last executing test programs: 6m8.602038644s ago: executing program 32 (id=6050): mknod(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x1) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r0, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r0, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0xc5, 0x1, 'client1\x00', 0x80000001, "5a5236174f73411c", "139aa537d32b873da1d8f9fc581cf3609031e509f7ccd3f33bd98273d4a476a9", 0x2e0, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x10a) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28df0000", @ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="bbd426bd7000ffdbdf251f0000000a0001007770616e3100000008000200", @ANYBLOB, @ANYRES32=r3, @ANYRESOCT=r2, @ANYRES64=r5, @ANYRESOCT=r5], 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xcf098d6aca10881, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 31.534258663s ago: executing program 33 (id=11945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x0, 0x3, 0x5, 0x8}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r4, @ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x9, 0x81, @vifc_lcl_ifindex=r2, @remote}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = memfd_secret(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x1c, 0x10d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x201}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f00000002c0), &(0x7f0000000440)}, 0x20) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0xfd44) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000067980700140000000c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB="0800040001800000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r13, &(0x7f00000001c0)=""/188, 0xbc, 0x0) 27.69117386s ago: executing program 34 (id=12034): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e22, 0x8000, @mcast1, 0x1}, {0xa, 0x4e24, 0x7, @mcast2, 0x80}, 0x0, {[0xfff, 0x17b5, 0x7, 0x7ff, 0x7ff, 0xba, 0x2, 0x79f]}}, 0x5c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT=r5, @ANYBLOB="fc833f36471e585c8a7c4bb4849ad5a8b4891ca581850d50c502e96f71246ff4fd91a21244f56c0b4d5dd3e0fa0faf85a2ad8516a8fc16ca7e9c039dc404b10201c1bc6acb399237dc595133e18743f3cfa32a28332c7257c4335e6bec2dcc4266199f6828e6ab5fa46099c4ae788b044448f41b9f26d8943fdff4c8e5060cb4b3c413008621a9ddfe8d65c5ab4d81fd84eda811e2c6e14969678326c16de58d6051c4f8895a6e787c0807bac843e80a0c8808d52c0b516d50ace6f7a0c4750d36fc760c56f1707091334e086a30433637295f785d56de7fd3236590692a21", @ANYRES16=r0, @ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYRES32]) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 25.953145871s ago: executing program 7 (id=12072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, 0x0, 0x800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setitimer(0x0, 0x0, 0x0) remap_file_pages(&(0x7f000001a000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) writev(r4, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 25.786587387s ago: executing program 7 (id=12074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000012000100bd7000fbdbdf25ac1414bb000000000000000000000000000004d60a00330000"], 0x28}}, 0x44804) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 25.704565385s ago: executing program 7 (id=12075): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) 25.685089617s ago: executing program 7 (id=12076): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb700000000008500008001000000950000000000000000000017f8186d2ac421f71e44bf2a9601b41c5d89a7cd5852ee0d9a7545328ddf9b14fc797336d77340b1f8eee689fc9acc125c560bffde4f88361ce2101de1640714fd264c3f9a65f93bd7b0161d3191"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0x41, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r6, 0x0, 0x1) 25.630521883s ago: executing program 7 (id=12079): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 25.505131945s ago: executing program 0 (id=12081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r2, r2) 25.473198058s ago: executing program 0 (id=12082): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 25.472434158s ago: executing program 0 (id=12083): socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2) fsync(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) sendfile(r2, r2, &(0x7f0000001000), 0xffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="fcff00000000", @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00000000020000000400"/28], 0x50) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x62000000) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x3}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r8 = io_uring_setup(0x1020, &(0x7f00000000c0)={0x0, 0x6a0d, 0x3000, 0x1, 0x387}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r8, 0x21, &(0x7f0000000340)={0x0, 0x2fc3f, 0x10, 0x2, 0x377, 0x0, r8}, 0x1) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) 25.215303453s ago: executing program 35 (id=12084): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (fail_nth: 3) 24.929192372s ago: executing program 0 (id=12089): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb700000000008500008001000000950000000000000000000017f8186d2ac421f71e44bf2a9601b41c5d89a7cd5852ee0d9a7545328ddf9b14fc797336d77340b1f8eee689fc9acc125c560bffde4f88361ce2101de1640714fd264c3f9a65f93bd7b0161d3191"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0x41, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r6, 0x0, 0x1) 24.890546726s ago: executing program 0 (id=12091): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f271a76d268834616688a8e33347b45817df65e7b77636e148a4834fad64e274fbe3bbe46367a4a3e40d73660322a63127e0a46b35111b6fe4a306b2e57c17c0bb7c6f6b14c09eb34565124fa76c66ecb597f3f10179549fd2d7", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffff30) 24.652271449s ago: executing program 0 (id=12096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (fail_nth: 2) 24.63774173s ago: executing program 36 (id=12096): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (fail_nth: 2) 23.940843878s ago: executing program 7 (id=12099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}, 0xc0011122) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) 23.940713558s ago: executing program 37 (id=12099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}, 0xc0011122) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8}]}, 0x54}}, 0x0) 19.888681806s ago: executing program 9 (id=12147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xa16ce6bc5f1d68e1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x4, 0x16, 0xecc, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x48}}, 0x0) (fail_nth: 5) 19.55513543s ago: executing program 9 (id=12149): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x802}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000380), &(0x7f00000005c0)=r3}, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000780)=""/208, 0xd0}, {&(0x7f0000000000)=""/76, 0x4c}], 0x2, 0x5, 0x7) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)='kmem_cache_free\x00', 0x0, r1) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x1}], 0x2, 0x2060, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110004", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='ext4_da_reserve_space\x00', r8, 0x0, 0x488}, 0x1a12876f812d3967) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) 19.412908674s ago: executing program 9 (id=12151): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) (fail_nth: 3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) 19.027071351s ago: executing program 9 (id=12155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb700000000008500008001000000950000000000000000000017f8186d2ac421f71e44bf2a9601b41c5d89a7cd5852ee0d9a7545328ddf9b14fc797336d77340b1f8eee689fc9acc125c560bffde4f88361ce2101de1640714fd264c3f9a65f93bd7b0161d3191"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0x41, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r5, 0x0, 0x1) 18.947280309s ago: executing program 9 (id=12159): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r3 = msgget$private(0x0, 0x480) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgsnd(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_RMID(r3, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x16000f57) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_forget\x00', r6, 0x0, 0x1}, 0x18) 18.886291335s ago: executing program 8 (id=12160): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x200000c1}], 0x1}, 0x60) 18.844926729s ago: executing program 8 (id=12163): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3c, 0x6}}]}, 0x3c}}, 0x0) 18.766929807s ago: executing program 8 (id=12167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket(0x28, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 18.7405836s ago: executing program 8 (id=12168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb700000000008500008001000000950000000000000000000017f8186d2ac421f71e44bf2a9601b41c5d89a7cd5852ee0d9a7545328ddf9b14fc797336d77340b1f8eee689fc9acc125c560bffde4f88361ce2101de1640714fd264c3f9a65f93bd7b0161d3191"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0x41, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r5, 0x0, 0x1) 18.678990885s ago: executing program 9 (id=12169): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r1) 18.677939545s ago: executing program 8 (id=12170): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="e800000000020103000000000000000007000002fd000a80a40003800c00028005000100880000002c000180a9ff0300ff020007f26ad47ec59c94000000000114000400ff0200000000020000000000000000010c000280050001002f000000140001e98008000100ac14142308000200ac1414bb2c000180140003000000000000000000000000000000000014000400fc0000000000000000000000000000000000018008000100ffffffff08000200e000000206000ffea25fe6453eef2a2a0340000000000e0006007369722d32303030300000000e000600736e6d705f7472617000000009"], 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) syz_emit_ethernet(0xbe, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000004000000d57e190d001e6e1d16c1711bbd8adbf65bd846957b370300000000000000b390b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b01acae6f69ea1443db8d53074a226b15af54944d4894a87f20c65bfb8e0c8cfb6738f5e54b3dc7901327d4fc41c070b4d66f0f9565df74d2653a13d554fee0e7be27c873db314d5333aac9eee1bcdd432c7ae9b587fc708c9c95a6b4ad8e93ed119be9"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000bc0)={0x16c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8000, 0xfffffffb}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x11c, 0x51, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b42ede7018"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9253a2efa94dbd8bb6dc87457e"}, @NL80211_KEY_SEQ={0xe, 0x4, "f0e1721d4f577da4d91e"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d58edf4959683a419bb491d1de"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "66d2443c84414fa571c6687ef6"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0x9, 0x4, "d61a42d0a2"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "1de394b8e8197e29ef1835a003"}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "44faa1ee4c258f3c1eeeb79df1"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "95936c163c9389b734999845c7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6544efce67"}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "666ff155714f970e12ec361dcf"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f88d5555a7f33ac4a611e89beb"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x886a, 0x0, 0x3, 0x0, {0x6e8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x8, 0x1}}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4040805}, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x622240, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x401, 0xc}}}}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x4}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 18.619237421s ago: executing program 38 (id=12169): creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) close(r1) 18.498958603s ago: executing program 8 (id=12173): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x10, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 18.474995675s ago: executing program 39 (id=12173): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x5, 0x200, 0x40, 0x10, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 16.158046923s ago: executing program 2 (id=12189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x8842) 16.104703448s ago: executing program 2 (id=12190): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@remote, {}, {}, {0x0, 0x5c}, 0x0, 0x10000000, 0xa}, 0x5, 0x5}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010100, @in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x34ff, 0x8, 0xa}]}]}, 0x148}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$loop(&(0x7f0000000080), 0xc, 0x52000) ioctl$BLKRASET(r5, 0x1262, &(0x7f0000000240)=0x8) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x30, r6, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x5}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0xc0041) 16.044736734s ago: executing program 2 (id=12191): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 16.044181984s ago: executing program 2 (id=12192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000018007b8af8ff00000000bfa200000000000007020000f8ffffffb700000000008500008001000000950000000000000000000017f8186d2ac421f71e44bf2a9601b41c5d89a7cd5852ee0d9a7545328ddf9b14fc797336d77340b1f8eee689fc9acc125c560bffde4f88361ce2101de1640714fd264c3f9a65f93bd7b0161d3191"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0xb45, 0x1, 0x7fffffff, 0xbf0e, 0x41, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0xfffffffe, 0xafb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(0x0, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r5, 0x0, 0x1) 15.906417938s ago: executing program 2 (id=12193): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x140, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0xee, 0x4, 0x0, 0x7, 0x8, 0x652, 0x7, 0x8000009657, 0x1, 0x6, 0x0, 0x10, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x10000000000001, 0x0, 0x809, 0x1, 0xfffffffffffffffa, 0x2, 0xf64d}) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) r7 = getegid() setresgid(0xee00, r6, r7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 15.435440584s ago: executing program 2 (id=12194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 15.435221004s ago: executing program 40 (id=12194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.533156079s ago: executing program 1 (id=12408): r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4077, 0xfed}], 0x1, 0xa3, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.492037283s ago: executing program 1 (id=12410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) 1.476453235s ago: executing program 1 (id=12411): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33a34d5a, 0xfffffffe, 0xb, 0x1, 0xffffffff, 0xffff, 0x5, 0x7, 0x22}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002020000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20014000) 1.231813819s ago: executing program 4 (id=12423): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21087e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x3, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)="61857b3292f3b231ead6b2300feb1af4d8dfc6de64ff14", 0x17, 0x58f2632) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, r7}, 0x10) 1.165597585s ago: executing program 4 (id=12427): syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") 1.148076137s ago: executing program 4 (id=12429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 1.082655064s ago: executing program 4 (id=12433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292dfb4929a5e25909ded", 0xb, 0x7, 0x0, 0x2}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b80)={0x1fc, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x160, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "ad6718a8d7f0221f020180e705641b43ac69ad4b4a6f6d648f53a675e7257f154137eb8ac979050253e915ed341d9f791ab31c9ba5368f1e438f0818ed2a30149d94fa3a66c1b72a8df15a7784108e30207e46b3de3afb5eefa2b1ff53ad5bb9ef25daf339c79d60165e2254b03c848c2639b8fd59e45ed84f21285bfca3fde0251d184c438e91ea97b134b0e4c47372cdc517739a44cd1f4e797ed2d6ecee0d1defd504971b5f2ad43ae2aec02accb35147e647b3dd"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x27b6e874}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "c2e4037a06d6618b167736225a9626d0efbe537c0b2ea9ed062d8038bc0716da31ffe6540e34b394835027bc279bb3990fac6f44f9bacb4a8a7679dec67a1b2235b49b0843"}, @ETHTOOL_A_BITSET_VALUE={0x37, 