last executing test programs: 2.930612223s ago: executing program 2 (id=4370): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f0000000500)={[{@errors_remount}, {@resuid}, {@inode_readahead_blks}, {@oldalloc}]}, 0x1, 0x50d, &(0x7f0000001bc0)="$eJzs3c9vI1cdAPDveGPHyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPSFx5ILgxqUckPgRgRokDkYzHqdO1t5NyQ+n8ecjzc5787z+vrfZeS/+JvYLYGzdioj9iChFxNsRMZtfT/Ij3uge6eM+Oni4cnjwcCWJTuetfyRZe3ot+v5O6mb+nOWI+N63In6YPBq3tbu3sVyv17bz+ny7sTXf2t27u95YXqut1Tar1aXFpYXX7r1aPbexvtAo5aUvfvj7/a/9OO3WTH6lfxznqTv04lGc1EREfOcigo3AjXw8pVF3hP9LISKejYgXs/t/Nm5kX00A4DrrdGajM9tfP5IcrwIA10Uhy4ElhUqeC5iJQqFS6ebwnovpQr3Zat950NzZXO3myuaiWHiwXq8t5LnCuSgmaX0xK39cr56o34uIZyLiZ5NTWb2y0qyvjvIbHwAYYzdPrP//nuyu/wDANVcedQcAgEtn/QeA8WP9B4DxY/0HgPHTXf+nRt0NAOASef0PAOPH+g8AY+W7b76ZHp3D/POvV9/Z3dlovnN3tdbaqDR2Viorze2tylqzuZZ9Zk/jSc9Xbza3Fl+JnXfnvr7Vas+3dvfuN5o7m+372ed6368Vs0ftX8LIAIBhnnnhgz8l6Yr8+lR2RN9eDsWR9gy4aIVRdwAYmRuj7gAwMnb7gvF1htf4xYifShHAp9rvsj8HbNF7THnQG4Q6nU7noroFXLjbn5P/h3HVl//3W8AwZuT/YXzJ/8P46nSS027yH6d9IABwtcnxA0N+/v9sfv51/sOBH6yefMT7F9krAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNp6+/9W8r3AZ6JQqFQinoqIuSgmD9brtYWIeDoi/jhZnEzriyPuMwBwVoW/Jvn+X7dnX5451vT8zaNiKSJ+9Iu3fv7ucru9/YeIUvLPyd719vv59eonClw6rxEAAI/XW6ezc98L+Y8OHq70jsvsz9++GRHlbvzDg1IcHsWfiInsXI5iREz/K8nrXUlf7uIs9t+LiM8OGn8SM1kOpLvz6cn4aeynLjV+4Vj8QtbWPaf/Fp85h77AuPkgnX/eGHT/FeJWdh58/5ezGers8vkvfaqVw2wO/Dh+b/67MWT+u3XaGK/89tvd0tSjbe9FfH4iohf7sG/+6cVPhsR/+ZTx//yF518c1tb5ZcTtGBy/P9Z8u7E139rdu7veWF6rrdU2q9WlxaWF1+69Wp3PctTzw1eDv79+5+lhben4p4fELz9h/F8+5fh/9d+3v/+lx8T/6kuD4hfiucfET9fEr5wy/vL0b8rD2tL4q0PG/6Sv/51Txv/wL3uPbBsOAIxOa3dvY7ler20rKFz9Qvpf9gp0Y2DhG5cVqxSDm37yUveePtHU+97/E8YaNmOcR9YNuAqObvqI+M+oOwMAAAAAAAAAAAAAAAx0Ge9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL7+FwAA//87osfs") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7}, @sack_perm, @mss, @window={0x3, 0x0, 0x401}, @window, @window={0x3, 0x1, 0x9f}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000006080)="14c5d1f6c3148a57e23ce07c6c8c5ffadc916acd01ac0a8e1a466e991d455cbeb6c96d9b9fc84f13715cd669a50e2e41111ee49a675f711bcd6b0c6c60e9d28271036ac42796e217e6204a7dec54aa7ab93c81fe8e1cd870e1c3df8aa87de9af9b62c0434cba81bffed404000000bd47fc8bf91b880539dfa99ebd09198b306e858a097b01d1d89f4c05ca16b8d2d5aec4a6cdfbd4a6cb693d6bc679de62552cd0dc6d0427a89902a5f426e277e930e655e88d25e58ce2eb8fd9deb4516c310c0778530ccfbbc43f826e62452411ba1b9dd30193c2", 0xffffffffffffffce, 0xb, 0x0, 0x37) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$loop(0x0, 0x8, 0x103280) 1.898151998s ago: executing program 2 (id=4391): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) inotify_init() r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffd}, 0x18) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.845991323s ago: executing program 2 (id=4394): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.818729896s ago: executing program 2 (id=4396): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0xf62e263c45906b22, &(0x7f00000006c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000060002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 1.67549587s ago: executing program 3 (id=4404): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="be00000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.521455756s ago: executing program 3 (id=4411): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) 1.47832946s ago: executing program 3 (id=4415): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x793ab29f, 0x2000000000000000}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) acct(0x0) 1.457167232s ago: executing program 3 (id=4416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000440), r4) 1.114093177s ago: executing program 0 (id=4441): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="be00000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.050529754s ago: executing program 1 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.050123884s ago: executing program 1 (id=4446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200001, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.019877577s ago: executing program 1 (id=4447): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x8b2b9052, @private0}, @in={0x2, 0x4e20, @loopback}], 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'vlan1\x00', {0x2, 0x4e20, @multicast2}}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRES16=r5, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES64=r6, @ANYRESHEX=r6, @ANYRESOCT=r4, @ANYRES8, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f00008aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010000000"], 0x10b8}, 0x106) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffd40}, 0x100) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c4}, 0x10890) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x30, 0x4, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 987.27645ms ago: executing program 0 (id=4448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e24, 0x2, @remote, 0x2ef}}, 0xc2, 0x1, 0x200, 0x59c, 0x10001}, &(0x7f00000006c0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000008c0)={r4, @in={{0x2, 0x4e20, @empty}}, 0x80, 0x4, 0x4, 0x8001, 0x400}, &(0x7f0000000700)=0x98) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x304, r8, 0x1, 0x709d27, 0x25dfdc03, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2dc, 0x8, 0x0, 0x1, [{0x2d8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7540}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x2a8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x304}, 0x1, 0x0, 0x0, 0xc004811}, 0x24004084) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x1) 888.19868ms ago: executing program 4 (id=4450): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 861.885773ms ago: executing program 4 (id=4451): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x793ab29f, 0x2000000000000000}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) acct(0x0) 856.469783ms ago: executing program 2 (id=4452): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x793ab29f, 0x2000000000000000}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) acct(0x0) 818.767307ms ago: executing program 4 (id=4453): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x3a00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 812.625818ms ago: executing program 2 (id=4454): syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x35, &(0x7f0000000000)="8546453378467d8581da2b0fb1384deee60be5b237aaf813c0d17da3c60d1a20974602fbb2c49d9fc74503b5de2c220e0538477b67") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0) 321.522758ms ago: executing program 3 (id=4455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 265.693273ms ago: executing program 1 (id=4456): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) listen(r0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0xa1c406, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74730000f5ff522c246d6173a594e5e0ee30303030010000000000400017c3d234e02f30303030302c6e6f646f742c6e66733d6e0973", @ANYRES16, @ANYRESDEC], 0x1, 0x2a0, &(0x7f0000001400)="$eJzs3M9r02AYwPFnydZ0k/04CXrxQS96CbMe1UOVDcSC0q2iHoSMZVpW25EUbUUwZ0/7O4ZHb4L4D+y/8DYE2WknI22zNOu633Wt3fcDI8/b5323p33JeLKRbD1ff7u64tsrTlWMtIohEsiOyIwUZddIdEw141T8utzPSCC3Zt9tf1548fJxNpeby6vOZxfvZFR16tr39x+/XP9RvfTs65RlyebMq63fmZ+blzevbP1ZfFP0tZiScqWqji5VKlVnqeTqctFftVWfllzHd7VY9l1vT36lVFlbq6tTXp6cWPNc31enXFdD6lqtaDqqqqy2bevkRCNOywWSOvGKwkY+72Tb4zmztxVhEHhe1mls7Pi+s6Gw0Z+KAABAPx3c/xvxnN3+3+js/0WO6P8/RbOmvnXt/309ff9viuf6u0U0+/+qV1fntVNM9v84VGf/fzzGvykGZzESJAYP9qQ8LzvefRH9PwAAAAAAAAAAAAAAAAAAAAAA/4OdMJwOw3C6cTREJIzGloiYiXGXpRfq3vphldz/MPFlRRt8yP5jCCRu3EuL/ApqhVphpHls5ecf5eZmtSlx4992rVYw4/ztVl735sdkIspnuuZTcvNGK9/IPXySS+bXa4VxWT608qBXHwEAAAAAAEPP1thM/GJa4ut721ZLOvPN6/dWFLT/PqDtRwM18qNydfQ83wkAAAAAADiIX/+w6pRKrnc+gXmOP+vUgcjplt8NrZ6UYYrIEXPyCyL9/6D2BZYMRBnDHNzr1Tc0278BxqKw4ywAAAAAMFza1wMnX8u/9wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I0zPUXMON7kfr9HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFD8DQAA///mXbd/") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x0, 0x2f9}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r2, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x1e61, 0x1d64, 0x1, 0x0, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x0, 0x0) 260.879854ms ago: executing program 3 (id=4457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9fad00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@usrjquota}, {@bh}, {@nodioread_nolock}]}, 0x11, 0x59c, &(0x7f0000001840)="$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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 259.496164ms ago: executing program 4 (id=4458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000051}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 186.253001ms ago: executing program 4 (id=4459): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="be00000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 122.302728ms ago: executing program 4 (id=4460): syz_open_dev$usbmon(0x0, 0x6, 0x20000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x3a664c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x4, 0x26b}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 105.32102ms ago: executing program 0 (id=4461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) inotify_init() r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000380)=0x4) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0xfffd}, 0x18) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 43.195186ms ago: executing program 1 (id=4462): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) 42.724946ms ago: executing program 1 (id=4463): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0xf62e263c45906b22, &(0x7f00000006c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000060002"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) 38.545936ms ago: executing program 0 (id=4464): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x793ab29f, 0x2000000000000000}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1e4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) acct(0x0) 18.107498ms ago: executing program 0 (id=4465): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200001, 0x0, 0x6, 0x7, 0xb}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 0s ago: executing program 0 (id=4466): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): mode [ 191.054923][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.201497][ T7425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.211394][ T7425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.220825][ T7425] bond0 (unregistering): Released all slaves [ 191.229063][ T7425] bond1 (unregistering): Released all slaves [ 191.237338][ T7425] bond2 (unregistering): Released all slaves [ 191.245489][ T7425] bond3 (unregistering): Released all slaves [ 191.257794][T12385] veth1_vlan: entered promiscuous mode [ 191.273945][T12385] veth0_macvtap: entered promiscuous mode [ 191.290409][T12385] veth1_macvtap: entered promiscuous mode [ 191.312174][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.323297][ T7425] hsr_slave_0: left promiscuous mode [ 191.323972][T12496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3298'. [ 191.337716][ T7425] hsr_slave_1: left promiscuous mode [ 191.339657][T12496] netlink: 'syz.4.3298': attribute type 10 has an invalid length. [ 191.345205][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.350815][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3298'. [ 191.367177][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.374795][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.382191][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.390453][ T7425] veth1_macvtap: left promiscuous mode [ 191.395916][ T7425] veth0_macvtap: left promiscuous mode [ 191.401527][ T7425] veth1_vlan: left promiscuous mode [ 191.406830][ T7425] veth0_vlan: left promiscuous mode [ 191.461498][ T7425] team0 (unregistering): Port device team_slave_1 removed [ 191.494496][ T2112] smc: removing ib device syz1 [ 191.504045][ T1041] vcan0 speed is unknown, defaulting to 1000 [ 191.506296][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.510144][ T1041] syz1: Port: 1 Link DOWN [ 191.552839][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.578605][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.606850][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.624626][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.664433][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.682319][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.699053][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.721215][T12515] loop2: detected capacity change from 0 to 512 [ 191.727811][T12515] EXT4-fs: Ignoring removed oldalloc option [ 191.727916][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.777015][T12515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.800685][T12515] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.828076][T12531] lo speed is unknown, defaulting to 1000 [ 191.902798][T12536] vlan0: entered allmulticast mode [ 192.142957][T12548] 0ªX¹¦À: renamed from caif0 [ 192.177532][T12548] 0ªX¹¦À: entered allmulticast mode [ 192.182875][T12548] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 192.515684][T12589] xt_CT: No such helper "pptp" [ 192.573233][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.593119][T12601] FAULT_INJECTION: forcing a failure. [ 192.593119][T12601] name failslab, interval 1, probability 0, space 0, times 0 [ 192.593151][T12601] CPU: 0 UID: 0 PID: 12601 Comm: syz.1.3341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.593201][T12601] Tainted: [W]=WARN [ 192.593208][T12601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.593218][T12601] Call Trace: [ 192.593224][T12601] [ 192.593231][T12601] __dump_stack+0x1d/0x30 [ 192.593254][T12601] dump_stack_lvl+0x95/0xd0 [ 192.593346][T12601] dump_stack+0x15/0x1b [ 192.593365][T12601] should_fail_ex+0x265/0x280 [ 192.593388][T12601] should_failslab+0x8c/0xb0 [ 192.593407][T12601] kmem_cache_alloc_noprof+0x69/0x4b0 [ 192.593477][T12601] ? getname_flags+0x80/0x3b0 [ 192.593547][T12601] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 192.593563][T12601] getname_flags+0x80/0x3b0 [ 192.593582][T12601] user_path_at+0x28/0x130 [ 192.593658][T12601] do_utimes+0xd9/0x210 [ 192.593678][T12601] __x64_sys_utimensat+0xc4/0x170 [ 192.593697][T12601] ? trace_sys_enter+0xd0/0xf0 [ 192.593762][T12601] ? syscall_trace_enter+0x102/0x1e0 [ 192.593842][T12601] x64_sys_call+0x278c/0x3000 [ 192.593921][T12601] do_syscall_64+0xca/0x2b0 [ 192.593949][T12601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.593975][T12601] RIP: 0033:0x7fda563bf749 [ 192.593988][T12601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.594010][T12601] RSP: 002b:00007fda54e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 192.594026][T12601] RAX: ffffffffffffffda RBX: 00007fda56615fa0 RCX: 00007fda563bf749 [ 192.594037][T12601] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 192.594048][T12601] RBP: 00007fda54e27090 R08: 0000000000000000 R09: 0000000000000000 [ 192.594059][T12601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.594069][T12601] R13: 00007fda56616038 R14: 00007fda56615fa0 R15: 00007ffe4aecfb08 [ 192.594153][T12601] [ 192.645762][T12607] warn_alloc: 1 callbacks suppressed [ 192.645781][T12607] ÿ: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 192.645864][T12607] CPU: 0 UID: 0 PID: 12607 Comm: ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.645889][T12607] Tainted: [W]=WARN [ 192.645895][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.645906][T12607] Call Trace: [ 192.645913][T12607] [ 192.645960][T12607] __dump_stack+0x1d/0x30 [ 192.645981][T12607] dump_stack_lvl+0x95/0xd0 [ 192.646107][T12607] dump_stack+0x15/0x1b [ 192.646123][T12607] warn_alloc+0x12b/0x1a0 [ 192.646164][T12607] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 192.646197][T12607] ? strncpy_from_user+0x111/0x260 [ 192.646225][T12607] __vmalloc_node_range_noprof+0xa0/0x1310 [ 192.646263][T12607] ? strncpy_from_user+0x221/0x260 [ 192.646356][T12607] ? strncpy_from_user_nofault+0xa7/0xf0 [ 192.646385][T12607] ? __rcu_read_unlock+0x4f/0x70 [ 192.646419][T12607] ? avc_has_perm_noaudit+0xab/0x130 [ 192.646523][T12607] ? should_fail_ex+0x30/0x280 [ 192.646546][T12607] ? should_failslab+0x8c/0xb0 [ 192.646570][T12607] vmalloc_user_noprof+0x7d/0xb0 [ 192.646617][T12607] ? xskq_create+0x80/0xe0 [ 192.646634][T12607] xskq_create+0x80/0xe0 [ 192.646650][T12607] xsk_init_queue+0x95/0xf0 [ 192.646679][T12607] xsk_setsockopt+0x3f5/0x640 [ 192.646711][T12607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.646782][T12607] __sys_setsockopt+0x184/0x200 [ 192.646809][T12607] __x64_sys_setsockopt+0x64/0x80 [ 192.646835][T12607] x64_sys_call+0x21d5/0x3000 [ 192.646902][T12607] do_syscall_64+0xca/0x2b0 [ 192.646931][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.646949][T12607] RIP: 0033:0x7fa7b938f749 [ 192.646962][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.646981][T12607] RSP: 002b:00007fa7b7df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.647077][T12607] RAX: ffffffffffffffda RBX: 00007fa7b95e5fa0 RCX: 00007fa7b938f749 [ 192.647088][T12607] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 192.647100][T12607] RBP: 00007fa7b9413f91 R08: 0000000000000004 R09: 0000000000000000 [ 192.647114][T12607] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.647128][T12607] R13: 00007fa7b95e6038 R14: 00007fa7b95e5fa0 R15: 00007ffd0cbf6508 [ 192.647146][T12607] [ 192.647152][T12607] Mem-Info: [ 192.647201][T12607] active_anon:8527 inactive_anon:4 isolated_anon:0 [ 192.647201][T12607] active_file:23330 inactive_file:2588 isolated_file:0 [ 192.647201][T12607] unevictable:0 dirty:642 writeback:0 [ 192.647201][T12607] slab_reclaimable:3474 slab_unreclaimable:30505 [ 192.647201][T12607] mapped:29709 shmem:4290 pagetables:1157 [ 192.647201][T12607] sec_pagetables:0 bounce:0 [ 192.647201][T12607] kernel_misc_reclaimable:0 [ 192.647201][T12607] free:1852448 free_pcp:7017 free_cma:0 [ 192.647264][T12607] Node 0 active_anon:34108kB inactive_anon:16kB active_file:93320kB inactive_file:10352kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118836kB dirty:2568kB writeback:0kB shmem:17160kB kernel_stack:4576kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.647316][T12607] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.647383][T12607] lowmem_reserve[]: 0 2880 7859 7859 [ 192.647450][T12607] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 192.647553][T12607] lowmem_reserve[]: 0 0 4978 4978 [ 192.647581][T12607] Node 0 Normal free:4448544kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34108kB inactive_anon:16kB active_file:93320kB inactive_file:10352kB unevictable:0kB writepending:2568kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24432kB local_pcp:15788kB free_cma:0kB [ 192.647654][T12607] lowmem_reserve[]: 0 0 0 0 [ 192.647695][T12607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.647886][T12607] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 192.648297][T12607] Node 0 Normal: 2259*4kB (UME) 2126*8kB (UME) 1005*16kB (UME) 680*32kB (UME) 513*64kB (UME) 245*128kB (UME) 219*256kB (UM) 121*512kB (UM) 84*1024kB (UME) 62*2048kB (UM) 974*4096kB (UM) = 4448588kB [ 192.648524][T12607] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 192.648540][T12607] 30205 total pagecache pages [ 192.648548][T12607] 5 pages in swap cache [ 192.648555][T12607] Free swap = 124976kB [ 192.648563][T12607] Total swap = 124996kB [ 192.648570][T12607] 2097051 pages RAM [ 192.648575][T12607] 0 pages HighMem/MovableOnly [ 192.648582][T12607] 81271 pages reserved [ 192.708487][T12616] lo speed is unknown, defaulting to 1000 [ 193.382234][T12617] lo speed is unknown, defaulting to 1000 [ 193.399567][T12603] siw: device registration error -23 [ 193.400200][T12625] siw: device registration error -23 [ 193.605293][T12653] vlan0: entered allmulticast mode [ 193.691908][T12657] netlink: 'syz.1.3360': attribute type 39 has an invalid length. [ 193.723481][T12660] __nla_validate_parse: 12 callbacks suppressed [ 193.723516][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 193.884625][T12673] Cannot find add_set index 0 as target [ 193.902847][T12673] netlink: 'syz.0.3368': attribute type 21 has an invalid length. [ 193.951699][T12677] vlan2: entered allmulticast mode [ 194.028928][T12687] vlan0: entered allmulticast mode [ 194.092269][T12697] futex_wake_op: syz.4.3378 tries to shift op by -65; fix this program [ 194.122908][T12697] futex_wake_op: syz.4.3378 tries to shift op by -65; fix this program [ 194.141617][T12702] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 194.144857][T12697] futex_wake_op: syz.4.3378 tries to shift op by -65; fix this program [ 194.150091][T12702] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 194.159061][T12702] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 194.180635][T12697] futex_wake_op: syz.4.3378 tries to shift op by -65; fix this program [ 194.189799][T12702] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 194.198332][T12702] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 194.233820][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3383'. [ 194.368565][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 194.414383][T12724] xt_CT: No such helper "pptp" [ 194.470703][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3393'. [ 194.534645][T12739] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 194.545735][T12739] bond1 (unregistering): Released all slaves [ 194.570009][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 194.570022][ T29] audit: type=1400 audit(1768112737.512:15825): avc: denied { write } for pid=12735 comm="syz.3.3395" name="file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.598764][ T29] audit: type=1400 audit(1768112737.512:15826): avc: denied { open } for pid=12735 comm="syz.3.3395" path="/102/file0" dev="tmpfs" ino=552 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.628529][ T29] audit: type=1400 audit(1768112737.512:15827): avc: denied { ioctl } for pid=12735 comm="syz.3.3395" path="/102/file0" dev="tmpfs" ino=552 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 194.698004][T12749] FAULT_INJECTION: forcing a failure. [ 194.698004][T12749] name failslab, interval 1, probability 0, space 0, times 0 [ 194.710854][T12749] CPU: 1 UID: 0 PID: 12749 Comm: syz.1.3399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.710881][T12749] Tainted: [W]=WARN [ 194.710887][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.710898][T12749] Call Trace: [ 194.710904][T12749] [ 194.710912][T12749] __dump_stack+0x1d/0x30 [ 194.711013][T12749] dump_stack_lvl+0x95/0xd0 [ 194.711041][T12749] dump_stack+0x15/0x1b [ 194.711070][T12749] should_fail_ex+0x265/0x280 [ 194.711096][T12749] should_failslab+0x8c/0xb0 [ 194.711126][T12749] kmem_cache_alloc_noprof+0x69/0x4b0 [ 194.711145][T12749] ? copy_sighand+0x52/0x1b0 [ 194.711257][T12749] copy_sighand+0x52/0x1b0 [ 194.711274][T12749] copy_process+0xc67/0x1ef0 [ 194.711317][T12749] kernel_clone+0x16c/0x5c0 [ 194.711340][T12749] ? vfs_write+0x7e8/0x960 [ 194.711360][T12749] __x64_sys_clone+0xe6/0x120 [ 194.711390][T12749] x64_sys_call+0x12d0/0x3000 [ 194.711494][T12749] do_syscall_64+0xca/0x2b0 [ 194.711531][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.711584][T12749] RIP: 0033:0x7fda563bf749 [ 194.711598][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.711620][T12749] RSP: 002b:00007fda54e26fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 194.711642][T12749] RAX: ffffffffffffffda RBX: 00007fda56615fa0 RCX: 00007fda563bf749 [ 194.711681][T12749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 194.711695][T12749] RBP: 00007fda54e27090 R08: 0000000000000000 R09: 0000000000000000 [ 194.711781][T12749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 194.711791][T12749] R13: 00007fda56616038 R14: 00007fda56615fa0 R15: 00007ffe4aecfb08 [ 194.711817][T12749] [ 194.966344][ T29] audit: type=1326 audit(1768112737.902:15828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 194.990099][ T29] audit: type=1326 audit(1768112737.902:15829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.013728][ T29] audit: type=1326 audit(1768112737.902:15830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.037358][ T29] audit: type=1326 audit(1768112737.902:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.060981][ T29] audit: type=1326 audit(1768112737.902:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.069249][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3405'. [ 195.084561][ T29] audit: type=1326 audit(1768112737.902:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.116976][ T29] audit: type=1326 audit(1768112737.902:15834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12758 comm="syz.4.3403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 195.550830][T12804] netlink: 'syz.1.3423': attribute type 39 has an invalid length. [ 195.644040][T12815] netlink: 'syz.4.3427': attribute type 15 has an invalid length. [ 195.730965][T12819] FAULT_INJECTION: forcing a failure. [ 195.730965][T12819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.744047][T12819] CPU: 0 UID: 0 PID: 12819 Comm: syz.2.3428 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.744078][T12819] Tainted: [W]=WARN [ 195.744083][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.744135][T12819] Call Trace: [ 195.744142][T12819] [ 195.744148][T12819] __dump_stack+0x1d/0x30 [ 195.744165][T12819] dump_stack_lvl+0x95/0xd0 [ 195.744184][T12819] dump_stack+0x15/0x1b [ 195.744202][T12819] should_fail_ex+0x265/0x280 [ 195.744226][T12819] should_fail+0xb/0x20 [ 195.744251][T12819] should_fail_usercopy+0x1a/0x20 [ 195.744299][T12819] _copy_from_user+0x1c/0xb0 [ 195.744313][T12819] vt_ioctl+0x98f/0x18a0 [ 195.744331][T12819] tty_ioctl+0x7d8/0xb80 [ 195.744342][T12819] ? __pfx_tty_ioctl+0x10/0x10 [ 195.744427][T12819] __se_sys_ioctl+0xce/0x140 [ 195.744443][T12819] __x64_sys_ioctl+0x43/0x50 [ 195.744458][T12819] x64_sys_call+0x14b0/0x3000 [ 195.744471][T12819] do_syscall_64+0xca/0x2b0 [ 195.744505][T12819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.744516][T12819] RIP: 0033:0x7fa7b938f749 [ 195.744526][T12819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.744649][T12819] RSP: 002b:00007fa7b7df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.744661][T12819] RAX: ffffffffffffffda RBX: 00007fa7b95e5fa0 RCX: 00007fa7b938f749 [ 195.744669][T12819] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000006 [ 195.744676][T12819] RBP: 00007fa7b7df7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.744683][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.744690][T12819] R13: 00007fa7b95e6038 R14: 00007fa7b95e5fa0 R15: 00007ffd0cbf6508 [ 195.744701][T12819] [ 195.856115][T12821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.188484][T12850] Cannot find add_set index 0 as target [ 196.747139][T12874] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.913765][T12905] siw: device registration error -23 [ 196.938824][T12908] netlink: 'syz.1.3463': attribute type 15 has an invalid length. [ 197.036534][T12912] siw: device registration error -23 [ 197.070264][T12918] siw: device registration error -23 [ 197.289128][T12924] lo speed is unknown, defaulting to 1000 [ 197.342270][T12937] lo speed is unknown, defaulting to 1000 [ 197.513280][T12924] chnl_net:caif_netlink_parms(): no params data found [ 197.567703][T12924] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.574849][T12924] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.582048][T12924] bridge_slave_0: entered allmulticast mode [ 197.588576][T12924] bridge_slave_0: entered promiscuous mode [ 197.595419][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.602591][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.612543][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.619679][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.626977][T12924] bridge_slave_1: entered allmulticast mode [ 197.633570][T12924] bridge_slave_1: entered promiscuous mode [ 197.647019][T12953] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12953 comm=syz.4.3474 [ 