last executing test programs: 5m23.227084166s ago: executing program 3 (id=5650): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 5m22.834681494s ago: executing program 3 (id=5658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe40, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/17], 0x48) 5m22.52042641s ago: executing program 3 (id=5666): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080), 0x3, 0x43b, &(0x7f0000000200)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9b87}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) lstat(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100"], 0x0}, 0x94) fsopen(0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write(r2, &(0x7f00000002c0), 0x0) shutdown(0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, 0x0) 5m22.337793843s ago: executing program 3 (id=5673): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b7, &(0x7f0000001340)="$eJzs3T9vW1UUAPDzHPvFJUMyMCEk3tCBhajpyoArFCREJpAH/khQ0VaqYqtSLFkqIKxOfAIGBr4HGzsSC98AiQ/ARoUqXfT8Xmxju3ad4hSlv9+Sq3PP8T3X7yUerHfzxev90zsPBvceffN7tNtZNDrRicdZHEQjzqVaAABXwuOU4s8Lfb43G9vqCQDYrpnP/9ZTUnYXQ+9suy0AYIs++viTD26dnBx/WBTtiP53w24W1c9q/ta9uB+9uBs3Yj+eTL8LSKkav/f+yXE0i9JBXO+Pht2ysv/5r5PUPMb1R7EfB8vrj4rKTP1o2G3FK7uRZRH3O2UjN2M/Xl2oL+ePby6pj24eb7brTZbrH8Z+/PZlPIhe3Bl/pzFd/9s8infT9399/WmZXNZno2F3d5w3lXYu+9oAAAAAAAAAAAAAAAAAAAAAAHB1HRYTB3G9X4bq83d2noznD/81Pz5fpzGer+qziHw8mDsfaJTix/PzdW4URZGyKn9yvs+1ZrzWjOYL2zgAAAAAAAAAAAAAAAAAAAD8jwwefnV6u9e7e/afDOqH/CeP9V/0dTozkTdidfLuRmvFTp1e9jqfc/TLZ/1JpNzERZoftoqIVT23FiLXyn7Wv/LfKaWUZRHPd5laz7LWmsHe6pzyDf75h723Tm9n697D9vmF+2l2Ko+zwcO5axrZJh2mjW6/fEVOXt8xz/Q6e8/5S/T2H9VidSRbs4vWTKRVD+Jpt197o/v58v4GAQAAAAAAAAAAAAAAAAAAlelDv0smH60sbWytKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZNP//z8dxEJkbjCqi5fnpJRGk0geZ4MXvEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABeAv8EAAD//yiCbKI=") acct(&(0x7f0000000280)='./file1\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES8, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000040)={0x1, 0x2, 0x10003, 0x7}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)={0x190, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "5a167fbb633bcf13e15d5e6d196c1c0594e67bfeee2fc29e8296777197bc68976c5aae0d"}}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6d3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x40085}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r12 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r12, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r12) epoll_pwait(r12, &(0x7f00000001c0)=[{}, {}], 0x2, 0x9, &(0x7f00000002c0)={[0x2]}, 0x8) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=@newlink={0x138, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3ca33, 0x610c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xf}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}, @IFLA_VF_PORTS={0xf4, 0x18, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '{--**F\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aee270dbab939459fad932e36556a9ec"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x77}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x61cc}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x13}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x444c}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ed6ca765fce245860f2ac7acc665b4b6"}, @IFLA_PORT_PROFILE={0x7, 0x2, '}&\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_PROFILE={0xf, 0x2, 'fdb_delete\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, 'fdb_delete\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7b8c}, @IFLA_PORT_PROFILE={0x9, 0x2, 'vfat\x00'}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x4000060) 5m21.901614692s ago: executing program 3 (id=5677): unshare(0x400) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m21.135558106s ago: executing program 3 (id=5685): r0 = socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 5m21.111115807s ago: executing program 32 (id=5685): r0 = socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x300, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 2m26.385355748s ago: executing program 4 (id=7802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d616376"], 0x60}}, 0x8000) 2m26.346390979s ago: executing program 4 (id=7804): getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076652a68315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x836, 0xc, {{0x1c, 0x4, 0x1, 0x14, 0x70, 0x68, 0x0, 0x6, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xed, 0x1, 0x0, [{@broadcast, 0x7}, {@local, 0x3}]}, @rr={0x7, 0xb, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}]}, @lsrr={0x83, 0x7, 0x2d, [@remote]}, @timestamp={0x44, 0x28, 0xe1, 0x0, 0x3, [0x8000, 0x5, 0x6, 0x7fffffff, 0x2, 0x0, 0xb, 0x6, 0x4c9f49c3]}, @rr={0x7, 0xb, 0xa6, [@private=0xa010100, @empty]}, @noop]}}}}}) r5 = openat(0xffffffffffffff9c, 0x0, 0x42042, 0x14a) unshare(0x2040400) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmmsg$inet(r6, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314", 0x10}], 0x1}}], 0x2, 0x4004040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) lseek(r8, 0x8, 0x2) 2m26.266038451s ago: executing program 4 (id=7807): capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) chown(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0xa9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55cce7a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioperm(0x1, 0xa2, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) readahead(r0, 0x9, 0xffffffffffff2c88) 2m26.119275943s ago: executing program 4 (id=7812): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e58427221", 0x25, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f"], 0x10c}}, 0x0) 2m26.083033504s ago: executing program 4 (id=7813): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0xb}}}, 0x24}}, 0x800) 2m25.970061726s ago: executing program 4 (id=7816): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000400)={0x0}, &(0x7f00000004c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x1000075, r2}, 0x38) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x0, 0xa, 0xb, 0x2, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0xe, 0x1, 0x0, r2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xadcc}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x80000001, 0x1000, &(0x7f000001a240)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x9, 0x7f}, 0x10, 0x28b9a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000700)=""/120, 0x78, 