last executing test programs: 2.690067184s ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000080003"], 0x28}}, 0x40) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6d73697a653d3078965c5fcc3030303030303030313030302c6b"]) 2.543044596s ago: executing program 2 (id=407): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='rcu_utilization\x00', r2, 0x0, 0xc7e}, 0x18) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) write$selinux_attr(r3, &(0x7f00000000c0)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 2.073769892s ago: executing program 0 (id=431): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = fcntl$dupfd(r3, 0x0, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="2d064bb213c4"}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcf3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 2.042081243s ago: executing program 0 (id=432): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x4, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000002000000000000000a00000000000000", @ANYRES32=r2, @ANYBLOB="000000000200"/28, @ANYRES32=r5, @ANYBLOB="000000000300"/28, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00"/28, @ANYRES32=r0, @ANYBLOB="00000000000100"/28, @ANYRES32=r6, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB="000000000200"/28, @ANYRES32=r7, @ANYBLOB="000000000600"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00W\x00'/28, @ANYRES32=r2, @ANYBLOB="ffff000000000000000000000000e20000", @ANYRES32=r5, @ANYBLOB="000000000400"/28]) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.009649283s ago: executing program 0 (id=433): syz_io_uring_setup(0x7b09, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x2c9}, &(0x7f0000000240), &(0x7f0000000100)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000280)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, 0x0}, 0x0) fcntl$setstatus(r1, 0x4, 0x4a000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r4 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESHEX=r4], 0x1, 0x522, &(0x7f0000000a80)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendfile(r5, r5, 0x0, 0x800000009) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="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", 0xff}], 0x2) r7 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r7}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xa040}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x4e23, @broadcast}, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5000000000000000}) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) 1.792987406s ago: executing program 0 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8c02) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @link_local}, 0x0, {0x2, 0x4, @multicast1=0xe000cc02}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) flock(r8, 0x2) dup3(r8, r7, 0x0) 1.659668888s ago: executing program 0 (id=440): setxattr$incfs_metadata(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x16) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000019002000fe800000000000000000000000000000901e000100000000000000000000000000000000000000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013500000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r4, @ANYBLOB="04000000"], 0x144}}, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0xa0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r9, 0x0, 0x400000000000000, 0x2) (fail_nth: 9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00'}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r4, 0x25, 0x2, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r11, 0x4b67, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x2001, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=f']) 1.648558168s ago: executing program 2 (id=442): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 1.170092185s ago: executing program 2 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) sendmmsg$inet(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xff, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000022c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0xee00, 0xee00}}, './cgroup/../file0\x00'}) statx(r9, &(0x7f0000000340)='./cgroup/../file0\x00', 0x6000, 0x20, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r15, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r14, 0x84, 0x64, &(0x7f0000000000)=r16, 0x10) sendmmsg$unix(r9, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000580)="fb502acd45eda0bb50cac8df1d7de15aae7dc7c0da3580a81220edd0c410656adb91eed787c84a12f854aecac93fb2e39e281d7f04ebb9ffe8f37dccf469e329110a6bdb5e7acc3d159573f8143f6c4eeb3058b201296978bf3b1dafb33cc6a8c4f9eb7c396ee717b2129aa57bf982f982c34afc196e7cb9bc49fd434ea5283db564e9a036ddff79cd60f1ce90340f1cf889c2ef3fe4e684334b123f7424d7adc2787a267fd48a2cae76235ab16653a3338bf55fcc5b4ed713461f2935095858d9f19fd090e08b720dabd877f81a7814c40d6c6a9e5ad050ac87b466e16335b453afa787032d", 0xe6}, {&(0x7f0000000780)="7cac29defe08a777dd40e765450eb73dc892bc01244fc80d317ac6c7a3b2262ea7a96d9b1002e84971e9ce1e6ecbd4b10cd45e0aef3dd904f4a92d1aea5473cac1e87b873e264d9638883a416749b116e120fabb7ea04b9f352d94855b57d49a74387b2989e49127b57033158b59e0581aabf007e67c871df8c07b990b0f183b0dcf6667d74c8ce5a5cdc469d11dca2307803b2d218257caa3cdc3eb8ced295dc65fa876eecaf5a976f30710c700d7fe3ecb6c2be2792688e790bf8d03fd045682014beb797f978714248dd637716a2b40a2558d4124ea21c959a18b33362f430f20d95e8e968e43f39ec64559e4739f639b04b918f2a10d2ccd7280997263", 0xff}, {&(0x7f0000000880)="19f8ed0fe3f1971e9a72f6b6024f7f11e58742d734462e3b3d3d9cc13cecbb783c90b847539296aeb1fd7c6d36759f85ae457d9541c250fdd33eed03a7ddd8c441352e3170df7a72729b655b69e6cba5c99d470e150f45079583c42413c90b446af3a1bf45fdcf5f0cd72178568f4853d7382270e0e25282b620b647a9ab20fac86ee9402a04e4b89ab11ab4223828de9377cc41281ed37c558db3e3161fd2d2497bdf05217fe822d2afa58c", 0xac}, {&(0x7f0000000a00)="9353125a17db0015525282dd04166c7136dfab98306457e09a92e8f67cbc3f7431b587b121449072905efbbe4f237cc5e61d4e103ba7ad6cc5721007ecf27840536f7e87cc4cf32c94d4a345d2b1d391312b38c835ea2acf1b0d56661da6af7c70213dcf9ad15c6bbd9e6efd22647873dac24bdbe60abf3c8d08988c74d4830ce5ad45e810204531673e9189ee7ae24d177dc8be92594e2fbb9c2d0e3eb02f913ea6a56be2851f8701759f66f35ae692f484c7a5ef86f34f2d6cda917b61dc5cc7468f436acc76789627b08a47a7fe39b6eee73a0bb952cc20a124", 0xdb}, {&(0x7f0000000c00)="b67f7f04b8abc3451fad12d284058d7fe421a365d19e19d861a60dbebcd764f9f73fcd8ec71b2ba457ac7ca82e067a26495557bdddf6ec3f90714867dedbbd5c3118623ec5281f4d5c175b339ef80eb7ca0edb988cd43e06e95d37f92f1988732bfc00133fd067064b7b2fb1fffe304ab8d7e9ca5d487c75c3e733a49ca31cd1f09ffe5d0eb1efbdd2bb8fa810536b7428b1c75b9abd6721e580f893d6df674da51bc9670470c507d318dd193ccebbb8e4a4e5433cdc775314e3f7ad9876fc8edd7e51d096ba5f9f861ca13b35a072a7e1dbaa3693b44ed31c3e21746b566843daf7777cc79eda35b42f8d6b099bce681d559957fed796fc63", 0xf9}, {&(0x7f0000000d00)="a31dc0bc4783e7fb6c7d7ccd0a4f9f5f8f289467d17ac1b433ea1ba3bf911fad38e06f734b89ea41ade0b4291e683c9082e0ea2e053ca9c02f87612874b6b954c9a65d096f9d2c8fdf4dd7ce911327691d2585687d2be0d0280653243215b20c4e521b47e0a8a25365cefc5cd965b2c4ad1330a745fd467cf344f2e7ef6d4dde568bd34d254c2bfb2475247d8b153ab582a0ba89", 0x94}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000dc0)="78b195ab099963d9ff7eeadde68a78aee026a79ff6f13c8b26f2e9b65cd410fb5e8806c36961634007e418ea776c9aa2df40a23e4f1bbd46c247dd630e6a9cff8f032ac3fe5b33e0c8f0b138c423109e9c0a375b1e70176af6800df8fa40ebba67863637f2aa0c541f09bc98cef543ea7b4cf7ac2c73cb503c1fd996f6838e134d1bc2c717f2ef64dd178289b5849a0fdbe134388096c532", 0x98}, {&(0x7f0000000080)="83782128e8d1dbd165", 0x9}, {&(0x7f0000000340)}], 0xa, &(0x7f0000002200)=[@rights={{0x18, 0x1, 0x1, [r7, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r10, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r0]}}, @rights={{0x1c, 0x1, 0x1, [r5, r16, r1]}}], 0x98, 0x4040850}}], 0x1, 0x4004) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r17}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.126988955s ago: executing program 0 (id=447): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'batadv_slave_1\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0xbcfc, 0x6219, 0x0, 0x2, 0x21d7, 0x9b3, 0x8001, 0x800}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r6 = socket$inet6(0xa, 0x3, 0x88) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x200, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x2}, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4, 0x0, 0x0, 0x40000000, 0x3, 0x575}}, 0xe8) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000288c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 679.900911ms ago: executing program 4 (id=456): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 648.235752ms ago: executing program 4 (id=457): bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="d2dddb655d6518c688b1012000", @ANYRESHEX, @ANYBLOB="eaf2c0544186bac472bee4bb340764efe467a51b00190899617c490b261308909cdbe373da56e886016f83ccf20e1ed6bd1e6204ee9825d3db3613a424b0ec57da571d5a0deb85e4b74dbcab3273e9e2db2922a2"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x5e) pwrite64(r6, 0x0, 0x0, 0xfecc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000e80)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000ec0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 575.003053ms ago: executing program 3 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 506.890934ms ago: executing program 1 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x1, 0x0, 0xe, 0x8, 0x1, 0xd2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffdf6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xc, 0xe}, {0xffe0, 0xa}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0x8, 0x6}, {0x7, 0x86, 0xe3}, 0x62, 0x1d, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x111, 0x6}}, 0x20) sendfile(r0, r10, &(0x7f0000000200)=0x4, 0x4) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 470.984064ms ago: executing program 4 (id=461): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000003c0)='keyring\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000000380)='R\x10rust\xe3c*s\xa8rVid:\xc4e', r1) 427.835105ms ago: executing program 3 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 427.386585ms ago: executing program 4 (id=463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030f00000000000000000800000015000100"], 0x2c}}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) signalfd4(r2, &(0x7f0000000000)={[0x7]}, 0x8, 0x800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x141840, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'rose0\x00', 0x400}) close(r4) 393.542385ms ago: executing program 3 (id=464): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 366.036586ms ago: executing program 1 (id=465): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x10000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 287.085567ms ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 286.871336ms ago: executing program 1 (id=467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9135}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 276.221017ms ago: executing program 3 (id=468): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82, 0x2000000}], 0x1, 0x0, 0x0, 0x1) 234.251077ms ago: executing program 1 (id=469): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/147, 0x93}], 0x1, 0x4, 0x0) pread64(r0, &(0x7f0000000040)=""/138, 0x8a, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$selinux_user(0xffffffffffffffff, 0x0, 0x26) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) close(r1) 230.267297ms ago: executing program 4 (id=470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x1, 0x0, 0xe, 0x8, 0x1, 0xd2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffdf6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff2}, {0xc, 0xe}, {0xffe0, 0xa}}, [@f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xffffffff, 0x8, 0x6}, {0x7, 0x86, 0xe3}, 0x62, 0x1d, 0x2}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x111, 0x6}}, 0x20) sendfile(r0, r10, &(0x7f0000000200)=0x4, 0x4) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r11, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 194.961568ms ago: executing program 3 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x66a5}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket(0x2a, 0xa, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2f}, 0x4e20, 0x3, 'sh\x00', 0x1, 0x4, 