0x4, "d745b3fda04c37bfb5d09fd497d6981542d8e4741c02ab54013da5c0e33a9a683767cac10e348daf0546a8495df89dee8fa0a4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c841) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000280), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) personality(0x400000b) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x29, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) 1.082226784s ago: executing program 6 (id=12434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 1.025654929s ago: executing program 5 (id=12436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 1.01415778s ago: executing program 6 (id=12437): shutdown(0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000702fdffffffffffffff100008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpgid(0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x4, @empty, 0x4}], 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r7, 0x0, 0x1000000}, 0x18) setrlimit(0x9, &(0x7f0000000000)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000300)={&(0x7f0000000700)=""/158, 0x9e, 0x8f8, 0x76be}) io_setup(0x2004, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(0x0, 0x0, 0x0, 0x0, r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.009794011s ago: executing program 3 (id=12438): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21087e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x3, 0x511, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)="61857b3292f3b231ead6b2300feb1af4d8dfc6de64ff14", 0x17, 0x58f2632) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, r7}, 0x10) 968.876175ms ago: executing program 6 (id=12439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) 968.417285ms ago: executing program 3 (id=12440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r2, r2) 967.762435ms ago: executing program 6 (id=12441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000500), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x18) io_setup(0x3, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000900)='kfree\x00', r3}, 0x18) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6ymqVKBU5pJvVSJ5ktSt2V8WmlMTEcjCWk5AQ0pjS1JekLS2lpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUnDZ2V1r9Wcl/5HlNP39RPadfeeZd953drLPznpnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASKqzpdJkErW8vnQ6Ha4622wsbDG/395P1xRbrDci6fwX+/bFgW7Vgf9dnX1/5+FoHOo+OxT7OsW+uHzP/fc+8T+jI/3lt+jQzToyfNbY4JMk4uudTl08u7Ky/Mpt6Mgu+taPexP7rnuRv1/tPM5n9bzVyBcq81matxrpzPR06ZFTc610Lq9lrTOtdraQVptZpd1opserJ9LJmZmpNJs401iqz89Walm/8vGHy6XSdPr0xGJWabYa9UeenmhVT+W1Wl6fL2LKpdejE/N4Z0d8Jm+n7ayykKbnL6wsT23X1U7Q5JqavWt2nEMP3fvxax/95cJyZ4cc1kjS2zHLk5Pl8uT0YzOPPV4qjZZL5bUVpXXiWkSMRHQibstOy511zyZ1o709ZsOMiKv/vTNv3nCLRnr5P2qRRz2W4nSkkcZI8bj6NxbVmI1mNGKh8/w3Y+vmb8j////IH3+11XoH838/yx9YnX0wivx/uPvs8LD8v6EXO/A3OqzV+vvd3gzWvRpvxOW4GGdjJVZiOV65mTXuWd/qbfwb2dn25iOLeuTRikbksRCVoibt1aQxE9MxHaV4Nk7FXLQijbnIoxZZtOJMtKIdWbFHVaMZWVSiHY1oRhrHoxonIo3JmImZmIo0spiIM9GIpajHfMxGpWjlfFwotvvUun7d/7XnfvTCrz9+pzN9LWhyi4EknQ9znaA/bxG0Id3fQP7vRIz09u5dyUnskn03+Kru0Ds33LqrRf4fvdPdAAAAAG6jpPj2PYmIsXigmJrLa9mX7nS3AAAAgB1U/K75UKcY60w9EEnn+L+0SeSHu943AAAAYGckxTl2SUSMx4Pdqf7pUpt9CQAAAAD8Gyr+/f9wpxiPeLOocPwPAAAAnzHfGHaN/Y/29K6x21rcm/zkT9FsjiVXFk8/lFyqdOIql+7qLtcrvnitxfbcwWR/r5GimB69fE8SEaPV7FDSv/rlP/d2y0+Kx4OrFyAcdq3/ZJsOxNYdKJ7Ft+NIN+bIuW55rj+nu5bxubyWTVQbtScmk96XI+3XXrzwlSiG/836wv4kzl9YWZ54/qWVc0VfrnRauXKpd3n4pL9URPeEii36crW3BeKBzUc8VpyI0VvveHe9pcHx964mO7L1+JPBdb4VR7sxR8e75fja8e/rrHNy4onJqFT2j7Sz0+3Xrg6MvteLydWR7+2PNrmBV+GtONaNOXb8WLfYpBflNb14cWMvyoPb//q2xXX34p0jb57+688bSTa1XS+mbrEXAHfK+eKqP6tZ6O4iC/3jalcnoa3Lu3f3l7yRd7nzq58y+ssP5LrR2JDd05vJ7m/F8W7M8e7nidGDm+SV0ibv6C9fePkXvXf0R9/7/g++fPiXH6zL6zfQi/fiRDemV8R9PxuSYztj/s66rPpuZ4l3h663VSsnr++dGku6Nx+Kyw9fuHT2heUXll8sl6emS4+WSo+VY6z4qNArhvRU5gH4z7bdPXY++Oq10GF34Uke3eao+r5rPymYiOfjpViJc3GyONsgIh7cvNXxgZ8hnNzmqHV84A4vJ7c5tlyNLa+P3XssiSGxUwNb7P++VxR/u00vCADsgqPb5OEk7u3Of/2/ekusi7grSU5uc9y9Npef6N44t390HMNz+aDf98rP3/YtAgCffVnzk2S8/XbSbOaLz07OzExW2qeytNmoPpM289n5LM3r7axZPVWpz2fpYrPRblT7Xx3PZq20tbS42Gi207lGM11stPLTxZ3f096t31vZQqXezqutxVpWaWVptVFvV6rtdDZvVdPFpadqeetU1iwWbi1m1Xwur1baeaOethpLzWo2kaatLBsIzGezejufy7OxNK+ni818odK8EhG1pYUsnc1a1Wa+2G50G+yvK6/PNZoLRbMTG4f/h93e3gDwafDqG5cvnl1ZWX7l5iZ+ez3Bd3qMAMBasjQAAAAAAAAAAAAAAHz6bTxdr1N7QycCjsVNnz746t64lbMPP3sTn3u/+7LsRIO30s7da17TPb2d5c5vnxueeO7JJy+u1iSjg5v3qTcPnPpdFv3RbdHO5v+nbHaq69v7I/b88Lvdmi8MCU5Gd3ikH0bETSx+NdkiZvffiwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgO/8KAAD//wifUTs=") 928.282469ms ago: executing program 3 (id=12442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 927.346779ms ago: executing program 3 (id=12443): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) io_uring_setup(0x666b, &(0x7f00000004c0)={0x0, 0xe394, 0x8000, 0x1, 0x9a}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000f80)={{r0}, "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"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xc, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 923.737429ms ago: executing program 5 (id=12444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 863.390185ms ago: executing program 5 (id=12445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) (fail_nth: 1) 657.129645ms ago: executing program 1 (id=12446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TCSETSW2(r1, 0x5453, 0x0) 643.447587ms ago: executing program 5 (id=12447): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) unshare(0x40000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 628.435488ms ago: executing program 1 (id=12448): r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/raw6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4077, 0xfed}], 0x1, 0xa3, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 627.046348ms ago: executing program 4 (id=12449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x8842) 607.39268ms ago: executing program 6 (id=12450): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) unshare(0x40000000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 592.692662ms ago: executing program 1 (id=12451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10000, &(0x7f00000005c0)={[{@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x101282, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r6}, 0x10) r7 = inotify_init1(0x800) inotify_add_watch(r7, 0x0, 0xa4000960) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r11 = socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x29, 0x0, 0x0) bind$rxrpc(r11, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r11, 0x4) close_range(r11, r11, 0x0) 586.673053ms ago: executing program 4 (id=12452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x30, r1, 0x209, 0x70bd2d, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008881}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x4c017) socket$inet(0x2, 0x1, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) 324.719918ms ago: executing program 5 (id=12453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) dup2(r2, r2) 243.413776ms ago: executing program 5 (id=12454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 86.663492ms ago: executing program 3 (id=12455): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21087e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x3, 0x511, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000080)="61857b3292f3b231ead6b2300feb1af4d8dfc6de64ff14", 0x17, 0x58f2632) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r1, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4, r7}, 0x10) 52.644614ms ago: executing program 6 (id=12456): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="07000000040000000802000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) 0s ago: executing program 3 (id=12457): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) fcntl$setlease(r0, 0x400, 0x0) kernel console output (not intermixed with test programs): 0x200 [ 846.901683][ T6292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 846.901705][ T6292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 846.901724][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.901760][ T6292] RIP: 0033:0x7fc816bbefc9 [ 846.901774][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.901791][ T6292] RSP: 002b:00007fc81561f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.901812][ T6292] RAX: ffffffffffffffda RBX: 00007fc816e15fa0 RCX: 00007fc816bbefc9 [ 846.901825][ T6292] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 846.901887][ T6292] RBP: 00007fc81561f090 R08: 0000000000000000 R09: 0000000000000000 [ 846.901899][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.901910][ T6292] R13: 00007fc816e16038 R14: 00007fc816e15fa0 R15: 00007fffdd962948 [ 846.901932][ T6292] [ 846.901939][ T6292] syz.5.11813: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 847.008168][ T6290] tipc: Enabled bearer , priority 0 [ 847.008940][ T6292] ,cpuset=/,mems_allowed=0 [ 847.008972][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.5.11813 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 847.009082][ T6292] Tainted: [W]=WARN [ 847.009089][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 847.009176][ T6292] Call Trace: [ 847.009183][ T6292] [ 847.009192][ T6292] __dump_stack+0x1d/0x30 [ 847.009214][ T6292] dump_stack_lvl+0xe8/0x140 [ 847.009234][ T6292] dump_stack+0x15/0x1b [ 847.009250][ T6292] warn_alloc+0x12b/0x1a0 [ 847.009300][ T6292] __vmalloc_node_range_noprof+0x4b9/0xed0 [ 847.009397][ T6292] ? cred_has_capability+0x210/0x280 [ 847.009426][ T6292] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 847.009484][ T6292] __vmalloc_noprof+0x83/0xc0 [ 847.009511][ T6292] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 847.009583][ T6292] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 847.009683][ T6292] ? bpf_prog_alloc+0x2a/0x150 [ 847.009711][ T6292] bpf_prog_alloc+0x3c/0x150 [ 847.009740][ T6292] bpf_prog_load+0x506/0x1100 [ 847.009836][ T6292] ? security_bpf+0x2b/0x90 [ 847.009857][ T6292] __sys_bpf+0x469/0x7c0 [ 847.009887][ T6292] __x64_sys_bpf+0x41/0x50 [ 847.009920][ T6292] x64_sys_call+0x2aee/0x3000 [ 847.009962][ T6292] do_syscall_64+0xd2/0x200 [ 847.010021][ T6292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 847.010048][ T6292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 847.010071][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.010091][ T6292] RIP: 0033:0x7fc816bbefc9 [ 847.010156][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.010173][ T6292] RSP: 002b:00007fc81561f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 847.010192][ T6292] RAX: ffffffffffffffda RBX: 00007fc816e15fa0 RCX: 00007fc816bbefc9 [ 847.010205][ T6292] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 847.010281][ T6292] RBP: 00007fc81561f090 R08: 0000000000000000 R09: 0000000000000000 [ 847.010294][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.010307][ T6292] R13: 00007fc816e16038 R14: 00007fc816e15fa0 R15: 00007fffdd962948 [ 847.010326][ T6292] [ 847.010333][ T6292] Mem-Info: [ 847.014338][ T6290] syzkaller0: entered promiscuous mode [ 847.018098][ T6292] active_anon:7850 inactive_anon:10194 isolated_anon:0 [ 847.018098][ T6292] active_file:27017 inactive_file:2716 isolated_file:0 [ 847.018098][ T6292] unevictable:0 dirty:250 writeback:0 [ 847.018098][ T6292] slab_reclaimable:3838 slab_unreclaimable:48817 [ 847.018098][ T6292] mapped:31007 shmem:4308 pagetables:1581 [ 847.018098][ T6292] sec_pagetables:0 bounce:0 [ 847.018098][ T6292] kernel_misc_reclaimable:0 [ 847.018098][ T6292] free:1792921 free_pcp:39938 free_cma:0 [ 847.022356][ T6290] syzkaller0: entered allmulticast mode [ 847.026795][ T6292] Node 0 active_anon:31400kB inactive_anon:40776kB active_file:108068kB inactive_file:10864kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124028kB dirty:1000kB writeback:0kB shmem:17232kB kernel_stack:6352kB pagetables:6324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 847.357476][ T6303] netlink: 'syz.3.11816': attribute type 1 has an invalid length. [ 847.363762][ T6292] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 847.415741][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11816'. [ 847.421032][ T6292] lowmem_reserve[]: 0 2883 7862 7862 [ 847.421065][ T6292] Node 0 DMA32 free:2949044kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952676kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 847.537240][ T6292] lowmem_reserve[]: 0 0 4978 4978 [ 847.542321][ T6292] Node 0 Normal free:4207280kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31400kB inactive_anon:40776kB active_file:108068kB inactive_file:10864kB unevictable:0kB writepending:1000kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:155888kB local_pcp:68908kB free_cma:0kB [ 847.576011][ T6292] lowmem_reserve[]: 0 0 0 0 [ 847.580593][ T6292] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 847.593363][ T6292] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949044kB [ 847.609394][ T6292] Node 0 Normal: 5150*4kB (UME) 4853*8kB (UME) 1420*16kB (UME) 1012*32kB (UME) 574*64kB (UME) 277*128kB (UME) 313*256kB (UM) 296*512kB (UM) 140*1024kB (UM) 148*2048kB (UM) 816*4096kB (UME) = 4207200kB [ 847.629227][ T6292] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 847.638640][ T6292] 44214 total pagecache pages [ 847.643609][ T6292] 10202 pages in swap cache [ 847.648191][ T6292] Free swap = 84188kB [ 847.652242][ T6292] Total swap = 124996kB [ 847.656412][ T6292] 2097051 pages RAM [ 847.660228][ T6292] 0 pages HighMem/MovableOnly [ 847.664970][ T6292] 80482 pages reserved [ 847.682211][ T6303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 847.699070][ T6306] bond1 (unregistering): Released all slaves [ 847.708966][ T6289] tipc: Resetting bearer [ 847.717510][ T6289] tipc: Disabling bearer [ 847.785797][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 847.785812][ T29] audit: type=1400 audit(1760911839.238:45667): avc: denied { create } for pid=6318 comm="syz.4.11821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 847.839647][ T6316] block device autoloading is deprecated and will be removed. [ 847.936714][ T29] audit: type=1400 audit(1760911839.270:45668): avc: denied { execmem } for pid=6318 comm="syz.4.11821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 847.956632][ T29] audit: type=1400 audit(1760911839.291:45669): avc: denied { write } for pid=6315 comm="syz.1.11820" name="file0" dev="tmpfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.979313][ T29] audit: type=1400 audit(1760911839.291:45670): avc: denied { open } for pid=6315 comm="syz.1.11820" path="/408/file0" dev="tmpfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 848.180916][ T29] audit: type=1400 audit(1760911839.659:45671): avc: denied { bind } for pid=6326 comm="syz.5.11823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 848.204106][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11827'. [ 848.205831][ T6334] netlink: 'syz.1.11825': attribute type 1 has an invalid length. [ 848.225687][ T6334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 848.254338][ T29] audit: type=1400 audit(1760911839.722:45672): avc: denied { create } for pid=6344 comm="syz.4.11828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 848.259343][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11825'. [ 848.274563][ T29] audit: type=1400 audit(1760911839.722:45673): avc: denied { setopt } for pid=6344 comm="syz.4.11828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 848.314857][ T29] audit: type=1400 audit(1760911839.795:45674): avc: denied { create } for pid=6344 comm="syz.4.11828" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 848.337912][ T6334] bond3 (unregistering): Released all slaves [ 848.371633][ T29] audit: type=1400 audit(1760911839.858:45675): avc: denied { load_policy } for pid=6344 comm="syz.4.11828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 848.381159][ T6345] SELinux: failed to load policy [ 848.559609][ T29] audit: type=1400 audit(1760911840.058:45676): avc: denied { allowed } for pid=6347 comm="syz.1.11829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 848.657097][ T6353] tipc: Started in network mode [ 848.662008][ T6353] tipc: Node identity 6e6cf59e9f4a, cluster identity 4711 [ 848.669238][ T6353] tipc: Enabled bearer , priority 0 [ 848.701422][ T6353] syzkaller0: entered promiscuous mode [ 848.707058][ T6353] syzkaller0: entered allmulticast mode [ 848.740457][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11833'. [ 848.839471][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11838'. [ 848.956221][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11843'. [ 849.058259][ T6394] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11848'. [ 849.295537][ T6404] netlink: 'syz.1.11851': attribute type 1 has an invalid length. [ 849.309163][ T6404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 849.322759][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11851'. [ 849.337312][ T6404] bond3 (unregistering): Released all slaves [ 849.443886][ T6351] tipc: Resetting bearer [ 849.453002][ T6351] tipc: Disabling bearer [ 850.116096][ T6436] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=6436 comm=syz.0.11862 [ 850.391915][ T6443] program syz.0.11862 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 850.551238][ T6445] __nla_validate_parse: 1 callbacks suppressed [ 850.551257][ T6445] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11863'. [ 850.960288][ T6474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11876'. [ 851.000480][ T6477] syzkaller0: entered promiscuous mode [ 851.006029][ T6477] syzkaller0: entered allmulticast mode [ 851.061718][ T6482] bond1: entered allmulticast mode [ 851.070387][ T6482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.084182][ T6484] netlink: 180 bytes leftover after parsing attributes in process `syz.4.11878'. [ 851.329278][ T6495] bond1: entered allmulticast mode [ 851.334641][ T6495] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.773336][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11888'. [ 851.796687][ T6505] team0 (unregistering): Port device team_slave_0 removed [ 851.805631][ T6505] team0 (unregistering): Port device team_slave_1 removed [ 851.913964][ T6518] bond4: entered allmulticast mode [ 851.919475][ T6518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 851.949091][ T6525] bond3: entered allmulticast mode [ 851.954586][ T6525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 852.140479][ T6550] netlink: 'syz.5.11905': attribute type 1 has an invalid length. [ 852.147021][ T6556] netlink: 'syz.3.11907': attribute type 1 has an invalid length. [ 852.166453][ T6550] 8021q: adding VLAN 0 to HW filter on device bond5 [ 852.178650][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11905'. [ 852.181558][ T6556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 852.198372][ T6550] bond5 (unregistering): Released all slaves [ 852.210151][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11907'. [ 852.223337][ T6556] bond2 (unregistering): Released all slaves [ 852.247308][ T6564] set match dimension is over the limit! [ 852.389963][ T6577] program syz.3.11913 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 852.499160][ T6588] 9pnet_fd: Insufficient options for proto=fd [ 852.792557][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 852.792574][ T29] audit: type=1400 audit(1760911844.473:45850): avc: denied { setopt } for pid=6593 comm="syz.3.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 852.818449][ T29] audit: type=1400 audit(1760911844.473:45851): avc: denied { connect } for pid=6593 comm="syz.3.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 852.838215][ T29] audit: type=1400 audit(1760911844.473:45852): avc: denied { name_connect } for pid=6593 comm="syz.3.11920" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 853.049673][ T29] audit: type=1326 audit(1760911844.599:45853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.073385][ T29] audit: type=1326 audit(1760911844.599:45854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.097000][ T29] audit: type=1326 audit(1760911844.610:45855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.120727][ T29] audit: type=1326 audit(1760911844.610:45856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.144285][ T29] audit: type=1326 audit(1760911844.610:45857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.167830][ T29] audit: type=1326 audit(1760911844.631:45858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.191625][ T29] audit: type=1326 audit(1760911844.631:45859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6593 comm="syz.3.11920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6ff4aefc9 code=0x7ffc0000 [ 853.587899][ T6601] chnl_net:caif_netlink_parms(): no params data found [ 853.627595][ T6636] syzkaller0: entered promiscuous mode [ 853.633201][ T6636] syzkaller0: entered allmulticast mode [ 853.668563][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.675663][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.683710][ T6601] bridge_slave_0: entered allmulticast mode [ 853.690598][ T6601] bridge_slave_0: entered promiscuous mode [ 853.707643][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.714793][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.740349][ T6601] bridge_slave_1: entered allmulticast mode [ 853.747113][ T6601] bridge_slave_1: entered promiscuous mode [ 853.773730][ T6650] bond2: entered allmulticast mode [ 853.779056][ T6650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 853.806665][ T6656] netlink: 180 bytes leftover after parsing attributes in process `syz.1.11932'. [ 853.817397][ T6601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.836485][ T6601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.877509][ T6601] team0: Port device team_slave_0 added [ 853.884338][ T6601] team0: Port device team_slave_1 added [ 853.910967][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.917964][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.943904][ T6601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.955094][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.962028][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.988044][ T6601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.034897][T11998] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 854.043286][T11998] ip6gretap1 (unregistering): left allmulticast mode [ 854.116567][T11998] bond0 (unregistering): Released all slaves [ 854.126362][T11998] bond1 (unregistering): Released all slaves [ 854.136426][T11998] bond2 (unregistering): Released all slaves [ 854.146208][T11998] bond3 (unregistering): Released all slaves [ 854.173808][ T6601] hsr_slave_0: entered promiscuous mode [ 854.180165][ T6601] hsr_slave_1: entered promiscuous mode [ 854.187627][ T6601] debugfs: 'hsr0' already exists in 'hsr' [ 854.193547][ T6601] Cannot create hsr debugfs directory [ 854.212173][T11998] tipc: Left network mode [ 854.226504][T11998] IPVS: stopping backup sync thread 31086 ... [ 854.375260][ T6690] bond2: entered allmulticast mode [ 854.380630][ T6690] 8021q: adding VLAN 0 to HW filter on device bond2 [ 854.458152][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11952'. [ 854.458267][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11953'. [ 854.560971][T11998] hsr_slave_0: left promiscuous mode [ 854.566826][T11998] hsr_slave_1: left promiscuous mode [ 854.651430][ T6601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 854.662325][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 854.671675][ T6601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 854.693928][ T6601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 854.713583][ T6601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 854.761415][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.768693][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.776030][ T6669] bridge_slave_0: entered allmulticast mode [ 854.783021][ T6669] bridge_slave_0: entered promiscuous mode [ 854.794519][ T6734] syzkaller0: entered promiscuous mode [ 854.800064][ T6734] syzkaller0: entered allmulticast mode [ 854.806824][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.814059][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.821451][ T6669] bridge_slave_1: entered allmulticast mode [ 854.827825][ T6669] bridge_slave_1: entered promiscuous mode [ 854.845427][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.855749][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.876155][ T6669] team0: Port device team_slave_0 added [ 854.883004][ T6669] team0: Port device team_slave_1 added [ 854.899248][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.906218][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.932149][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.943415][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.950354][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.976358][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.987124][ T6736] netlink: 180 bytes leftover after parsing attributes in process `syz.5.11963'. [ 855.042122][ T6669] hsr_slave_0: entered promiscuous mode [ 855.048811][ T6669] hsr_slave_1: entered promiscuous mode [ 855.054730][ T6669] debugfs: 'hsr0' already exists in 'hsr' [ 855.060522][ T6669] Cannot create hsr debugfs directory [ 855.067962][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.091408][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.114282][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.121412][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.153660][ T6750] bond4: entered allmulticast mode [ 855.158952][ T6750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 855.178500][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.185608][T12004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.255891][ T6669] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 855.279462][ T6669] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 855.294868][ T6669] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 855.307708][ T6669] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 855.368719][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.386844][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.401023][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.426176][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.433393][T12004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.469223][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.476366][T12004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.537602][ T6784] netlink: 'syz.1.11976': attribute type 1 has an invalid length. [ 855.553983][ T6784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 855.569502][ T6784] __nla_validate_parse: 1 callbacks suppressed [ 855.569516][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11976'. [ 855.581090][ T6795] FAULT_INJECTION: forcing a failure. [ 855.581090][ T6795] name failslab, interval 1, probability 0, space 0, times 0 [ 855.597352][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.0.11977 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 855.597381][ T6795] Tainted: [W]=WARN [ 855.597387][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 855.597458][ T6795] Call Trace: [ 855.597464][ T6795] [ 855.597472][ T6795] __dump_stack+0x1d/0x30 [ 855.597492][ T6795] dump_stack_lvl+0xe8/0x140 [ 855.597535][ T6795] dump_stack+0x15/0x1b [ 855.597550][ T6795] should_fail_ex+0x265/0x280 [ 855.597582][ T6795] should_failslab+0x8c/0xb0 [ 855.597608][ T6795] __kmalloc_noprof+0xa5/0x570 [ 855.597704][ T6795] ? sock_kmalloc+0x85/0xc0 [ 855.597731][ T6795] ? iovec_from_user+0x5e/0x210 [ 855.597762][ T6795] sock_kmalloc+0x85/0xc0 [ 855.597791][ T6795] ____sys_sendmsg+0xf8/0x4e0 [ 855.597841][ T6795] ___sys_sendmsg+0x17b/0x1d0 [ 855.597912][ T6795] __sys_sendmmsg+0x178/0x300 [ 855.597949][ T6795] __x64_sys_sendmmsg+0x57/0x70 [ 855.597992][ T6795] x64_sys_call+0x1c4a/0x3000 [ 855.598042][ T6795] do_syscall_64+0xd2/0x200 [ 855.598068][ T6795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 855.598095][ T6795] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 855.598178][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.598257][ T6795] RIP: 0033:0x7f77008cefc9 [ 855.598274][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.598293][ T6795] RSP: 002b:00007f76ff337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 855.598314][ T6795] RAX: ffffffffffffffda RBX: 00007f7700b25fa0 RCX: 00007f77008cefc9 [ 855.598329][ T6795] RDX: 0000000000000002 RSI: 0000200000005f40 RDI: 0000000000000003 [ 855.598343][ T6795] RBP: 00007f76ff337090 R08: 0000000000000000 R09: 0000000000000000 [ 855.598428][ T6795] R10: 0000000004000004 R11: 0000000000000246 R12: 0000000000000001 [ 855.598441][ T6795] R13: 00007f7700b26038 R14: 00007f7700b25fa0 R15: 00007ffd1bb53518 [ 855.598459][ T6795] [ 855.798828][ T6784] bond5 (unregistering): Released all slaves [ 855.816966][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.867301][ T6601] veth0_vlan: entered promiscuous mode [ 855.876374][ T6601] veth1_vlan: entered promiscuous mode [ 855.902654][ T6601] veth0_macvtap: entered promiscuous mode [ 855.911057][ T6601] veth1_macvtap: entered promiscuous mode [ 855.942995][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.967427][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.994940][ T6669] veth0_vlan: entered promiscuous mode [ 856.010453][T12007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.026510][ T6669] veth1_vlan: entered promiscuous mode [ 856.033605][T12007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.049734][ T6669] veth0_macvtap: entered promiscuous mode [ 856.057315][ T6669] veth1_macvtap: entered promiscuous mode [ 856.068031][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.076790][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.106299][T12007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.141301][T12007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.208323][T11998] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.242883][T11998] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.271426][T11998] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.285958][ T6845] xt_connbytes: Forcing CT accounting to be enabled [ 856.312174][ T6845] Cannot find set identified by id 0 to match [ 856.321831][T11998] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.355660][ T6849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11990'. [ 856.512840][ T6868] hsr0: entered promiscuous mode [ 856.534638][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11993'. [ 856.704428][ T6889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12008'. [ 856.815820][ T6897] set match dimension is over the limit! [ 856.840703][ T6899] SELinux: Context system_u:object_r:fsadm_log_t:s0 is not valid (left unmapped). [ 857.271752][ T6938] syzkaller0: entered promiscuous mode [ 857.277366][ T6938] syzkaller0: entered allmulticast mode [ 857.331001][ T6941] netlink: 'syz.5.12029': attribute type 1 has an invalid length. [ 857.338996][ T6944] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12028'. [ 857.353117][ T6941] 8021q: adding VLAN 0 to HW filter on device bond5 [ 857.365440][ T6941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12029'. [ 857.377413][ T6941] bond5 (unregistering): Released all slaves [ 857.556481][ T6952] bond5: entered allmulticast mode [ 857.562075][ T6952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 857.611340][ T6957] syzkaller0: entered promiscuous mode [ 857.616853][ T6957] syzkaller0: entered allmulticast mode [ 857.677516][ T6960] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12033'. [ 857.938082][T12057] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.965537][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 857.965551][ T29] audit: type=1400 audit(1760911849.938:46305): avc: denied { execmem } for pid=6962 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 857.997288][ T29] audit: type=1400 audit(1760911849.980:46306): avc: denied { read } for pid=6963 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 858.019290][ T29] audit: type=1400 audit(1760911849.980:46307): avc: denied { open } for pid=6963 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 858.042955][ T29] audit: type=1400 audit(1760911849.980:46308): avc: denied { mounton } for pid=6963 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 