0x0, &(0x7f00000005c0)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=r4], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84ac"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x77) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r8, 0x0, 0xfffffffffffffffc}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m10.880911098s ago: executing program 33 (id=7816): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000400)={0x0}, &(0x7f00000004c0)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x1000075, r2}, 0x38) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x36, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x0, 0xa, 0xb, 0x2, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0xe, 0x1, 0x0, r2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xadcc}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x80000001, 0x1000, &(0x7f000001a240)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xe, 0x9, 0x7f}, 0x10, 0x28b9a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000700)=""/120, 0x78, 0x0, &(0x7f00000005c0)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX=r4], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a79960f9f1610940e67e30611d9873d1e6cb9c4cce44c999c49ff52a6400192fd021d7158438d7686a6f66778022c93c544189b684754e7e0f77a4f498609e53104c8aa70632fcc58c757bbc06f6472622dce2729d7296959ce003ec84ac"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x77) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r8, 0x0, 0xfffffffffffffffc}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.371737876s ago: executing program 0 (id=11255): creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[]) 4.268216558s ago: executing program 0 (id=11256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="1f120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 4.069620102s ago: executing program 0 (id=11258): r0 = syz_usbip_server_init(0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x2014, 0xfffe, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x91, 0x8, 0x0) fcntl$setlease(r0, 0x400, 0xf7d3649ebd1cd36b) 3.370213065s ago: executing program 0 (id=11271): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ustat(0x2, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfef5, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) 3.331472926s ago: executing program 0 (id=11273): creat(&(0x7f00000000c0)='./file0\x00', 0xce) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[]) 3.310321446s ago: executing program 0 (id=11274): mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000aafe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5003000000c50000"], 0x0) r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x9b, 0xf, 0x80, 0x48, @mcast2, @empty, 0x0, 0x8, 0x20, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.545859881s ago: executing program 1 (id=11287): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x2e00) 2.434487713s ago: executing program 1 (id=11288): mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000aafe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5003000000c50000"], 0x0) r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x9b, 0xf, 0x80, 0x48, @mcast2, @empty, 0x0, 0x8, 0x20, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 2.433538883s ago: executing program 1 (id=11289): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x100, 0x6ff) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file5\x00', 0x2000, 0x56159817211d7953, &(0x7f0000002500)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000600)={@loopback, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) r2 = open(&(0x7f0000000080)='./file5\x00', 0x88801, 0x40) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e0000000900000009000000ff00000004000000", @ANYRES32, @ANYBLOB="02000000e79d87bc0f407f00950444afd7e7e6b9a8a27fe95007d5d27edefca3ed287fa218e2dbfc57941673654cb83ec9adb748228a685834222298220b1eedc24eedb391fbc1e0d4f73752a710ff418d28270683f72849a1b204bb33faf64a6bd815429027d2ddeb54f09332edb24a5e2e451eaddf", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0100000004000000010000000c00"/28], 0x50) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.028265671s ago: executing program 1 (id=11292): socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x18, 0x800}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.845783635s ago: executing program 2 (id=11296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, 0x0, 0x8, 0x3}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="4d6e5c7b07212ba1b962e83f7e00000000000000002a000000"], 0x14}, 0x4, 0x700000000000000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002012702500000000002020207b1af8ff000000000007010000f8ffffffb70000eeff000000b703000000000000850000002d00000095e2717e4a333c85a7aec9ae9f70944ea56da012030d377d001c29370e7ab9ae9a6fe2"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x52, 0x67, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000001c0)=0x2, 0x5, 0x0) ftruncate(r3, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYRES8=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x8000}, 0x10}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r6, 0x40043311, &(0x7f0000000280)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd20a, 0xd, "10120dfe0ef7f0200000ff490a0080002a00"}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010020000000000a01010000000000000000020000000900010073797a30000000002c0001010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a3200"/136], 0xa0}}, 0x8040) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f00000008c0), &(0x7f0000000880)=r11}, 0x20) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r12) 1.246642736s ago: executing program 2 (id=11301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x1a1d, &(0x7f0000000540)={0x0, 0x755e, 0x13080, 0x3, 0x2bc, 0x0, r1}, &(0x7f0000000080), &(0x7f0000001740)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.174832948s ago: executing program 2 (id=11303): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100000000000000e7030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0) (fail_nth: 13) 1.150802428s ago: executing program 1 (id=11304): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r8 = gettid() openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0xfffffffffffffdd8, 0x0}, 0x90000000}], 0x1, 0x60010000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 868.884913ms ago: executing program 2 (id=11305): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56dc42944af05000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a000000ffffffff000000000000000000000000000000010700000000000000"], 0x88}, 0x1, 0x7}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x2, 