0x200072}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x2, 0x4a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x2000000, 0x1, 0x12d5f, 0x12d5c}}, 0x44) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x2c0, 0x7, 0x0, 0x0, 0x19e, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000f80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRESDEC, @ANYRES64], 0x1, 0x2a2, &(0x7f0000001140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000003c0)='kvm_mmio\x00', r7, 0x0, 0x49}, 0x18) r8 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r1}, &(0x7f0000000680), &(0x7f0000000900)='%pB \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 157.746228ms ago: executing program 2 (id=473): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x81) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000040)=ANY=[]) writev(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2c7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_uid}, {@dfltgid}, {@afid={'afid', 0x3d, 0x68a3fc58}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_gt}, {@fowner_gt}, {@hash}]}}) 92.571109ms ago: executing program 1 (id=474): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e0101000000000000000000b41000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000002000000020001036f0000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 33.059ms ago: executing program 1 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 0s ago: executing program 3 (id=476): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x4, 0x7}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 33.267944][ T29] audit: type=1400 audit(1747027504.986:65): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.269038][ T3307] cgroup: Unknown subsys name 'net' [ 33.291093][ T29] audit: type=1400 audit(1747027504.986:66): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.318570][ T29] audit: type=1400 audit(1747027505.016:67): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.491976][ T3307] cgroup: Unknown subsys name 'cpuset' [ 33.498658][ T3307] cgroup: Unknown subsys name 'rlimit' [ 33.629036][ T29] audit: type=1400 audit(1747027505.346:68): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.652617][ T29] audit: type=1400 audit(1747027505.346:69): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.673343][ T29] audit: type=1400 audit(1747027505.346:70): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.683230][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.694760][ T29] audit: type=1400 audit(1747027505.346:71): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.694792][ T29] audit: type=1400 audit(1747027505.356:72): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.749913][ T29] audit: type=1400 audit(1747027505.356:73): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.766703][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.774966][ T29] audit: type=1400 audit(1747027505.426:74): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.067198][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.101235][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.114027][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.141707][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 35.225941][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.264876][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.272013][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.279243][ T3323] bridge_slave_0: entered allmulticast mode [ 35.286309][ T3323] bridge_slave_0: entered promiscuous mode [ 35.293529][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.300693][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.308111][ T3323] bridge_slave_1: entered allmulticast mode [ 35.314711][ T3323] bridge_slave_1: entered promiscuous mode [ 35.326007][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.333167][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.340389][ T3318] bridge_slave_0: entered allmulticast mode [ 35.347244][ T3318] bridge_slave_0: entered promiscuous mode [ 35.361801][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.368985][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.376294][ T3324] bridge_slave_0: entered allmulticast mode [ 35.383024][ T3324] bridge_slave_0: entered promiscuous mode [ 35.389695][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.396949][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.404457][ T3324] bridge_slave_1: entered allmulticast mode [ 35.410759][ T3324] bridge_slave_1: entered promiscuous mode [ 35.433496][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.440741][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.448169][ T3318] bridge_slave_1: entered allmulticast mode [ 35.454797][ T3318] bridge_slave_1: entered promiscuous mode [ 35.473026][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.482303][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.489358][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.496695][ T3317] bridge_slave_0: entered allmulticast mode [ 35.503514][ T3317] bridge_slave_0: entered promiscuous mode [ 35.523931][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.534327][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.543529][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.550590][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.557917][ T3317] bridge_slave_1: entered allmulticast mode [ 35.564408][ T3317] bridge_slave_1: entered promiscuous mode [ 35.584043][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.609865][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.624873][ T3323] team0: Port device team_slave_0 added [ 35.637833][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.653441][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.660574][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.667927][ T3319] bridge_slave_0: entered allmulticast mode [ 35.674600][ T3319] bridge_slave_0: entered promiscuous mode [ 35.682371][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.691647][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.698790][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.706162][ T3319] bridge_slave_1: entered allmulticast mode [ 35.713257][ T3319] bridge_slave_1: entered promiscuous mode [ 35.728038][ T3323] team0: Port device team_slave_1 added [ 35.735320][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.765724][ T3324] team0: Port device team_slave_0 added [ 35.786745][ T3318] team0: Port device team_slave_0 added [ 35.798627][ T3324] team0: Port device team_slave_1 added [ 35.804917][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.811962][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.839240][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.851211][ T3317] team0: Port device team_slave_0 added [ 35.858059][ T3318] team0: Port device team_slave_1 added [ 35.871197][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.886110][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.893220][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.919400][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.932073][ T3317] team0: Port device team_slave_1 added [ 35.944595][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.973866][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.980933][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.007647][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.025745][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.032809][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.059776][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.081751][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.088750][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.115046][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.126342][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.133390][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.159536][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.175868][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.182896][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.209943][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.231982][ T3323] hsr_slave_0: entered promiscuous mode [ 36.239771][ T3323] hsr_slave_1: entered promiscuous mode [ 36.249206][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.256388][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.283367][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.298322][ T3319] team0: Port device team_slave_0 added [ 36.307328][ T3319] team0: Port device team_slave_1 added [ 36.365141][ T3318] hsr_slave_0: entered promiscuous mode [ 36.371534][ T3318] hsr_slave_1: entered promiscuous mode [ 36.377637][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.385355][ T3318] Cannot create hsr debugfs directory [ 36.393439][ T3324] hsr_slave_0: entered promiscuous mode [ 36.399861][ T3324] hsr_slave_1: entered promiscuous mode [ 36.405934][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.413761][ T3324] Cannot create hsr debugfs directory [ 36.419812][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.426933][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.453047][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.476338][ T3317] hsr_slave_0: entered promiscuous mode [ 36.482596][ T3317] hsr_slave_1: entered promiscuous mode [ 36.488442][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.496095][ T3317] Cannot create hsr debugfs directory [ 36.502638][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.509603][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.535841][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.589293][ T3319] hsr_slave_0: entered promiscuous mode [ 36.596108][ T3319] hsr_slave_1: entered promiscuous mode [ 36.602426][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.610378][ T3319] Cannot create hsr debugfs directory [ 36.804295][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.815175][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.831030][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.845680][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.861658][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.871655][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.889182][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.898085][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.920508][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.935153][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.945022][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.963321][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.002813][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.013452][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.023791][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.038814][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.073229][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.084914][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.094329][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.103678][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.125120][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.137160][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.154330][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.182341][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.202224][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.224319][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.231957][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.242689][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.250164][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.267522][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.278518][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.286245][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.296794][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.304079][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.338380][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.345714][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.358417][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.366052][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.379585][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.419325][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.436011][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.462811][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.470692][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.481482][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.488865][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.506818][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.543026][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.572797][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.592174][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.604912][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.612786][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.632265][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.639460][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.679781][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.691484][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.708285][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.732231][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.773675][ T3324] veth0_vlan: entered promiscuous mode [ 37.804008][ T3324] veth1_vlan: entered promiscuous mode [ 37.844493][ T3324] veth0_macvtap: entered promiscuous mode [ 37.863413][ T3324] veth1_macvtap: entered promiscuous mode [ 37.887912][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.900644][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.916654][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.940676][ T3317] veth0_vlan: entered promiscuous mode [ 37.972930][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.982362][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.992357][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.001159][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.029091][ T3317] veth1_vlan: entered promiscuous mode [ 38.038995][ T3319] veth0_vlan: entered promiscuous mode [ 38.052886][ T3319] veth1_vlan: entered promiscuous mode [ 38.070002][ T3317] veth0_macvtap: entered promiscuous mode [ 38.096757][ T3319] veth0_macvtap: entered promiscuous mode [ 38.124395][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.140481][ T3317] veth1_macvtap: entered promiscuous mode [ 38.157869][ T3318] veth0_vlan: entered promiscuous mode [ 38.166470][ T3319] veth1_macvtap: entered promiscuous mode [ 38.178660][ T3323] veth0_vlan: entered promiscuous mode [ 38.194379][ T3318] veth1_vlan: entered promiscuous mode [ 38.206735][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.217617][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.229718][ T3458] loop0: detected capacity change from 0 to 128 [ 38.237545][ T3458] ======================================================= [ 38.237545][ T3458] WARNING: The mand mount option has been deprecated and [ 38.237545][ T3458] and is ignored by this kernel. Remove the mand [ 38.237545][ T3458] option from the mount to silence this warning. [ 38.237545][ T3458] ======================================================= [ 38.275718][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.287410][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 38.287429][ T29] audit: type=1400 audit(1747027510.006:96): avc: denied { mount } for pid=3457 comm="syz.0.1" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.323155][ T29] audit: type=1400 audit(1747027510.016:97): avc: denied { prog_load } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.327417][ T3318] veth0_macvtap: entered promiscuous mode [ 38.343812][ T29] audit: type=1400 audit(1747027510.016:98): avc: denied { bpf } for pid=3457 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.370405][ T29] audit: type=1400 audit(1747027510.016:99): avc: denied { perfmon } for pid=3457 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.382178][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.391808][ T29] audit: type=1400 audit(1747027510.016:100): avc: denied { prog_run } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.423310][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.438186][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.446547][ T3323] veth1_vlan: entered promiscuous mode [ 38.454271][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.465844][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.472429][ T29] audit: type=1400 audit(1747027510.166:101): avc: denied { create } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.475732][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.494925][ T29] audit: type=1400 audit(1747027510.176:102): avc: denied { connect } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.506247][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.508619][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.537070][ T29] audit: type=1400 audit(1747027510.256:103): avc: denied { map_create } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.569591][ T29] audit: type=1400 audit(1747027510.256:104): avc: denied { map_read map_write } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.570697][ T3318] veth1_macvtap: entered promiscuous mode [ 38.589405][ T29] audit: type=1400 audit(1747027510.266:105): avc: denied { open } for pid=3457 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.608681][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.623204][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.632243][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.640999][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.658373][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.669065][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.679055][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.689597][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.702735][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.714554][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.724602][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.733545][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742354][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.758071][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.768877][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.778848][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.789336][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.799264][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.810050][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.822196][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.832728][ T3323] veth0_macvtap: entered promiscuous mode [ 38.850457][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.861123][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.871190][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.882463][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.892378][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.902962][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.915487][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.923687][ T3323] veth1_macvtap: entered promiscuous mode [ 38.936309][ T3462] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 38.975417][ T3318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.984351][ T3318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.993397][ T3318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.002378][ T3318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.016821][ T3465] FAULT_INJECTION: forcing a failure. [ 39.016821][ T3465] name failslab, interval 1, probability 0, space 0, times 1 [ 39.029919][ T3465] CPU: 1 UID: 0 PID: 3465 Comm: syz.0.8 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 39.029957][ T3465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.029973][ T3465] Call Trace: [ 39.030023][ T3465] [ 39.030032][ T3465] __dump_stack+0x1d/0x30 [ 39.030099][ T3465] dump_stack_lvl+0xe8/0x140 [ 39.030125][ T3465] dump_stack+0x15/0x1b [ 39.030164][ T3465] should_fail_ex+0x265/0x280 [ 39.030197][ T3465] should_failslab+0x8c/0xb0 [ 39.030229][ T3465] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 39.030257][ T3465] ? sidtab_sid2str_get+0xa0/0x130 [ 39.030297][ T3465] kmemdup_noprof+0x2b/0x70 [ 39.030322][ T3465] sidtab_sid2str_get+0xa0/0x130 [ 39.030422][ T3465] security_sid_to_context_core+0x1eb/0x2e0 [ 39.030452][ T3465] security_sid_to_context+0x27/0x40 [ 39.030558][ T3465] selinux_lsmprop_to_secctx+0x67/0xf0 [ 39.030591][ T3465] security_lsmprop_to_secctx+0x43/0x80 [ 39.030674][ T3465] audit_log_task_context+0x77/0x190 [ 39.030711][ T3465] audit_log_task+0xf4/0x250 [ 39.030748][ T3465] audit_seccomp+0x61/0x100 [ 39.030804][ T3465] ? __seccomp_filter+0x68c/0x10d0 [ 39.030863][ T3465] __seccomp_filter+0x69d/0x10d0 [ 39.030893][ T3465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.030927][ T3465] ? vfs_write+0x75e/0x8d0 [ 39.030958][ T3465] ? __rcu_read_unlock+0x4f/0x70 [ 39.030984][ T3465] ? __fget_files+0x184/0x1c0 [ 39.031017][ T3465] __secure_computing+0x82/0x150 [ 39.031154][ T3465] syscall_trace_enter+0xcf/0x1e0 [ 39.031184][ T3465] do_syscall_64+0xaa/0x1a0 [ 39.031243][ T3465] ? clear_bhb_loop+0x25/0x80 [ 39.031266][ T3465] ? clear_bhb_loop+0x25/0x80 [ 39.031292][ T3465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.031364][ T3465] RIP: 0033:0x7ff7300cd37c [ 39.031389][ T3465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 39.031408][ T3465] RSP: 002b:00007ff72e737030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.031431][ T3465] RAX: ffffffffffffffda RBX: 00007ff7302f5fa0 RCX: 00007ff7300cd37c [ 39.031444][ T3465] RDX: 000000000000000f RSI: 00007ff72e7370a0 RDI: 0000000000000004 [ 39.031460][ T3465] RBP: 00007ff72e737090 R08: 0000000000000000 R09: 0000000000000000 [ 39.031474][ T3465] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 39.031564][ T3465] R13: 0000000000000000 R14: 00007ff7302f5fa0 R15: 00007ffd3771a858 [ 39.031586][ T3465] [ 39.031798][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.293574][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.293616][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.293635][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.293653][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.336744][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.336764][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.336783][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.371765][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.402071][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.413480][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.423644][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.435245][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.445266][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.456204][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.466374][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.477056][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.505020][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.536355][ T3473] loop3: detected capacity change from 0 to 764 [ 39.555799][ T3323] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.564792][ T3323] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.573664][ T3323] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.582576][ T3323] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.601806][ T3473] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 39.630024][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.711416][ T3485] loop2: detected capacity change from 0 to 2048 [ 39.849332][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 39.950810][ T3500] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.982903][ T3500] 9pnet_fd: Insufficient options for proto=fd [ 40.168273][ T3515] loop3: detected capacity change from 0 to 2048 [ 40.178429][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 40.196444][ T3518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 40.318045][ T3527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 40.356454][ T3524] loop3: detected capacity change from 0 to 512 [ 40.384682][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 40.411882][ T3524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.469049][ T3536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 40.495084][ T3524] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.564244][ T3536] 9pnet_fd: Insufficient options for proto=fd [ 40.669603][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.685906][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 