858.064620][ T29] audit: type=1400 audit(1760911849.980:46309): avc: denied { sys_module } for pid=6963 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 858.191173][ T29] audit: type=1400 audit(1760911850.180:46310): avc: denied { block_suspend } for pid=6985 comm="syz.4.12041" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 858.225787][ T29] audit: type=1400 audit(1760911850.212:46311): avc: denied { write } for pid=6987 comm="syz.0.12042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 858.245500][ T29] audit: type=1400 audit(1760911850.212:46312): avc: denied { map } for pid=6987 comm="syz.0.12042" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=142786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.256747][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 858.270111][ T29] audit: type=1400 audit(1760911850.212:46313): avc: denied { read write } for pid=6987 comm="syz.0.12042" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=142786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 858.319729][ T29] audit: type=1326 audit(1760911850.306:46314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.4.12043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a40a0efc9 code=0x7ffc0000 [ 858.350657][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.357797][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.365393][ T6963] bridge_slave_0: entered allmulticast mode [ 858.372266][ T6963] bridge_slave_0: entered promiscuous mode [ 858.388709][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.396217][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.403849][ T6963] bridge_slave_1: entered allmulticast mode [ 858.410410][ T6963] bridge_slave_1: entered promiscuous mode [ 858.475964][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.485717][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12047'. [ 858.514493][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.548342][ T7011] bond3: entered allmulticast mode [ 858.553856][ T7011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 858.561828][ T7014] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12049'. [ 858.589394][ T6963] team0: Port device team_slave_0 added [ 858.600795][ T6963] team0: Port device team_slave_1 added [ 858.619401][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.626627][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.652690][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.665028][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.672144][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.698313][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.726788][ T6963] hsr_slave_0: entered promiscuous mode [ 858.733196][ T6963] hsr_slave_1: entered promiscuous mode [ 858.739350][ T6963] debugfs: 'hsr0' already exists in 'hsr' [ 858.745102][ T6963] Cannot create hsr debugfs directory [ 858.825087][ T6963] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 858.833902][ T6963] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 858.844589][ T6963] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 858.853760][ T6963] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 858.888783][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.903864][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.915970][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.923126][T11998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.935781][T12007] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.942973][T12007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.962086][ T7036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.963114][ T6963] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 858.972853][ T7036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.980985][ T6963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.040696][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.132325][ T6963] veth0_vlan: entered promiscuous mode [ 859.140015][ T6963] veth1_vlan: entered promiscuous mode [ 859.155516][ T6963] veth0_macvtap: entered promiscuous mode [ 859.163580][ T6963] veth1_macvtap: entered promiscuous mode [ 859.174674][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.185964][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.197297][T11999] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.206433][T12035] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.215773][T12035] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.224977][T12035] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.426237][ T7069] netlink: 'syz.1.12063': attribute type 1 has an invalid length. [ 859.445080][ T7069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.463130][T12057] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.486019][ T7069] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.493702][ T7069] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 859.505716][ T7069] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 859.526577][ T7077] ip6erspan0: entered promiscuous mode [ 859.534550][ T7077] bond5: (slave ip6erspan0): making interface the new active one [ 859.542826][ T7077] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 859.560246][T12057] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.584956][ T7077] macvlan2: entered promiscuous mode [ 859.590814][ T7077] bond5: entered promiscuous mode [ 859.596283][ T7077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 859.605875][ T7077] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 859.619871][ T7077] bond5: left promiscuous mode [ 859.636540][T12057] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.649934][ T7084] vxcan1: entered allmulticast mode [ 859.750249][T12057] bridge_slave_1: left allmulticast mode [ 859.755922][T12057] bridge_slave_1: left promiscuous mode [ 859.761740][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.779436][T12057] bridge_slave_0: left allmulticast mode [ 859.785098][T12057] bridge_slave_0: left promiscuous mode [ 859.790817][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.883613][T12057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.895935][T12057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.905829][T12057] bond0 (unregistering): Released all slaves [ 859.914043][ T7093] netlink: 180 bytes leftover after parsing attributes in process `syz.4.12070'. [ 860.058746][T12057] hsr_slave_0: left promiscuous mode [ 860.064742][T12057] hsr_slave_1: left promiscuous mode [ 860.070351][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.077783][T12057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.085603][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.093180][T12057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.103308][T12057] veth1_macvtap: left promiscuous mode [ 860.108904][T12057] veth0_macvtap: left promiscuous mode [ 860.114824][T12057] veth1_vlan: left promiscuous mode [ 860.120125][T12057] veth0_vlan: left promiscuous mode [ 860.203199][T12057] team0 (unregistering): Port device team_slave_1 removed [ 860.214921][T12057] team0 (unregistering): Port device team_slave_0 removed [ 860.473469][ T7122] FAULT_INJECTION: forcing a failure. [ 860.473469][ T7122] name failslab, interval 1, probability 0, space 0, times 0 [ 860.486234][ T7122] CPU: 1 UID: 0 PID: 7122 Comm: syz.5.12087 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 860.486268][ T7122] Tainted: [W]=WARN [ 860.486275][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 860.486288][ T7122] Call Trace: [ 860.486295][ T7122] [ 860.486302][ T7122] __dump_stack+0x1d/0x30 [ 860.486395][ T7122] dump_stack_lvl+0xe8/0x140 [ 860.486415][ T7122] dump_stack+0x15/0x1b [ 860.486429][ T7122] should_fail_ex+0x265/0x280 [ 860.486521][ T7122] should_failslab+0x8c/0xb0 [ 860.486550][ T7122] __kmalloc_noprof+0xa5/0x570 [ 860.486629][ T7122] ? sock_kmalloc+0x85/0xc0 [ 860.486718][ T7122] ? iovec_from_user+0x179/0x210 [ 860.486747][ T7122] sock_kmalloc+0x85/0xc0 [ 860.486777][ T7122] ____sys_sendmsg+0xf8/0x4e0 [ 860.486810][ T7122] ___sys_sendmsg+0x17b/0x1d0 [ 860.486862][ T7122] __sys_sendmmsg+0x178/0x300 [ 860.486968][ T7122] __x64_sys_sendmmsg+0x57/0x70 [ 860.487058][ T7122] x64_sys_call+0x1c4a/0x3000 [ 860.487078][ T7122] do_syscall_64+0xd2/0x200 [ 860.487104][ T7122] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 860.487133][ T7122] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 860.487157][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.487220][ T7122] RIP: 0033:0x7fc816bbefc9 [ 860.487235][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.487251][ T7122] RSP: 002b:00007fc81561f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 860.487268][ T7122] RAX: ffffffffffffffda RBX: 00007fc816e15fa0 RCX: 00007fc816bbefc9 [ 860.487279][ T7122] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 860.487290][ T7122] RBP: 00007fc81561f090 R08: 0000000000000000 R09: 0000000000000000 [ 860.487343][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.487388][ T7122] R13: 00007fc816e16038 R14: 00007fc816e15fa0 R15: 00007fffdd962948 [ 860.487408][ T7122] [ 860.934107][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 860.994634][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.001705][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.029624][ T7123] bridge_slave_0: entered allmulticast mode [ 861.040013][ T7123] bridge_slave_0: entered promiscuous mode [ 861.051344][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.058412][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.070228][ T7123] bridge_slave_1: entered allmulticast mode [ 861.077261][ T7123] bridge_slave_1: entered promiscuous mode [ 861.105096][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.136270][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.187418][ T7123] team0: Port device team_slave_0 added [ 861.212038][ T7123] team0: Port device team_slave_1 added [ 861.235247][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.242254][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.268407][ T7123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.280382][ T7123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.287341][ T7123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.313317][ T7123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.359383][ T7123] hsr_slave_0: entered promiscuous mode [ 861.365492][ T7123] hsr_slave_1: entered promiscuous mode [ 861.371304][ T7123] debugfs: 'hsr0' already exists in 'hsr' [ 861.377107][ T7123] Cannot create hsr debugfs directory [ 861.411079][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12098'. [ 861.521508][ T7123] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 861.532631][ T7123] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 861.541042][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 861.550325][ T7123] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 861.565884][ T7123] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 861.606177][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.613369][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.620709][ T7155] bridge_slave_0: entered allmulticast mode [ 861.627270][ T7155] bridge_slave_0: entered promiscuous mode [ 861.634550][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.641710][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.649046][ T7155] bridge_slave_1: entered allmulticast mode [ 861.656339][ T7155] bridge_slave_1: entered promiscuous mode [ 861.683104][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.690212][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.697623][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.704734][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.733234][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.759978][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.779169][ T7123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.810435][ T7155] team0: Port device team_slave_0 added [ 861.820101][ T7155] team0: Port device team_slave_1 added [ 861.841177][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.849455][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.880685][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.887665][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.913613][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.928968][ T7123] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.937071][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.944040][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.970133][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.005448][ T7155] hsr_slave_0: entered promiscuous mode [ 862.011613][ T7155] hsr_slave_1: entered promiscuous mode [ 862.017648][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 862.023432][ T7155] Cannot create hsr debugfs directory [ 862.030834][T11999] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.043920][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.051004][T11998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.087309][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.094499][T11998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.197928][ T7155] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 862.214269][ T7123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.222241][ T7155] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 862.229407][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12107'. [ 862.247504][ T7212] team0 (unregistering): Port device team_slave_0 removed [ 862.257561][ T7212] team0 (unregistering): Port device team_slave_1 removed [ 862.268009][ T7155] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 862.280495][ T7155] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 862.434681][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.447928][ T7183] chnl_net:caif_netlink_parms(): no params data found [ 862.490904][ T7123] veth0_vlan: entered promiscuous mode [ 862.501331][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.515118][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.522201][T11998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.550761][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.557895][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.565248][ T7183] bridge_slave_0: entered allmulticast mode [ 862.571969][ T7183] bridge_slave_0: entered promiscuous mode [ 862.579092][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.586257][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.593612][ T7183] bridge_slave_1: entered allmulticast mode [ 862.600295][ T7183] bridge_slave_1: entered promiscuous mode [ 862.601192][ T7251] Cannot find set identified by id 0 to match [ 862.618124][ T7250] bond6: entered allmulticast mode [ 862.623750][ T7250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 862.631495][ T7123] veth1_vlan: entered promiscuous mode [ 862.647155][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.654228][T11998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.691265][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.720531][ T7123] veth0_macvtap: entered promiscuous mode [ 862.738622][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.748785][ T7155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 862.762319][ T7123] veth1_macvtap: entered promiscuous mode [ 862.792207][ T7183] team0: Port device team_slave_0 added [ 862.804403][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.815205][ T7183] team0: Port device team_slave_1 added [ 862.837940][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.844987][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.871159][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.882476][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 862.882497][ T29] audit: type=1400 audit(1760911855.099:46754): avc: denied { write } for pid=7264 comm="syz.5.12117" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 862.884963][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.918630][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.944676][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.962372][ T7123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.992979][ T7183] hsr_slave_0: entered promiscuous mode [ 862.999086][ T7183] hsr_slave_1: entered promiscuous mode [ 863.004981][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 