0x400250}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 822.711244ms ago: executing program 2 (id=11306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="09d68e614418ed24d89252470000000000000000b7080000070000007b8af8ffffe40000bfa200000000000007020000f8ffff89c103000008000000b70400000100820000009500000000f6ffffea510404c1a5e5e96df0e6c2b53d35046f4dd7bc92f821bcc0fa885e118cf4337e7f648f78a4fdba41eee99548ae8b2dddd9fed9b5476598df021842c99f18d64ac5c2fe007e51855656f55b0942b191a8bd3c1d217916dc3824ae0ce0b6d7667a5c5fd0f4020e880a1bc05cf4b45521567b82ef794a9ba6d5ca"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r1, 0x16, 0x0, 0x1d, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r4, r1, 0x37, 0x0, 0x0, @void, @value=r1, @void, @void, r3}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x1000, 0x0, 0x8, 0x1, 0xe3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x1, @multicast}, 0x2b) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 726.225526ms ago: executing program 5 (id=11309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000580), &(0x7f0000000940)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) 725.774656ms ago: executing program 5 (id=11310): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffdffbffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c00"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 713.961297ms ago: executing program 2 (id=11311): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r2) syz_usb_connect(0x0, 0x57, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x3}, 0x18) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x78, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x683abd83}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x4004080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) symlinkat(&(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') 701.965957ms ago: executing program 5 (id=11312): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) 683.245627ms ago: executing program 5 (id=11313): r0 = socket(0x23, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 663.961958ms ago: executing program 5 (id=11315): mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000aafe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5003000000c50000"], 0x0) r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x9b, 0xf, 0x80, 0x48, @mcast2, @empty, 0x0, 0x8, 0x20, 0x5}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYRES16=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x5, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 630.371278ms ago: executing program 5 (id=11316): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x10000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd30, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r8 = gettid() openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 447.838802ms ago: executing program 6 (id=11319): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f00000004c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000000)="02a9c6e366ccf7bdff8d00", 0xb}], 0x1, &(0x7f0000001740)=[@ip_tos_int={{0x13, 0x0, 0x1, 0x2}}], 0x18}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = memfd_secret(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0x161802, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x40000f63c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_journal_start_reserved\x00', 0xffffffffffffffff, 0x0, 0xfff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) pivot_root(&(0x7f0000000380)='./file0\x00', 0x0) 282.682395ms ago: executing program 6 (id=11320): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000580), &(0x7f0000000940)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) 247.505646ms ago: executing program 6 (id=11321): socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x100000000}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 123.094748ms ago: executing program 1 (id=11322): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'rateest\x00'}, @NFTA_MATCH_INFO={0x4c, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a63"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r4, 0x1) 114.498229ms ago: executing program 6 (id=11323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES64=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) mmap(&(0x7f0000362000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f42000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 22.05527ms ago: executing program 6 (id=11324): r0 = socket(0x23, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 0s ago: executing program 6 (id=11325): r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") (async) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) (async) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$TCXONC(r5, 0x4b3a, 0x2) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000bc0)={0x104, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x299}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xd}, {0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000bc0)={0x104, r6, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x299}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x400}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xd}, {0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r8, 0x16318}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x8004) socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) kernel console output (not intermixed with test programs): 0323 Not tainted syzkaller #0 PREEMPT(voluntary) [ 650.452776][T14650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 650.452805][T14650] Call Trace: [ 650.452812][T14650] [ 650.452821][T14650] __dump_stack+0x1d/0x30 [ 650.452842][T14650] dump_stack_lvl+0xe8/0x140 [ 650.452863][T14650] dump_stack+0x15/0x1b [ 650.452880][T14650] should_fail_ex+0x265/0x280 [ 650.452980][T14650] should_failslab+0x8c/0xb0 [ 650.453086][T14650] kmem_cache_alloc_noprof+0x50/0x310 [ 650.453152][T14650] ? security_file_alloc+0x32/0x100 [ 650.453190][T14650] security_file_alloc+0x32/0x100 [ 650.453275][T14650] init_file+0x5c/0x1d0 [ 650.453308][T14650] alloc_empty_file+0x8b/0x200 [ 650.453341][T14650] path_openat+0x68/0x2170 [ 650.453361][T14650] ? _parse_integer_limit+0x170/0x190 [ 650.453389][T14650] ? _parse_integer+0x27/0x40 [ 650.453430][T14650] ? kstrtoull+0x111/0x140 [ 650.453518][T14650] ? kstrtouint+0x76/0xc0 [ 650.453580][T14650] do_filp_open+0x109/0x230 [ 650.453685][T14650] do_sys_openat2+0xa6/0x110 [ 650.453721][T14650] __x64_sys_creat+0x65/0x90 [ 650.453741][T14650] x64_sys_call+0x2d94/0x2ff0 [ 650.453763][T14650] do_syscall_64+0xd2/0x200 [ 