40.732631][ T3543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 40.789045][ T3550] FAULT_INJECTION: forcing a failure. [ 40.789045][ T3550] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.802555][ T3550] CPU: 1 UID: 0 PID: 3550 Comm: syz.1.33 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 40.802651][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 40.802666][ T3550] Call Trace: [ 40.802673][ T3550] [ 40.802683][ T3550] __dump_stack+0x1d/0x30 [ 40.802710][ T3550] dump_stack_lvl+0xe8/0x140 [ 40.802735][ T3550] dump_stack+0x15/0x1b [ 40.802750][ T3550] should_fail_ex+0x265/0x280 [ 40.802811][ T3550] should_fail+0xb/0x20 [ 40.802845][ T3550] should_fail_usercopy+0x1a/0x20 [ 40.802933][ T3550] _copy_from_user+0x1c/0xb0 [ 40.802982][ T3550] ___sys_sendmsg+0xc1/0x1d0 [ 40.803033][ T3550] __x64_sys_sendmsg+0xd4/0x160 [ 40.803056][ T3550] x64_sys_call+0x2999/0x2fb0 [ 40.803115][ T3550] do_syscall_64+0xd0/0x1a0 [ 40.803143][ T3550] ? clear_bhb_loop+0x25/0x80 [ 40.803170][ T3550] ? clear_bhb_loop+0x25/0x80 [ 40.803219][ T3550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.803256][ T3550] RIP: 0033:0x7f7fc3d8e969 [ 40.803274][ T3550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.803296][ T3550] RSP: 002b:00007f7fc23f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.803319][ T3550] RAX: ffffffffffffffda RBX: 00007f7fc3fb5fa0 RCX: 00007f7fc3d8e969 [ 40.803334][ T3550] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 40.803346][ T3550] RBP: 00007f7fc23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.803357][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.803440][ T3550] R13: 0000000000000000 R14: 00007f7fc3fb5fa0 R15: 00007ffc3931a898 [ 40.803463][ T3550] [ 40.825309][ C0] hrtimer: interrupt took 38443 ns [ 41.018363][ T3546] 9pnet_fd: Insufficient options for proto=fd [ 41.271132][ T3560] syz.3.37 (3560) used greatest stack depth: 10160 bytes left [ 41.288242][ T3567] pimreg: entered allmulticast mode [ 41.314739][ T3567] pimreg: left allmulticast mode [ 41.349566][ T3571] loop3: detected capacity change from 0 to 128 [ 41.431585][ T3576] FAULT_INJECTION: forcing a failure. [ 41.431585][ T3576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.444891][ T3576] CPU: 1 UID: 0 PID: 3576 Comm: syz.0.44 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 41.444933][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.444951][ T3576] Call Trace: [ 41.444961][ T3576] [ 41.444973][ T3576] __dump_stack+0x1d/0x30 [ 41.445056][ T3576] dump_stack_lvl+0xe8/0x140 [ 41.445085][ T3576] dump_stack+0x15/0x1b [ 41.445111][ T3576] should_fail_ex+0x265/0x280 [ 41.445195][ T3576] should_fail+0xb/0x20 [ 41.445237][ T3576] should_fail_usercopy+0x1a/0x20 [ 41.445264][ T3576] _copy_from_iter+0xcf/0xdd0 [ 41.445294][ T3576] ? alloc_pages_mpol+0x202/0x250 [ 41.445350][ T3576] copy_page_from_iter+0x15a/0x290 [ 41.445381][ T3576] tun_get_user+0x5c7/0x24d0 [ 41.445424][ T3576] ? ref_tracker_alloc+0x1f2/0x2f0 [ 41.445542][ T3576] tun_chr_write_iter+0x15e/0x210 [ 41.445642][ T3576] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 41.445675][ T3576] vfs_write+0x49d/0x8d0 [ 41.445723][ T3576] ksys_write+0xda/0x1a0 [ 41.445760][ T3576] __x64_sys_write+0x40/0x50 [ 41.445876][ T3576] x64_sys_call+0x2cdd/0x2fb0 [ 41.445905][ T3576] do_syscall_64+0xd0/0x1a0 [ 41.445937][ T3576] ? clear_bhb_loop+0x25/0x80 [ 41.445967][ T3576] ? clear_bhb_loop+0x25/0x80 [ 41.446049][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.446078][ T3576] RIP: 0033:0x7ff7300cd41f [ 41.446099][ T3576] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 41.446170][ T3576] RSP: 002b:00007ff72e737000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 41.446196][ T3576] RAX: ffffffffffffffda RBX: 00007ff7302f5fa0 RCX: 00007ff7300cd41f [ 41.446213][ T3576] RDX: 0000000000000042 RSI: 0000200000000140 RDI: 00000000000000c8 [ 41.446255][ T3576] RBP: 00007ff72e737090 R08: 0000000000000000 R09: 0000000000000000 [ 41.446273][ T3576] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 41.446291][ T3576] R13: 0000000000000001 R14: 00007ff7302f5fa0 R15: 00007ffd3771a858 [ 41.446317][ T3576] [ 41.797025][ T3581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 41.904924][ T3581] 9pnet_fd: Insufficient options for proto=fd [ 42.017567][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 42.082641][ T3598] random: crng reseeded on system resumption [ 42.303235][ T3599] block device autoloading is deprecated and will be removed. [ 42.686957][ T3619] loop3: detected capacity change from 0 to 2048 [ 42.765949][ T3617] loop0: detected capacity change from 0 to 2048 [ 42.834958][ T3628] loop3: detected capacity change from 0 to 128 [ 43.122357][ T3641] netlink: 'syz.2.70': attribute type 1 has an invalid length. [ 43.217695][ T3641] sd 0:0:1:0: device reset [ 43.242877][ T3639] 9pnet_fd: Insufficient options for proto=fd [ 43.697768][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 43.697786][ T29] audit: type=1400 audit(1747027515.416:452): avc: denied { mounton } for pid=3645 comm="+}[@" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 43.781427][ T29] audit: type=1400 audit(1747027515.446:453): avc: denied { write } for pid=3645 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.801108][ T29] audit: type=1400 audit(1747027515.446:454): avc: denied { nlmsg_write } for pid=3645 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.859043][ T29] audit: type=1400 audit(1747027515.576:455): avc: denied { remount } for pid=3649 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.888989][ T29] audit: type=1326 audit(1747027515.606:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 43.912787][ T29] audit: type=1326 audit(1747027515.606:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 43.936802][ T29] audit: type=1326 audit(1747027515.606:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 43.960146][ T29] audit: type=1326 audit(1747027515.606:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 43.983567][ T29] audit: type=1326 audit(1747027515.606:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 44.007355][ T29] audit: type=1326 audit(1747027515.606:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3650 comm="syz.3.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f83ae969 code=0x7ffc0000 [ 44.081364][ T3664] SELinux: Context Ü is not valid (left unmapped). [ 44.137834][ T3658] syz_tun: entered promiscuous mode [ 44.156072][ T3658] syz_tun: left promiscuous mode [ 44.205100][ T3659] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.241676][ T3665] loop0: detected capacity change from 0 to 164 [ 44.269392][ T3665] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.289207][ T3659] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.316234][ T3658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.341774][ T3658] Symlink component flag not implemented [ 44.347548][ T3658] Symlink component flag not implemented [ 44.372052][ T3658] Symlink component flag not implemented (7) [ 44.378209][ T3658] Symlink component flag not implemented (116) [ 44.385700][ T3659] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.445314][ T3659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.508413][ T3659] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.533360][ T3659] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.548764][ T3659] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.564114][ T3659] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.655694][ T3695] __nla_validate_parse: 13 callbacks suppressed [ 44.655718][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 44.711153][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 44.729254][ T3695] 9pnet_fd: Insufficient options for proto=fd [ 44.812346][ T3699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 44.832158][ T3701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.839789][ T3701] batadv_slave_0: entered promiscuous mode [ 44.848167][ T3701] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 44.887189][ T3701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 44.897872][ T3701] netlink: 'syz.1.90': attribute type 3 has an invalid length. [ 45.096471][ T3718] loop3: detected capacity change from 0 to 2048 [ 45.151936][ T3719] Zero length message leads to an empty skb [ 45.188984][ T3721] loop3: detected capacity change from 0 to 1024 [ 45.220965][ T3721] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 45.232019][ T3721] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 45.281385][ T3721] JBD2: no valid journal superblock found [ 45.287219][ T3721] EXT4-fs (loop3): Could not load journal inode [ 45.313534][ T3721] $Hÿ: renamed from bond0 (while UP) [ 45.353658][ T3721] $Hÿ: entered promiscuous mode [ 45.358940][ T3721] bond_slave_0: entered promiscuous mode [ 45.364845][ T3721] bond_slave_1: entered promiscuous mode [ 45.395357][ T3729] SELinux: policydb string length 1155618014 does not match expected length 8 [ 45.406219][ T3729] SELinux: failed to load policy [ 45.523114][ T3734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 45.569736][ T3738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 45.777881][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 45.977579][ T3768] sd 0:0:1:0: device reset [ 47.004492][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.116'. [ 47.093093][ T3779] 9pnet_fd: Insufficient options for proto=fd [ 47.120480][ T3781] loop3: detected capacity change from 0 to 512 [ 47.168809][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.183711][ T3781] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.300843][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.359723][ T3797] x_tables: duplicate underflow at hook 1 [ 47.885588][ T3820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 48.146556][ T3828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 48.274722][ T10] IPVS: starting estimator thread 0... [ 48.294957][ T3842] IPVS: set_ctl: invalid protocol: 0 172.30.5.2:20001 [ 48.381168][ T3844] IPVS: using max 2256 ests per chain, 112800 per kthread [ 48.480045][ T3824] mmap: syz.2.132 (3824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.605784][ T3858] 9pnet_fd: Insufficient options for proto=fd [ 48.729798][ T3871] FAULT_INJECTION: forcing a failure. [ 48.729798][ T3871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.742990][ T3871] CPU: 1 UID: 0 PID: 3871 Comm: syz.3.147 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 48.743027][ T3871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.743044][ T3871] Call Trace: [ 48.743053][ T3871] [ 48.743063][ T3871] __dump_stack+0x1d/0x30 [ 48.743091][ T3871] dump_stack_lvl+0xe8/0x140 [ 48.743117][ T3871] dump_stack+0x15/0x1b [ 48.743214][ T3871] should_fail_ex+0x265/0x280 [ 48.743267][ T3871] should_fail+0xb/0x20 [ 48.743304][ T3871] should_fail_usercopy+0x1a/0x20 [ 48.743329][ T3871] copy_page_from_iter_atomic+0x21b/0xff0 [ 48.743396][ T3871] ? shmem_write_begin+0xa8/0x190 [ 48.743428][ T3871] ? shmem_write_begin+0xe1/0x190 [ 48.743483][ T3871] generic_perform_write+0x2c2/0x490 [ 48.743520][ T3871] shmem_file_write_iter+0xc5/0xf0 [ 48.743556][ T3871] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 48.743587][ T3871] vfs_write+0x49d/0x8d0 [ 48.743639][ T3871] ksys_write+0xda/0x1a0 [ 48.743709][ T3871] __x64_sys_write+0x40/0x50 [ 48.743741][ T3871] x64_sys_call+0x2cdd/0x2fb0 [ 48.743817][ T3871] do_syscall_64+0xd0/0x1a0 [ 48.743845][ T3871] ? clear_bhb_loop+0x25/0x80 [ 48.743866][ T3871] ? clear_bhb_loop+0x25/0x80 [ 48.743907][ T3871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.743935][ T3871] RIP: 0033:0x7fd3f83ae969 [ 48.743954][ T3871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.743978][ T3871] RSP: 002b:00007fd3f6a17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.744001][ T3871] RAX: ffffffffffffffda RBX: 00007fd3f85d5fa0 RCX: 00007fd3f83ae969 [ 48.744073][ T3871] RDX: 0000000000001006 RSI: 0000200000000a80 RDI: 0000000000000004 [ 48.744090][ T3871] RBP: 00007fd3f6a17090 R08: 0000000000000000 R09: 0000000000000000 [ 48.744149][ T3871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.744165][ T3871] R13: 0000000000000000 R14: 00007fd3f85d5fa0 R15: 00007ffd6969fc58 [ 48.744190][ T3871] [ 48.770760][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 48.770780][ T29] audit: type=1400 audit(1747027520.486:653): avc: denied { create } for pid=3872 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 48.986354][ T29] audit: type=1326 audit(1747027520.606:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.009746][ T29] audit: type=1326 audit(1747027520.606:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.034343][ T29] audit: type=1326 audit(1747027520.606:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.057715][ T29] audit: type=1326 audit(1747027520.606:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.081210][ T29] audit: type=1326 audit(1747027520.606:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.104883][ T29] audit: type=1326 audit(1747027520.606:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.128253][ T29] audit: type=1326 audit(1747027520.606:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.151626][ T29] audit: type=1326 audit(1747027520.606:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.175036][ T29] audit: type=1326 audit(1747027520.606:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3872 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f70d859e969 code=0x7ffc0000 [ 49.245272][ T3887] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 49.298679][ T3887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.380121][ T3897] bond0 (unregistering): Released all slaves [ 49.798161][ T3908] veth1_macvtap: left promiscuous mode [ 49.851105][ T3908] macsec0: entered promiscuous mode [ 50.048702][ T3922] __nla_validate_parse: 5 callbacks suppressed [ 50.048722][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 50.113643][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.121318][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.128836][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.136446][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.143976][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.151472][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.159021][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.166582][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.174253][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.181956][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.189461][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.197262][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.204728][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.212460][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.220041][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.227608][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.235428][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.243017][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.250455][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.257978][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.265489][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.272974][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.280461][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.287920][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.295570][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.303063][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.310487][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.319195][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.328297][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.337183][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.345331][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.353062][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.360565][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.368137][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.375688][ T36] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 50.459199][ T36] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 50.487112][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.168'. [ 50.511252][ T3936] fido_id[3936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.597920][ T3938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 50.738748][ T3932] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 50.783124][ T3932] SELinux: failed to load policy [ 50.942675][ T3949] netlink: 76 bytes leftover after parsing attributes in process `syz.4.170'. [ 51.042133][ T3955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 51.075765][ T3955] 9pnet_fd: Insufficient options for proto=fd [ 51.424401][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.179'. [ 51.760001][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 51.793696][ T3980] 9pnet_fd: Insufficient options for proto=fd [ 53.151103][ T3992] netlink: 76 bytes leftover after parsing attributes in process `syz.0.186'. [ 53.318716][ T3999] pimreg: entered allmulticast mode [ 53.326419][ T3999] pimreg: left allmulticast mode [ 53.370321][ T4003] netlink: 24 bytes leftover after parsing attributes in process `syz.3.191'. [ 53.467732][ T4007] 9pnet_fd: Insufficient options for proto=fd [ 53.526433][ T4011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 53.549665][ T4013] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 53.607443][ T4013] sd 0:0:1:0: device reset [ 53.641629][ T4018] netlink: 'syz.2.198': attribute type 6 has an invalid length. [ 53.919992][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 53.920007][ T29] audit: type=1400 audit(1747027525.636:757): avc: denied { accept } for pid=4041 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 53.984073][ T4039] team0: entered allmulticast mode [ 53.989284][ T4039] team_slave_0: entered allmulticast mode [ 53.995114][ T4039] team_slave_1: entered allmulticast mode [ 54.012844][ T4037] 9pnet_fd: Insufficient options for proto=fd [ 54.039730][ T4025] team0: left allmulticast mode [ 54.044701][ T4025] team_slave_0: left allmulticast mode [ 54.050209][ T4025] team_slave_1: left allmulticast mode [ 54.464743][ T4062] FAULT_INJECTION: forcing a failure. [ 54.464743][ T4062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.477963][ T4062] CPU: 1 UID: 0 PID: 4062 Comm: syz.2.209 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 54.477995][ T4062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 54.478012][ T4062] Call Trace: [ 54.478020][ T4062] [ 54.478029][ T4062] __dump_stack+0x1d/0x30 [ 54.478057][ T4062] dump_stack_lvl+0xe8/0x140 [ 54.478132][ T4062] dump_stack+0x15/0x1b [ 54.478149][ T4062] should_fail_ex+0x265/0x280 [ 54.478197][ T4062] should_fail+0xb/0x20 [ 54.478225][ T4062] should_fail_usercopy+0x1a/0x20 [ 54.478320][ T4062] _copy_from_user+0x1c/0xb0 [ 54.478407][ T4062] sg_new_write+0x71a/0x890 [ 54.478526][ T4062] sg_ioctl+0xb81/0x1360 [ 54.478597][ T4062] ? __pfx_sg_ioctl+0x10/0x10 [ 54.478625][ T4062] __se_sys_ioctl+0xcb/0x140 [ 54.478662][ T4062] __x64_sys_ioctl+0x43/0x50 [ 54.478686][ T4062] x64_sys_call+0x19a8/0x2fb0 [ 54.478732][ T4062] do_syscall_64+0xd0/0x1a0 [ 54.478755][ T4062] ? clear_bhb_loop+0x25/0x80 [ 54.478778][ T4062] ? clear_bhb_loop+0x25/0x80 [ 54.478800][ T4062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.478896][ T4062] RIP: 0033:0x7f70d859e969 [ 54.478911][ T4062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.478931][ T4062] RSP: 002b:00007f70d6c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.478971][ T4062] RAX: ffffffffffffffda RBX: 00007f70d87c5fa0 RCX: 00007f70d859e969 [ 54.478983][ T4062] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000004 [ 54.478995][ T4062] RBP: 00007f70d6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 54.479048][ T4062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.479063][ T4062] R13: 0000000000000000 R14: 00007f70d87c5fa0 R15: 00007ffc99912c68 [ 54.479087][ T4062] [ 54.729759][ T4064] veth3: entered allmulticast mode [ 54.738442][ T3394] IPVS: starting estimator thread 0... [ 54.739921][ T29] audit: type=1400 audit(1747027526.456:758): avc: denied { create } for pid=4067 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.769666][ T4066] IPVS: set_ctl: invalid protocol: 0 172.30.5.3:20001 [ 54.835048][ T29] audit: type=1400 audit(1747027526.486:759): avc: denied { setopt } for pid=4067 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 54.837704][ T4074] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 54.854555][ T29] audit: type=1400 audit(1747027526.486:760): avc: denied { create } for pid=4067 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.871584][ T4074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.882050][ T4069] IPVS: using max 2160 ests per chain, 108000 per kthread [ 54.932958][ T4076] bond0 (unregistering): Released all slaves [ 54.957789][ T4079] IPVS: set_ctl: invalid protocol: 0 172.30.5.2:20001 [ 55.003798][ T4081] pimreg: entered allmulticast mode [ 55.063303][ T4081] pimreg: left allmulticast mode [ 55.086469][ T4085] __nla_validate_parse: 3 callbacks suppressed [ 55.086489][ T4085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.222'. [ 55.262295][ T4092] netlink: 'syz.4.225': attribute type 1 has an invalid length. [ 55.412767][ T4092] sd 0:0:1:0: device reset [ 55.431914][ T4099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.228'. [ 55.484023][ T4099] netlink: 64 bytes leftover after parsing attributes in process `syz.3.228'. [ 55.792859][ T29] audit: type=1400 audit(1747027527.516:761): avc: denied { ioctl } for pid=4111 comm="syz.3.234" path="socket:[6866]" dev="sockfs" ino=6866 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.825737][ T4112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.826093][ T4114] pimreg: entered allmulticast mode [ 55.837669][ T29] audit: type=1400 audit(1747027527.546:762): avc: denied { getopt } for pid=4111 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.847886][ T4114] pimreg: left allmulticast mode [ 55.917391][ T4120] FAULT_INJECTION: forcing a failure. [ 55.917391][ T4120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.930677][ T4120] CPU: 1 UID: 0 PID: 4120 Comm: syz.3.237 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 55.930715][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 55.930731][ T4120] Call Trace: [ 55.930739][ T4120] [ 55.930749][ T4120] __dump_stack+0x1d/0x30 [ 55.930795][ T4120] dump_stack_lvl+0xe8/0x140 [ 55.930840][ T4120] dump_stack+0x15/0x1b [ 55.930863][ T4120] should_fail_ex+0x265/0x280 [ 55.930926][ T4120] should_fail+0xb/0x20 [ 55.930963][ T4120] should_fail_usercopy+0x1a/0x20 [ 55.930988][ T4120] _copy_to_user+0x20/0xa0 [ 55.931032][ T4120] simple_read_from_buffer+0xb5/0x130 [ 55.931065][ T4120] proc_fail_nth_read+0x100/0x140 [ 55.931096][ T4120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.931184][ T4120] vfs_read+0x19d/0x6f0 [ 55.931206][ T4120] ? __rcu_read_unlock+0x4f/0x70 [ 55.931228][ T4120] ? __rcu_read_unlock+0x4f/0x70 [ 55.931273][ T4120] ? __fget_files+0x184/0x1c0 [ 55.931319][ T4120] ksys_read+0xda/0x1a0 [ 55.931358][ T4120] __x64_sys_read+0x40/0x50 [ 55.931457][ T4120] x64_sys_call+0x2d77/0x2fb0 [ 55.931485][ T4120] do_syscall_64+0xd0/0x1a0 [ 55.931514][ T4120] ? clear_bhb_loop+0x25/0x80 [ 55.931543][ T4120] ? clear_bhb_loop+0x25/0x80 [ 55.931620][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.931646][ T4120] RIP: 0033:0x7fd3f83ad37c [ 55.931666][ T4120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.931688][ T4120] RSP: 002b:00007fd3f6a17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.931712][ T4120] RAX: ffffffffffffffda RBX: 00007fd3f85d5fa0 RCX: 00007fd3f83ad37c [ 55.931776][ T4120] RDX: 000000000000000f RSI: 00007fd3f6a170a0 RDI: 0000000000000003 [ 55.931822][ T4120] RBP: 00007fd3f6a17090 R08: 0000000000000000 R09: 0000000000000000 [ 55.931855][ T4120] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 55.931871][ T4120] R13: 0000000000000000 R14: 00007fd3f85d5fa0 R15: 00007ffd6969fc58 [ 55.931896][ T4120] [ 56.228668][ T4128] 9pnet_fd: Insufficient options for proto=fd [ 56.241788][ T4126] veth0: entered promiscuous mode [ 56.247136][ T4126] veth0: left promiscuous mode [ 56.303953][ T29] audit: type=1400 audit(1747027528.016:763): avc: denied { connect } for pid=4135 comm="+}[@" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.387143][ T4151] pimreg: entered allmulticast mode [ 56.396764][ T4151] pimreg: left allmulticast mode [ 56.495939][ T29] audit: type=1400 audit(1747027528.216:764): avc: denied { ioctl } for pid=4159 comm="syz.4.255" path="socket:[7372]" dev="sockfs" ino=7372 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.563882][ T29] audit: type=1326 audit(1747027528.246:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.4.