197.663587][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.674239][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.695410][T12924] team0: Port device team_slave_0 added [ 197.701947][T12924] team0: Port device team_slave_1 added [ 197.719326][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.726384][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.752304][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.767596][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.774692][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.800738][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.831186][T12924] hsr_slave_0: entered promiscuous mode [ 197.837274][T12924] hsr_slave_1: entered promiscuous mode [ 197.843177][T12924] debugfs: 'hsr0' already exists in 'hsr' [ 197.848907][T12924] Cannot create hsr debugfs directory [ 197.881151][T12971] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.888354][T12971] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.909996][T12971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12971 comm=syz.1.3481 [ 198.117939][T12924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.132573][T12924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.143303][T12924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.155839][T12924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.312086][T12985] lo speed is unknown, defaulting to 1000 [ 198.367071][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.382425][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.394124][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.401220][ T8384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.413778][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.420910][ T8375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.489350][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.560271][T12924] veth0_vlan: entered promiscuous mode [ 198.568450][T12924] veth1_vlan: entered promiscuous mode [ 198.586689][T12924] veth0_macvtap: entered promiscuous mode [ 198.594564][T12924] veth1_macvtap: entered promiscuous mode [ 198.604172][T13011] hsr_slave_0: left promiscuous mode [ 198.609989][T13011] hsr_slave_1: left promiscuous mode [ 198.621858][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.632972][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.643529][ T8375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.652387][ T8375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.661699][ T8375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.678532][ T8375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.746385][T13019] __nla_validate_parse: 19 callbacks suppressed [ 198.746400][T13019] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 198.761183][T13019] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 198.770309][T13019] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 198.778938][T13019] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 198.787503][T13019] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 198.815297][T13023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.872899][T13023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.977017][T13039] FAULT_INJECTION: forcing a failure. [ 198.977017][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 198.989836][T13039] CPU: 1 UID: 0 PID: 13039 Comm: syz.4.3499 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.989867][T13039] Tainted: [W]=WARN [ 198.989910][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.989921][T13039] Call Trace: [ 198.989928][T13039] [ 198.989936][T13039] __dump_stack+0x1d/0x30 [ 198.989961][T13039] dump_stack_lvl+0x95/0xd0 [ 198.990017][T13039] dump_stack+0x15/0x1b [ 198.990034][T13039] should_fail_ex+0x265/0x280 [ 198.990052][T13039] should_failslab+0x8c/0xb0 [ 198.990070][T13039] __kvmalloc_node_noprof+0x149/0x6b0 [ 198.990141][T13039] ? nf_hook_entries_grow+0x1c1/0x460 [ 198.990169][T13039] nf_hook_entries_grow+0x1c1/0x460 [ 198.990260][T13039] __nf_register_net_hook+0x18e/0x480 [ 198.990288][T13039] nf_register_net_hook+0x88/0x130 [ 198.990318][T13039] nf_register_net_hooks+0x44/0x150 [ 198.990395][T13039] nf_ct_netns_do_get+0x188/0x380 [ 198.990427][T13039] ? should_failslab+0x8c/0xb0 [ 198.990451][T13039] nf_ct_netns_get+0x87/0xc0 [ 198.990482][T13039] conntrack_mt_check+0x35/0xa0 [ 198.990581][T13039] xt_check_match+0x2ad/0x4f0 [ 198.990735][T13039] ? xt_find_match+0x1d1/0x210 [ 198.990763][T13039] ? xt_find_match+0x1b5/0x210 [ 198.990789][T13039] translate_table+0xb4b/0x1070 [ 198.990818][T13039] ? _copy_from_user+0x89/0xb0 [ 198.990862][T13039] do_ip6t_set_ctl+0x678/0x840 [ 198.990947][T13039] ? kstrtoull+0x111/0x140 [ 198.990965][T13039] ? __rcu_read_unlock+0x4f/0x70 [ 198.990988][T13039] nf_setsockopt+0x199/0x1b0 [ 198.991069][T13039] ipv6_setsockopt+0x11a/0x130 [ 198.991112][T13039] tcp_setsockopt+0x98/0xb0 [ 198.991209][T13039] sock_common_setsockopt+0x69/0x80 [ 198.991252][T13039] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 198.991326][T13039] __sys_setsockopt+0x184/0x200 [ 198.991352][T13039] __x64_sys_setsockopt+0x64/0x80 [ 198.991377][T13039] x64_sys_call+0x21d5/0x3000 [ 198.991400][T13039] do_syscall_64+0xca/0x2b0 [ 198.991498][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.991519][T13039] RIP: 0033:0x7f1e2410f749 [ 198.991612][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.991629][T13039] RSP: 002b:00007f1e22b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.991649][T13039] RAX: ffffffffffffffda RBX: 00007f1e24365fa0 RCX: 00007f1e2410f749 [ 198.991661][T13039] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 198.991671][T13039] RBP: 00007f1e22b6f090 R08: 00000000000003e8 R09: 0000000000000000 [ 198.991682][T13039] R10: 0000200000000f80 R11: 0000000000000246 R12: 0000000000000001 [ 198.991736][T13039] R13: 00007f1e24366038 R14: 00007f1e24365fa0 R15: 00007fff5d0aefb8 [ 198.991752][T13039] [ 198.991817][T13039] xt_conntrack: cannot load conntrack support for proto=10 [ 199.123199][T13043] siw: device registration error -23 [ 199.483214][T13063] lo speed is unknown, defaulting to 1000 [ 199.804743][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 199.889802][T13077] lo speed is unknown, defaulting to 1000 [ 200.106443][T13081] siw: device registration error -23 [ 200.156119][T13092] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 200.164793][T13092] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 200.173700][T13092] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 200.182292][T13092] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 200.220191][T13096] Cannot find add_set index 0 as target [ 200.244630][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 200.244643][ T29] audit: type=1326 audit(1768112743.182:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.274821][ T29] audit: type=1326 audit(1768112743.182:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.298517][ T29] audit: type=1326 audit(1768112743.182:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.322330][ T29] audit: type=1326 audit(1768112743.192:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.346037][ T29] audit: type=1326 audit(1768112743.192:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.369958][ T29] audit: type=1326 audit(1768112743.192:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.393741][ T29] audit: type=1326 audit(1768112743.192:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.417440][ T29] audit: type=1326 audit(1768112743.192:16219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.441159][ T29] audit: type=1326 audit(1768112743.192:16220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.464871][ T29] audit: type=1326 audit(1768112743.192:16221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.0.3521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 200.503913][T13110] lo speed is unknown, defaulting to 1000 [ 200.637304][T13114] vlan0: entered allmulticast mode [ 200.767187][T13123] xt_hashlimit: max too large, truncated to 1048576 [ 201.137967][T13137] lo speed is unknown, defaulting to 1000 [ 201.277571][T13023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.428835][T13148] Cannot find add_set index 0 as target [ 201.516385][T13156] vlan2: entered allmulticast mode [ 201.756093][T13167] netlink: 'syz.4.3547': attribute type 15 has an invalid length. [ 202.241813][T13197] siw: device registration error -23 [ 202.784299][T13245] vlan2: entered allmulticast mode [ 202.825539][T13023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.868151][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.896217][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.907786][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.922247][ T61] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.264120][T13282] vlan0: entered allmulticast mode [ 203.332611][T13286] xt_TCPMSS: Only works on TCP SYN packets [ 203.726815][T13313] vlan2: entered allmulticast mode [ 203.901711][T13320] FAULT_INJECTION: forcing a failure. [ 203.901711][T13320] name failslab, interval 1, probability 0, space 0, times 0 [ 203.914389][T13320] CPU: 1 UID: 0 PID: 13320 Comm: syz.3.3606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.914472][T13320] Tainted: [W]=WARN [ 203.914479][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.914489][T13320] Call Trace: [ 203.914494][T13320] [ 203.914501][T13320] __dump_stack+0x1d/0x30 [ 203.914526][T13320] dump_stack_lvl+0x95/0xd0 [ 203.914550][T13320] dump_stack+0x15/0x1b [ 203.914616][T13320] should_fail_ex+0x265/0x280 [ 203.914640][T13320] should_failslab+0x8c/0xb0 [ 203.914667][T13320] __kmalloc_cache_noprof+0x65/0x4c0 [ 203.914690][T13320] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 203.914749][T13320] ? mutex_unlock+0x4f/0x90 [ 203.914783][T13320] __se_sys_memfd_create+0x1d6/0x6b0 [ 203.914935][T13320] __x64_sys_memfd_create+0x31/0x40 [ 203.914960][T13320] x64_sys_call+0x28cb/0x3000 [ 203.914979][T13320] do_syscall_64+0xca/0x2b0 [ 203.915119][T13320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.915137][T13320] RIP: 0033:0x7fde2091f749 [ 203.915152][T13320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.915168][T13320] RSP: 002b:00007fde1f37ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 203.915185][T13320] RAX: ffffffffffffffda RBX: 0000000000000521 RCX: 00007fde2091f749 [ 203.915222][T13320] RDX: 00007fde1f37eef0 RSI: 0000000000000000 RDI: 00007fde209a4960 [ 203.915236][T13320] RBP: 0000200000000640 R08: 00007fde1f37ebb7 R09: 00007fde1f37ee40 [ 203.915250][T13320] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000200 [ 203.915262][T13320] R13: 00007fde1f37eef0 R14: 00007fde1f37eeb0 R15: 0000200000000600 [ 203.915340][T13320] [ 204.175303][T13332] __nla_validate_parse: 15 callbacks suppressed [ 204.175318][T13332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 204.261385][T13335] lo speed is unknown, defaulting to 1000 [ 204.407781][T13343] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.476841][T13343] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.522200][T13348] lo speed is unknown, defaulting to 1000 [ 204.644853][T13347] netlink: 'syz.1.3617': attribute type 39 has an invalid length. [ 204.720134][T13343] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.797115][T13343] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.850952][ T7425] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.864428][ T7425] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.882242][ T7425] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.893473][ T7425] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.030435][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'. [ 205.185607][T13387] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.352573][T13387] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.451811][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 205.451828][ T29] audit: type=1400 audit(1768112748.392:16467): avc: denied { connect } for pid=13395 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.481539][ T29] audit: type=1400 audit(1768112748.422:16468): avc: denied { setopt } for pid=13395 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.501258][ T29] audit: type=1400 audit(1768112748.422:16469): avc: denied { bind } for pid=13395 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.520719][ T29] audit: type=1400 audit(1768112748.422:16470): avc: denied { write } for pid=13395 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.540231][ T29] audit: type=1400 audit(1768112748.422:16471): avc: denied { read } for pid=13395 comm="syz.0.