863.010717][ T7183] Cannot create hsr debugfs directory [ 863.049438][T12007] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.058246][T12007] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.087440][T12007] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.102206][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.123012][T12007] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.207369][ T29] audit: type=1400 audit(1760911855.446:46755): avc: denied { mounton } for pid=7123 comm="syz-executor" path="/root/syzkaller.smevVD/syz-tmp" dev="sda1" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 863.243165][ T29] audit: type=1400 audit(1760911855.477:46756): avc: denied { mount } for pid=7123 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 863.265458][ T29] audit: type=1400 audit(1760911855.477:46757): avc: denied { mount } for pid=7123 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 863.287524][ T29] audit: type=1400 audit(1760911855.477:46758): avc: denied { mounton } for pid=7123 comm="syz-executor" path="/root/syzkaller.smevVD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 863.314534][ T29] audit: type=1400 audit(1760911855.477:46759): avc: denied { mounton } for pid=7123 comm="syz-executor" path="/root/syzkaller.smevVD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=144303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 863.342372][ T29] audit: type=1400 audit(1760911855.477:46760): avc: denied { unmount } for pid=7123 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 863.362203][ T29] audit: type=1400 audit(1760911855.488:46761): avc: denied { mounton } for pid=7123 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 863.385330][ T29] audit: type=1400 audit(1760911855.488:46762): avc: denied { mount } for pid=7123 comm="syz-executor" name="/" dev="gadgetfs" ino=3891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 863.431984][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12085'. [ 863.444200][ T29] audit: type=1400 audit(1760911855.698:46763): avc: denied { tracepoint } for pid=7284 comm="syz.8.12085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 863.482095][ T7155] veth0_vlan: entered promiscuous mode [ 863.490049][ T7155] veth1_vlan: entered promiscuous mode [ 863.534525][ T7155] veth0_macvtap: entered promiscuous mode [ 863.551444][ T7155] veth1_macvtap: entered promiscuous mode [ 863.575476][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.596137][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.615894][T12004] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.640958][T12004] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.667285][T12004] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.680568][ T7183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 863.693218][T12004] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.703914][ T7183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 863.717019][ T7183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 863.743399][ T7183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 863.768170][T11999] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.846625][T11999] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.891772][T11999] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.931556][ T7316] xt_connbytes: Forcing CT accounting to be enabled [ 863.944312][ T7316] Cannot find set identified by id 0 to match [ 863.988045][T11999] bridge_slave_1: left allmulticast mode [ 863.993816][T11999] bridge_slave_1: left promiscuous mode [ 863.999477][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.018099][T11999] bridge_slave_0: left allmulticast mode [ 864.023837][T11999] bridge_slave_0: left promiscuous mode [ 864.029594][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.127723][T11999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.140159][T11999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.156275][T11999] bond0 (unregistering): Released all slaves [ 864.185420][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.214680][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.269015][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.276118][T12004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.307653][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.314766][T12004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.498022][T11999] hsr_slave_0: left promiscuous mode [ 864.503706][T11999] hsr_slave_1: left promiscuous mode [ 864.524289][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.531786][T11999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.553485][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.560883][T11999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.573133][T11999] veth1_macvtap: left promiscuous mode [ 864.578737][T11999] veth0_macvtap: left promiscuous mode [ 864.584630][T11999] veth1_vlan: left promiscuous mode [ 864.589942][T11999] veth0_vlan: left promiscuous mode [ 864.670891][T11999] team0 (unregistering): Port device team_slave_1 removed [ 864.681391][T11999] team0 (unregistering): Port device team_slave_0 removed [ 864.736273][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.897373][ T7183] veth0_vlan: entered promiscuous mode [ 864.917042][ T7183] veth1_vlan: entered promiscuous mode [ 864.956550][ T7183] veth0_macvtap: entered promiscuous mode [ 864.964318][ T7183] veth1_macvtap: entered promiscuous mode [ 864.974924][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.987705][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.014895][T12057] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.115036][T12057] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.134945][T12057] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.156090][T12057] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.237907][ T7371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.12100'. [ 865.532743][ T7384] set match dimension is over the limit! [ 865.580277][T31450] syz_tun (unregistering): left allmulticast mode [ 865.586828][T31450] syz_tun (unregistering): left promiscuous mode [ 865.593373][T31450] bridge0: port 1(syz_tun) entered disabled state [ 865.798909][ T7395] FAULT_INJECTION: forcing a failure. [ 865.798909][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 865.811667][ T7395] CPU: 1 UID: 0 PID: 7395 Comm: syz.9.12147 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 865.811699][ T7395] Tainted: [W]=WARN [ 865.811707][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 865.811720][ T7395] Call Trace: [ 865.811728][ T7395] [ 865.811735][ T7395] __dump_stack+0x1d/0x30 [ 865.811755][ T7395] dump_stack_lvl+0xe8/0x140 [ 865.811852][ T7395] dump_stack+0x15/0x1b [ 865.811866][ T7395] should_fail_ex+0x265/0x280 [ 865.811992][ T7395] should_failslab+0x8c/0xb0 [ 865.812076][ T7395] kmem_cache_alloc_noprof+0x50/0x480 [ 865.812100][ T7395] ? skb_clone+0x151/0x1f0 [ 865.812125][ T7395] skb_clone+0x151/0x1f0 [ 865.812179][ T7395] __netlink_deliver_tap+0x2c9/0x500 [ 865.812207][ T7395] netlink_unicast+0x66b/0x690 [ 865.812231][ T7395] netlink_sendmsg+0x58b/0x6b0 [ 865.812295][ T7395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.812350][ T7395] __sock_sendmsg+0x145/0x180 [ 865.812369][ T7395] ____sys_sendmsg+0x31e/0x4e0 [ 865.812397][ T7395] ___sys_sendmsg+0x17b/0x1d0 [ 865.812481][ T7395] __x64_sys_sendmsg+0xd4/0x160 [ 865.812513][ T7395] x64_sys_call+0x191e/0x3000 [ 865.812589][ T7395] do_syscall_64+0xd2/0x200 [ 865.812614][ T7395] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 865.812639][ T7395] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 865.812704][ T7395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.812723][ T7395] RIP: 0033:0x7fdedc24efc9 [ 865.812807][ T7395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.812898][ T7395] RSP: 002b:00007fdedacb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.812915][ T7395] RAX: ffffffffffffffda RBX: 00007fdedc4a5fa0 RCX: 00007fdedc24efc9 [ 865.812926][ T7395] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 865.812937][ T7395] RBP: 00007fdedacb7090 R08: 0000000000000000 R09: 0000000000000000 [ 865.812948][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.812960][ T7395] R13: 00007fdedc4a6038 R14: 00007fdedc4a5fa0 R15: 00007ffc1123c388 [ 865.812978][ T7395] [ 866.279202][ T7406] FAULT_INJECTION: forcing a failure. [ 866.279202][ T7406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 866.292311][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 866.292405][ T7406] Tainted: [W]=WARN [ 866.292413][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 866.292478][ T7406] Call Trace: [ 866.292483][ T7406] [ 866.292491][ T7406] __dump_stack+0x1d/0x30 [ 866.292513][ T7406] dump_stack_lvl+0xe8/0x140 [ 866.292599][ T7406] dump_stack+0x15/0x1b [ 866.292656][ T7406] should_fail_ex+0x265/0x280 [ 866.292690][ T7406] should_fail+0xb/0x20 [ 866.292719][ T7406] should_fail_usercopy+0x1a/0x20 [ 866.292818][ T7406] _copy_from_user+0x1c/0xb0 [ 866.292840][ T7406] restore_altstack+0x4b/0x2d0 [ 866.292869][ T7406] ? __set_task_blocked+0x23a/0x2a0 [ 866.292891][ T7406] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 866.292910][ T7406] ? _raw_spin_unlock_irq+0x26/0x50 [ 866.292949][ T7406] ? signal_setup_done+0x266/0x290 [ 866.292971][ T7406] ? xfd_validate_state+0x45/0xf0 [ 866.292998][ T7406] ? fpu__clear_user_states+0x63/0x1e0 [ 866.293055][ T7406] ? fpregs_mark_activate+0x66/0x140 [ 866.293082][ T7406] ? fpu__clear_user_states+0x63/0x1e0 [ 866.293110][ T7406] ? arch_do_signal_or_restart+0x2b5/0x440 [ 866.293133][ T7406] ? __rcu_read_unlock+0x4f/0x70 [ 866.293180][ T7406] x64_sys_call+0x2d4b/0x3000 [ 866.293200][ T7406] do_syscall_64+0xd2/0x200 [ 866.293269][ T7406] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 866.293292][ T7406] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 866.293313][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.293334][ T7406] RIP: 0033:0x7fdedc1eb099 [ 866.293354][ T7406] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 866.293374][ T7406] RSP: 002b:00007fdedacb6a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 866.293394][ T7406] RAX: ffffffffffffffda RBX: 00007fdedc4a5fa0 RCX: 00007fdedc1eb099 [ 866.293406][ T7406] RDX: 00007fdedacb6a80 RSI: 00007fdedacb6bb0 RDI: 0000000000000021 [ 866.293491][ T7406] RBP: 00007fdedacb7090 R08: 0000000000000000 R09: 0000000000000000 [ 866.293504][ T7406] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 866.293533][ T7406] R13: 00007fdedc4a6038 R14: 00007fdedc4a5fa0 R15: 00007ffc1123c388 [ 866.293554][ T7406] [ 866.631024][ T7385] chnl_net:caif_netlink_parms(): no params data found [ 866.738217][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.745600][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.753198][ T7385] bridge_slave_0: entered allmulticast mode [ 866.762526][ T7385] bridge_slave_0: entered promiscuous mode [ 866.802070][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.809259][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.830660][ T7385] bridge_slave_1: entered allmulticast mode [ 866.852477][ T7385] bridge_slave_1: entered promiscuous mode [ 866.905945][ T7385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.935140][ T7385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.973034][ T7456] Cannot find set identified by id 0 to match [ 866.989669][ T7385] team0: Port device team_slave_0 added [ 867.006645][ T7385] team0: Port device team_slave_1 added [ 867.047622][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.054656][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.080590][ T7385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.103747][ T7385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.110751][ T7385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.136973][ T7385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.254538][ T7385] hsr_slave_0: entered promiscuous mode [ 867.265309][ T7385] hsr_slave_1: entered promiscuous mode [ 867.271429][ T7385] debugfs: 'hsr0' already exists in 'hsr' [ 867.277235][ T7385] Cannot create hsr debugfs directory [ 867.350679][ T7480] FAULT_INJECTION: forcing a failure. [ 867.350679][ T7480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.363808][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.4.12175 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 867.363840][ T7480] Tainted: [W]=WARN [ 867.363847][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 867.363913][ T7480] Call Trace: [ 867.363919][ T7480] [ 867.363927][ T7480] __dump_stack+0x1d/0x30 [ 867.363949][ T7480] dump_stack_lvl+0xe8/0x140 [ 867.363968][ T7480] dump_stack+0x15/0x1b [ 867.363985][ T7480] should_fail_ex+0x265/0x280 [ 867.364085][ T7480] should_fail+0xb/0x20 [ 867.364109][ T7480] should_fail_usercopy+0x1a/0x20 [ 867.364127][ T7480] _copy_from_user+0x1c/0xb0 [ 867.364147][ T7480] __sys_bpf+0x183/0x7c0 [ 867.364229][ T7480] __x64_sys_bpf+0x41/0x50 [ 867.364252][ T7480] x64_sys_call+0x2aee/0x3000 [ 867.364302][ T7480] do_syscall_64+0xd2/0x200 [ 867.364323][ T7480] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 867.364391][ T7480] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 867.364410][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.364427][ T7480] RIP: 0033:0x7f8a40a0efc9 [ 867.364443][ T7480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.364459][ T7480] RSP: 002b:00007f8a3f46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.364520][ T7480] RAX: ffffffffffffffda RBX: 00007f8a40c65fa0 RCX: 00007f8a40a0efc9 [ 867.364536][ T7480] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000015 [ 867.364548][ T7480] RBP: 00007f8a3f46f090 R08: 0000000000000000 R09: 0000000000000000 [ 867.364569][ T7480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.364579][ T7480] R13: 00007f8a40c66038 R14: 00007f8a40c65fa0 R15: 00007ffd0d6ad9a8 [ 867.364667][ T7480] [ 867.692140][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 867.741062][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.748216][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.756069][ T7460] bridge_slave_0: entered allmulticast mode [ 867.763027][ T7460] bridge_slave_0: entered promiscuous mode [ 867.770118][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.777164][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.785546][ T7460] bridge_slave_1: entered allmulticast mode [ 867.792281][ T7460] bridge_slave_1: entered promiscuous mode [ 867.829371][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.839318][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 867.839339][ T29] audit: type=1326 audit(1760911860.322:47033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.845672][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.878548][ T29] audit: type=1326 audit(1760911860.354:47034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.902216][ T29] audit: type=1326 audit(1760911860.354:47035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.925858][ T29] audit: type=1326 audit(1760911860.354:47036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.949604][ T29] audit: type=1326 audit(1760911860.354:47037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.973363][ T29] audit: type=1326 audit(1760911860.354:47038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 867.997108][ T29] audit: type=1326 audit(1760911860.354:47039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 868.020758][ T29] audit: type=1326 audit(1760911860.354:47040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 868.044271][ T29] audit: type=1326 audit(1760911860.354:47041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 868.068028][ T29] audit: type=1326 audit(1760911860.354:47042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7495 comm="syz.2.12178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c572cefc9 code=0x7ffc0000 [ 868.105640][ T7460] team0: Port device team_slave_0 added [ 868.123208][T11999] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.135066][ T7460] team0: Port device team_slave_1 added [ 868.153131][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 