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827416e969 code=0x0 [ 56.589502][ T4168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.258'. [ 56.638234][ T4174] FAULT_INJECTION: forcing a failure. [ 56.638234][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 56.651011][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.1.260 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 56.651037][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 56.651063][ T4174] Call Trace: [ 56.651070][ T4174] [ 56.651079][ T4174] __dump_stack+0x1d/0x30 [ 56.651106][ T4174] dump_stack_lvl+0xe8/0x140 [ 56.651129][ T4174] dump_stack+0x15/0x1b [ 56.651149][ T4174] should_fail_ex+0x265/0x280 [ 56.651198][ T4174] should_failslab+0x8c/0xb0 [ 56.651330][ T4174] kmem_cache_alloc_node_noprof+0x57/0x320 [ 56.651401][ T4174] ? __alloc_skb+0x101/0x320 [ 56.651437][ T4174] __alloc_skb+0x101/0x320 [ 56.651504][ T4174] netlink_alloc_large_skb+0xba/0xf0 [ 56.651539][ T4174] netlink_sendmsg+0x3cf/0x6b0 [ 56.651577][ T4174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.651636][ T4174] __sock_sendmsg+0x142/0x180 [ 56.651665][ T4174] ____sys_sendmsg+0x31e/0x4e0 [ 56.651691][ T4174] ___sys_sendmsg+0x17b/0x1d0 [ 56.651727][ T4174] __x64_sys_sendmsg+0xd4/0x160 [ 56.651813][ T4174] x64_sys_call+0x2999/0x2fb0 [ 56.651837][ T4174] do_syscall_64+0xd0/0x1a0 [ 56.651881][ T4174] ? clear_bhb_loop+0x25/0x80 [ 56.651905][ T4174] ? clear_bhb_loop+0x25/0x80 [ 56.651954][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.651978][ T4174] RIP: 0033:0x7f7fc3d8e969 [ 56.652020][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.652041][ T4174] RSP: 002b:00007f7fc23f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.652142][ T4174] RAX: ffffffffffffffda RBX: 00007f7fc3fb5fa0 RCX: 00007f7fc3d8e969 [ 56.652157][ T4174] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 56.652171][ T4174] RBP: 00007f7fc23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.652185][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.652269][ T4174] R13: 0000000000000000 R14: 00007f7fc3fb5fa0 R15: 00007ffc3931a898 [ 56.652288][ T4174] [ 56.876893][ T4179] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 56.888769][ T4179] sd 0:0:1:0: device reset [ 56.902764][ T4183] IPVS: set_ctl: invalid protocol: 0 172.30.5.3:20001 [ 57.107188][ T4202] 9pnet_fd: Insufficient options for proto=fd [ 57.233685][ T4210] netlink: 256 bytes leftover after parsing attributes in process `syz.3.276'. [ 57.259887][ T3394] IPVS: starting estimator thread 0... [ 57.267384][ T4216] IPVS: set_ctl: invalid protocol: 0 172.30.5.1:20001 [ 57.288527][ T29] audit: type=1400 audit(1747027529.006:766): avc: denied { search } for pid=3046 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.352972][ T4217] IPVS: using max 1872 ests per chain, 93600 per kthread [ 57.412053][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 57.458994][ T4228] 9pnet_fd: Insufficient options for proto=fd [ 57.490470][ T4232] FAULT_INJECTION: forcing a failure. [ 57.490470][ T4232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.504034][ T4232] CPU: 0 UID: 0 PID: 4232 Comm: syz.2.283 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 57.504070][ T4232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.504148][ T4232] Call Trace: [ 57.504164][ T4232] [ 57.504174][ T4232] __dump_stack+0x1d/0x30 [ 57.504201][ T4232] dump_stack_lvl+0xe8/0x140 [ 57.504221][ T4232] dump_stack+0x15/0x1b [ 57.504237][ T4232] should_fail_ex+0x265/0x280 [ 57.504293][ T4232] should_fail+0xb/0x20 [ 57.504382][ T4232] should_fail_usercopy+0x1a/0x20 [ 57.504455][ T4232] copy_page_from_iter_atomic+0x21b/0xff0 [ 57.504489][ T4232] ? shmem_write_begin+0xa8/0x190 [ 57.504522][ T4232] ? shmem_write_begin+0xe1/0x190 [ 57.504550][ T4232] generic_perform_write+0x2c2/0x490 [ 57.504605][ T4232] shmem_file_write_iter+0xc5/0xf0 [ 57.504676][ T4232] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 57.504708][ T4232] vfs_write+0x49d/0x8d0 [ 57.504784][ T4232] ksys_write+0xda/0x1a0 [ 57.504817][ T4232] __x64_sys_write+0x40/0x50 [ 57.504843][ T4232] x64_sys_call+0x2cdd/0x2fb0 [ 57.504914][ T4232] do_syscall_64+0xd0/0x1a0 [ 57.504945][ T4232] ? clear_bhb_loop+0x25/0x80 [ 57.504967][ T4232] ? clear_bhb_loop+0x25/0x80 [ 57.504990][ T4232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.505093][ T4232] RIP: 0033:0x7f70d859e969 [ 57.505113][ T4232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.505135][ T4232] RSP: 002b:00007f70d6be6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.505165][ T4232] RAX: ffffffffffffffda RBX: 00007f70d87c6080 RCX: 00007f70d859e969 [ 57.505203][ T4232] RDX: 000000000208e24b RSI: 00002000000004c0 RDI: 0000000000000004 [ 57.505220][ T4232] RBP: 00007f70d6be6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.505236][ T4232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.505251][ T4232] R13: 0000000000000000 R14: 00007f70d87c6080 R15: 00007ffc99912c68 [ 57.505277][ T4232] [ 57.757286][ T4235] capability: warning: `syz.3.284' uses 32-bit capabilities (legacy support in use) [ 57.852141][ T4242] sd 0:0:1:0: device reset [ 57.870918][ T4241] hub 8-0:1.0: USB hub found [ 57.879598][ T4241] hub 8-0:1.0: 8 ports detected [ 58.336380][ T3394] IPVS: starting estimator thread 0... [ 58.357733][ T4254] FAULT_INJECTION: forcing a failure. [ 58.357733][ T4254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.371320][ T4254] CPU: 1 UID: 0 PID: 4254 Comm: syz.0.292 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 58.371394][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.371407][ T4254] Call Trace: [ 58.371413][ T4254] [ 58.371421][ T4254] __dump_stack+0x1d/0x30 [ 58.371445][ T4254] dump_stack_lvl+0xe8/0x140 [ 58.371505][ T4254] dump_stack+0x15/0x1b [ 58.371528][ T4254] should_fail_ex+0x265/0x280 [ 58.371572][ T4254] should_fail+0xb/0x20 [ 58.371617][ T4254] should_fail_usercopy+0x1a/0x20 [ 58.371642][ T4254] strncpy_from_user+0x25/0x230 [ 58.371675][ T4254] ? __kmalloc_cache_noprof+0x189/0x320 [ 58.371773][ T4254] getname_flags+0x230/0x3b0 [ 58.371812][ T4254] __x64_sys_rename+0x33/0x70 [ 58.371877][ T4254] x64_sys_call+0x2aee/0x2fb0 [ 58.371899][ T4254] do_syscall_64+0xd0/0x1a0 [ 58.371922][ T4254] ? clear_bhb_loop+0x25/0x80 [ 58.371975][ T4254] ? clear_bhb_loop+0x25/0x80 [ 58.372004][ T4254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.372029][ T4254] RIP: 0033:0x7ff7300ce969 [ 58.372045][ T4254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.372065][ T4254] RSP: 002b:00007ff72e737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 58.372085][ T4254] RAX: ffffffffffffffda RBX: 00007ff7302f5fa0 RCX: 00007ff7300ce969 [ 58.372147][ T4254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000020000001b640 [ 58.372162][ T4254] RBP: 00007ff72e737090 R08: 0000000000000000 R09: 0000000000000000 [ 58.372178][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.372247][ T4254] R13: 0000000000000000 R14: 00007ff7302f5fa0 R15: 00007ffd3771a858 [ 58.372272][ T4254] [ 58.375331][ T4250] IPVS: set_ctl: invalid protocol: 0 172.30.5.4:20001 [ 58.377543][ T4256] syzkaller0: entered allmulticast mode [ 58.443325][ T4251] IPVS: using max 2064 ests per chain, 103200 per kthread [ 58.578724][ T4256] syzkaller0: entered promiscuous mode [ 58.584320][ T4256] syzkaller0: left allmulticast mode [ 58.593912][ T4256] syzkaller0: left promiscuous mode [ 58.608850][ T4268] netlink: 'syz.4.297': attribute type 1 has an invalid length. [ 58.630337][ T4268] sd 0:0:1:0: device reset [ 58.697478][ T4264] syz.3.295 (4264) used greatest stack depth: 10040 bytes left [ 58.745500][ T4280] FAULT_INJECTION: forcing a failure. [ 58.745500][ T4280] name failslab, interval 1, probability 0, space 0, times 0 [ 58.758336][ T4280] CPU: 1 UID: 0 PID: 4280 Comm: syz.4.303 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 58.758366][ T4280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 58.758382][ T4280] Call Trace: [ 58.758389][ T4280] [ 58.758399][ T4280] __dump_stack+0x1d/0x30 [ 58.758425][ T4280] dump_stack_lvl+0xe8/0x140 [ 58.758450][ T4280] dump_stack+0x15/0x1b [ 58.758550][ T4280] should_fail_ex+0x265/0x280 [ 58.758590][ T4280] ? __pfx_cond_bools_destroy+0x10/0x10 [ 58.758611][ T4280] should_failslab+0x8c/0xb0 [ 58.758665][ T4280] kmem_cache_alloc_noprof+0x50/0x310 [ 58.758710][ T4280] ? hashtab_duplicate+0xfe/0x360 [ 58.758817][ T4280] ? __pfx_cond_bools_destroy+0x10/0x10 [ 58.758839][ T4280] hashtab_duplicate+0xfe/0x360 [ 58.758866][ T4280] ? __pfx_cond_bools_copy+0x10/0x10 [ 58.758887][ T4280] cond_policydb_dup+0xd2/0x4e0 [ 58.758917][ T4276] syzkaller0: entered promiscuous mode [ 58.758911][ T4280] security_set_bools+0xa0/0x340 [ 58.759006][ T4280] sel_commit_bools_write+0x1ea/0x270 [ 58.759037][ T4280] vfs_writev+0x3eb/0x870 [ 58.759082][ T4280] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 58.759122][ T4280] ? mutex_lock+0xd/0x30 [ 58.759203][ T4280] do_writev+0xe7/0x210 [ 58.759323][ T4280] __x64_sys_writev+0x45/0x50 [ 58.759361][ T4280] x64_sys_call+0x2006/0x2fb0 [ 58.759391][ T4280] do_syscall_64+0xd0/0x1a0 [ 58.759423][ T4280] ? clear_bhb_loop+0x25/0x80 [ 58.759453][ T4280] ? clear_bhb_loop+0x25/0x80 [ 58.759484][ T4280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.759568][ T4280] RIP: 0033:0x7f827416e969 [ 58.759590][ T4280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.759614][ T4280] RSP: 002b:00007f82727d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 58.759639][ T4280] RAX: ffffffffffffffda RBX: 00007f8274395fa0 RCX: 00007f827416e969 [ 58.759657][ T4280] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 58.759673][ T4280] RBP: 00007f82727d7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.759771][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.759788][ T4280] R13: 0000000000000000 R14: 00007f8274395fa0 R15: 00007ffce9582578 [ 58.759814][ T4280] [ 59.007870][ T4276] syzkaller0: entered allmulticast mode [ 59.035245][ T4288] pimreg: entered allmulticast mode [ 59.041343][ T4290] pimreg: left allmulticast mode [ 59.094688][ T4296] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 59.108930][ T4296] sd 0:0:1:0: device reset [ 59.125482][ T4298] bridge_slave_0: left allmulticast mode [ 59.131312][ T4298] bridge_slave_0: left promiscuous mode [ 59.137089][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.147723][ T4298] bridge_slave_1: left allmulticast mode [ 59.153970][ T4298] bridge_slave_1: left promiscuous mode [ 59.160063][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.172134][ T4298] bond0: (slave bond_slave_0): Releasing backup interface [ 59.182395][ T4298] bond0: (slave bond_slave_1): Releasing backup interface [ 59.196936][ T4298] team0: Port device team_slave_0 removed [ 59.205894][ T4298] team0: Port device team_slave_1 removed [ 59.213509][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.221198][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.230197][ T4298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.238095][ T4298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.333578][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 59.446564][ T4311] 9pnet_fd: Insufficient options for proto=fd [ 59.476219][ T4321] syz.3.319 uses obsolete (PF_INET,SOCK_PACKET) [ 59.507612][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 59.507627][ T29] audit: type=1400 audit(1747027531.226:832): avc: denied { listen } for pid=4320 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.536424][ T4323] FAULT_INJECTION: forcing a failure. [ 59.536424][ T4323] name failslab, interval 1, probability 0, space 0, times 0 [ 59.549447][ T4323] CPU: 1 UID: 0 PID: 4323 Comm: syz.4.320 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 59.549483][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 59.549517][ T4323] Call Trace: [ 59.549523][ T4323] [ 59.549530][ T4323] __dump_stack+0x1d/0x30 [ 59.549552][ T4323] dump_stack_lvl+0xe8/0x140 [ 59.549577][ T4323] dump_stack+0x15/0x1b [ 59.549599][ T4323] should_fail_ex+0x265/0x280 [ 59.549641][ T4323] should_failslab+0x8c/0xb0 [ 59.549832][ T4323] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 59.549861][ T4323] ? p9_client_create+0x207/0xbc0 [ 59.549903][ T4323] kstrdup+0x3e/0xd0 [ 59.549920][ T4323] p9_client_create+0x207/0xbc0 [ 59.550012][ T4323] v9fs_session_init+0xf7/0xde0 [ 59.550080][ T4323] ? __rcu_read_unlock+0x4f/0x70 [ 59.550114][ T4323] ? should_fail_ex+0xdb/0x280 [ 59.550154][ T4323] ? v9fs_mount+0x51/0x590 [ 59.550251][ T4323] ? should_failslab+0x8c/0xb0 [ 59.550289][ T4323] ? __kmalloc_cache_noprof+0x189/0x320 [ 59.550351][ T4323] v9fs_mount+0x67/0x590 [ 59.550374][ T4323] ? __pfx_v9fs_mount+0x10/0x10 [ 59.550402][ T4323] legacy_get_tree+0x75/0xd0 [ 59.550434][ T4323] vfs_get_tree+0x54/0x1d0 [ 59.550467][ T4323] do_new_mount+0x207/0x680 [ 59.550584][ T4323] path_mount+0x4a4/0xb20 [ 59.550632][ T4323] ? user_path_at+0x109/0x130 [ 59.550656][ T4323] __se_sys_mount+0x28f/0x2e0 [ 59.550685][ T4323] ? fput+0x8f/0xc0 [ 59.550721][ T4323] __x64_sys_mount+0x67/0x80 [ 59.550780][ T4323] x64_sys_call+0xd36/0x2fb0 [ 59.550816][ T4323] do_syscall_64+0xd0/0x1a0 [ 59.550851][ T4323] ? clear_bhb_loop+0x25/0x80 [ 59.551000][ T4323] ? clear_bhb_loop+0x25/0x80 [ 59.551027][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.551052][ T4323] RIP: 0033:0x7f827416e969 [ 59.551069][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.551088][ T4323] RSP: 002b:00007f82727d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.551141][ T4323] RAX: ffffffffffffffda RBX: 00007f8274395fa0 RCX: 00007f827416e969 [ 59.551158][ T4323] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 59.551175][ T4323] RBP: 00007f82727d7090 R08: 0000200000000400 R09: 0000000000000000 [ 59.551269][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.551329][ T4323] R13: 0000000000000000 R14: 00007f8274395fa0 R15: 00007ffce9582578 [ 59.551351][ T4323] [ 59.836173][ T4327] veth1_to_bond: entered allmulticast mode [ 59.851088][ T29] audit: type=1400 audit(1747027531.546:833): avc: denied { create } for pid=4320 comm="syz.3.