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.631511][T13387] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.695543][T13404] siw: device registration error -23 [ 205.719317][T13412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 205.736506][T13387] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.816554][ T29] audit: type=1326 audit(1768112748.752:16472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda563bf749 code=0x7ffc0000 [ 205.843555][ T29] audit: type=1326 audit(1768112748.782:16473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fda563bf749 code=0x7ffc0000 [ 205.867172][ T29] audit: type=1326 audit(1768112748.782:16474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda563bf749 code=0x7ffc0000 [ 205.890951][ T29] audit: type=1326 audit(1768112748.782:16475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda563bf749 code=0x7ffc0000 [ 205.914523][ T29] audit: type=1326 audit(1768112748.782:16476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13424 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda563bf749 code=0x7ffc0000 [ 206.178203][T13445] xt_hashlimit: max too large, truncated to 1048576 [ 206.220706][T13450] xt_hashlimit: max too large, truncated to 1048576 [ 206.980654][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 207.103258][T13473] netlink: 'syz.1.3664': attribute type 1 has an invalid length. [ 207.111109][T13473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3664'. [ 207.262709][T13491] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3666'. [ 207.290207][T13491] lo speed is unknown, defaulting to 1000 [ 207.675956][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3674'. [ 207.723048][T13506] xt_hashlimit: max too large, truncated to 1048576 [ 207.781334][T13510] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3677'. [ 207.940870][T13520] netlink: 'syz.2.3681': attribute type 39 has an invalid length. [ 207.999065][T13522] FAULT_INJECTION: forcing a failure. [ 207.999065][T13522] name failslab, interval 1, probability 0, space 0, times 0 [ 208.011715][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.0.3682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.011744][T13522] Tainted: [W]=WARN [ 208.011752][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.011820][T13522] Call Trace: [ 208.011824][T13522] [ 208.011828][T13522] __dump_stack+0x1d/0x30 [ 208.011843][T13522] dump_stack_lvl+0x95/0xd0 [ 208.011911][T13522] dump_stack+0x15/0x1b [ 208.011922][T13522] should_fail_ex+0x265/0x280 [ 208.011935][T13522] should_failslab+0x8c/0xb0 [ 208.011947][T13522] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 208.011961][T13522] ? __get_vm_area_node+0x106/0x1d0 [ 208.011980][T13522] __get_vm_area_node+0x106/0x1d0 [ 208.012030][T13522] __vmalloc_node_range_noprof+0x28e/0x1310 [ 208.012043][T13522] ? copy_process+0x37d/0x1ef0 [ 208.012055][T13522] ? refill_obj_stock+0x254/0x2e0 [ 208.012124][T13522] ? obj_cgroup_charge_account+0xba/0x1a0 [ 208.012221][T13522] ? __rcu_read_unlock+0x4f/0x70 [ 208.012233][T13522] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 208.012250][T13522] __vmalloc_node_noprof+0x89/0xc0 [ 208.012315][T13522] ? copy_process+0x37d/0x1ef0 [ 208.012328][T13522] ? copy_process+0x37d/0x1ef0 [ 208.012338][T13522] dup_task_struct+0x219/0x950 [ 208.012348][T13522] ? copy_process+0x36c/0x1ef0 [ 208.012465][T13522] copy_process+0x37d/0x1ef0 [ 208.012477][T13522] ? copy_clone_args_from_user+0x3ce/0x490 [ 208.012492][T13522] kernel_clone+0x16c/0x5c0 [ 208.012504][T13522] __se_sys_clone3+0x1c2/0x200 [ 208.012522][T13522] __x64_sys_clone3+0x31/0x40 [ 208.012590][T13522] x64_sys_call+0x2c0f/0x3000 [ 208.012603][T13522] do_syscall_64+0xca/0x2b0 [ 208.012691][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.012703][T13522] RIP: 0033:0x7f73e37ff749 [ 208.012712][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.012723][T13522] RSP: 002b:00007f73e225ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 208.012803][T13522] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f73e37ff749 [ 208.012811][T13522] RDX: 00007f73e225ef20 RSI: 0000000000000058 RDI: 00007f73e225ef20 [ 208.012819][T13522] RBP: 00007f73e225f090 R08: 0000000000000000 R09: 0000000000000058 [ 208.012892][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.012900][T13522] R13: 00007f73e3a56038 R14: 00007f73e3a55fa0 R15: 00007ffd9f967458 [ 208.012910][T13522] [ 208.012915][T13522] warn_alloc: 8 callbacks suppressed [ 208.012921][T13522] syz.0.3682: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 208.274290][T13522] CPU: 0 UID: 0 PID: 13522 Comm: syz.0.3682 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.274379][T13522] Tainted: [W]=WARN [ 208.274383][T13522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.274390][T13522] Call Trace: [ 208.274460][T13522] [ 208.274465][T13522] __dump_stack+0x1d/0x30 [ 208.274481][T13522] dump_stack_lvl+0x95/0xd0 [ 208.274492][T13522] dump_stack+0x15/0x1b [ 208.274519][T13522] warn_alloc+0x12b/0x1a0 [ 208.274536][T13522] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 208.274550][T13522] ? refill_obj_stock+0x254/0x2e0 [ 208.274566][T13522] ? obj_cgroup_charge_account+0xba/0x1a0 [ 208.274672][T13522] ? __rcu_read_unlock+0x4f/0x70 [ 208.274683][T13522] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 208.274799][T13522] __vmalloc_node_noprof+0x89/0xc0 [ 208.274812][T13522] ? copy_process+0x37d/0x1ef0 [ 208.274822][T13522] ? copy_process+0x37d/0x1ef0 [ 208.274871][T13522] dup_task_struct+0x219/0x950 [ 208.274881][T13522] ? copy_process+0x36c/0x1ef0 [ 208.274891][T13522] copy_process+0x37d/0x1ef0 [ 208.274957][T13522] ? copy_clone_args_from_user+0x3ce/0x490 [ 208.275021][T13522] kernel_clone+0x16c/0x5c0 [ 208.275033][T13522] __se_sys_clone3+0x1c2/0x200 [ 208.275070][T13522] __x64_sys_clone3+0x31/0x40 [ 208.275092][T13522] x64_sys_call+0x2c0f/0x3000 [ 208.275112][T13522] do_syscall_64+0xca/0x2b0 [ 208.275165][T13522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.275242][T13522] RIP: 0033:0x7f73e37ff749 [ 208.275252][T13522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.275262][T13522] RSP: 002b:00007f73e225ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 208.275274][T13522] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f73e37ff749 [ 208.275282][T13522] RDX: 00007f73e225ef20 RSI: 0000000000000058 RDI: 00007f73e225ef20 [ 208.275336][T13522] RBP: 00007f73e225f090 R08: 0000000000000000 R09: 0000000000000058 [ 208.275347][T13522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.275356][T13522] R13: 00007f73e3a56038 R14: 00007f73e3a55fa0 R15: 00007ffd9f967458 [ 208.275367][T13522] [ 208.275371][T13522] Mem-Info: [ 208.493374][T13522] active_anon:27471 inactive_anon:4 isolated_anon:0 [ 208.493374][T13522] active_file:23430 inactive_file:2592 isolated_file:0 [ 208.493374][T13522] unevictable:0 dirty:389 writeback:0 [ 208.493374][T13522] slab_reclaimable:3447 slab_unreclaimable:29999 [ 208.493374][T13522] mapped:29750 shmem:23199 pagetables:1283 [ 208.493374][T13522] sec_pagetables:0 bounce:0 [ 208.493374][T13522] kernel_misc_reclaimable:0 [ 208.493374][T13522] free:1816935 free_pcp:20554 free_cma:0 [ 208.538483][T13522] Node 0 active_anon:109884kB inactive_anon:16kB active_file:93720kB inactive_file:10368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119000kB dirty:1556kB writeback:0kB shmem:92796kB kernel_stack:4768kB pagetables:5132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.566035][T13522] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.595665][T13522] lowmem_reserve[]: 0 2880 7859 7859 [ 208.601014][T13522] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 208.632331][T13522] lowmem_reserve[]: 0 0 4978 4978 [ 208.637373][T13522] Node 0 Normal free:4306400kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110076kB inactive_anon:16kB active_file:93720kB inactive_file:10368kB unevictable:0kB writepending:1568kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:78356kB local_pcp:49648kB free_cma:0kB [ 208.670692][T13522] lowmem_reserve[]: 0 0 0 0 [ 208.675401][T13522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.688113][T13522] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 208.704290][T13522] Node 0 Normal: 787*4kB (UME) 205*8kB (UME) 51*16kB (UME) 107*32kB (UME) 224*64kB (UME) 100*128kB (UME) 161*256kB (UM) 122*512kB (UM) 89*1024kB (UME) 48*2048kB (UM) 971*4096kB (UM) = 4306500kB [ 208.724043][T13522] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 208.724992][T13534] xt_hashlimit: max too large, truncated to 1048576 [ 208.733411][T13522] 49235 total pagecache pages [ 208.733421][T13522] 5 pages in swap cache [ 208.733427][T13522] Free swap = 124976kB [ 208.753143][T13522] Total swap = 124996kB [ 208.757282][T13522] 2097051 pages RAM [ 208.761174][T13522] 0 pages HighMem/MovableOnly [ 208.766027][T13522] 81271 pages reserved [ 208.813124][T13538] netlink: 'syz.3.3689': attribute type 15 has an invalid length. [ 208.821012][T13538] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3689'. [ 208.870017][T13545] xt_hashlimit: max too large, truncated to 1048576 [ 208.915031][T13554] vlan2: entered allmulticast mode [ 209.150039][T13577] netlink: 'syz.0.3703': attribute type 39 has an invalid length. [ 209.393171][T13582] netlink: 'syz.0.3705': attribute type 15 has an invalid length. [ 209.401055][T13582] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3705'. [ 209.647245][T13585] xt_hashlimit: max too large, truncated to 1048576 [ 209.714280][ T8384] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.731299][T13592] FAULT_INJECTION: forcing a failure. [ 209.731299][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 209.732729][ T8384] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.744071][T13592] CPU: 0 UID: 0 PID: 13592 Comm: syz.2.3708 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.744137][T13592] Tainted: [W]=WARN [ 209.744144][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.744156][T13592] Call Trace: [ 209.744163][T13592] [ 209.744171][T13592] __dump_stack+0x1d/0x30 [ 209.744196][T13592] dump_stack_lvl+0x95/0xd0 [ 209.744217][T13592] dump_stack+0x15/0x1b [ 209.744301][T13592] should_fail_ex+0x265/0x280 [ 209.744354][T13592] should_failslab+0x8c/0xb0 [ 209.744376][T13592] __kmalloc_noprof+0xb9/0x5a0 [ 209.744398][T13592] ? bpf_test_init+0x86/0x140 [ 209.744456][T13592] bpf_test_init+0x86/0x140 [ 209.744484][T13592] bpf_prog_test_run_xdp+0x305/0x970 [ 209.744514][T13592] ? __rcu_read_unlock+0x4f/0x70 [ 209.744538][T13592] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 209.744625][T13592] bpf_prog_test_run+0x204/0x340 [ 209.744648][T13592] __sys_bpf+0x4c0/0x7c0 [ 209.744698][T13592] __x64_sys_bpf+0x41/0x50 [ 209.744728][T13592] x64_sys_call+0x28e1/0x3000 [ 209.744752][T13592] do_syscall_64+0xca/0x2b0 [ 209.744786][T13592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.744830][T13592] RIP: 0033:0x7f062249f749 [ 209.744846][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.744950][T13592] RSP: 002b:00007f0620eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.744970][T13592] RAX: ffffffffffffffda RBX: 00007f06226f5fa0 RCX: 00007f062249f749 [ 209.744983][T13592] RDX: 000000000000001f RSI: 0000200000000b80 RDI: 000000000000000a [ 209.744995][T13592] RBP: 00007f0620eff090 R08: 0000000000000000 R09: 0000000000000000 [ 209.745007][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.745098][T13592] R13: 00007f06226f6038 R14: 00007f06226f5fa0 R15: 00007ffda19c1b18 [ 209.745117][T13592] [ 209.949785][ T8384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.958065][ T8384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.000031][T13606] siw: device registration error -23 [ 210.032444][T13610] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 210.040969][T13610] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 210.050119][T13610] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 210.058700][T13610] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 210.067240][T13610] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 210.116535][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 210.129131][T13621] vlan2: entered allmulticast mode [ 210.151142][T13623] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.167020][T13625] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3721'. [ 210.211388][T13623] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.264573][T13642] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3727'. [ 210.267359][T13623] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.293856][T13642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 210.355307][T13652] FAULT_INJECTION: forcing a failure. [ 210.355307][T13652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.368439][T13652] CPU: 0 UID: 0 PID: 13652 Comm: syz.2.3732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.368464][T13652] Tainted: [W]=WARN [ 210.368523][T13652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.368530][T13652] Call Trace: [ 210.368534][T13652] [ 210.368539][T13652] __dump_stack+0x1d/0x30 [ 210.368615][T13652] dump_stack_lvl+0x95/0xd0 [ 210.368627][T13652] dump_stack+0x15/0x1b [ 210.368638][T13652] should_fail_ex+0x265/0x280 [ 210.368651][T13652] should_fail+0xb/0x20 [ 210.368662][T13652] should_fail_usercopy+0x1a/0x20 [ 210.368677][T13652] strncpy_from_user+0x27/0x260 [ 210.368694][T13652] strncpy_from_user_nofault+0x68/0xf0 [ 210.368767][T13652] bpf_probe_read_user_str+0x2a/0x70 [ 210.368812][T13652] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 210.368822][T13652] bpf_trace_run4+0x117/0x1e0 [ 210.368877][T13652] __traceiter_sched_switch+0x3f/0x60 [ 210.368889][T13652] __schedule+0xb0f/0xcd0 [ 210.368902][T13652] ? __rcu_read_unlock+0x4f/0x70 [ 210.368915][T13652] schedule+0x5f/0xd0 [ 210.368926][T13652] schedule_timeout+0x53/0x170 [ 210.368980][T13652] ? kthread_should_stop_or_park+0x63/0xa0 [ 210.369028][T13652] wait_woken+0x35/0x80 [ 210.369083][T13652] n_tty_read+0x995/0xd90 [ 210.369100][T13652] ? __pfx_woken_wake_function+0x10/0x10 [ 210.369178][T13652] tty_read+0x154/0x4a0 [ 210.369193][T13652] ? __import_iovec+0x428/0x540 [ 210.369275][T13652] do_iter_readv_writev+0x4a1/0x540 [ 210.369289][T13652] vfs_readv+0x1ea/0x690 [ 210.369348][T13652] do_readv+0xe7/0x210 [ 210.369361][T13652] __x64_sys_readv+0x45/0x50 [ 210.369372][T13652] x64_sys_call+0x2831/0x3000 [ 210.369385][T13652] do_syscall_64+0xca/0x2b0 [ 210.369466][T13652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.369478][T13652] RIP: 0033:0x7f062249f749 [ 210.369488][T13652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.369498][T13652] RSP: 002b:00007f0620eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 210.369510][T13652] RAX: ffffffffffffffda RBX: 00007f06226f5fa0 RCX: 00007f062249f749 [ 210.369522][T13652] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000008 [ 210.369529][T13652] RBP: 00007f0620eff090 R08: 0000000000000000 R09: 0000000000000000 [ 210.369537][T13652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.369544][T13652] R13: 00007f06226f6038 R14: 00007f06226f5fa0 R15: 00007ffda19c1b18 [ 210.369554][T13652] [ 210.614718][T13623] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.666157][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.677812][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.684878][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 210.684892][ T29] audit: type=1326 audit(1768112753.622:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 210.702621][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.716329][ T29] audit: type=1326 audit(1768112753.632:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 210.735121][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.778109][ T29] audit: type=1326 audit(1768112753.712:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 210.802487][ T29] audit: type=1326 audit(1768112753.712:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73e37fdf90 code=0x7ffc0000 [ 210.826172][ T29] audit: type=1326 audit(1768112753.742:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 210.849727][ T29] audit: type=1326 audit(1768112753.742:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13649 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 210.873331][ T29] audit: type=1326 audit(1768112753.742:16838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 210.895525][T13670] veth0: entered promiscuous mode [ 210.896937][ T29] audit: type=1326 audit(1768112753.742:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 210.904551][T13671] netlink: 'syz.0.3736': attribute type 15 has an invalid length. [ 210.926881][ T29] audit: type=1326 audit(1768112753.742:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 210.956875][ T29] audit: type=1326 audit(1768112753.742:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13664 comm="syz.0.