868.170772][T11999] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.186566][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.193562][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.219717][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.232873][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.239867][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.265912][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.319109][T11999] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.336637][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.343821][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.351849][ T7472] bridge_slave_0: entered allmulticast mode [ 868.358366][ T7472] bridge_slave_0: entered promiscuous mode [ 868.368524][ T7460] hsr_slave_0: entered promiscuous mode [ 868.374657][ T7460] hsr_slave_1: entered promiscuous mode [ 868.380930][ T7460] debugfs: 'hsr0' already exists in 'hsr' [ 868.386668][ T7460] Cannot create hsr debugfs directory [ 868.393750][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.400915][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.408902][ T7472] bridge_slave_1: entered allmulticast mode [ 868.415310][ T7472] bridge_slave_1: entered promiscuous mode [ 868.435403][T11999] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.448279][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.464536][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.488889][ T7472] team0: Port device team_slave_0 added [ 868.506139][ T7472] team0: Port device team_slave_1 added [ 868.529502][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.536522][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.562572][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.579594][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.586559][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.612549][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.670759][ T7472] hsr_slave_0: entered promiscuous mode [ 868.677216][ T7472] hsr_slave_1: entered promiscuous mode [ 868.683145][ T7472] debugfs: 'hsr0' already exists in 'hsr' [ 868.688844][ T7472] Cannot create hsr debugfs directory [ 868.697941][T11999] bridge_slave_1: left allmulticast mode [ 868.703638][T11999] bridge_slave_1: left promiscuous mode [ 868.709325][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.717344][T11999] bridge_slave_0: left allmulticast mode [ 868.723060][T11999] bridge_slave_0: left promiscuous mode [ 868.728738][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.765518][T11999] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 868.773923][T11999] ip6gretap1 (unregistering): left allmulticast mode [ 868.791830][T11999] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 868.864249][T11999] bond0 (unregistering): Released all slaves [ 868.872233][T11999] bond1 (unregistering): Released all slaves [ 868.880325][T11999] bond2 (unregistering): Released all slaves [ 868.888580][T11999] bond3 (unregistering): Released all slaves [ 868.896233][T11999] bond4 (unregistering): Released all slaves [ 868.904647][T11999] bond5 (unregistering): Released all slaves [ 868.912613][T11999] bond6 (unregistering): Released all slaves [ 868.979514][T11999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.989688][T11999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.999105][T11999] bond0 (unregistering): Released all slaves [ 869.041172][ T7460] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.052457][ T7385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 869.069939][T11999] tipc: Left network mode [ 869.069951][ T7385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 869.088496][ T7385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.093531][T11999] IPVS: stopping backup sync thread 31807 ... [ 869.107955][ T7460] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.119489][ T7385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.166184][ T7460] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.221390][ T7460] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.247846][ T7385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.258889][ T7385] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.271748][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.278907][T12035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.288484][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.295587][T12035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.341615][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12186'. [ 869.373423][ T7531] team0 (unregistering): Port device team_slave_0 removed [ 869.398810][ T7531] team0 (unregistering): Port device team_slave_1 removed [ 869.410883][T11999] hsr_slave_0: left promiscuous mode [ 869.418380][T11999] hsr_slave_1: left promiscuous mode [ 869.426842][T11999] hsr_slave_0: left promiscuous mode [ 869.432503][T11999] hsr_slave_1: left promiscuous mode [ 869.438186][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.445594][T11999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.453093][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.460514][T11999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.474210][T11999] veth1_macvtap: left promiscuous mode [ 869.479901][T11999] veth0_macvtap: left promiscuous mode [ 869.495857][T11999] veth1_vlan: left promiscuous mode [ 869.502396][T11999] veth0_vlan: left promiscuous mode [ 869.661768][T11999] team0 (unregistering): Port device team_slave_1 removed [ 869.672834][T11999] team0 (unregistering): Port device team_slave_0 removed [ 869.922090][ T7460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 869.966039][ T7385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.973990][ T7460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 869.994966][ T7460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 870.010090][ T7460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 870.059425][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.071045][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.085345][T11995] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.092415][T11995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.103573][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.110651][T11995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.133736][ T7460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 870.144120][ T7460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.212993][ T7385] veth0_vlan: entered promiscuous mode [ 870.223770][ T7385] veth1_vlan: entered promiscuous mode [ 870.232965][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.267618][ T7385] veth0_macvtap: entered promiscuous mode [ 870.285399][ T7385] veth1_macvtap: entered promiscuous mode [ 870.301035][ T7472] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 870.330434][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.339484][ T7472] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 870.349045][ T7472] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 870.367763][ T7472] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 870.387288][ T7385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.418859][T12004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.440814][T12004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.467397][T12004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.482986][T11995] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.498490][ T7460] veth0_vlan: entered promiscuous mode [ 870.518668][ T7460] veth1_vlan: entered promiscuous mode [ 870.548374][ T7460] veth0_macvtap: entered promiscuous mode [ 870.571666][ T7460] veth1_macvtap: entered promiscuous mode [ 870.589286][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.600236][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.613445][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.630872][T11995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.646445][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.653763][T11995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.682818][T11995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.693781][T12007] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.700840][T12007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.713258][T11995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.735193][T11995] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.742294][T11995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.790636][ T7472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 870.801012][ T7472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.837672][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 870.865658][ T7607] SELinux: failed to load policy [ 870.871983][ T7607] SELinux: policydb version 1869770771 does not match my version range 15-35 [ 870.881227][ T7607] SELinux: failed to load policy [ 870.923432][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.930668][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.937999][ T7575] bridge_slave_0: entered allmulticast mode [ 870.944776][ T7575] bridge_slave_0: entered promiscuous mode [ 870.952055][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.959197][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.966509][ T7575] bridge_slave_1: entered allmulticast mode [ 870.972974][ T7575] bridge_slave_1: entered promiscuous mode [ 870.993748][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.008509][ T7618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 871.017190][ T7618] bond0: (slave bond1): Enslaving as an active interface with an up link [ 871.034327][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.045890][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.069938][ T7575] team0: Port device team_slave_0 added [ 871.077011][ T7575] team0: Port device team_slave_1 added [ 871.094797][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.101848][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.127772][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.139463][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.146395][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 871.172475][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.202898][ T7575] hsr_slave_0: entered promiscuous mode [ 871.209352][ T7575] hsr_slave_1: entered promiscuous mode [ 871.215441][ T7575] debugfs: 'hsr0' already exists in 'hsr' [ 871.221168][ T7575] Cannot create hsr debugfs directory [ 871.295908][ T7575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.346986][ T7472] veth0_vlan: entered promiscuous mode [ 871.355453][ T7472] veth1_vlan: entered promiscuous mode [ 871.368286][ T7575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.402853][ T7472] veth0_macvtap: entered promiscuous mode [ 871.425211][ T7575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.439299][ T7472] veth1_macvtap: entered promiscuous mode [ 871.460739][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.483655][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.499398][ T7645] Cannot find set identified by id 0 to match [ 871.507711][ T7575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.536150][T12057] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.561753][T12057] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.587519][ T7654] xt_connbytes: Forcing CT accounting to be enabled [ 871.595947][T12057] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.614709][ T7654] Cannot find set identified by id 0 to match [ 871.633366][T12057] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.643876][ T7575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.669513][ T7575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.683666][ T7575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.695448][ T7575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.810508][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.828922][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.842794][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12208'. [ 871.858553][ T7676] team0 (unregistering): Port device team_slave_0 removed [ 871.867724][ T7676] team0 (unregistering): Port device team_slave_1 removed [ 871.916881][T12035] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.924003][T12035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.940240][T12035] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.941714][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.947334][T12035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.964754][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 871.975965][ T7678] xt_hashlimit: max too large, truncated to 1048576 [ 872.029443][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.094026][ T7575] veth0_vlan: entered promiscuous mode [ 872.102299][ T7575] veth1_vlan: entered promiscuous mode [ 872.118405][ T7575] veth0_macvtap: entered promiscuous mode [ 872.125957][ T7575] veth1_macvtap: entered promiscuous mode [ 872.139058][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.148875][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.163406][T12004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.173115][T12004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.181964][T12004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.192432][T12004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.237752][ T7691] tipc: Started in network mode [ 872.242815][ T7691] tipc: Node identity 56a6f0e6ed71, cluster identity 4711 [ 872.249985][ T7691] tipc: Enabled bearer , priority 0 [ 872.259066][ T7691] tipc: Resetting bearer [ 872.314598][ T7692] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12195'. [ 872.629973][ T7710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12218'. [ 872.643933][ T7710] FAULT_INJECTION: forcing a failure. [ 872.643933][ T7710] name failslab, interval 1, probability 0, space 0, times 0 [ 872.656595][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.4.12218 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 872.656616][ T7710] Tainted: [W]=WARN [ 872.656696][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 872.656704][ T7710] Call Trace: [ 872.656708][ T7710] [ 872.656712][ T7710] __dump_stack+0x1d/0x30 [ 872.656726][ T7710] dump_stack_lvl+0xe8/0x140 [ 872.656795][ T7710] dump_stack+0x15/0x1b [ 872.656860][ T7710] should_fail_ex+0x265/0x280 [ 872.656879][ T7710] should_failslab+0x8c/0xb0 [ 872.656895][ T7710] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 872.656920][ T7710] ? __alloc_skb+0x101/0x320 [ 872.656946][ T7710] __alloc_skb+0x101/0x320 [ 872.657031][ T7710] netlink_ack+0xfd/0x500 [ 872.657097][ T7710] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 872.657191][ T7710] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 872.657204][ T7710] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 872.657218][ T7710] netlink_rcv_skb+0x192/0x220 [ 872.657372][ T7710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.657387][ T7710] genl_rcv+0x28/0x40 [ 872.657397][ T7710] netlink_unicast+0x5c0/0x690 [ 872.657413][ T7710] netlink_sendmsg+0x58b/0x6b0 [ 872.657477][ T7710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.657494][ T7710] __sock_sendmsg+0x145/0x180 [ 872.657506][ T7710] ____sys_sendmsg+0x31e/0x4e0 [ 872.657548][ T7710] ___sys_sendmsg+0x17b/0x1d0 [ 872.657576][ T7710] __x64_sys_sendmsg+0xd4/0x160 [ 872.657594][ T7710] x64_sys_call+0x191e/0x3000 [ 872.657675][ T7710] do_syscall_64+0xd2/0x200 [ 872.657689][ T7710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 872.657739][ T7710] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 872.657752][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.657764][ T7710] RIP: 0033:0x7f8a40a0efc9 [ 872.657774][ T7710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.657784][ T7710] RSP: 002b:00007f8a3f46f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.657796][ T7710] RAX: ffffffffffffffda RBX: 00007f8a40c65fa0 RCX: 00007f8a40a0efc9 [ 872.657946][ T7710] RDX: 0000000006048800 RSI: 0000200000000080 RDI: 0000000000000003 [ 872.658015][ T7710] RBP: 00007f8a3f46f090 R08: 0000000000000000 R09: 0000000000000000 [ 872.658022][ T7710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.658030][ T7710] R13: 00007f8a40c66038 R14: 00007f8a40c65fa0 R15: 00007ffd0d6ad9a8 [ 872.658040][ T7710] [ 873.138650][ T7690] tipc: Disabling bearer [ 873.151974][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 873.151988][ T29] audit: type=1400 audit(1760911865.892:47332): avc: denied { cpu } for pid=7716 