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 59.871948][ T29] audit: type=1400 audit(1747027531.556:834): avc: denied { ioctl } for pid=4320 comm="syz.3.319" path="socket:[8278]" dev="sockfs" ino=8278 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 60.000298][ T4338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 60.025962][ T4335] FAULT_INJECTION: forcing a failure. [ 60.025962][ T4335] name failslab, interval 1, probability 0, space 0, times 0 [ 60.038787][ T4335] CPU: 0 UID: 0 PID: 4335 Comm: syz.2.323 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 60.038902][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.038919][ T4335] Call Trace: [ 60.038927][ T4335] [ 60.038936][ T4335] __dump_stack+0x1d/0x30 [ 60.038964][ T4335] dump_stack_lvl+0xe8/0x140 [ 60.038991][ T4335] dump_stack+0x15/0x1b [ 60.039077][ T4335] should_fail_ex+0x265/0x280 [ 60.039237][ T4335] ? io_drain_req+0x1e6/0x4f0 [ 60.039265][ T4335] should_failslab+0x8c/0xb0 [ 60.039303][ T4335] __kmalloc_cache_noprof+0x4c/0x320 [ 60.039371][ T4335] io_drain_req+0x1e6/0x4f0 [ 60.039396][ T4335] io_queue_sqe_fallback+0xbb/0xc0 [ 60.039418][ T4335] io_submit_sqes+0xb8b/0x1000 [ 60.039473][ T4335] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 60.039513][ T4335] ? __rcu_read_unlock+0x4f/0x70 [ 60.039539][ T4335] ? get_pid_task+0x96/0xd0 [ 60.039559][ T4335] ? proc_fail_nth_write+0x12d/0x160 [ 60.039585][ T4335] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.039645][ T4335] ? vfs_write+0x75e/0x8d0 [ 60.039684][ T4335] ? __rcu_read_unlock+0x4f/0x70 [ 60.039709][ T4335] ? __fget_files+0x184/0x1c0 [ 60.039737][ T4335] ? fput+0x8f/0xc0 [ 60.039758][ T4335] __x64_sys_io_uring_enter+0x78/0x90 [ 60.039812][ T4335] x64_sys_call+0x28c8/0x2fb0 [ 60.039833][ T4335] do_syscall_64+0xd0/0x1a0 [ 60.039856][ T4335] ? clear_bhb_loop+0x25/0x80 [ 60.039880][ T4335] ? clear_bhb_loop+0x25/0x80 [ 60.039948][ T4335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.039973][ T4335] RIP: 0033:0x7f70d859e969 [ 60.039989][ T4335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.040009][ T4335] RSP: 002b:00007f70d6c07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 60.040031][ T4335] RAX: ffffffffffffffda RBX: 00007f70d87c5fa0 RCX: 00007f70d859e969 [ 60.040047][ T4335] RDX: 0000000000003900 RSI: 0000000000004ac9 RDI: 0000000000000006 [ 60.040121][ T4335] RBP: 00007f70d6c07090 R08: 0000000000000000 R09: 0000000000000000 [ 60.040137][ T4335] R10: 1800000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.040158][ T4335] R13: 0000000000000000 R14: 00007f70d87c5fa0 R15: 00007ffc99912c68 [ 60.040178][ T4335] [ 60.344292][ T29] audit: type=1400 audit(1747027532.066:835): avc: denied { map } for pid=4348 comm="syz.0.327" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.492393][ T4367] FAULT_INJECTION: forcing a failure. [ 60.492393][ T4367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.505673][ T4367] CPU: 0 UID: 0 PID: 4367 Comm: syz.1.335 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 60.505786][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.505802][ T4367] Call Trace: [ 60.505811][ T4367] [ 60.505821][ T4367] __dump_stack+0x1d/0x30 [ 60.505848][ T4367] dump_stack_lvl+0xe8/0x140 [ 60.505948][ T4367] dump_stack+0x15/0x1b [ 60.505965][ T4367] should_fail_ex+0x265/0x280 [ 60.506006][ T4367] should_fail+0xb/0x20 [ 60.506044][ T4367] should_fail_usercopy+0x1a/0x20 [ 60.506140][ T4367] _copy_to_user+0x20/0xa0 [ 60.506168][ T4367] __x64_sys_fstatfs+0xf3/0x140 [ 60.506225][ T4367] x64_sys_call+0x2a28/0x2fb0 [ 60.506324][ T4367] do_syscall_64+0xd0/0x1a0 [ 60.506357][ T4367] ? clear_bhb_loop+0x25/0x80 [ 60.506383][ T4367] ? clear_bhb_loop+0x25/0x80 [ 60.506409][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.506436][ T4367] RIP: 0033:0x7f7fc3d8e969 [ 60.506454][ T4367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.506543][ T4367] RSP: 002b:00007f7fc23f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 60.506565][ T4367] RAX: ffffffffffffffda RBX: 00007f7fc3fb5fa0 RCX: 00007f7fc3d8e969 [ 60.506577][ T4367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 60.506590][ T4367] RBP: 00007f7fc23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.506601][ T4367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.506699][ T4367] R13: 0000000000000000 R14: 00007f7fc3fb5fa0 R15: 00007ffc3931a898 [ 60.506724][ T4367] [ 60.695431][ T4366] FAULT_INJECTION: forcing a failure. [ 60.695431][ T4366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.709362][ T4366] CPU: 1 UID: 0 PID: 4366 Comm: syz.0.327 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 60.709391][ T4366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.709473][ T4366] Call Trace: [ 60.709483][ T4366] [ 60.709493][ T4366] __dump_stack+0x1d/0x30 [ 60.709521][ T4366] dump_stack_lvl+0xe8/0x140 [ 60.709547][ T4366] dump_stack+0x15/0x1b [ 60.709623][ T4366] should_fail_ex+0x265/0x280 [ 60.709657][ T4366] should_fail+0xb/0x20 [ 60.709695][ T4366] should_fail_usercopy+0x1a/0x20 [ 60.709748][ T4366] _copy_to_user+0x20/0xa0 [ 60.709770][ T4366] snd_seq_ioctl+0x223/0x2e0 [ 60.709805][ T4366] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 60.709858][ T4366] __se_sys_ioctl+0xcb/0x140 [ 60.709918][ T4366] __x64_sys_ioctl+0x43/0x50 [ 60.709943][ T4366] x64_sys_call+0x19a8/0x2fb0 [ 60.709965][ T4366] do_syscall_64+0xd0/0x1a0 [ 60.710043][ T4366] ? clear_bhb_loop+0x25/0x80 [ 60.710071][ T4366] ? clear_bhb_loop+0x25/0x80 [ 60.710108][ T4366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.710130][ T4366] RIP: 0033:0x7ff7300ce969 [ 60.710145][ T4366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.710166][ T4366] RSP: 002b:00007ff72e6f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.710187][ T4366] RAX: ffffffffffffffda RBX: 00007ff7302f6160 RCX: 00007ff7300ce969 [ 60.710199][ T4366] RDX: 0000000000000000 RSI: 0000000080045301 RDI: 0000000000000004 [ 60.710211][ T4366] RBP: 00007ff72e6f5090 R08: 0000000000000000 R09: 0000000000000000 [ 60.710228][ T4366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.710243][ T4366] R13: 0000000000000001 R14: 00007ff7302f6160 R15: 00007ffd3771a858 [ 60.710268][ T4366] [ 60.953315][ T4375] xt_hashlimit: max too large, truncated to 1048576 [ 60.967133][ T4382] FAULT_INJECTION: forcing a failure. [ 60.967133][ T4382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.970923][ T29] audit: type=1400 audit(1747027532.686:836): avc: denied { connect } for pid=4374 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 60.980461][ T4382] CPU: 0 UID: 0 PID: 4382 Comm: syz.4.340 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 60.980499][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 60.980516][ T4382] Call Trace: [ 60.980526][ T4382] [ 60.980602][ T4382] __dump_stack+0x1d/0x30 [ 60.980632][ T4382] dump_stack_lvl+0xe8/0x140 [ 60.980658][ T4382] dump_stack+0x15/0x1b [ 60.980681][ T4382] should_fail_ex+0x265/0x280 [ 60.980740][ T4382] should_fail+0xb/0x20 [ 60.980777][ T4382] should_fail_usercopy+0x1a/0x20 [ 60.980802][ T4382] _copy_from_user+0x1c/0xb0 [ 60.980831][ T4382] ___sys_sendmsg+0xc1/0x1d0 [ 60.980888][ T4382] __x64_sys_sendmsg+0xd4/0x160 [ 60.980980][ T4382] x64_sys_call+0x2999/0x2fb0 [ 60.981008][ T4382] do_syscall_64+0xd0/0x1a0 [ 60.981040][ T4382] ? clear_bhb_loop+0x25/0x80 [ 60.981069][ T4382] ? clear_bhb_loop+0x25/0x80 [ 60.981137][ T4382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.981166][ T4382] RIP: 0033:0x7f827416e969 [ 60.981186][ T4382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.981210][ T4382] RSP: 002b:00007f82727d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.981234][ T4382] RAX: ffffffffffffffda RBX: 00007f8274395fa0 RCX: 00007f827416e969 [ 60.981297][ T4382] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000005 [ 60.981313][ T4382] RBP: 00007f82727d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.981329][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.981345][ T4382] R13: 0000000000000000 R14: 00007f8274395fa0 R15: 00007ffce9582578 [ 60.981371][ T4382] [ 61.172700][ T29] audit: type=1400 audit(1747027532.686:837): avc: denied { name_connect } for pid=4374 comm="syz.0.339" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 61.210395][ T29] audit: type=1400 audit(1747027532.926:838): avc: denied { bind } for pid=4386 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.231206][ T4387] tipc: Failed to remove unknown binding: 66,1,1/0:4026821955/4026821957 [ 61.239700][ T4387] tipc: Failed to remove unknown binding: 66,1,1/0:4026821955/4026821957 [ 61.264388][ T4390] tipc: Failed to remove unknown binding: 66,1,1/0:3504327516/3504327518 [ 61.273303][ T4390] tipc: Failed to remove unknown binding: 66,1,1/0:3504327516/3504327518 [ 61.275566][ T4384] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 61.288390][ T4384] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 61.296257][ T4384] vhci_hcd vhci_hcd.0: Device attached [ 61.296262][ T29] audit: type=1400 audit(1747027532.946:839): avc: denied { setopt } for pid=4386 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.332165][ T29] audit: type=1400 audit(1747027533.056:840): avc: denied { bind } for pid=4392 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.351601][ T29] audit: type=1400 audit(1747027533.056:841): avc: denied { setopt } for pid=4392 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.378395][ T4395] IPVS: set_ctl: invalid protocol: 0 172.30.5.3:20001 [ 61.438247][ T4400] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 61.476141][ T4403] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 61.501034][ T1047] vhci_hcd: vhci_device speed not set [ 61.538822][ T4403] sd 0:0:1:0: device reset [ 61.561128][ T1047] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 61.620362][ T4409] IPVS: set_ctl: invalid protocol: 0 172.30.5.3:20001 [ 61.642726][ T4412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 61.704299][ T4421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 61.781131][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 61.804281][ T4421] 9pnet_fd: Insufficient options for proto=fd [ 61.872783][ T4429] 9pnet_fd: Insufficient options for proto=fd [ 61.895092][ T4436] IPVS: set_ctl: invalid protocol: 0 172.30.5.3:20001 [ 61.963534][ T4441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 61.973104][ T4431] 9pnet_fd: Insufficient options for proto=fd [ 62.035025][ T4448] IPv4: Oversized IP packet from 127.202.26.0 [ 62.052645][ T4449] IPVS: set_ctl: invalid protocol: 0 172.30.5.5:20001 [ 62.268243][ T3453] IPVS: starting estimator thread 0... [ 62.391050][ T4452] IPVS: using