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 211.148839][T13687] FAULT_INJECTION: forcing a failure. [ 211.148839][T13687] name failslab, interval 1, probability 0, space 0, times 0 [ 211.161555][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.1.3742 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.161589][T13687] Tainted: [W]=WARN [ 211.161596][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.161609][T13687] Call Trace: [ 211.161620][T13687] [ 211.161628][T13687] __dump_stack+0x1d/0x30 [ 211.161653][T13687] dump_stack_lvl+0x95/0xd0 [ 211.161676][T13687] dump_stack+0x15/0x1b [ 211.161747][T13687] should_fail_ex+0x265/0x280 [ 211.161804][T13687] should_failslab+0x8c/0xb0 [ 211.161824][T13687] kmem_cache_alloc_noprof+0x69/0x4b0 [ 211.161842][T13687] ? skb_clone+0x151/0x1f0 [ 211.161918][T13687] skb_clone+0x151/0x1f0 [ 211.161946][T13687] __netlink_deliver_tap+0x2c9/0x500 [ 211.161975][T13687] ? netlink_attachskb+0x2cc/0x650 [ 211.161998][T13687] netlink_sendskb+0x126/0x150 [ 211.162034][T13687] netlink_unicast+0x2a2/0x690 [ 211.162065][T13687] netlink_ack+0x4c8/0x500 [ 211.162097][T13687] netlink_rcv_skb+0x192/0x220 [ 211.162126][T13687] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.162197][T13687] genl_rcv+0x28/0x40 [ 211.162217][T13687] netlink_unicast+0x5c0/0x690 [ 211.162307][T13687] netlink_sendmsg+0x58b/0x6b0 [ 211.162390][T13687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.162421][T13687] __sock_sendmsg+0x145/0x180 [ 211.162437][T13687] ____sys_sendmsg+0x31e/0x4a0 [ 211.162462][T13687] ___sys_sendmsg+0x17b/0x1d0 [ 211.162516][T13687] __x64_sys_sendmsg+0xd4/0x160 [ 211.162546][T13687] x64_sys_call+0x17ba/0x3000 [ 211.162570][T13687] do_syscall_64+0xca/0x2b0 [ 211.162600][T13687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.162623][T13687] RIP: 0033:0x7fda563bf749 [ 211.162687][T13687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.162703][T13687] RSP: 002b:00007fda54e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.162801][T13687] RAX: ffffffffffffffda RBX: 00007fda56615fa0 RCX: 00007fda563bf749 [ 211.162814][T13687] RDX: 0000000004000000 RSI: 0000200000000800 RDI: 0000000000000006 [ 211.162828][T13687] RBP: 00007fda54e27090 R08: 0000000000000000 R09: 0000000000000000 [ 211.162842][T13687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.162930][T13687] R13: 00007fda56616038 R14: 00007fda56615fa0 R15: 00007ffe4aecfb08 [ 211.162948][T13687] [ 211.649048][T13723] xt_hashlimit: max too large, truncated to 1048576 [ 211.786771][T13734] lo speed is unknown, defaulting to 1000 [ 211.943863][T13733] Process accounting resumed [ 211.962909][T13739] vlan0: entered allmulticast mode [ 212.054174][T13746] siw: device registration error -23 [ 212.629345][T13801] netlink: 'syz.4.3784': attribute type 39 has an invalid length. [ 212.988615][T13807] vlan0: entered allmulticast mode [ 213.069079][T13816] siw: device registration error -23 [ 214.084258][T13868] xt_hashlimit: max too large, truncated to 1048576 [ 214.210437][T13885] FAULT_INJECTION: forcing a failure. [ 214.210437][T13885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.223654][T13885] CPU: 1 UID: 0 PID: 13885 Comm: syz.0.3815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.223674][T13885] Tainted: [W]=WARN [ 214.223679][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.223686][T13885] Call Trace: [ 214.223690][T13885] [ 214.223695][T13885] __dump_stack+0x1d/0x30 [ 214.223778][T13885] dump_stack_lvl+0x95/0xd0 [ 214.223789][T13885] dump_stack+0x15/0x1b [ 214.223800][T13885] should_fail_ex+0x265/0x280 [ 214.223814][T13885] should_fail+0xb/0x20 [ 214.223824][T13885] should_fail_usercopy+0x1a/0x20 [ 214.223957][T13885] _copy_from_user+0x1c/0xb0 [ 214.223977][T13885] do_handle_open+0x6d/0x710 [ 214.223993][T13885] __x64_sys_open_by_handle_at+0x44/0x50 [ 214.224013][T13885] x64_sys_call+0x2b6a/0x3000 [ 214.224134][T13885] do_syscall_64+0xca/0x2b0 [ 214.224153][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.224188][T13885] RIP: 0033:0x7f73e37ff749 [ 214.224198][T13885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.224209][T13885] RSP: 002b:00007f73e225f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 214.224221][T13885] RAX: ffffffffffffffda RBX: 00007f73e3a55fa0 RCX: 00007f73e37ff749 [ 214.224289][T13885] RDX: 0000000036f0516f RSI: 0000200000000240 RDI: ffffffffffffffff [ 214.224296][T13885] RBP: 00007f73e225f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.224304][T13885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.224311][T13885] R13: 00007f73e3a56038 R14: 00007f73e3a55fa0 R15: 00007ffd9f967458 [ 214.224322][T13885] [ 214.432960][T13893] vlan2: entered allmulticast mode [ 214.469821][T13900] __nla_validate_parse: 19 callbacks suppressed [ 214.469838][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3821'. [ 214.589083][T13912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.652529][T13912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.692330][T13912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.743468][T13912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.815897][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.826838][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.838223][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.909768][T13925] lo speed is unknown, defaulting to 1000 [ 215.025705][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.116868][T13927] siw: device registration error -23 [ 215.437934][T13954] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 215.452945][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3842'. [ 215.528548][T13958] siw: device registration error -23 [ 215.696765][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 215.696780][ T29] audit: type=1326 audit(1768112758.632:17286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06224965e7 code=0x7ffc0000 [ 215.726628][ T29] audit: type=1326 audit(1768112758.632:17287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f062243b829 code=0x7ffc0000 [ 215.750689][ T29] audit: type=1326 audit(1768112758.632:17288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 215.774134][ T29] audit: type=1326 audit(1768112758.642:17289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06224965e7 code=0x7ffc0000 [ 215.797789][ T29] audit: type=1326 audit(1768112758.642:17290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f062243b829 code=0x7ffc0000 [ 215.821459][ T29] audit: type=1326 audit(1768112758.642:17291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 215.845051][ T29] audit: type=1326 audit(1768112758.642:17292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06224965e7 code=0x7ffc0000 [ 215.868714][ T29] audit: type=1326 audit(1768112758.642:17293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f062243b829 code=0x7ffc0000 [ 215.892333][ T29] audit: type=1326 audit(1768112758.642:17294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 215.915834][ T29] audit: type=1326 audit(1768112758.672:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13944 comm="syz.2.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06224965e7 code=0x7ffc0000 [ 216.046940][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 216.056341][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 216.104982][T13976] FAULT_INJECTION: forcing a failure. [ 216.104982][T13976] name failslab, interval 1, probability 0, space 0, times 0 [ 216.117713][T13976] CPU: 1 UID: 0 PID: 13976 Comm: syz.1.3849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.117778][T13976] Tainted: [W]=WARN [ 216.117786][T13976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.117798][T13976] Call Trace: [ 216.117806][T13976] [ 216.117815][T13976] __dump_stack+0x1d/0x30 [ 216.117842][T13976] dump_stack_lvl+0x95/0xd0 [ 216.117861][T13976] dump_stack+0x15/0x1b [ 216.117880][T13976] should_fail_ex+0x265/0x280 [ 216.117943][T13976] should_failslab+0x8c/0xb0 [ 216.117963][T13976] __kmalloc_noprof+0xb9/0x5a0 [ 216.117981][T13976] ? sk_prot_alloc+0xa8/0x190 [ 216.118005][T13976] ? should_fail_ex+0xdb/0x280 [ 216.118045][T13976] sk_prot_alloc+0xa8/0x190 [ 216.118075][T13976] sk_alloc+0x34/0x3d0 [ 216.118102][T13976] bpf_prog_test_run_skb+0x31c/0xf50 [ 216.118169][T13976] ? __rcu_read_unlock+0x4f/0x70 [ 216.118191][T13976] ? __fget_files+0x184/0x1c0 [ 216.118267][T13976] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 216.118290][T13976] bpf_prog_test_run+0x204/0x340 [ 216.118309][T13976] __sys_bpf+0x4c0/0x7c0 [ 216.118336][T13976] __x64_sys_bpf+0x41/0x50 [ 216.118406][T13976] x64_sys_call+0x28e1/0x3000 [ 216.118425][T13976] do_syscall_64+0xca/0x2b0 [ 216.118488][T13976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.118512][T13976] RIP: 0033:0x7fda563bf749 [ 216.118581][T13976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.118656][T13976] RSP: 002b:00007fda54e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.118673][T13976] RAX: ffffffffffffffda RBX: 00007fda56615fa0 RCX: 00007fda563bf749 [ 216.118686][T13976] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 216.118700][T13976] RBP: 00007fda54e27090 R08: 0000000000000000 R09: 0000000000000000 [ 216.118713][T13976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.118724][T13976] R13: 00007fda56616038 R14: 00007fda56615fa0 R15: 00007ffe4aecfb08 [ 216.118759][T13976] [ 216.415391][T13985] lo speed is unknown, defaulting to 1000 [ 216.512598][T13997] siw: device registration error -23 [ 216.596510][T14007] netlink: 'syz.1.3860': attribute type 15 has an invalid length. [ 216.604447][T14007] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3860'. [ 216.635775][T14012] vhci_hcd vhci_hcd.0: invalid port number 9 [ 216.641810][T14012] vhci_hcd vhci_hcd.0: default hub control req: 0500 v0000 i0009 l0 [ 216.776569][T14040] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3872'. [ 216.797670][T14042] FAULT_INJECTION: forcing a failure. [ 216.797670][T14042] name failslab, interval 1, probability 0, space 0, times 0 [ 216.810404][T14042] CPU: 1 UID: 0 PID: 14042 Comm: syz.3.3873 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.810437][T14042] Tainted: [W]=WARN [ 216.810442][T14042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.810449][T14042] Call Trace: [ 216.810453][T14042] [ 216.810457][T14042] __dump_stack+0x1d/0x30 [ 216.810508][T14042] dump_stack_lvl+0x95/0xd0 [ 216.810536][T14042] dump_stack+0x15/0x1b [ 216.810608][T14042] should_fail_ex+0x265/0x280 [ 216.810621][T14042] should_failslab+0x8c/0xb0 [ 216.810711][T14042] __kvmalloc_node_noprof+0x149/0x6b0 [ 216.810725][T14042] ? nf_tables_newset+0xde3/0x14e0 [ 216.810786][T14042] nf_tables_newset+0xde3/0x14e0 [ 216.810811][T14042] nfnetlink_rcv+0xbc9/0x16c0 [ 216.810839][T14042] netlink_unicast+0x5c0/0x690 [ 216.810880][T14042] netlink_sendmsg+0x58b/0x6b0 [ 216.810897][T14042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.810914][T14042] __sock_sendmsg+0x145/0x180 [ 216.810996][T14042] ____sys_sendmsg+0x31e/0x4a0 [ 216.811049][T14042] ___sys_sendmsg+0x17b/0x1d0 [ 216.811077][T14042] __x64_sys_sendmsg+0xd4/0x160 [ 216.811112][T14042] x64_sys_call+0x17ba/0x3000 [ 216.811125][T14042] do_syscall_64+0xca/0x2b0 [ 216.811286][T14042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.811310][T14042] RIP: 0033:0x7fde2091f749 [ 216.811320][T14042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.811405][T14042] RSP: 002b:00007fde1f37f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.811425][T14042] RAX: ffffffffffffffda RBX: 00007fde20b75fa0 RCX: 00007fde2091f749 [ 216.811433][T14042] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 216.811440][T14042] RBP: 00007fde1f37f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.811448][T14042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.811530][T14042] R13: 00007fde20b76038 R14: 00007fde20b75fa0 R15: 00007ffdc95e21c8 [ 216.811542][T14042] [ 217.032785][T14048] xt_hashlimit: max too large, truncated to 1048576 [ 217.090411][T14056] netlink: 'syz.3.3879': attribute type 39 has an invalid length. [ 217.138779][T14063] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14063 comm=syz.0.3882 [ 217.153359][T14067] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3884'. [ 217.205573][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3886'. [ 217.459256][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3893'. [ 217.468422][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.475964][T14094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.484290][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.491784][T14094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.503866][T14096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.581213][T14096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.622038][T14096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.672605][T14096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.726357][ T8375] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.737319][ T8375] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.748659][ T8375] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.760002][ T8375] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.944070][T14121] netlink: 'syz.2.3904': attribute type 39 has an invalid length. [ 218.275880][T14160] netlink: 'syz.1.3920': attribute type 2 has an invalid length. [ 218.283652][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3920'. [ 218.560088][T14179] batman_adv: batadv0: Adding interface: dummy0 [ 218.566361][T14179] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.599551][T14179] batman_adv: batadv0: Interface activated: dummy0 [ 218.610407][T14179] batadv0: mtu less than device minimum [ 218.616503][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.627519][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.638588][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.649619][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.660572][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.671583][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.682494][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.693317][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.704124][T14179] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 218.889001][T14195] siw: device registration error -23 [ 218.928927][T14202] 8021q: VLANs not supported on wg0 [ 218.940076][T14200] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 218.983069][T14202] tipc: Started in network mode [ 218.987956][T14202] tipc: Node identity ac14140f, cluster identity 4711 [ 218.995463][T14202] tipc: New replicast peer: 255.255.255.255 [ 219.001666][T14202] tipc: Enabled bearer , priority 10 [ 219.032410][T14209] FAULT_INJECTION: forcing a failure. [ 219.032410][T14209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.043234][T14210] syzkaller0: entered allmulticast mode [ 219.045597][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.0.3939 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.045657][T14209] Tainted: [W]=WARN [ 219.045664][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.045677][T14209] Call Trace: [ 219.045683][T14209] [ 219.045691][T14209] __dump_stack+0x1d/0x30 [ 219.045715][T14209] dump_stack_lvl+0x95/0xd0 [ 219.045736][T14209] dump_stack+0x15/0x1b [ 219.045771][T14209] should_fail_ex+0x265/0x280 [ 219.045793][T14209] should_fail+0xb/0x20 [ 219.045809][T14209] should_fail_usercopy+0x1a/0x20 [ 219.045870][T14209] _copy_to_user+0x20/0xa0 [ 219.045896][T14209] simple_read_from_buffer+0xb5/0x130 [ 219.045917][T14209] proc_fail_nth_read+0x10e/0x150 [ 219.045946][T14209] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.045999][T14209] vfs_read+0x1a8/0x770 [ 219.046034][T14209] ? __rcu_read_unlock+0x4f/0x70 [ 219.046053][T14209] ? __fget_files+0x184/0x1c0 [ 219.046075][T14209] ? mutex_lock+0x58/0x90 [ 219.046140][T14209] ksys_read+0xda/0x1a0 [ 219.046159][T14209] __x64_sys_read+0x40/0x50 [ 219.046177][T14209] x64_sys_call+0x2889/0x3000 [ 219.046200][T14209] do_syscall_64+0xca/0x2b0 [ 219.046277][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.046298][T14209] RIP: 0033:0x7f73e37fe15c [ 219.046314][T14209] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 219.046399][T14209] RSP: 002b:00007f73e225f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.046418][T14209] RAX: ffffffffffffffda RBX: 00007f73e3a55fa0 RCX: 00007f73e37fe15c [ 219.046431][T14209] RDX: 000000000000000f RSI: 00007f73e225f0a0 RDI: 0000000000000003 [ 219.046483][T14209] RBP: 00007f73e225f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.046496][T14209] R10: 000000000000005e R11: 0000000000000246 R12: 0000000000000001 [ 219.046508][T14209] R13: 00007f73e3a56038 R14: 00007f73e3a55fa0 R15: 00007ffd9f967458 [ 219.046527][T14209] [ 219.247336][T14215] syzkaller0: entered promiscuous mode [ 219.260956][T14224] warn_alloc: 3 callbacks suppressed [ 219.260970][T14224] syz.2.3944: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 219.280908][T14224] CPU: 0 UID: 0 PID: 14224 Comm: syz.2.3944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.281002][T14224] Tainted: [W]=WARN [ 219.281008][T14224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.281020][T14224] Call Trace: [ 219.281025][T14224] [ 219.281033][T14224] __dump_stack+0x1d/0x30 [ 219.281059][T14224] dump_stack_lvl+0x95/0xd0 [ 219.281092][T14224] dump_stack+0x15/0x1b [ 219.281113][T14224] warn_alloc+0x12b/0x1a0 [ 219.281143][T14224] __vmalloc_node_range_noprof+0xa0/0x1310 [ 219.281194][T14224] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 219.281214][T14224] ? __rcu_read_unlock+0x4f/0x70 [ 219.281233][T14224] ? perf_cgroup_switch+0x10c/0x480 [ 219.281332][T14224] ? bpf_trace_run4+0x134/0x1e0 [ 219.281416][T14224] ? _raw_spin_unlock+0x26/0x50 [ 219.281504][T14224] ? finish_task_switch+0x7a/0x2a0 [ 219.281613][T14224] ? should_fail_ex+0x30/0x280 [ 219.281632][T14224] ? should_failslab+0x8c/0xb0 [ 219.281654][T14224] vmalloc_user_noprof+0x7d/0xb0 [ 219.281680][T14224] ? xskq_create+0x80/0xe0 [ 219.281742][T14224] xskq_create+0x80/0xe0 [ 219.281761][T14224] xsk_init_queue+0x95/0xf0 [ 219.281793][T14224] xsk_setsockopt+0x3f5/0x640 [ 219.281861][T14224] ? __pfx_xsk_setsockopt+0x10/0x10 [ 219.281886][T14224] __sys_setsockopt+0x184/0x200 [ 219.281919][T14224] __x64_sys_setsockopt+0x64/0x80 [ 219.281946][T14224] x64_sys_call+0x21d5/0x3000 [ 219.281966][T14224] do_syscall_64+0xca/0x2b0 [ 219.282038][T14224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.282057][T14224] RIP: 0033:0x7f062249f749 [ 219.282071][T14224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.282087][T14224] RSP: 002b:00007f0620eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.282106][T14224] RAX: ffffffffffffffda RBX: 00007f06226f5fa0 RCX: 00007f062249f749 [ 219.282119][T14224] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 219.282151][T14224] RBP: 00007f0622523f91 R08: 0000000000000004 R09: 0000000000000000 [ 219.282181][T14224] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.282192][T14224] R13: 00007f06226f6038 R14: 00007f06226f5fa0 R15: 00007ffda19c1b18 [ 219.282219][T14224] [ 219.282226][T14224] Mem-Info: [ 219.509922][T14224] active_anon:27672 inactive_anon:4 isolated_anon:0 [ 219.509922][T14224] active_file:23369 inactive_file:2657 isolated_file:0 [ 219.509922][T14224] unevictable:0 dirty:451 writeback:0 [ 219.509922][T14224] slab_reclaimable:3410 slab_unreclaimable:29934 [ 219.509922][T14224] mapped:29779 shmem:23231 pagetables:1413 [ 219.509922][T14224] sec_pagetables:0 bounce:0 [ 219.509922][T14224] kernel_misc_reclaimable:0 [ 219.509922][T14224] free:1827303 free_pcp:10632 free_cma:0 [ 219.555074][T14224] Node 0 active_anon:110688kB inactive_anon:16kB active_file:93476kB inactive_file:10628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119116kB dirty:1804kB writeback:0kB shmem:92924kB kernel_stack:4960kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.582703][T14224] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.612333][T14224] lowmem_reserve[]: 0 2880 7859 7859 [ 219.617636][T14224] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 219.649017][T14224] lowmem_reserve[]: 0 0 4978 4978 [ 219.654173][T14224] Node 0 Normal free:4356200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110688kB inactive_anon:16kB active_file:93476kB inactive_file:10628kB unevictable:0kB writepending:1800kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35076kB local_pcp:24540kB free_cma:0kB [ 219.687417][T14224] lowmem_reserve[]: 0 0 0 0 [ 219.691955][T14224] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 219.704847][T14224] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 219.721117][T14224] Node 0 Normal: 1918*4kB (UME) 1916*8kB (UME) 793*16kB (UME) 428*32kB (UME) 299*64kB (UME) 154*128kB (UME) 228*256kB (UME) 146*512kB (UM) 74*1024kB (UME) 52*2048kB (UM) 965*4096kB (UM) = 4356264kB [ 219.740704][T14224] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 219.750059][T14224] 49254 total pagecache pages [ 219.754715][T14224] 5 pages in swap cache [ 219.758845][T14224] Free swap = 124972kB [ 219.763001][T14224] Total swap = 124996kB [ 219.767133][T14224] 2097051 pages RAM [ 219.770929][T14224] 0 pages HighMem/MovableOnly [ 219.775591][T14224] 81271 pages reserved [ 219.794646][T14218] syzkaller0: left promiscuous mode [ 219.800133][T14218] syzkaller0: left allmulticast mode [ 219.849749][T14235] netlink: 'syz.3.3948': attribute type 83 has an invalid length. [ 219.999688][ T10] tipc: Node number set to 2886997007 [ 220.040890][T14261] netlink: 'syz.3.3957': attribute type 39 has an invalid length. [ 220.746794][T14333] xt_hashlimit: max too large, truncated to 1048576 [ 220.755461][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 220.755474][ T29] audit: type=1400 audit(1768112763.692:17892): avc: denied { cpu } for pid=14332 comm="syz.1.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 221.244334][ T29] audit: type=1400 audit(1768112763.842:17893): avc: denied { read write } for pid=14332 comm="syz.1.3985" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 221.269163][ T29] audit: type=1400 audit(1768112763.842:17894): avc: denied { open } for pid=14332 comm="syz.1.3985" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 221.293767][ T29] audit: type=1326 audit(1768112763.882:17895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.295937][T14350] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 221.317344][ T29] audit: type=1326 audit(1768112763.882:17896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.347100][T14352] xt_hashlimit: max too large, truncated to 1048576 [ 221.348212][ T29] audit: type=1326 audit(1768112763.882:17897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.378239][ T29] audit: type=1326 audit(1768112763.882:17898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.401965][ T29] audit: type=1326 audit(1768112763.882:17899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.425545][ T29] audit: type=1326 audit(1768112763.882:17900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.449136][ T29] audit: type=1326 audit(1768112763.882:17901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14337 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2410f749 code=0x7ffc0000 [ 221.542875][T14362] __nla_validate_parse: 7 callbacks suppressed [ 221.542890][T14362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3997'. [ 221.558121][T14362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3997'. [ 221.653375][T14369] lo speed is unknown, defaulting to 1000 [ 222.046598][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4008'. [ 222.071968][T14395] xt_hashlimit: max too large, truncated to 1048576 [ 222.168231][T14406] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4014'. [ 222.522961][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4027'. [ 222.571663][T14444] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.581990][T14441] xt_hashlimit: max too large, truncated to 1048576 [ 222.627740][T14449] veth0: entered promiscuous mode [ 222.633364][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'. [ 222.661243][T14444] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.717248][T14452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4031'. [ 222.730027][T14452] tipc: Started in network mode [ 222.734932][T14452] tipc: Node identity ac14140f, cluster identity 4711 [ 222.741999][T14452] tipc: New replicast peer: 255.255.255.255 [ 222.748202][T14452] tipc: Enabled bearer , priority 10 [ 222.755662][T14444] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.831223][T14444] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.878782][T14470] xt_hashlimit: max too large, truncated to 1048576 [ 222.893511][ T7425] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.904850][ T7425] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.915250][ T7425] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.926279][ T7425] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.956516][T14474] veth0: entered promiscuous mode [ 222.962195][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4041'. [ 222.968607][T14476] veth0: entered promiscuous mode [ 222.979325][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4040'. [ 223.058727][T14480] netlink: 'syz.0.4042': attribute type 4 has an invalid length. [ 223.070531][T14480] netlink: 'syz.0.4042': attribute type 4 has an invalid length. [ 223.081852][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4042'. [ 223.105626][T14480] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.112776][T14480] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.125029][T14480] batman_adv: batadv0: Interface deactivated: dummy0 [ 223.151750][T14480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.161968][T14480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.185134][T14482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 223.191765][T14482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 223.199596][T14482] vhci_hcd vhci_hcd.0: Device attached [ 223.210971][ T42] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.219595][ T42] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.228101][ T42] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.236980][ T42] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.264168][T14483] vhci_hcd: connection closed [ 223.264356][ T42] vhci_hcd vhci_hcd.0: stop threads [ 223.274309][ T42] vhci_hcd vhci_hcd.0: release socket [ 223.279726][ T42] vhci_hcd vhci_hcd.0: disconnect device [ 223.371353][T14493] tipc: Started in network mode [ 223.376287][T14493] tipc: Node identity ac14140f, cluster identity 4711 [ 223.383217][T14493] tipc: New replicast peer: 255.255.255.255 [ 223.389578][T14493] tipc: Enabled bearer , priority 10 [ 223.480421][T14503] tipc: Enabled bearer , priority 0 [ 223.488309][T14502] tipc: Resetting bearer [ 223.500827][T14502] tipc: Disabling bearer [ 223.591792][T14505] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 223.602850][T14505] team0: Port device dummy0 added [ 223.719673][T14510] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 