671853][T15330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 259.671879][T15330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 259.671956][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.671979][T15330] RIP: 0033:0x7f097014ebe9 [ 259.671995][T15330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.672010][T15330] RSP: 002b:00007f096ebb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.672095][T15330] RAX: ffffffffffffffda RBX: 00007f0970375fa0 RCX: 00007f097014ebe9 [ 259.672106][T15330] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 259.672167][T15330] RBP: 00007f096ebb7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.672181][T15330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.672194][T15330] R13: 00007f0970376038 R14: 00007f0970375fa0 R15: 00007fff33c82f58 [ 259.672214][T15330] [ 259.672225][T15330] socket: no more sockets [ 259.951501][T15330] IPVS: Error during creation of socket; terminating [ 260.260352][T15357] 9pnet_virtio: no channels available for device [ 260.619076][T15363] random: crng reseeded on system resumption [ 261.071838][T15380] bond_slave_0: entered promiscuous mode [ 261.077530][T15380] bond_slave_1: entered promiscuous mode [ 261.085958][T15380] macvtap1: entered allmulticast mode [ 261.091453][T15380] bond0: entered allmulticast mode [ 261.096617][T15380] bond_slave_0: entered allmulticast mode [ 261.102373][T15380] bond_slave_1: entered allmulticast mode [ 261.111571][T15380] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 261.121506][T15380] bond0: left allmulticast mode [ 261.126436][T15380] bond_slave_0: left allmulticast mode [ 261.131940][T15380] bond_slave_1: left allmulticast mode [ 261.137405][T15380] bond_slave_0: left promiscuous mode [ 261.142811][T15380] bond_slave_1: left promiscuous mode [ 261.156199][T15385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.165514][T15385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.216349][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3736'. [ 261.502012][T15390] tun0: tun_chr_ioctl cmd 1074025677 [ 261.507496][T15390] tun0: linktype set to 774 [ 261.908492][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 261.908509][ T29] audit: type=1400 audit(261.888:11016): avc: denied { read } for pid=15397 comm="syz.4.3741" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 261.937652][ T29] audit: type=1400 audit(261.888:11017): avc: denied { open } for pid=15397 comm="syz.4.3741" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 262.107788][ T29] audit: type=1400 audit(261.968:11018): avc: denied { ioctl } for pid=15397 comm="syz.4.3741" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 262.147309][ T29] audit: type=1400 audit(262.128:11019): avc: denied { mount } for pid=15404 comm="syz.2.3743" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.168945][ T29] audit: type=1400 audit(262.128:11020): avc: denied { read write } for pid=15404 comm="syz.2.3743" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.189684][ T29] audit: type=1400 audit(262.128:11021): avc: denied { open } for pid=15404 comm="syz.2.3743" path="/262/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.231844][ T29] audit: type=1400 audit(262.208:11022): avc: denied { unmount } for pid=11843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.643179][T15420] 9pnet_virtio: no channels available for device [ 262.711019][ T29] audit: type=1326 audit(262.698:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 262.759897][T15422] syzkaller0: entered promiscuous mode [ 262.765395][T15422] syzkaller0: entered allmulticast mode [ 262.777649][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3748'. [ 262.787163][ T29] audit: type=1326 audit(262.698:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 262.810136][ T29] audit: type=1326 audit(262.718:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.2.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0799ebe9 code=0x7ffc0000 [ 262.837561][T15425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15425 comm=syz.5.3748 [ 263.314358][T15442] bond_slave_0: entered promiscuous mode [ 263.320062][T15442] bond_slave_1: entered promiscuous mode [ 263.327896][T15442] macvtap1: entered allmulticast mode [ 263.333388][T15442] bond0: entered allmulticast mode [ 263.338577][T15442] bond_slave_0: entered allmulticast mode [ 263.344372][T15442] bond_slave_1: entered allmulticast mode [ 263.351602][T15442] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 263.369939][T15442] bond0: left allmulticast mode [ 263.374914][T15442] bond_slave_0: left allmulticast mode [ 263.380475][T15442] bond_slave_1: left allmulticast mode [ 263.385944][T15442] bond_slave_0: left promiscuous mode [ 263.391382][T15442] bond_slave_1: left promiscuous mode [ 263.419216][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 264.042107][T15473] 9pnet_virtio: no channels available for device [ 264.737295][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 264.783624][T15508] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3776'. [ 264.954009][ C0] ================================================================== [ 264.962074][ C0] BUG: KCSAN: data-race in serial8250_do_startup / serial8250_modem_status [ 264.970660][ C0] [ 264.972976][ C0] write to 0xffffffff88e8dae6 of 1 bytes by task 15522 on cpu 1: [ 264.980685][ C0] serial8250_do_startup+0x13de/0x1b10 [ 264.986121][ C0] serial8250_startup+0x41/0x50 [ 264.990946][ C0] uart_startup+0x465/0x8e0 [ 264.995422][ C0] uart_port_activate+0x67/0xc0 [ 265.000266][ C0] tty_port_open+0x148/0x1d0 [ 265.004834][ C0] uart_open+0x30/0x40 [ 265.008882][ C0] tty_open+0x3d4/0xaf0 [ 265.013011][ C0] chrdev_open+0x2e8/0x3a0 [ 265.017404][ C0] do_dentry_open+0x649/0xa20 [ 265.022065][ C0] vfs_open+0x37/0x1e0 [ 265.026156][ C0] path_openat+0x1c5e/0x2170 [ 265.030729][ C0] do_filp_open+0x109/0x230 [ 265.035216][ C0] do_sys_openat2+0xa6/0x110 [ 265.039790][ C0] __x64_sys_openat+0xf2/0x120 [ 265.044532][ C0] x64_sys_call+0x2e9c/0x2ff0 [ 265.049184][ C0] do_syscall_64+0xd2/0x200 [ 265.053664][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.059532][ C0] [ 265.061856][ C0] read to 0xffffffff88e8dae6 of 1 bytes by interrupt on cpu 0: [ 265.069391][ C0] serial8250_modem_status+0x6a/0x1e0 [ 265.074744][ C0] serial8250_handle_irq+0x3d6/0x660 [ 265.080004][ C0] serial8250_default_handle_irq+0x8e/0x140 [ 265.085873][ C0] serial8250_interrupt+0x60/0x110 [ 265.090959][ C0] __handle_irq_event_percpu+0x90/0x440 [ 265.096481][ C0] handle_irq_event+0x64/0xf0 [ 265.101130][ C0] handle_edge_irq+0x154/0x470 [ 265.105874][ C0] __common_interrupt+0x60/0xb0 [ 265.110699][ C0] common_interrupt+0x7e/0x90 [ 265.115355][ C0] asm_common_interrupt+0x26/0x40 [ 265.120352][ C0] x64_setup_rt_frame+0x284/0x580 [ 265.125351][ C0] arch_do_signal_or_restart+0x27c/0x480 [ 265.130960][ C0] exit_to_user_mode_loop+0x7a/0x100 [ 265.136218][ C0] do_syscall_64+0x1d6/0x200 [ 265.140788][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.146659][ C0] [ 265.148958][ C0] value changed: 0x00 -> 0x05 [ 265.153601][ C0] [ 265.155900][ C0] Reported by Kernel Concurrency Sanitizer on: [ 265.162023][ C0] CPU: 0 UID: 0 PID: 15486 Comm: syz.0.3767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.171798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.181834][ C0] ==================================================================