max 2352 ests per chain, 117600 per kthread [ 62.413685][ T4468] 9pnet_fd: Insufficient options for proto=fd [ 62.420031][ T4388] vhci_hcd: connection reset by peer [ 62.436280][ T392] vhci_hcd: stop threads [ 62.440673][ T392] vhci_hcd: release socket [ 62.445344][ T392] vhci_hcd: disconnect device [ 62.489919][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 62.525294][ T4477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 62.541366][ T4477] 9pnet_fd: Insufficient options for proto=fd [ 62.550925][ T4479] pimreg: entered allmulticast mode [ 62.562940][ T4481] smc: net device bond0 applied user defined pnetid SYZ2 [ 62.568815][ T4479] pimreg: left allmulticast mode [ 62.570571][ T4481] smc: net device bond0 erased user defined pnetid SYZ2 [ 62.612203][ T4483] IPVS: set_ctl: invalid protocol: 0 172.30.5.2:20001 [ 62.749887][ T4495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 62.819579][ T4499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.388'. [ 62.848915][ T4503] FAULT_INJECTION: forcing a failure. [ 62.848915][ T4503] name failslab, interval 1, probability 0, space 0, times 0 [ 62.862119][ T4503] CPU: 0 UID: 0 PID: 4503 Comm: syz.1.389 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 62.862147][ T4503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 62.862160][ T4503] Call Trace: [ 62.862167][ T4503] [ 62.862241][ T4503] __dump_stack+0x1d/0x30 [ 62.862263][ T4503] dump_stack_lvl+0xe8/0x140 [ 62.862284][ T4503] dump_stack+0x15/0x1b [ 62.862395][ T4503] should_fail_ex+0x265/0x280 [ 62.862432][ T4503] ? selinux_bpf_prog_load+0x36/0xf0 [ 62.862462][ T4503] should_failslab+0x8c/0xb0 [ 62.862512][ T4503] __kmalloc_cache_noprof+0x4c/0x320 [ 62.862540][ T4503] selinux_bpf_prog_load+0x36/0xf0 [ 62.862652][ T4503] security_bpf_prog_load+0x54/0xa0 [ 62.862681][ T4503] bpf_prog_load+0xe6b/0x1070 [ 62.862788][ T4503] ? security_bpf+0x2b/0x90 [ 62.862812][ T4503] __sys_bpf+0x51d/0x790 [ 62.862866][ T4503] __x64_sys_bpf+0x41/0x50 [ 62.862890][ T4503] x64_sys_call+0x2478/0x2fb0 [ 62.862909][ T4503] do_syscall_64+0xd0/0x1a0 [ 62.862929][ T4503] ? clear_bhb_loop+0x25/0x80 [ 62.862983][ T4503] ? clear_bhb_loop+0x25/0x80 [ 62.863003][ T4503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.863022][ T4503] RIP: 0033:0x7f7fc3d8e969 [ 62.863036][ T4503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.863052][ T4503] RSP: 002b:00007f7fc23f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 62.863149][ T4503] RAX: ffffffffffffffda RBX: 00007f7fc3fb5fa0 RCX: 00007f7fc3d8e969 [ 62.863160][ T4503] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 62.863171][ T4503] RBP: 00007f7fc23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 62.863182][ T4503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.863192][ T4503] R13: 0000000000000000 R14: 00007f7fc3fb5fa0 R15: 00007ffc3931a898 [ 62.863210][ T4503] [ 63.137003][ T4509] smc: net device bond0 applied user defined pnetid SYZ2 [ 63.182610][ T4516] pimreg: entered allmulticast mode [ 63.199552][ T4516] pimreg: left allmulticast mode [ 63.271680][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 63.313234][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.401'. [ 63.324709][ T4532] 9pnet_fd: Insufficient options for proto=fd [ 63.820047][ T4584] pimreg: entered allmulticast mode [ 63.826801][ T4584] pimreg: left allmulticast mode [ 63.877550][ T4592] smc: net device bond0 erased user defined pnetid SYZ2 [ 63.922562][ T4600] IPv4: Oversized IP packet from 127.202.26.0 [ 63.960374][ T4596] FAULT_INJECTION: forcing a failure. [ 63.960374][ T4596] name failslab, interval 1, probability 0, space 0, times 0 [ 63.973168][ T4596] CPU: 0 UID: 0 PID: 4596 Comm: syz.1.429 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 63.973313][ T4596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.973329][ T4596] Call Trace: [ 63.973337][ T4596] [ 63.973347][ T4596] __dump_stack+0x1d/0x30 [ 63.973374][ T4596] dump_stack_lvl+0xe8/0x140 [ 63.973399][ T4596] dump_stack+0x15/0x1b [ 63.973505][ T4596] should_fail_ex+0x265/0x280 [ 63.973552][ T4596] should_failslab+0x8c/0xb0 [ 63.973634][ T4596] kmem_cache_alloc_noprof+0x50/0x310 [ 63.973736][ T4596] ? flock_lock_inode+0x135/0xf60 [ 63.973763][ T4596] ? finish_task_switch+0xad/0x2b0 [ 63.973809][ T4596] flock_lock_inode+0x135/0xf60 [ 63.973833][ T4596] ? schedule+0x5f/0xd0 [ 63.973970][ T4596] locks_lock_inode_wait+0x6f/0x2a0 [ 63.973992][ T4596] ? __pfx_autoremove_wake_function+0x10/0x10 [ 63.974030][ T4596] __se_sys_flock+0x2f1/0x3b0 [ 63.974067][ T4596] __x64_sys_flock+0x31/0x40 [ 63.974136][ T4596] x64_sys_call+0x2eed/0x2fb0 [ 63.974164][ T4596] do_syscall_64+0xd0/0x1a0 [ 63.974191][ T4596] ? clear_bhb_loop+0x25/0x80 [ 63.974241][ T4596] ? clear_bhb_loop+0x25/0x80 [ 63.974269][ T4596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.974295][ T4596] RIP: 0033:0x7f7fc3d8e969 [ 63.974309][ T4596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.974325][ T4596] RSP: 002b:00007f7fc23f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 63.974421][ T4596] RAX: ffffffffffffffda RBX: 00007f7fc3fb5fa0 RCX: 00007f7fc3d8e969 [ 63.974437][ T4596] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000007 [ 63.974449][ T4596] RBP: 00007f7fc23f7090 R08: 0000000000000000 R09: 0000000000000000 [ 63.974462][ T4596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.974473][ T4596] R13: 0000000000000000 R14: 00007f7fc3fb5fa0 R15: 00007ffc3931a898 [ 63.974495][ T4596] [ 64.200664][ T4607] 9pnet_fd: Insufficient options for proto=fd [ 64.337242][ T4622] FAULT_INJECTION: forcing a failure. [ 64.337242][ T4622] name failslab, interval 1, probability 0, space 0, times 0 [ 64.350022][ T4622] CPU: 0 UID: 0 PID: 4622 Comm: syz.0.440 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 64.350055][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 64.350070][ T4622] Call Trace: [ 64.350078][ T4622] [ 64.350087][ T4622] __dump_stack+0x1d/0x30 [ 64.350111][ T4622] dump_stack_lvl+0xe8/0x140 [ 64.350176][ T4622] dump_stack+0x15/0x1b [ 64.350261][ T4622] should_fail_ex+0x265/0x280 [ 64.350298][ T4622] should_failslab+0x8c/0xb0 [ 64.350385][ T4622] kmem_cache_alloc_noprof+0x50/0x310 [ 64.350428][ T4622] ? audit_log_start+0x365/0x6c0 [ 64.350543][ T4622] audit_log_start+0x365/0x6c0 [ 64.350580][ T4622] ? __sigqueue_free+0xf4/0x130 [ 64.350613][ T4622] ? kmem_cache_free+0xdd/0x2f0 [ 64.350639][ T4622] audit_seccomp+0x48/0x100 [ 64.350735][ T4622] ? __seccomp_filter+0x68c/0x10d0 [ 64.350762][ T4622] __seccomp_filter+0x69d/0x10d0 [ 64.350794][ T4622] ? should_fail_ex+0xdb/0x280 [ 64.350834][ T4622] ? 0xffffffffff600000 [ 64.350894][ T4622] __secure_computing+0x82/0x150 [ 64.350918][ T4622] ? 0xffffffffff600000 [ 64.350933][ T4622] emulate_vsyscall+0x95b/0xa00 [ 64.350958][ T4622] ? 0xffffffffff600000 [ 64.350971][ T4622] ? 0xffffffffff600000 [ 64.351013][ T4622] do_user_addr_fault+0x1e0/0x1090 [ 64.351058][ T4622] ? 0xffffffffff600000 [ 64.351075][ T4622] exc_page_fault+0x54/0xc0 [ 64.351123][ T4622] asm_exc_page_fault+0x26/0x30 [ 64.351144][ T4622] RIP: 0033:_end+0x765da000/0x0 [ 64.351197][ T4622] Code: Unable to access opcode bytes at 0xffffffffff5fffd6. [ 64.351206][ T4622] RSP: 002b:00007ff72e736a78 EFLAGS: 00010246 ORIG_RAX: 0000000000000060 [ 64.351241][ T4622] RAX: ffffffffffffffda RBX: 00007ff7302f5fa0 RCX: 00007ff7300ce969 [ 64.351302][ T4622] RDX: 00007ff72e736a80 RSI: 00007ff72e736bb0 RDI: 0000000000000019 [ 64.351314][ T4622] RBP: 00007ff72e737090 R08: 0000000000000000 R09: 0000000000000000 [ 64.351343][ T4622] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 64.351355][ T4622] R13: 0000000000000000 R14: 00007ff7302f5fa0 R15: 00007ffd3771a858 [ 64.351374][ T4622] [ 64.555752][ T4622] audit_log_lost: 116 callbacks suppressed [ 64.555769][ T4622] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 64.569798][ T4622] audit: out of memory in audit_log_start [ 64.581504][ T4627] smc: net device bond0 applied user defined pnetid SYZ2 [ 64.586860][ T4631] pimreg: entered allmulticast mode [ 64.594920][ T4631] pimreg: left allmulticast mode [ 64.604555][ T29] audit: type=1326 audit(1747027536.326:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff7300cd37c code=0x7ffc0000 [ 64.605328][ T4627] smc: net device bond0 erased user defined pnetid SYZ2 [ 64.650816][ T29] audit: type=1326 audit(1747027536.326:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff7300cd41f code=0x7ffc0000 [ 64.674027][ T29] audit: type=1326 audit(1747027536.326:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff7300cd5ca code=0x7ffc0000 [ 64.697288][ T29] audit: type=1326 audit(1747027536.326:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7300ce969 code=0x7ffc0000 [ 64.721428][ T29] audit: type=1326 audit(1747027536.326:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7300ce969 code=0x7ffc0000 [ 64.744957][ T29] audit: type=1326 audit(1747027536.366:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7300ce969 code=0x7ffc0000 [ 64.768765][ T29] audit: type=1326 audit(1747027536.366:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7300ce969 code=0x7ffc0000 [ 64.792533][ T29] audit: type=1326 audit(1747027536.366:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7300ce969 code=0x7ffc0000 [ 64.863838][ T4643] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 64.996333][ T4638] bond1: entered promiscuous mode [ 65.003854][ T4638] bond1: entered allmulticast mode [ 65.017258][ T4638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.164034][ T4661] netlink: 'syz.3.453': attribute type 32 has an invalid length. [ 65.528889][ T4705] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.565924][ T4705] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.591619][ T4711] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 65.770833][ T4725] smc: net device bond0 applied user defined pnetid SYZ2 [ 65.778214][ T4725] smc: net device bond0 erased user defined pnetid SYZ2 [ 65.846050][ T4728] IPVS: set_ctl: invalid protocol: 0 172.30.5.4:20001 [ 65.914734][ T4734] pim6reg1: entered promiscuous mode [ 65.920254][ T4734] pim6reg1: entered allmulticast mode [ 65.991707][ T4735] ================================================================== [ 65.999864][ T4735] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 66.008292][ T4735] [ 66.010628][ T4735] write to 0xffff8881195c63d4 of 4 bytes by task 4731 on cpu 1: [ 66.018285][ T4735] inode_update_timestamps+0x147/0x270 [ 66.023780][ T4735] file_update_time+0x20e/0x2b0 [ 66.028663][ T4735] shmem_file_write_iter+0x9c/0xf0 [ 66.033811][ T4735] iter_file_splice_write+0x5ef/0x970 [ 66.039210][ T4735] direct_splice_actor+0x153/0x2a0 [ 66.044349][ T4735] splice_direct_to_actor+0x30f/0x680 [ 66.049749][ T4735] do_splice_direct+0xda/0x150 [ 66.054539][ T4735] do_sendfile+0x380/0x640 [ 66.058991][ T4735] __x64_sys_sendfile64+0x105/0x150 [ 66.064234][ T4735] x64_sys_call+0xb39/0x2fb0 [ 66.068845][ T4735] do_syscall_64+0xd0/0x1a0 [ 66.073370][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.079280][ T4735] [ 66.081609][ T4735] read to 0xffff8881195c63d4 of 4 bytes by task 4735 on cpu 0: [ 66.089166][ T4735] atime_needs_update+0x2a8/0x3e0 [ 66.094310][ T4735] touch_atime+0x4a/0x330 [ 66.098667][ T4735] shmem_file_splice_read+0x582/0x5d0 [ 66.104101][ T4735] splice_direct_to_actor+0x26c/0x680 [ 66.110025][ T4735] do_splice_direct+0xda/0x150 [ 66.114813][ T4735] do_sendfile+0x380/0x640 [ 66.119323][ T4735] __x64_sys_sendfile64+0x105/0x150 [ 66.124556][ T4735] x64_sys_call+0xb39/0x2fb0 [ 66.129163][ T4735] do_syscall_64+0xd0/0x1a0 [ 66.133687][ T4735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.139596][ T4735] [ 66.141922][ T4735] value changed: 0x2a1e09fa -> 0x2ab6a07a [ 66.147645][ T4735] [ 66.149977][ T4735] Reported by Kernel Concurrency Sanitizer on: [ 66.156139][ T4735] CPU: 0 UID: 0 PID: 4735 Comm: syz.2.473 Not tainted 6.15.0-rc5-syzkaller-00353-gcd802e7e5f1e #0 PREEMPT(voluntary) [ 66.168481][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 66.178572][ T4735] ================================================================== [ 66.211302][ T4740] program syz.2.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.248679][ T4740] 9pnet_fd: Insufficient options for proto=fd [ 66.633227][ T1047] usb 7-1: enqueue for inactive port 0 [ 66.638809][ T1047] usb 7-1: enqueue for inactive port 0 [ 66.711193][ T1047] vhci_hcd: vhci_device speed not set