223.733233][T14510] team0: Port device dummy0 removed [ 223.740852][T14510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 223.819828][T14512] netlink: 'syz.0.4053': attribute type 39 has an invalid length. [ 223.859570][ T3407] tipc: Node number set to 2886997007 [ 224.019891][T14524] tipc: Enabling of bearer rejected, already enabled [ 224.167823][T14541] netlink: 'syz.0.4065': attribute type 39 has an invalid length. [ 224.202937][T14545] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 224.442814][T14556] 8021q: VLANs not supported on wg0 [ 224.539907][ T4659] tipc: Node number set to 2886997007 [ 224.892851][T14591] xt_hashlimit: max too large, truncated to 1048576 [ 224.939433][T14595] netlink: 'syz.1.4085': attribute type 15 has an invalid length. [ 225.007164][T14598] siw: device registration error -23 [ 225.017685][T14602] Cannot find del_set index 0 as target [ 225.034754][T14604] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 225.281773][T14629] netlink: 'syz.2.4097': attribute type 21 has an invalid length. [ 225.377080][T14637] siw: device registration error -23 [ 225.412180][T14641] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 225.566628][T14655] 8021q: VLANs not supported on wg0 [ 225.599870][T14659] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.641052][T14659] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.690955][T14659] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.741047][T14659] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.825193][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.836028][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.848650][ T7425] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.859624][ T7425] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.975823][T14674] siw: device registration error -23 [ 226.011849][T14677] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 226.155059][T14689] lo speed is unknown, defaulting to 1000 [ 226.327711][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 226.327727][ T29] audit: type=1326 audit(1768112769.262:18221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.362594][ T29] audit: type=1326 audit(1768112769.292:18222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.386318][ T29] audit: type=1326 audit(1768112769.292:18223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f062249df90 code=0x7ffc0000 [ 226.409881][ T29] audit: type=1326 audit(1768112769.292:18224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.433489][ T29] audit: type=1326 audit(1768112769.292:18225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.457131][ T29] audit: type=1326 audit(1768112769.292:18226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.480628][ T29] audit: type=1326 audit(1768112769.292:18227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.504230][ T29] audit: type=1326 audit(1768112769.292:18228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.527895][ T29] audit: type=1326 audit(1768112769.302:18229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.551575][ T29] audit: type=1326 audit(1768112769.302:18230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14692 comm="syz.2.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 226.554116][T14693] netlink: 'syz.2.4121': attribute type 15 has an invalid length. [ 226.583014][T14693] __nla_validate_parse: 18 callbacks suppressed [ 226.583028][T14693] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4121'. [ 226.971022][T14717] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 226.979516][T14717] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 226.996445][T14717] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 227.005095][T14717] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 227.013723][T14717] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 227.193770][T14732] lo speed is unknown, defaulting to 1000 [ 227.594923][T14741] lo speed is unknown, defaulting to 1000 [ 227.819309][T14745] netlink: 'syz.0.4141': attribute type 10 has an invalid length. [ 227.863693][T14745] batman_adv: batadv0: Removing interface: dummy0 [ 227.887447][T14749] xt_hashlimit: max too large, truncated to 1048576 [ 227.969011][T14750] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 228.011889][T14745] team0: Port device dummy0 added [ 228.017396][T14753] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 228.060287][T14755] bridge_slave_0: left promiscuous mode [ 228.066016][T14755] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.075092][T14755] bridge_slave_1: left allmulticast mode [ 228.080751][T14755] bridge_slave_1: left promiscuous mode [ 228.086385][T14755] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.098854][T14755] bond0: (slave bond_slave_0): Releasing backup interface [ 228.109235][T14755] bond0: (slave bond_slave_1): Releasing backup interface [ 228.152260][T14755] team0: Port device team_slave_0 removed [ 228.161088][T14755] team0: Port device team_slave_1 removed [ 228.167843][T14755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.175586][T14755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.185033][T14755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.192822][T14755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.210429][ T1041] lo speed is unknown, defaulting to 1000 [ 228.227117][T14767] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 228.235671][T14767] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 228.247237][T14767] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 228.255973][T14767] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 228.286095][T14773] xt_hashlimit: max too large, truncated to 1048576 [ 228.374922][T14782] 8021q: VLANs not supported on wg0 [ 228.409255][T14782] tipc: Enabling of bearer rejected, already enabled [ 228.609656][T14819] netlink: 'syz.1.4171': attribute type 15 has an invalid length. [ 228.763716][T14831] xt_hashlimit: max too large, truncated to 1048576 [ 228.807276][T14837] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 228.904883][T14846] 9p: Bad value for 'rfdno' [ 228.938171][T14851] 8021q: VLANs not supported on wg0 [ 228.975314][T14851] tipc: Started in network mode [ 228.980217][T14851] tipc: Node identity ac14140f, cluster identity 4711 [ 228.987166][T14851] tipc: New replicast peer: 255.255.255.255 [ 228.993457][T14851] tipc: Enabled bearer , priority 10 [ 229.803157][T14893] xt_hashlimit: max too large, truncated to 1048576 [ 230.097463][T14907] net_ratelimit: 10 callbacks suppressed [ 230.097507][T14907] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.135590][T14909] warn_alloc: 4 callbacks suppressed [ 230.135605][T14909] syz.4.4204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 230.155427][T14909] CPU: 0 UID: 0 PID: 14909 Comm: syz.4.4204 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.155460][T14909] Tainted: [W]=WARN [ 230.155467][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.155521][T14909] Call Trace: [ 230.155527][T14909] [ 230.155535][T14909] __dump_stack+0x1d/0x30 [ 230.155561][T14909] dump_stack_lvl+0x95/0xd0 [ 230.155589][T14909] dump_stack+0x15/0x1b [ 230.155615][T14909] warn_alloc+0x12b/0x1a0 [ 230.155672][T14909] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 230.155707][T14909] ? strncpy_from_user+0x111/0x260 [ 230.155745][T14909] __vmalloc_node_range_noprof+0xa0/0x1310 [ 230.155771][T14909] ? strncpy_from_user+0x221/0x260 [ 230.155862][T14909] ? strncpy_from_user_nofault+0xa7/0xf0 [ 230.155891][T14909] ? __rcu_read_unlock+0x4f/0x70 [ 230.155939][T14909] ? avc_has_perm_noaudit+0xab/0x130 [ 230.155971][T14909] ? should_fail_ex+0x30/0x280 [ 230.156027][T14909] ? should_failslab+0x8c/0xb0 [ 230.156048][T14909] vmalloc_user_noprof+0x7d/0xb0 [ 230.156157][T14909] ? xskq_create+0x80/0xe0 [ 230.156173][T14909] xskq_create+0x80/0xe0 [ 230.156208][T14909] xsk_init_queue+0x95/0xf0 [ 230.156241][T14909] xsk_setsockopt+0x3f5/0x640 [ 230.156329][T14909] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.156355][T14909] __sys_setsockopt+0x184/0x200 [ 230.156384][T14909] __x64_sys_setsockopt+0x64/0x80 [ 230.156474][T14909] x64_sys_call+0x21d5/0x3000 [ 230.156500][T14909] do_syscall_64+0xca/0x2b0 [ 230.156536][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.156558][T14909] RIP: 0033:0x7f1e2410f749 [ 230.156645][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.156665][T14909] RSP: 002b:00007f1e22b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.156687][T14909] RAX: ffffffffffffffda RBX: 00007f1e24365fa0 RCX: 00007f1e2410f749 [ 230.156698][T14909] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 230.156709][T14909] RBP: 00007f1e24193f91 R08: 0000000000000004 R09: 0000000000000000 [ 230.156720][T14909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.156810][T14909] R13: 00007f1e24366038 R14: 00007f1e24365fa0 R15: 00007fff5d0aefb8 [ 230.156834][T14909] [ 230.156841][T14909] Mem-Info: [ 230.293572][ T1041] tipc: Node number set to 2886997007 [ 230.295413][T14909] active_anon:44210 inactive_anon:5 isolated_anon:0 [ 230.295413][T14909] active_file:23753 inactive_file:2661 isolated_file:0 [ 230.295413][T14909] unevictable:0 dirty:270 writeback:0 [ 230.295413][T14909] slab_reclaimable:3405 slab_unreclaimable:29955 [ 230.295413][T14909] mapped:29748 shmem:39564 pagetables:1503 [ 230.295413][T14909] sec_pagetables:0 bounce:0 [ 230.295413][T14909] kernel_misc_reclaimable:0 [ 230.295413][T14909] free:1812131 free_pcp:9936 free_cma:0 [ 230.435616][T14909] Node 0 active_anon:176724kB inactive_anon:20kB active_file:95012kB inactive_file:10644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118992kB dirty:1080kB writeback:0kB shmem:158256kB kernel_stack:5008kB pagetables:6244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 230.463480][T14909] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.493089][T14909] lowmem_reserve[]: 0 2880 7859 7859 [ 230.498370][T14909] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 230.529712][T14909] lowmem_reserve[]: 0 0 4978 4978 [ 230.534736][T14909] Node 0 Normal free:4280968kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176724kB inactive_anon:20kB active_file:95012kB inactive_file:10644kB unevictable:0kB writepending:1080kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35716kB local_pcp:29696kB free_cma:0kB [ 230.568111][T14909] lowmem_reserve[]: 0 0 0 0 [ 230.572647][T14909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.585465][T14909] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 230.601566][T14909] Node 0 Normal: 1416*4kB (UME) 1363*8kB (UE) 575*16kB (UE) 310*32kB (UE) 237*64kB (UE) 119*128kB (UE) 102*256kB (UE) 107*512kB (UM) 85*1024kB (UME) 54*2048kB (UM) 961*4096kB (UM) = 4280872kB [ 230.620506][T14909] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.629821][T14909] 65983 total pagecache pages [ 230.634469][T14909] 6 pages in swap cache [ 230.638595][T14909] Free swap = 124972kB [ 230.642820][T14909] Total swap = 124996kB [ 230.646946][T14909] 2097051 pages RAM [ 230.650771][T14909] 0 pages HighMem/MovableOnly [ 230.655539][T14909] 81271 pages reserved [ 230.719873][T14920] netlink: 'syz.2.4209': attribute type 11 has an invalid length. [ 230.784004][T14929] xt_hashlimit: max too large, truncated to 1048576 [ 230.957566][T14949] lo speed is unknown, defaulting to 1000 [ 231.117178][T14954] siw: device registration error -23 [ 231.333674][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 231.333690][ T29] audit: type=1400 audit(1768112774.272:18564): avc: denied { bind } for pid=14958 comm="syz.3.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.381132][T14961] 9p: Bad value for 'version' [ 231.396679][ T29] audit: type=1400 audit(1768112774.322:18565): avc: denied { write } for pid=14958 comm="syz.3.4221" path="socket:[52384]" dev="sockfs" ino=52384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.396725][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.396784][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.437016][ T29] audit: type=1400 audit(1768112774.322:18566): avc: denied { setopt } for pid=14958 comm="syz.3.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.457116][ T29] audit: type=1400 audit(1768112774.332:18567): avc: denied { read write } for pid=14962 comm="syz.4.4222" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.480840][ T29] audit: type=1400 audit(1768112774.332:18568): avc: denied { open } for pid=14962 comm="syz.4.4222" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.504422][ T29] audit: type=1400 audit(1768112774.332:18569): avc: denied { ioctl } for pid=14962 comm="syz.4.4222" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 231.529579][ T29] audit: type=1400 audit(1768112774.372:18570): avc: denied { sqpoll } for pid=14964 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.549007][ T29] audit: type=1400 audit(1768112774.452:18571): avc: denied { append } for pid=14962 comm="syz.4.4222" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 231.586400][ T29] audit: type=1326 audit(1768112774.522:18572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.2.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 231.610153][ T29] audit: type=1326 audit(1768112774.522:18573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14970 comm="syz.2.