650.453823][T14650] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 650.453918][T14650] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 650.453950][T14650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.453986][T14650] RIP: 0033:0x7f4e312cec29 [ 650.454003][T14650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.454041][T14650] RSP: 002b:00007f4e2fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 650.454127][T14650] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cec29 [ 650.454140][T14650] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 650.454153][T14650] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 650.454166][T14650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.454179][T14650] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 650.454199][T14650] [ 650.684732][ T29] kauditd_printk_skb: 551 callbacks suppressed [ 650.684751][ T29] audit: type=1400 audit(671.666:254679): avc: denied { create } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.712767][ T29] audit: type=1400 audit(671.666:254680): avc: denied { setopt } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.733155][ T29] audit: type=1400 audit(671.666:254681): avc: denied { write } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.753431][ T29] audit: type=1400 audit(671.676:254682): avc: denied { read } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 650.773681][ T29] audit: type=1400 audit(671.676:254683): avc: denied { create } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 650.793253][ T29] audit: type=1400 audit(671.676:254684): avc: denied { connect } for pid=14652 comm="syz.6.10324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 650.812721][ T29] audit: type=1400 audit(671.696:254685): avc: denied { unmount } for pid=5408 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 650.832776][ T29] audit: type=1400 audit(671.746:254686): avc: denied { execute } for pid=14658 comm="syz.2.10328" dev="tmpfs" ino=2217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 650.853758][ T29] audit: type=1400 audit(671.746:254687): avc: denied { execute_no_trans } for pid=14658 comm="syz.2.10328" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 650.891188][ T29] audit: type=1400 audit(671.876:254688): avc: denied { create } for pid=14669 comm="syz.6.10330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 650.917085][T14671] atomic_op ffff8881044c0928 conn xmit_atomic 0000000000000000 [ 650.938054][T14673] ip6gre2: entered allmulticast mode [ 651.026473][T14691] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 651.078785][T14693] ip6gre7: entered allmulticast mode [ 651.104593][T14701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14701 comm=syz.6.10340 [ 651.118036][T14701] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=14701 comm=syz.6.10340 [ 651.276312][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa02e00: rx timeout, send abort [ 651.306136][T14746] netlink: 'syz.6.10346': attribute type 12 has an invalid length. [ 651.484456][T14763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14763 comm=syz.0.10353 [ 651.506523][T14763] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=14763 comm=syz.0.10353 [ 651.776389][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812efac600: rx timeout, send abort [ 651.784634][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa02e00: abort rx timeout. Force session deactivation [ 651.892426][T14814] IPVS: Error joining to the multicast group [ 652.124802][T14862] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 652.153501][T14864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14864 comm=syz.2.10376 [ 652.210902][T14870] ip6gre3: entered allmulticast mode [ 652.284635][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812efac600: abort rx timeout. Force session deactivation [ 652.319274][T14886] netlink: 'syz.0.10385': attribute type 1 has an invalid length. [ 652.416251][T14903] bridge: RTM_NEWNEIGH with invalid ether address [ 652.464525][T14909] ip6gre6: entered allmulticast mode [ 652.771242][T14975] __nla_validate_parse: 27 callbacks suppressed [ 652.771260][T14975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10407'. [ 652.813908][T14978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=14978 comm=syz.2.10408 [ 652.918395][T14997] netlink: 'syz.2.10414': attribute type 12 has an invalid length. [ 652.926504][T14997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10414'. [ 652.959779][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10416'. [ 652.985581][T15005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10417'. [ 653.040328][T15017] netlink: 'syz.1.10422': attribute type 12 has an invalid length. [ 653.048312][T15017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10422'. [ 653.083019][T15021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10421'. [ 653.184010][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10430'. [ 653.212808][T15036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10429'. [ 653.251149][T15048] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10433'. [ 653.364440][T15059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10437'. [ 653.431808][T15067] 9pnet_fd: Insufficient options for proto=fd [ 653.501667][T15077] veth1: entered promiscuous mode [ 653.506942][T15077] veth1: entered allmulticast mode [ 653.516610][T15077] atomic_op ffff888133070528 conn xmit_atomic 0000000000000000 [ 653.591410][T15079] FAULT_INJECTION: forcing a failure. [ 653.591410][T15079] name failslab, interval 1, probability 0, space 0, times 0 [ 653.604231][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.1.10445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 653.604265][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.604324][T15079] Call Trace: [ 653.604330][T15079] [ 653.604346][T15079] __dump_stack+0x1d/0x30 [ 653.604373][T15079] dump_stack_lvl+0xe8/0x140 [ 653.604579][T15079] dump_stack+0x15/0x1b [ 653.604599][T15079] should_fail_ex+0x265/0x280 [ 653.604628][T15079] ? resv_map_alloc+0x57/0x190 [ 653.604656][T15079] should_failslab+0x8c/0xb0 [ 653.604688][T15079] __kmalloc_cache_noprof+0x4c/0x320 [ 653.604730][T15079] resv_map_alloc+0x57/0x190 [ 653.604760][T15079] hugetlbfs_get_inode+0x67/0x370 [ 653.604788][T15079] hugetlb_file_setup+0x192/0x3d0 [ 653.604874][T15079] ksys_mmap_pgoff+0x157/0x310 [ 653.604894][T15079] x64_sys_call+0x14a3/0x2ff0 [ 653.604916][T15079] do_syscall_64+0xd2/0x200 [ 653.605033][T15079] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 653.605058][T15079] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 