comm="syz.4.12219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 873.267273][ T29] audit: type=1400 audit(1760911865.986:47333): avc: denied { setopt } for pid=7716 comm="syz.4.12219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 873.287104][ T29] audit: type=1400 audit(1760911865.986:47334): avc: denied { bind } for pid=7716 comm="syz.4.12219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 873.306656][ T29] audit: type=1400 audit(1760911865.986:47335): avc: denied { name_bind } for pid=7716 comm="syz.4.12219" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 873.328602][ T29] audit: type=1400 audit(1760911865.986:47336): avc: denied { node_bind } for pid=7716 comm="syz.4.12219" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 873.543578][ T7739] FAULT_INJECTION: forcing a failure. [ 873.543578][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 873.556370][ T7739] CPU: 0 UID: 0 PID: 7739 Comm: syz.6.12226 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 873.556438][ T7739] Tainted: [W]=WARN [ 873.556444][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 873.556455][ T7739] Call Trace: [ 873.556462][ T7739] [ 873.556469][ T7739] __dump_stack+0x1d/0x30 [ 873.556489][ T7739] dump_stack_lvl+0xe8/0x140 [ 873.556506][ T7739] dump_stack+0x15/0x1b [ 873.556575][ T7739] should_fail_ex+0x265/0x280 [ 873.556604][ T7739] should_failslab+0x8c/0xb0 [ 873.556696][ T7739] kmem_cache_alloc_noprof+0x50/0x480 [ 873.556720][ T7739] ? alloc_empty_file+0x76/0x200 [ 873.556746][ T7739] alloc_empty_file+0x76/0x200 [ 873.556836][ T7739] alloc_file_pseudo+0xc6/0x160 [ 873.556862][ T7739] anon_inode_getfd+0xc1/0x150 [ 873.556878][ T7739] bpf_map_new_fd+0x52/0x70 [ 873.556898][ T7739] map_create+0xd25/0xda0 [ 873.556943][ T7739] ? security_bpf+0x2b/0x90 [ 873.557104][ T7739] __sys_bpf+0x54e/0x7c0 [ 873.557133][ T7739] __x64_sys_bpf+0x41/0x50 [ 873.557166][ T7739] x64_sys_call+0x2aee/0x3000 [ 873.557185][ T7739] do_syscall_64+0xd2/0x200 [ 873.557206][ T7739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 873.557228][ T7739] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 873.557271][ T7739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.557289][ T7739] RIP: 0033:0x7f3ac7d4efc9 [ 873.557303][ T7739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.557318][ T7739] RSP: 002b:00007f3ac678e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 873.557334][ T7739] RAX: ffffffffffffffda RBX: 00007f3ac7fa6090 RCX: 00007f3ac7d4efc9 [ 873.557345][ T7739] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 873.557377][ T7739] RBP: 00007f3ac678e090 R08: 0000000000000000 R09: 0000000000000000 [ 873.557387][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 873.557397][ T7739] R13: 00007f3ac7fa6128 R14: 00007f3ac7fa6090 R15: 00007fff217cf7d8 [ 873.557432][ T7739] [ 873.799877][ T29] audit: type=1400 audit(1760911866.575:47337): avc: denied { create } for pid=7737 comm="syz.4.12229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 873.882110][ T29] audit: type=1326 audit(1760911866.669:47338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.5.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 873.905838][ T29] audit: type=1326 audit(1760911866.669:47339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.5.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 873.934635][ T7748] xt_connbytes: Forcing CT accounting to be enabled [ 873.941486][ T29] audit: type=1326 audit(1760911866.722:47340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.5.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 874.112676][ T29] audit: type=1326 audit(1760911866.911:47341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7753 comm="syz.5.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d8bcc1885 code=0x7ffc0000 [ 874.228871][ T7761] xt_hashlimit: max too large, truncated to 1048576 [ 874.291796][ T7763] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 874.509732][ T7748] Cannot find set identified by id 0 to match [ 874.516401][ T7778] Cannot find set identified by id 0 to match [ 874.636030][ T7797] FAULT_INJECTION: forcing a failure. [ 874.636030][ T7797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.649362][ T7797] CPU: 1 UID: 0 PID: 7797 Comm: syz.3.12251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 874.649421][ T7797] Tainted: [W]=WARN [ 874.649429][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 874.649519][ T7797] Call Trace: [ 874.649526][ T7797] [ 874.649535][ T7797] __dump_stack+0x1d/0x30 [ 874.649557][ T7797] dump_stack_lvl+0xe8/0x140 [ 874.649578][ T7797] dump_stack+0x15/0x1b [ 874.649599][ T7797] should_fail_ex+0x265/0x280 [ 874.649642][ T7797] should_fail+0xb/0x20 [ 874.649671][ T7797] should_fail_usercopy+0x1a/0x20 [ 874.649746][ T7797] _copy_to_user+0x20/0xa0 [ 874.649772][ T7797] simple_read_from_buffer+0xb5/0x130 [ 874.649797][ T7797] proc_fail_nth_read+0x10e/0x150 [ 874.649887][ T7797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 874.649915][ T7797] vfs_read+0x1a8/0x770 [ 874.650004][ T7797] ? __rcu_read_unlock+0x4f/0x70 [ 874.650029][ T7797] ? __fget_files+0x184/0x1c0 [ 874.650054][ T7797] ? finish_task_switch+0xad/0x2b0 [ 874.650080][ T7797] ksys_read+0xda/0x1a0 [ 874.650112][ T7797] __x64_sys_read+0x40/0x50 [ 874.650136][ T7797] x64_sys_call+0x27c0/0x3000 [ 874.650165][ T7797] do_syscall_64+0xd2/0x200 [ 874.650191][ T7797] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 874.650299][ T7797] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 874.650323][ T7797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.650372][ T7797] RIP: 0033:0x7fb7a6eed9dc [ 874.650389][ T7797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 874.650408][ T7797] RSP: 002b:00007fb7a5957030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 874.650430][ T7797] RAX: ffffffffffffffda RBX: 00007fb7a7145fa0 RCX: 00007fb7a6eed9dc [ 874.650540][ T7797] RDX: 000000000000000f RSI: 00007fb7a59570a0 RDI: 0000000000000005 [ 874.650554][ T7797] RBP: 00007fb7a5957090 R08: 0000000000000000 R09: 0000000000000000 [ 874.650568][ T7797] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001 [ 874.650582][ T7797] R13: 00007fb7a7146038 R14: 00007fb7a7145fa0 R15: 00007ffe40945668 [ 874.650620][ T7797] [ 874.923169][ T7800] netlink: 'syz.1.12246': attribute type 13 has an invalid length. [ 874.931174][ T7800] netlink: 'syz.1.12246': attribute type 17 has an invalid length. [ 875.043101][ T7800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 875.185628][ T7817] Cannot find set identified by id 0 to match [ 875.433614][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.439160][ T7850] pimreg: entered allmulticast mode [ 875.460393][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.511810][ T7866] FAULT_INJECTION: forcing a failure. [ 875.511810][ T7866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.525063][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.1.12278 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 875.525092][ T7866] Tainted: [W]=WARN [ 875.525100][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.525112][ T7866] Call Trace: [ 875.525118][ T7866] [ 875.525125][ T7866] __dump_stack+0x1d/0x30 [ 875.525203][ T7866] dump_stack_lvl+0xe8/0x140 [ 875.525220][ T7866] dump_stack+0x15/0x1b [ 875.525234][ T7866] should_fail_ex+0x265/0x280 [ 875.525266][ T7866] should_fail+0xb/0x20 [ 875.525294][ T7866] should_fail_usercopy+0x1a/0x20 [ 875.525372][ T7866] _copy_to_user+0x20/0xa0 [ 875.525397][ T7866] simple_read_from_buffer+0xb5/0x130 [ 875.525418][ T7866] proc_fail_nth_read+0x10e/0x150 [ 875.525455][ T7866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 875.525481][ T7866] vfs_read+0x1a8/0x770 [ 875.525503][ T7866] ? bpf_trace_run2+0x124/0x1c0 [ 875.525595][ T7866] ? __rcu_read_unlock+0x4f/0x70 [ 875.525619][ T7866] ? __fget_files+0x184/0x1c0 [ 875.525648][ T7866] ksys_read+0xda/0x1a0 [ 875.525690][ T7866] __x64_sys_read+0x40/0x50 [ 875.525709][ T7866] x64_sys_call+0x27c0/0x3000 [ 875.525729][ T7866] do_syscall_64+0xd2/0x200 [ 875.525802][ T7866] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 875.525890][ T7866] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 875.525912][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.526007][ T7866] RIP: 0033:0x7f33d998d9dc [ 875.526023][ T7866] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 875.526042][ T7866] RSP: 002b:00007f33d83ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.526069][ T7866] RAX: ffffffffffffffda RBX: 00007f33d9be5fa0 RCX: 00007f33d998d9dc [ 875.526083][ T7866] RDX: 000000000000000f RSI: 00007f33d83ef0a0 RDI: 0000000000000005 [ 875.526097][ T7866] RBP: 00007f33d83ef090 R08: 0000000000000000 R09: 0000000000000000 [ 875.526121][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.526190][ T7866] R13: 00007f33d9be6038 R14: 00007f33d9be5fa0 R15: 00007fffeeedfcd8 [ 875.526210][ T7866] [ 875.579278][ T7868] Cannot find set identified by id 0 to match [ 875.845321][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12290'. [ 875.970553][ T7892] FAULT_INJECTION: forcing a failure. [ 875.970553][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 875.983266][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.5.12290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 875.983311][ T7892] Tainted: [W]=WARN [ 875.983317][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 875.983371][ T7892] Call Trace: [ 875.983378][ T7892] [ 875.983386][ T7892] __dump_stack+0x1d/0x30 [ 875.983408][ T7892] dump_stack_lvl+0xe8/0x140 [ 875.983424][ T7892] dump_stack+0x15/0x1b [ 875.983449][ T7892] should_fail_ex+0x265/0x280 [ 875.983481][ T7892] ? percpu_ref_init+0x9c/0x250 [ 875.983500][ T7892] should_failslab+0x8c/0xb0 [ 875.983593][ T7892] ? __pfx_free_ioctx_users+0x10/0x10 [ 875.983637][ T7892] __kmalloc_cache_noprof+0x4c/0x4a0 [ 875.983661][ T7892] ? __pfx_free_ioctx_users+0x10/0x10 [ 875.983684][ T7892] percpu_ref_init+0x9c/0x250 [ 875.983701][ T7892] ioctx_alloc+0x1be/0x4e0 [ 875.983726][ T7892] __se_sys_io_setup+0x6b/0x1b0 [ 875.983748][ T7892] __x64_sys_io_setup+0x31/0x40 [ 875.983816][ T7892] x64_sys_call+0x2f0e/0x3000 [ 875.983834][ T7892] do_syscall_64+0xd2/0x200 [ 875.983855][ T7892] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 875.983878][ T7892] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 875.983943][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.983962][ T7892] RIP: 0033:0x7f7d8bc8efc9 [ 875.983975][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.983990][ T7892] RSP: 002b:00007f7d8a6f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 875.984008][ T7892] RAX: ffffffffffffffda RBX: 00007f7d8bee5fa0 RCX: 00007f7d8bc8efc9 [ 875.984063][ T7892] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000002007 [ 875.984075][ T7892] RBP: 00007f7d8a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 875.984086][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.984096][ T7892] R13: 00007f7d8bee6038 R14: 00007f7d8bee5fa0 R15: 00007ffd6700ac78 [ 875.984171][ T7892] [ 876.740092][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12302'. [ 876.754129][ T7929] infiniband !yz!: set active [ 876.758848][ T7929] infiniband !yz!: added team_slave_0 [ 876.814994][ T7929] RDS/IB: !yz!: added [ 876.826935][ T7933] FAULT_INJECTION: forcing a failure. [ 876.826935][ T7933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.840168][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz.5.12303 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 876.840202][ T7933] Tainted: [W]=WARN [ 876.840209][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 876.840286][ T7933] Call Trace: [ 876.840293][ T7933] [ 876.840302][ T7933] __dump_stack+0x1d/0x30 [ 876.840382][ T7933] dump_stack_lvl+0xe8/0x140 [ 876.840399][ T7933] dump_stack+0x15/0x1b [ 876.840417][ T7933] should_fail_ex+0x265/0x280 [ 876.840501][ T7933] should_fail+0xb/0x20 [ 876.840527][ T7933] should_fail_usercopy+0x1a/0x20 [ 876.840547][ T7933] _copy_from_user+0x1c/0xb0 [ 876.840589][ T7933] memdup_user+0x5e/0xd0 [ 876.840615][ T7933] strndup_user+0x68/0xb0 [ 876.840686][ T7933] perf_ioctl+0x58a/0x12e0 [ 876.840710][ T7933] ? ioctl_has_perm+0x289/0x2a0 [ 876.840739][ T7933] ? do_vfs_ioctl+0x866/0xe10 [ 876.840761][ T7933] ? selinux_file_ioctl+0x308/0x3a0 [ 876.840845][ T7933] ? __fget_files+0x184/0x1c0 [ 876.840926][ T7933] ? __pfx_perf_ioctl+0x10/0x10 [ 876.840951][ T7933] __se_sys_ioctl+0xce/0x140 [ 876.840972][ T7933] __x64_sys_ioctl+0x43/0x50 [ 876.840991][ T7933] x64_sys_call+0x1816/0x3000 [ 876.841053][ T7933] do_syscall_64+0xd2/0x200 [ 876.841100][ T7933] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 876.841127][ T7933] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 876.841147][ T7933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.841186][ T7933] RIP: 0033:0x7f7d8bc8efc9 [ 876.841202][ T7933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.841220][ T7933] RSP: 002b:00007f7d8a6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.841238][ T7933] RAX: ffffffffffffffda RBX: 00007f7d8bee5fa0 RCX: 00007f7d8bc8efc9 [ 876.841250][ T7933] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000006 [ 876.841330][ T7933] RBP: 00007f7d8a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 876.841344][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.841358][ T7933] R13: 00007f7d8bee6038 R14: 00007f7d8bee5fa0 R15: 00007ffd6700ac78 [ 876.841453][ T7933] [ 877.237854][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12305'. [ 877.256533][ T7937] hsr_slave_0: left promiscuous mode [ 877.262605][ T7937] hsr_slave_1: left promiscuous mode [ 877.631778][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12317'. [ 878.261177][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12330'. [ 878.377286][ T8016] xt_connbytes: Forcing CT accounting to be enabled [ 878.395727][ T8016] Cannot find set identified by id 0 to match [ 878.514457][ T8025] veth0: entered promiscuous mode [ 878.532326][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 878.532338][ T29] audit: type=1326 audit(1760911871.545:47485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.535447][ T8025] bridge0: entered promiscuous mode [ 878.538687][ T29] audit: type=1326 audit(1760911871.545:47486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.563436][ T8025] macsec1: entered promiscuous mode [ 878.567543][ T29] audit: type=1326 audit(1760911871.556:47487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.567572][ T29] audit: type=1326 audit(1760911871.556:47488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.567637][ T29] audit: type=1326 audit(1760911871.556:47489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.592243][ T8025] bridge0: port 3(macsec1) entered blocking state [ 878.622807][ T29] audit: type=1326 audit(1760911871.650:47490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.643724][ T8025] bridge0: port 3(macsec1) entered disabled state [ 878.667247][ T29] audit: type=1326 audit(1760911871.650:47491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.707363][ T8025] macsec1: entered allmulticast mode [ 878.732573][ T8025] bridge0: entered allmulticast mode [ 878.739258][ T8025] macsec1: left allmulticast mode [ 878.744487][ T8025] bridge0: left allmulticast mode [ 878.748682][ T29] audit: type=1326 audit(1760911871.703:47492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.755556][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12336'. [ 878.773162][ T29] audit: type=1326 audit(1760911871.703:47493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.773193][ T29] audit: type=1326 audit(1760911871.703:47494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.6.12338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 878.773778][ T8025] bridge0: left promiscuous mode [ 878.991037][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12342'. [ 879.007801][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 879.027092][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 879.215273][ T8053] block device autoloading is deprecated and will be removed. [ 880.374890][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12355'. [ 880.444980][ T8086] FAULT_INJECTION: forcing a failure. [ 880.444980][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 880.457699][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.3.12360 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 880.457737][ T8086] Tainted: [W]=WARN [ 880.457743][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 880.457770][ T8086] Call Trace: [ 880.457855][ T8086] [ 880.457865][ T8086] __dump_stack+0x1d/0x30 [ 880.457888][ T8086] dump_stack_lvl+0xe8/0x140 [ 880.457909][ T8086] dump_stack+0x15/0x1b [ 880.457925][ T8086] should_fail_ex+0x265/0x280 [ 880.458001][ T8086] should_failslab+0x8c/0xb0 [ 880.458025][ T8086] kmem_cache_alloc_noprof+0x50/0x480 [ 880.458124][ T8086] ? skb_clone+0x151/0x1f0 [ 880.458210][ T8086] skb_clone+0x151/0x1f0 [ 880.458238][ T8086] __netlink_deliver_tap+0x2c9/0x500 [ 880.458267][ T8086] netlink_unicast+0x66b/0x690 [ 880.458301][ T8086] netlink_sendmsg+0x58b/0x6b0 [ 880.458331][ T8086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 880.458412][ T8086] __sock_sendmsg+0x145/0x180 [ 880.458435][ T8086] ____sys_sendmsg+0x31e/0x4e0 [ 880.458465][ T8086] ___sys_sendmsg+0x17b/0x1d0 [ 880.458506][ T8086] __x64_sys_sendmsg+0xd4/0x160 [ 880.458556][ T8086] x64_sys_call+0x191e/0x3000 [ 880.458579][ T8086] do_syscall_64+0xd2/0x200 [ 880.458604][ T8086] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 880.458631][ T8086] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 880.458702][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.458731][ T8086] RIP: 0033:0x7fb7a6eeefc9 [ 880.458748][ T8086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 880.458767][ T8086] RSP: 002b:00007fb7a5957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.458801][ T8086] RAX: ffffffffffffffda RBX: 00007fb7a7145fa0 RCX: 00007fb7a6eeefc9 [ 880.458827][ T8086] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000006 [ 880.458884][ T8086] RBP: 00007fb7a5957090 R08: 0000000000000000 R09: 0000000000000000 [ 880.458906][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.458920][ T8086] R13: 00007fb7a7146038 R14: 00007fb7a7145fa0 R15: 00007ffe40945668 [ 880.458980][ T8086] [ 880.667815][ T8086] netlink: 'syz.3.12360': attribute type 4 has an invalid length. [ 880.675749][ T8086] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12360'. [ 880.690257][ T8086] .