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f062249df90 code=0x7ffc0000 [ 231.639058][T14971] netlink: 'syz.2.4224': attribute type 15 has an invalid length. [ 231.647009][T14971] __nla_validate_parse: 25 callbacks suppressed [ 231.647022][T14971] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4224'. [ 231.715004][T14974] xt_hashlimit: max too large, truncated to 1048576 [ 231.794201][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4231'. [ 231.832641][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.186548][T14996] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 232.195026][T14996] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 232.203699][T14996] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 232.212152][T14996] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 232.220771][T14996] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 232.356305][T15000] lo speed is unknown, defaulting to 1000 [ 232.694878][T15006] xt_hashlimit: max too large, truncated to 1048576 [ 232.831134][T15022] 8021q: VLANs not supported on wg0 [ 232.854025][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4243'. [ 232.868893][T15022] tipc: Enabling of bearer rejected, already enabled [ 232.907960][T15028] lo speed is unknown, defaulting to 1000 [ 233.067738][T15037] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 233.076252][T15037] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 233.410552][T15050] lo speed is unknown, defaulting to 1000 [ 233.736273][T15076] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.860395][T15092] sctp: [Deprecated]: syz.2.4269 (pid 15092) Use of int in max_burst socket option deprecated. [ 233.860395][T15092] Use struct sctp_assoc_value instead [ 233.869561][ T3937] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.882132][ T4344] Bluetooth: hci0: command 0x1003 tx timeout [ 233.891485][T15092] netlink: 'syz.2.4269': attribute type 39 has an invalid length. [ 234.013166][T15104] xt_hashlimit: max too large, truncated to 1048576 [ 234.077140][T15114] netlink: 'syz.0.4277': attribute type 1 has an invalid length. [ 234.093180][T15114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.171768][T15126] macvlan2: entered promiscuous mode [ 234.177071][T15126] macvlan2: entered allmulticast mode [ 234.198893][T15126] bond1: entered promiscuous mode [ 234.224634][T15126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.244815][T15126] bond1: left promiscuous mode [ 234.630469][T15158] lo speed is unknown, defaulting to 1000 [ 234.697869][T15169] netlink: 'syz.4.4297': attribute type 39 has an invalid length. [ 234.756295][T15177] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.765991][T15166] siw: device registration error -23 [ 234.782040][T15182] netlink: 'syz.0.4302': attribute type 39 has an invalid length. [ 234.921504][T15198] lo speed is unknown, defaulting to 1000 [ 235.032449][T15177] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.102320][T15177] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.162343][T15177] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.264728][ T6545] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.284726][ T6545] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.300111][ T6545] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.308538][ T6545] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.344281][T15209] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.412169][T15209] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.424065][T15213] siw: device registration error -23 [ 235.472646][T15209] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.488320][T15218] can0: slcan on ptm0. [ 235.521164][T15209] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.549559][T15218] can0 (unregistered): slcan off ptm0. [ 235.555170][T15218] Falling back ldisc for ptm0. [ 236.088014][T15257] lo speed is unknown, defaulting to 1000 [ 236.147201][T15262] lo speed is unknown, defaulting to 1000 [ 236.701711][T15306] netlink: 'syz.0.4350': attribute type 39 has an invalid length. [ 236.751846][T15310] __nla_validate_parse: 12 callbacks suppressed [ 236.751863][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4352'. [ 236.794214][T15313] 8021q: VLANs not supported on wg0 [ 236.819475][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4353'. [ 236.830215][T15313] tipc: Enabling of bearer rejected, already enabled [ 236.857648][T15317] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 236.985288][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 236.985302][ T29] audit: type=1400 audit(1768112779.922:19029): avc: denied { block_suspend } for pid=15318 comm="syz.0.4355" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 237.780225][ T29] audit: type=1326 audit(1768112780.722:19030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15343 comm="syz.2.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 237.806457][ T29] audit: type=1326 audit(1768112780.742:19031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15343 comm="syz.2.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 237.856551][ T29] audit: type=1326 audit(1768112780.792:19032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15343 comm="syz.2.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f062249f749 code=0x7ffc0000 [ 237.902491][ T29] audit: type=1326 audit(1768112780.842:19033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 237.926258][ T29] audit: type=1326 audit(1768112780.842:19034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 237.950041][ T29] audit: type=1326 audit(1768112780.842:19035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 237.951329][T15352] siw: device registration error -23 [ 237.973566][ T29] audit: type=1326 audit(1768112780.842:19036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 237.973595][ T29] audit: type=1326 audit(1768112780.842:19037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 237.973637][ T29] audit: type=1326 audit(1768112780.842:19038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.0.4366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73e37ff749 code=0x7ffc0000 [ 238.070209][T15359] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 238.078653][T15359] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 238.087388][T15359] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 238.095987][T15359] netlink: 108 bytes leftover after parsing attributes in process `+}[@'. [ 238.104593][T15359] netlink: 84 bytes leftover after parsing attributes in process `+}[@'. [ 238.752707][T15387] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.822272][T15387] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.891175][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4380'. [ 238.902274][T15387] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.925291][T15395] can0: slcan on ptm0. [ 238.946855][T15399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4382'. [ 238.970939][T15387] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.019618][T15394] can0 (unregistered): slcan off ptm0. [ 239.103681][ T6545] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.122579][ T6545] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.139440][ T6545] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.157958][ T6545] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.216422][T15414] netlink: 'syz.3.4389': attribute type 10 has an invalid length. [ 239.232678][T15414] team0: Port device dummy0 added [ 239.274394][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4392'. [ 239.298566][T15422] vlan0: entered allmulticast mode [ 239.449087][T15441] netlink: 'syz.0.4402': attribute type 10 has an invalid length. [ 239.525052][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.541717][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.567287][ T8384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.575756][ T8384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.621833][T15454] SET target dimension over the limit! [ 239.705385][T15472] netlink: 'syz.3.4416': attribute type 10 has an invalid length. [ 239.743214][T15477] vlan2: entered allmulticast mode [ 240.078197][T15535] can0: slcan on ptm1. [ 240.100920][T15535] can0 (unregistered): slcan off ptm1. [ 240.348177][T15560] warn_alloc: 7 callbacks suppressed [ 240.348191][T15560] syz.4.4453: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 240.368207][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.4.4453 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.368269][T15560] Tainted: [W]=WARN [ 240.368277][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.368290][T15560] Call Trace: [ 240.368299][T15560] [ 240.368308][T15560] __dump_stack+0x1d/0x30 [ 240.368408][T15560] dump_stack_lvl+0x95/0xd0 [ 240.368432][T15560] dump_stack+0x15/0x1b [ 240.368453][T15560] warn_alloc+0x12b/0x1a0 [ 240.368488][T15560] __vmalloc_node_range_noprof+0xa0/0x1310 [ 240.368587][T15560] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 240.368611][T15560] ? perf_cgroup_switch+0x10c/0x480 [ 240.368632][T15560] ? xfd_validate_state+0x45/0xf0 [ 240.368723][T15560] ? save_fpregs_to_fpstate+0x100/0x160 [ 240.368757][T15560] ? _raw_spin_unlock+0x26/0x50 [ 240.368780][T15560] ? finish_task_switch+0x7a/0x2a0 [ 240.368807][T15560] ? should_fail_ex+0x30/0x280 [ 240.368877][T15560] ? should_failslab+0x8c/0xb0 [ 240.368901][T15560] vmalloc_user_noprof+0x7d/0xb0 [ 240.368923][T15560] ? xskq_create+0x80/0xe0 [ 240.368937][T15560] xskq_create+0x80/0xe0 [ 240.369009][T15560] xsk_init_queue+0x95/0xf0 [ 240.369035][T15560] xsk_setsockopt+0x3f5/0x640 [ 240.369067][T15560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.369142][T15560] __sys_setsockopt+0x184/0x200 [ 240.369218][T15560] __x64_sys_setsockopt+0x64/0x80 [ 240.369241][T15560] x64_sys_call+0x21d5/0x3000 [ 240.369267][T15560] do_syscall_64+0xca/0x2b0 [ 240.369371][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.369392][T15560] RIP: 0033:0x7f1e2410f749 [ 240.369406][T15560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.369424][T15560] RSP: 002b:00007f1e22b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.369442][T15560] RAX: ffffffffffffffda RBX: 00007f1e24365fa0 RCX: 00007f1e2410f749 [ 240.369472][T15560] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 240.369486][T15560] RBP: 00007f1e24193f91 R08: 0000000000000004 R09: 0000000000000000 [ 240.369499][T15560] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.369513][T15560] R13: 00007f1e24366038 R14: 00007f1e24365fa0 R15: 00007fff5d0aefb8 [ 240.369580][T15560] [ 240.593597][T15560] Mem-Info: [ 240.596716][T15560] active_anon:44253 inactive_anon:5 isolated_anon:0 [ 240.596716][T15560] active_file:23753 inactive_file:2665 isolated_file:0 [ 240.596716][T15560] unevictable:0 dirty:372 writeback:0 [ 240.596716][T15560] slab_reclaimable:3383 slab_unreclaimable:29957 [ 240.596716][T15560] mapped:40958 shmem:39559 pagetables:1549 [ 240.596716][T15560] sec_pagetables:0 bounce:0 [ 240.596716][T15560] kernel_misc_reclaimable:0 [ 240.596716][T15560] free:1810224 free_pcp:11840 free_cma:0 [ 240.641966][T15560] Node 0 active_anon:176988kB inactive_anon:20kB active_file:95012kB inactive_file:10660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123080kB dirty:1512kB writeback:0kB shmem:158376kB kernel_stack:5072kB pagetables:6280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.669772][T15560] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.699437][T15560] lowmem_reserve[]: 0 2880 7859 7859 [ 240.704949][T15560] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 240.736347][T15560] lowmem_reserve[]: 0 0 4978 4978 [ 240.741407][T15560] Node 0 Normal free:4279616kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176872kB inactive_anon:20kB active_file:95012kB inactive_file:10660kB unevictable:0kB writepending:1512kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:44092kB local_pcp:41964kB free_cma:0kB [ 240.774681][T15560] lowmem_reserve[]: 0 0 0 0 [ 240.779194][T15560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.791926][T15560] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 240.808019][T15560] Node 0 Normal: 1822*4kB (UME) 1427*8kB (UME) 573*16kB (UE) 331*32kB (UME) 238*64kB (UE) 125*128kB (UME) 101*256kB (UE) 98*512kB (U) 85*1024kB (UME) 56*2048kB (UM) 960*4096kB (UM) = 4279616kB [ 240.827350][T15560] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 240.836667][T15560] 66010 total pagecache pages [ 240.841387][T15560] 6 pages in swap cache [ 240.845531][T15560] Free swap = 124972kB [ 240.849687][T15560] Total swap = 124996kB [ 240.853819][T15560] 2097051 pages RAM [ 240.857597][T15560] 0 pages HighMem/MovableOnly [ 240.862273][T15560] 81271 pages reserved [ 240.895003][T15568] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 241.218405][T15593] ================================================================== [ 241.226502][T15593] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 241.236131][T15593] [ 241.238436][T15593] write to 0xffff88811b668300 of 8 bytes by task 15592 on cpu 0: [ 241.246126][T15593] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 241.251999][T15593] page_pool_alloc_pages+0xd0/0x130 [ 241.257178][T15593] bpf_test_run_xdp_live+0x54d/0x11d0 [ 241.262547][T15593] bpf_prog_test_run_xdp+0x525/0x970 [ 241.267812][T15593] bpf_prog_test_run+0x204/0x340 [ 241.272723][T15593] __sys_bpf+0x4c0/0x7c0 [ 241.276946][T15593] __x64_sys_bpf+0x41/0x50 [ 241.281340][T15593] x64_sys_call+0x28e1/0x3000 [ 241.285995][T15593] do_syscall_64+0xca/0x2b0 [ 241.290485][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.296366][T15593] [ 241.298672][T15593] read to 0xffff88811b668300 of 8 bytes by task 15593 on cpu 1: [ 241.306275][T15593] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 241.312146][T15593] napi_pp_put_page+0xe9/0x200 [ 241.316888][T15593] skb_free_head+0x12c/0x150 [ 241.321453][T15593] skb_release_data+0x33b/0x370 [ 241.326280][T15593] __kfree_skb+0x44/0x150 [ 241.330590][T15593] sk_skb_reason_drop+0xbd/0x270 [ 241.335518][T15593] udp_recvmsg+0x115/0xa80 [ 241.339914][T15593] inet_recvmsg+0x143/0x290 [ 241.344406][T15593] sock_recvmsg+0xf6/0x170 [ 241.348817][T15593] ____sys_recvmsg+0xf5/0x280 [ 241.353473][T15593] ___sys_recvmsg+0x11f/0x370 [ 241.358128][T15593] do_recvmmsg+0x1ef/0x540 [ 241.362519][T15593] __x64_sys_recvmmsg+0xe5/0x170 [ 241.367433][T15593] x64_sys_call+0x2b75/0x3000 [ 241.372087][T15593] do_syscall_64+0xca/0x2b0 [ 241.376574][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.382442][T15593] [ 241.384741][T15593] value changed: 0xffffea00046ff800 -> 0x0000000000000000 [ 241.391818][T15593] [ 241.394123][T15593] Reported by Kernel Concurrency Sanitizer on: [ 241.400255][T15593] CPU: 1 UID: 0 PID: 15593 Comm: syz.0.4466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 241.411724][T15593] Tainted: [W]=WARN [ 241.415509][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.425553][T15593] ==================================================================