653.605089][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.605190][T15079] RIP: 0033:0x7f179d6eec29 [ 653.605207][T15079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.605230][T15079] RSP: 002b:00007f179c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 653.605266][T15079] RAX: ffffffffffffffda RBX: 00007f179d935fa0 RCX: 00007f179d6eec29 [ 653.605282][T15079] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 653.605294][T15079] RBP: 00007f179c157090 R08: ffffffffffffffff R09: 0000000000000000 [ 653.605306][T15079] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 653.605321][T15079] R13: 00007f179d936038 R14: 00007f179d935fa0 R15: 00007fff6cffa668 [ 653.605402][T15079] [ 654.048051][T15125] batadv_slave_0: entered promiscuous mode [ 654.054419][T15125] debugfs: 'hsr1' already exists in 'hsr' [ 654.060284][T15125] Cannot create hsr debugfs directory [ 654.205108][T15137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.221879][T15137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.303260][T15145] ip6gre3: entered allmulticast mode [ 654.345395][T15161] validate_nla: 1 callbacks suppressed [ 654.345410][T15161] netlink: 'syz.1.10463': attribute type 12 has an invalid length. [ 654.873325][T15185] macvlan1: entered promiscuous mode [ 654.899576][T15185] ipvlan0: entered promiscuous mode [ 654.917135][T15185] ipvlan0: left promiscuous mode [ 654.937674][T15185] macvlan1: left promiscuous mode [ 654.959277][T15199] netlink: 'syz.6.10475': attribute type 12 has an invalid length. [ 654.994390][T15206] FAULT_INJECTION: forcing a failure. [ 654.994390][T15206] name failslab, interval 1, probability 0, space 0, times 0 [ 655.007362][T15206] CPU: 1 UID: 0 PID: 15206 Comm: syz.5.10476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 655.007457][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 655.007472][T15206] Call Trace: [ 655.007479][T15206] [ 655.007489][T15206] __dump_stack+0x1d/0x30 [ 655.007513][T15206] dump_stack_lvl+0xe8/0x140 [ 655.007534][T15206] dump_stack+0x15/0x1b [ 655.007580][T15206] should_fail_ex+0x265/0x280 [ 655.007608][T15206] should_failslab+0x8c/0xb0 [ 655.007677][T15206] kmem_cache_alloc_noprof+0x50/0x310 [ 655.007706][T15206] ? security_inode_alloc+0x37/0x100 [ 655.007796][T15206] security_inode_alloc+0x37/0x100 [ 655.007827][T15206] inode_init_always_gfp+0x4b7/0x500 [ 655.007854][T15206] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 655.007885][T15206] alloc_inode+0x58/0x170 [ 655.007910][T15206] new_inode+0x1d/0xe0 [ 655.007943][T15206] shmem_get_inode+0x244/0x750 [ 655.007990][T15206] shmem_mknod+0x46/0x180 [ 655.008018][T15206] shmem_create+0x34/0x50 [ 655.008043][T15206] ? __pfx_shmem_create+0x10/0x10 [ 655.008069][T15206] path_openat+0x1102/0x2170 [ 655.008102][T15206] do_filp_open+0x109/0x230 [ 655.008188][T15206] do_sys_openat2+0xa6/0x110 [ 655.008235][T15206] __x64_sys_openat+0xf2/0x120 [ 655.008278][T15206] x64_sys_call+0x2e9c/0x2ff0 [ 655.008303][T15206] do_syscall_64+0xd2/0x200 [ 655.008478][T15206] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 655.008533][T15206] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 655.008570][T15206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.008603][T15206] RIP: 0033:0x7fc96e20ec29 [ 655.008693][T15206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.008713][T15206] RSP: 002b:00007fc96cc6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 655.008735][T15206] RAX: ffffffffffffffda RBX: 00007fc96e455fa0 RCX: 00007fc96e20ec29 [ 655.008750][T15206] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 655.008764][T15206] RBP: 00007fc96cc6f090 R08: 0000000000000000 R09: 0000000000000000 [ 655.008778][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.008791][T15206] R13: 00007fc96e456038 R14: 00007fc96e455fa0 R15: 00007ffeb188d128 [ 655.008882][T15206] [ 655.282252][T15212] atomic_op ffff88815664bd28 conn xmit_atomic 0000000000000000 [ 655.579580][T15247] bridge: RTM_NEWNEIGH with invalid ether address [ 655.706466][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 655.706485][ T29] audit: type=1400 audit(677.690:255388): avc: denied { read write } for pid=15276 comm="syz.2.10494" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 655.741247][ T29] audit: type=1400 audit(677.690:255389): avc: denied { open } for pid=15276 comm="syz.2.10494" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 655.765269][ T29] audit: type=1400 audit(677.720:255390): avc: denied { create } for pid=15277 comm="syz.5.10495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 655.785635][ T29] audit: type=1400 audit(677.720:255391): avc: denied { read } for pid=15277 comm="syz.5.10495" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 655.787468][T15278] macvlan1: entered promiscuous mode [ 655.808777][ T29] audit: type=1400 audit(677.720:255392): avc: denied { open } for pid=15277 comm="syz.5.10495" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 655.837409][ T29] audit: type=1400 audit(677.720:255393): avc: denied { ioctl } for pid=15276 comm="syz.2.10494" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 655.840177][T15290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15290 comm=syz.2.10494 [ 655.864250][ T29] audit: type=1400 audit(677.750:255394): avc: denied { create } for pid=15277 comm="syz.5.10495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 655.894246][ T29] audit: type=1400 audit(677.750:255395): avc: denied { ioctl } for pid=15277 comm="syz.5.10495" path="socket:[108923]" dev="sockfs" ino=108923 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 655.895153][T15278] ipvlan0: entered promiscuous mode [ 655.919114][ T29] audit: type=1400 audit(677.750:255396): avc: denied { ioctl } for pid=15277 comm="syz.5.10495" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 655.919228][ T29] audit: type=1400 audit(677.750:255397): avc: denied { create } for pid=15277 comm="syz.5.10495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 655.949794][T15291] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=15291 comm=syz.2.10494 [ 655.973992][T15278] ipvlan0: left promiscuous mode [ 656.004090][T15278] macvlan1: left promiscuous mode [ 656.101702][T15304] random: crng reseeded on system resumption [ 656.159058][T15310] FAULT_INJECTION: forcing a failure. [ 656.159058][T15310] name failslab, interval 1, probability 0, space 0, times 0 [ 656.171922][T15310] CPU: 0 UID: 0 PID: 15310 Comm: syz.1.10501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 656.171956][T15310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.172025][T15310] Call Trace: [ 656.172031][T15310] [ 