`: renamed from bond0 (while UP) [ 880.744795][ T8093] cgroup: Unknown subsys name 'obj_user' [ 880.967563][ T8108] netlink: 'syz.5.12368': attribute type 1 has an invalid length. [ 880.975481][ T8108] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12368'. [ 881.409154][ T8126] FAULT_INJECTION: forcing a failure. [ 881.409154][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 881.421839][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.5.12375 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 881.421873][ T8126] Tainted: [W]=WARN [ 881.421881][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 881.421892][ T8126] Call Trace: [ 881.421898][ T8126] [ 881.421905][ T8126] __dump_stack+0x1d/0x30 [ 881.421977][ T8126] dump_stack_lvl+0xe8/0x140 [ 881.421997][ T8126] dump_stack+0x15/0x1b [ 881.422012][ T8126] should_fail_ex+0x265/0x280 [ 881.422087][ T8126] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.422115][ T8126] ? loop_add+0x64/0x590 [ 881.422139][ T8126] should_failslab+0x8c/0xb0 [ 881.422181][ T8126] __kmalloc_cache_noprof+0x4c/0x4a0 [ 881.422210][ T8126] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.422238][ T8126] loop_add+0x64/0x590 [ 881.422267][ T8126] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.422371][ T8126] loop_control_ioctl+0xd0/0x3f0 [ 881.422435][ T8126] ? __pfx_loop_control_ioctl+0x10/0x10 [ 881.422462][ T8126] __se_sys_ioctl+0xce/0x140 [ 881.422483][ T8126] __x64_sys_ioctl+0x43/0x50 [ 881.422575][ T8126] x64_sys_call+0x1816/0x3000 [ 881.422598][ T8126] do_syscall_64+0xd2/0x200 [ 881.422629][ T8126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 881.422656][ T8126] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 881.422680][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.422709][ T8126] RIP: 0033:0x7f7d8bc8efc9 [ 881.422725][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.422741][ T8126] RSP: 002b:00007f7d8a6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 881.422758][ T8126] RAX: ffffffffffffffda RBX: 00007f7d8bee5fa0 RCX: 00007f7d8bc8efc9 [ 881.422770][ T8126] RDX: 0000000007000000 RSI: 0000000000004c80 RDI: 0000000000000006 [ 881.422781][ T8126] RBP: 00007f7d8a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 881.422853][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.422864][ T8126] R13: 00007f7d8bee6038 R14: 00007f7d8bee5fa0 R15: 00007ffd6700ac78 [ 881.422881][ T8126] [ 881.708925][ T8134] netlink: 'syz.5.12378': attribute type 3 has an invalid length. [ 881.722727][ T8134] vlan2: entered allmulticast mode [ 881.789151][ T8143] tipc: Enabling of bearer rejected, failed to enable media [ 881.936770][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12385'. [ 881.980369][ T8151] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12382'. [ 882.118656][ T8162] tipc: Started in network mode [ 882.123615][ T8162] tipc: Node identity 9e4f2cdc559, cluster identity 4711 [ 882.130712][ T8162] tipc: Enabled bearer , priority 0 [ 882.149569][ T8162] tipc: Resetting bearer [ 882.512147][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12387'. [ 882.527816][ T8164] team0 (unregistering): Port device team_slave_0 removed [ 882.537381][ T8164] team0 (unregistering): Port device team_slave_1 removed [ 882.549556][ T6961] !yz!: Port: 1 Link DOWN [ 883.033786][ T8161] tipc: Disabling bearer [ 883.373746][ T29] kauditd_printk_skb: 741 callbacks suppressed [ 883.373759][ T29] audit: type=1326 audit(1760911876.642:48236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8184 comm="syz.6.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 883.403472][ T29] audit: type=1326 audit(1760911876.652:48237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8181 comm="syz.6.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 883.429349][ T29] audit: type=1326 audit(1760911876.652:48238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8181 comm="syz.6.12393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7d4efc9 code=0x7ffc0000 [ 883.504852][ T29] audit: type=1326 audit(1760911876.705:48239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8186 comm="syz.5.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 883.544943][ T29] audit: type=1326 audit(1760911876.820:48240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.5.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 883.568630][ T29] audit: type=1326 audit(1760911876.820:48241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8183 comm="syz.5.12394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d8bc8efc9 code=0x7ffc0000 [ 883.592331][ T29] audit: type=1400 audit(1760911876.820:48242): avc: denied { mount } for pid=8189 comm="syz.1.12395" name="/" dev="ramfs" ino=150368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 883.615112][ T29] audit: type=1326 audit(1760911876.841:48243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.3.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6eeefc9 code=0x7ffc0000 [ 883.638685][ T29] audit: type=1326 audit(1760911876.841:48244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.3.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6eeefc9 code=0x7ffc0000 [ 883.662418][ T29] audit: type=1326 audit(1760911876.841:48245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8190 comm="syz.3.12396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a6eeefc9 code=0x7ffc0000 [ 883.756624][ T8201] FAULT_INJECTION: forcing a failure. [ 883.756624][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 883.769292][ T8201] CPU: 0 UID: 0 PID: 8201 Comm: syz.6.12399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 883.769345][ T8201] Tainted: [W]=WARN [ 883.769351][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 883.769361][ T8201] Call Trace: [ 883.769368][ T8201] [ 883.769375][ T8201] __dump_stack+0x1d/0x30 [ 883.769466][ T8201] dump_stack_lvl+0xe8/0x140 [ 883.769482][ T8201] dump_stack+0x15/0x1b [ 883.769499][ T8201] should_fail_ex+0x265/0x280 [ 883.769565][ T8201] should_failslab+0x8c/0xb0 [ 883.769589][ T8201] kmem_cache_alloc_noprof+0x50/0x480 [ 883.769629][ T8201] ? ioctx_alloc+0xf5/0x4e0 [ 883.769652][ T8201] ? __fget_files+0x184/0x1c0 [ 883.769677][ T8201] ioctx_alloc+0xf5/0x4e0 [ 883.769778][ T8201] ? fput+0x8f/0xc0 [ 883.769808][ T8201] __se_sys_io_setup+0x6b/0x1b0 [ 883.769874][ T8201] __x64_sys_io_setup+0x31/0x40 [ 883.769897][ T8201] x64_sys_call+0x2f0e/0x3000 [ 883.769981][ T8201] do_syscall_64+0xd2/0x200 [ 883.770004][ T8201] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 883.770053][ T8201] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 883.770075][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.770097][ T8201] RIP: 0033:0x7f3ac7d4efc9 [ 883.770113][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 883.770182][ T8201] RSP: 002b:00007f3ac67af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 883.770208][ T8201] RAX: ffffffffffffffda RBX: 00007f3ac7fa5fa0 RCX: 00007f3ac7d4efc9 [ 883.770222][ T8201] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 883.770233][ T8201] RBP: 00007f3ac67af090 R08: 0000000000000000 R09: 0000000000000000 [ 883.770244][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.770255][ T8201] R13: 00007f3ac7fa6038 R14: 00007f3ac7fa5fa0 R15: 00007fff217cf7d8 [ 883.770271][ T8201] [ 884.143827][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12408'. [ 884.196943][ T8230] tipc: Enabling of bearer rejected, failed to enable media [ 884.300371][ T8247] netlink: 'syz.4.12416': attribute type 1 has an invalid length. [ 884.314848][ T8247] 8021q: adding VLAN 0 to HW filter on device bond1 [ 884.322980][ T8248] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12411'. [ 884.338086][ T8247] bond1: (slave geneve2): making interface the new active one [ 884.347243][ T8247] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 884.416682][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12420'. [ 884.557154][ T8284] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 884.569799][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12432'. [ 884.582225][T22332] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 884.590021][T22332] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 884.599005][T22332] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 884.605777][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12435'. [ 884.620762][T22332] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 884.714875][ T8306] block device autoloading is deprecated and will be removed. [ 884.761915][ T6961] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 884.767144][ T8314] FAULT_INJECTION: forcing a failure. [ 884.767144][ T8314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.769621][ T6961] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 884.782632][ T8314] CPU: 1 UID: 0 PID: 8314 Comm: syz.5.12445 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 884.782683][ T8314] Tainted: [W]=WARN [ 884.782690][ T8314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 884.782773][ T8314] Call Trace: [ 884.782780][ T8314] [ 884.782834][ T8314] __dump_stack+0x1d/0x30 [ 884.782859][ T8314] dump_stack_lvl+0xe8/0x140 [ 884.782878][ T8314] dump_stack+0x15/0x1b [ 884.782895][ T8314] should_fail_ex+0x265/0x280 [ 884.783030][ T8314] should_fail+0xb/0x20 [ 884.783138][ T8314] should_fail_usercopy+0x1a/0x20 [ 884.783159][ T8314] _copy_from_user+0x1c/0xb0 [ 884.783183][ T8314] uhid_char_write+0xef/0x650 [ 884.783244][ T8314] ? __pfx_uhid_char_write+0x10/0x10 [ 884.783269][ T8314] vfs_write+0x269/0x960 [ 884.783292][ T8314] ? __rcu_read_unlock+0x4f/0x70 [ 884.783339][ T8314] ? __fget_files+0x184/0x1c0 [ 884.783367][ T8314] ksys_write+0xda/0x1a0 [ 884.783391][ T8314] __x64_sys_write+0x40/0x50 [ 884.783414][ T8314] x64_sys_call+0x2802/0x3000 [ 884.783519][ T8314] do_syscall_64+0xd2/0x200 [ 884.783582][ T8314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 884.783608][ T8314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 884.783631][ T8314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.783693][ T8314] RIP: 0033:0x7f7d8bc8efc9 [ 884.783709][ T8314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.783726][ T8314] RSP: 002b:00007f7d8a6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.783746][ T8314] RAX: ffffffffffffffda RBX: 00007f7d8bee5fa0 RCX: 00007f7d8bc8efc9 [ 884.783759][ T8314] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000005 [ 884.783772][ T8314] RBP: 00007f7d8a6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 884.783785][ T8314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.783812][ T8314] R13: 00007f7d8bee6038 R14: 00007f7d8bee5fa0 R15: 00007ffd6700ac78 [ 884.783831][ T8314] [ 884.988095][ T6961] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x3 [ 884.996189][ T6961] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 885.138988][ T8334] Cannot find set identified by id 0 to match [ 885.151557][ T8335] Cannot find set identified by id 0 to match Connection to 10.128.1.143 closed by remote host. [ 886.210924][T12035] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.267377][ T6601] ================================================================== [ 886.275484][ T6601] BUG: KCSAN: data-race in free_pid / zap_pid_ns_processes [ 886.282682][ T6601] [ 886.284988][ T6601] read-write to 0xffff88810482d700 of 4 bytes by task 8331 on cpu 0: [ 886.293024][ T6601] free_pid+0x77/0x180 [ 886.297071][ T6601] free_pids+0x54/0xb0 [ 886.301116][ T6601] release_task+0x9a9/0xb60 [ 886.305600][ T6601] do_exit+0xd81/0x15c0 [ 886.309747][ T6601] do_group_exit+0xff/0x140 [ 886.314231][ T6601] get_signal+0xe58/0xf70 [ 886.318556][ T6601] arch_do_signal_or_restart+0x96/0x440 [ 886.324081][ T6601] exit_to_user_mode_loop+0x77/0x110 [ 886.329351][ T6601] do_syscall_64+0x1d6/0x200 [ 886.333933][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.339812][ T6601] [ 886.342149][ T6601] read to 0xffff88810482d700 of 4 bytes by task 6601 on cpu 1: [ 886.349673][ T6601] zap_pid_ns_processes+0x1fe/0x2d0 [ 886.354860][ T6601] do_exit+0x1414/0x15c0 [ 886.359088][ T6601] do_group_exit+0xff/0x140 [ 886.363573][ T6601] get_signal+0xe58/0xf70 [ 886.367880][ T6601] arch_do_signal_or_restart+0x96/0x440 [ 886.373416][ T6601] exit_to_user_mode_loop+0x77/0x110 [ 886.378679][ T6601] do_syscall_64+0x1d6/0x200 [ 886.383247][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.389117][ T6601] [ 886.391415][ T6601] value changed: 0x00000002 -> 0x00000001 [ 886.397124][ T6601] [ 886.399438][ T6601] Reported by Kernel Concurrency Sanitizer on: [ 886.405567][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 886.417000][ T6601] Tainted: [W]=WARN [ 886.420776][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 886.430806][ T6601] ================================================================== [ 886.452764][T12035] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.509149][T12035] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.584874][T12035] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.632557][T12035] bridge_slave_1: left allmulticast mode [ 886.638243][T12035] bridge_slave_1: left promiscuous mode [ 886.644004][T12035] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.652363][T12035] bridge_slave_0: left promiscuous mode [ 886.657992][T12035] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.765484][T12035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.775470][T12035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.784916][T12035] bond0 (unregistering): Released all slaves [ 886.861404][T12035] tipc: Left network mode [ 886.905635][T12035] hsr_slave_0: left promiscuous mode [ 886.911353][T12035] hsr_slave_1: left promiscuous mode [ 886.917585][T12035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.924965][T12035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.932650][T12035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.940121][T12035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.950236][T12035] veth1_macvtap: left promiscuous mode [ 886.955853][T12035] veth0_macvtap: left promiscuous mode [ 886.961396][T12035] veth1_vlan: left promiscuous mode [ 886.966771][T12035] veth0_vlan: left promiscuous mode [ 886.998212][T12035] pimreg (unregistering): left allmulticast mode