656.172039][T15310] __dump_stack+0x1d/0x30 [ 656.172066][T15310] dump_stack_lvl+0xe8/0x140 [ 656.172107][T15310] dump_stack+0x15/0x1b [ 656.172162][T15310] should_fail_ex+0x265/0x280 [ 656.172194][T15310] should_failslab+0x8c/0xb0 [ 656.172225][T15310] __kmalloc_noprof+0xa5/0x3e0 [ 656.172259][T15310] ? bpf_test_init+0xa9/0x160 [ 656.172318][T15310] bpf_test_init+0xa9/0x160 [ 656.172345][T15310] bpf_prog_test_run_xdp+0x274/0x910 [ 656.172376][T15310] ? kstrtouint+0x76/0xc0 [ 656.172435][T15310] ? __rcu_read_unlock+0x4f/0x70 [ 656.172469][T15310] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 656.172499][T15310] bpf_prog_test_run+0x22a/0x390 [ 656.172540][T15310] __sys_bpf+0x4b9/0x7b0 [ 656.172660][T15310] __x64_sys_bpf+0x41/0x50 [ 656.172691][T15310] x64_sys_call+0x2aea/0x2ff0 [ 656.172718][T15310] do_syscall_64+0xd2/0x200 [ 656.172811][T15310] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 656.172853][T15310] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 656.172892][T15310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.172918][T15310] RIP: 0033:0x7f179d6eec29 [ 656.172936][T15310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.172960][T15310] RSP: 002b:00007f179c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 656.172989][T15310] RAX: ffffffffffffffda RBX: 00007f179d935fa0 RCX: 00007f179d6eec29 [ 656.173005][T15310] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 656.173056][T15310] RBP: 00007f179c157090 R08: 0000000000000000 R09: 0000000000000000 [ 656.173076][T15310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.173088][T15310] R13: 00007f179d936038 R14: 00007f179d935fa0 R15: 00007fff6cffa668 [ 656.173108][T15310] [ 656.550492][T15339] netlink: 'syz.5.10509': attribute type 12 has an invalid length. [ 656.699099][T15351] atomic_op ffff88815664b928 conn xmit_atomic 0000000000000000 [ 656.763115][T15354] bridge: RTM_NEWNEIGH with invalid ether address [ 656.818886][T15356] bridge: RTM_NEWNEIGH with invalid ether address [ 657.118972][T15379] netlink: 'syz.2.10524': attribute type 12 has an invalid length. [ 657.354430][T15385] bridge: RTM_NEWNEIGH with invalid ether address [ 657.408924][T15393] bridge: RTM_NEWNEIGH with invalid ether address [ 657.468400][T15401] FAULT_INJECTION: forcing a failure. [ 657.468400][T15401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.481596][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.2.10532 Not tainted syzkaller #0 PREEMPT(voluntary) [ 657.481627][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.481718][T15401] Call Trace: [ 657.481726][T15401] [ 657.481734][T15401] __dump_stack+0x1d/0x30 [ 657.481766][T15401] dump_stack_lvl+0xe8/0x140 [ 657.481852][T15401] dump_stack+0x15/0x1b [ 657.481870][T15401] should_fail_ex+0x265/0x280 [ 657.481896][T15401] should_fail+0xb/0x20 [ 657.481918][T15401] should_fail_usercopy+0x1a/0x20 [ 657.482015][T15401] _copy_from_user+0x1c/0xb0 [ 657.482050][T15401] __sys_bpf+0x178/0x7b0 [ 657.482088][T15401] __x64_sys_bpf+0x41/0x50 [ 657.482166][T15401] x64_sys_call+0x2aea/0x2ff0 [ 657.482188][T15401] do_syscall_64+0xd2/0x200 [ 657.482224][T15401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 657.482284][T15401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 657.482316][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.482339][T15401] RIP: 0033:0x7f6a65f5ec29 [ 657.482435][T15401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.482532][T15401] RSP: 002b:00007f6a649c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 657.482552][T15401] RAX: ffffffffffffffda RBX: 00007f6a661a5fa0 RCX: 00007f6a65f5ec29 [ 657.482565][T15401] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 657.482577][T15401] RBP: 00007f6a649c7090 R08: 0000000000000000 R09: 0000000000000000 [ 657.482590][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.482603][T15401] R13: 00007f6a661a6038 R14: 00007f6a661a5fa0 R15: 00007ffd7e1a6ad8 [ 657.482624][T15401] [ 657.896149][T15410] __nla_validate_parse: 24 callbacks suppressed [ 657.896166][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10535'. [ 657.911681][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10535'. [ 658.000257][T15416] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10536'. [ 658.041174][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10538'. [ 658.099532][T15417] hsr_slave_0: left promiscuous mode [ 658.122850][T15417] hsr_slave_1: left promiscuous mode [ 658.198262][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10539'. [ 658.243544][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10540'. [ 658.362731][T15443] atomic_op ffff88811acbb928 conn xmit_atomic 0000000000000000 [ 658.413064][T15445] netlink: 36 bytes leftover after parsing attributes in process `gtp'. [ 658.504178][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10545'. [ 658.566775][T15450] ip6gre4: entered allmulticast mode [ 658.577731][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10548'. [ 658.586937][T15454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10548'. [ 659.106471][T15493] atomic_op ffff88815664ad28 conn xmit_atomic 0000000000000000 [ 659.132479][T15497] macvlan1: entered promiscuous mode [ 659.140793][T15497] ipvlan0: entered promiscuous mode [ 659.148861][T15497] ipvlan0: left promiscuous mode [ 659.157697][T15497] macvlan1: left promiscuous mode [ 659.274852][T15532] ip6gre5: entered allmulticast mode [ 659.410480][T15558] bridge: RTM_NEWNEIGH with invalid ether address [ 659.625387][T15598] bridge: RTM_NEWNEIGH with invalid ether address [ 659.724677][T15614] netlink: 'syz.6.10589': attribute type 12 has an invalid length. [ 659.821369][T15621] ip6gre7: entered allmulticast mode [ 659.843271][T15631] bridge: RTM_NEWNEIGH with invalid ether address [ 659.955041][T15647] 9pnet_fd: Insufficient options for proto=fd [ 660.047133][T15656] FAULT_INJECTION: forcing a failure. [ 660.047133][T15656] name failslab, interval 1, probability 0, space 0, times 0 [ 660.059869][T15656] CPU: 1 UID: 0 PID: 15656 Comm: syz.1.10603 Not tainted syzkaller #0 PREEMPT(voluntary) [ 660.059904][T15656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 660.059941][T15656] Call Trace: [ 660.059949][T15656] [ 660.059956][T15656] __dump_stack+0x1d/0x30 [ 660.060005][T15656] dump_stack_lvl+0xe8/0x140 [ 660.060028][T15656] dump_stack+0x15/0x1b [ 660.060044][T15656] should_fail_ex+0x265/0x280 [ 660.060073][T15656] should_failslab+0x8c/0xb0 [ 660.060151][T15656] kmem_cache_alloc_node_noprof+0x57/0x320 [ 660.060234][T15656] ? __alloc_skb+0x101/0x320 [ 660.060297][T15656] __alloc_skb+0x101/0x320 [ 660.060326][T15656] netlink_alloc_large_skb+0xba/0xf0 [ 660.060445][T15656] netlink_sendmsg+0x3cf/0x6b0 [ 660.060479][T15656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.060535][T15656] __sock_sendmsg+0x142/0x180 [ 660.060577][T15656] ____sys_sendmsg+0x31e/0x4e0 [ 660.060610][T15656] ___sys_sendmsg+0x17b/0x1d0 [ 660.060671][T15656] __x64_sys_sendmsg+0xd4/0x160 [ 660.060710][T15656] x64_sys_call+0x191e/0x2ff0 [ 660.060735][T15656] do_syscall_64+0xd2/0x200 [ 660.060811][T15656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 660.060836][T15656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 660.060905][T15656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.060927][T15656] RIP: 0033:0x7f179d6eec29 [ 660.060943][T15656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.060962][T15656] RSP: 002b:00007f179c157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.060986][T15656] RAX: ffffffffffffffda RBX: 00007f179d935fa0 RCX: 00007f179d6eec29 [ 660.061003][T15656] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 660.061019][T15656] RBP: 00007f179c157090 R08: 0000000000000000 R09: 0000000000000000 [ 660.061037][T15656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.061049][T15656] R13: 00007f179d936038 R14: 00007f179d935fa0 R15: 00007fff6cffa668 [ 660.061069][T15656] [ 660.630301][T15689] macvlan1: entered promiscuous mode [ 660.643308][T15689] ipvlan0: entered promiscuous mode [ 660.649549][T15689] ipvlan0: left promiscuous mode [ 660.654991][T15689] macvlan1: left promiscuous mode [ 660.717243][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 660.717262][ T29] audit: type=1400 audit(682.700:255916): avc: denied { sys_module } for pid=15700 comm="syz.6.10619" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 660.754114][ T29] audit: type=1400 audit(682.730:255917): avc: denied { create } for pid=15712 comm="syz.5.10622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 660.764934][T15713] ip6gre8: entered allmulticast mode [ 660.773919][ T29] audit: type=1400 audit(682.730:255918): avc: denied { bind } for pid=15712 comm="syz.5.10622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 660.799147][ T29] audit: type=1400 audit(682.730:255919): avc: denied { setopt } for pid=15712 comm="syz.5.10622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 660.831456][T15719] bridge: RTM_NEWNEIGH with invalid ether address [ 660.843009][T15721] 9pnet_fd: Insufficient options for proto=fd [ 660.864373][ T29] audit: type=1400 audit(682.840:255920): avc: denied { execmem } for pid=15722 comm="syz.6.10625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 660.889803][ T29] audit: type=1400 audit(682.870:255921): avc: denied { create } for pid=15724 comm="syz.5.10626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 660.914140][ T29] audit: type=1400 audit(682.900:255922): avc: denied { create } for pid=15724 comm="syz.5.10626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 660.933493][ T29] audit: type=1400 audit(682.900:255923): avc: denied { ioctl } for pid=15724 comm="syz.5.10626" path="socket:[110099]" dev="sockfs" ino=110099 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 660.958188][ T29] audit: type=1400 audit(682.900:255924): avc: denied { bind } for pid=15724 comm="syz.5.10626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 660.982314][T15726] atomic_op ffff888104733928 conn xmit_atomic 0000000000000000 [ 660.984301][ T29] audit: type=1400 audit(682.970:255925): avc: denied { write } for pid=15724 comm="syz.5.10626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 661.903455][T15786] atomic_op ffff88815f75c128 conn xmit_atomic 0000000000000000 [ 661.981306][T15799] bridge: RTM_NEWNEIGH with invalid ether address [ 662.326019][T15848] atomic_op ffff88811b58dd28 conn xmit_atomic 0000000000000000 [ 662.355258][T15862] netlink: 'syz.0.10657': attribute type 1 has an invalid length. [ 662.398228][T15862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 662.462623][T15913] bridge: RTM_NEWNEIGH with invalid ether address [ 662.583706][T15929] bridge: RTM_NEWNEIGH with invalid ether address [ 662.679763][T15939] atomic_op ffff88818e729d28 conn xmit_atomic 0000000000000000 [ 662.839509][T15960] ip6gre3: entered allmulticast mode [ 662.933713][T15967] __nla_validate_parse: 29 callbacks suppressed [ 662.933733][T15967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10679'. [ 663.063205][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10682'. [ 663.265766][T15998] atomic_op ffff8881362dd928 conn xmit_atomic 0000000000000000 [ 663.304337][T16004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10689'. [ 663.517166][T16047] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=16047 comm=syz.6.10697 [ 663.530118][T16048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=16048 comm=syz.1.10696 [ 663.575192][T16050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10699'. [ 663.770760][T16067] bridge: RTM_NEWNEIGH with invalid ether address [ 663.824760][T16075] bridge: RTM_NEWNEIGH with invalid ether address [ 663.958039][T16083] FAULT_INJECTION: forcing a failure. [ 663.958039][T16083] name failslab, interval 1, probability 0, space 0, times 0 [ 663.970957][T16083] CPU: 0 UID: 0 PID: 16083 Comm: syz.0.10709 Not tainted syzkaller #0 PREEMPT(voluntary) [ 663.971057][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 663.971073][T16083] Call Trace: [ 663.971137][T16083] [ 663.971148][T16083] __dump_stack+0x1d/0x30 [ 663.971175][T16083] dump_stack_lvl+0xe8/0x140 [ 663.971262][T16083] dump_stack+0x15/0x1b [ 663.971284][T16083] should_fail_ex+0x265/0x280 [ 663.971316][T16083] should_failslab+0x8c/0xb0 [ 663.971348][T16083] kmem_cache_alloc_node_noprof+0x57/0x320 [ 663.971388][T16083] ? __alloc_skb+0x101/0x320 [ 663.971416][T16083] __alloc_skb+0x101/0x320 [ 663.971445][T16083] alloc_skb_with_frags+0x7d/0x470 [ 663.971550][T16083] ? number+0x9ae/0xab0 [ 663.971583][T16083] sock_alloc_send_pskb+0x43a/0x4f0 [ 663.971655][T16083] ? enqueue_task_fair+0x35e/0x980 [ 663.971688][T16083] tun_get_user+0x9b3/0x2680 [ 663.971774][T16083] ? ref_tracker_alloc+0x1f2/0x2f0 [ 663.971805][T16083] ? selinux_file_permission+0x2f0/0x320 [ 663.971863][T16083] tun_chr_write_iter+0x15e/0x210 [ 663.971896][T16083] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 663.971917][T16083] vfs_write+0x527/0x960 [ 663.971951][T16083] ksys_write+0xda/0x1a0 [ 663.971975][T16083] __x64_sys_write+0x40/0x50 [ 663.972062][T16083] x64_sys_call+0x27fe/0x2ff0 [ 663.972090][T16083] do_syscall_64+0xd2/0x200 [ 663.972193][T16083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 663.972222][T16083] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 663.972407][T16083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.972436][T16083] RIP: 0033:0x7f4e312cd6df [ 663.972456][T16083] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 663.972480][T16083] RSP: 002b:00007f4e2fd37000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 663.972504][T16083] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cd6df [ 663.972561][T16083] RDX: 00000000000010c3 RSI: 0000200000000540 RDI: 00000000000000c8 [ 663.972578][T16083] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 663.972594][T16083] R10: 00000000000010c3 R11: 0000000000000293 R12: 0000000000000001 [ 663.972610][T16083] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 663.972635][T16083] [ 664.268831][T16086] macvlan1: entered promiscuous mode [ 664.275161][T16086] ipvlan0: entered promiscuous mode [ 664.281350][T16086] ipvlan0: left promiscuous mode [ 664.288543][T16086] macvlan1: left promiscuous mode [ 664.453648][T16107] bridge: RTM_NEWNEIGH with invalid ether address [ 664.667963][T16121] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10715'. [ 664.747945][T16125] ip6gre4: entered allmulticast mode [ 664.991590][T16134] netlink: 'syz.6.10724': attribute type 1 has an invalid length. [ 665.060492][T16134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.104007][T16167] gretap1: entered promiscuous mode [ 665.143095][T16167] bond1: (slave gretap1): making interface the new active one [ 665.173163][T16167] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 665.209888][T16134] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10724'. [ 665.539181][T16178] atomic_op ffff88818e72b928 conn xmit_atomic 0000000000000000 [ 665.588250][T16188] netlink: 'syz.0.10730': attribute type 12 has an invalid length. [ 665.596234][T16188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10730'. [ 665.792058][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 665.792075][ T29] audit: type=1400 audit(687.770:256510): avc: denied { prog_load } for pid=16205 comm="syz.0.10735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 665.875859][ T29] audit: type=1400 audit(687.770:256511): avc: denied { bpf } for pid=16205 comm="syz.0.10735" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 665.896764][ T29] audit: type=1400 audit(687.840:256512): avc: denied { map_create } for pid=16214 comm="syz.2.10739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 665.915669][ T29] audit: type=1400 audit(687.840:256513): avc: denied { map_read } for pid=16214 comm="syz.2.10739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 665.934417][ T29] audit: type=1400 audit(687.840:256514): avc: denied { perfmon } for pid=16214 comm="syz.2.10739" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 665.955182][ T29] audit: type=1400 audit(687.850:256515): avc: denied { map_write } for pid=16214 comm="syz.2.10739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 665.974163][ T29] audit: type=1400 audit(687.850:256516): avc: denied { create } for pid=16214 comm="syz.2.10739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 665.993587][ T29] audit: type=1400 audit(687.850:256517): avc: denied { ioctl } for pid=16214 comm="syz.2.10739" path="socket:[111279]" dev="sockfs" ino=111279 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 666.018480][ T29] audit: type=1400 audit(687.850:256518): avc: denied { module_request } for pid=16214 comm="syz.2.10739" kmod="netdev-vlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 666.112688][T16220] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10742'. [ 666.128392][ T29] audit: type=1400 audit(687.880:256519): avc: denied { create } for pid=16212 comm="syz.5.10738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 666.167867][T16229] bridge: RTM_NEWNEIGH with invalid ether address [ 666.233772][T16249] ip6gre5: entered allmulticast mode [ 666.253995][T16253] bridge: RTM_NEWNEIGH with invalid ether address [ 666.258441][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10750'. [ 666.347417][T16275] ip6gre4: entered allmulticast mode [ 666.442264][T16288] macvlan1: entered promiscuous mode [ 666.448809][T16288] ipvlan0: entered promiscuous mode [ 666.454781][T16288] ipvlan0: left promiscuous mode [ 666.464338][T16288] macvlan1: left promiscuous mode [ 666.543052][T16303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.552476][T16303] batadv_slave_0: entered promiscuous mode [ 666.589626][T16314] atomic_op ffff8881362ddd28 conn xmit_atomic 0000000000000000 [ 666.636975][T16126] syz.1.10715 (16126) used greatest stack depth: 6168 bytes left [ 666.748089][T16327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10766'. [ 666.854249][T16353] atomic_op ffff88818e72ad28 conn xmit_atomic 0000000000000000 [ 667.688351][T16402] macvlan1: entered promiscuous mode [ 667.695012][T16402] ipvlan0: entered promiscuous mode [ 667.716152][T16402] ipvlan0: left promiscuous mode [ 667.727311][T16402] macvlan1: left promiscuous mode [ 667.954340][T16422] netlink: 'syz.0.10792': attribute type 13 has an invalid length. [ 667.962336][T16422] netlink: 'syz.0.10792': attribute type 17 has an invalid length. [ 668.065231][T16422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 668.102633][T16425] ip6gre6: entered allmulticast mode [ 668.354471][T16454] __nla_validate_parse: 5 callbacks suppressed [ 668.354493][T16454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10801'. [ 668.462781][T16461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10802'. [ 668.534826][T16468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10803'. [ 668.619206][T16496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10805'. [ 668.641332][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10806'. [ 668.780330][T16536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10812'. [ 668.814327][T16542] atomic_op ffff8881362ded28 conn xmit_atomic 0000000000000000 [ 668.901520][T16548] macvlan1: entered promiscuous mode [ 668.908906][T16548] ipvlan0: entered promiscuous mode [ 668.914940][T16548] ipvlan0: left promiscuous mode [ 668.921864][T16548] macvlan1: left promiscuous mode [ 668.954175][T16560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10819'. [ 669.056219][T16580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10821'. [ 669.077238][T16590] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10823'. [ 669.106937][T16600] atomic_op ffff88818e72a928 conn xmit_atomic 0000000000000000 [ 669.201251][T16613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10830'. [ 669.681387][T16655] atomic_op ffff88816ac61128 conn xmit_atomic 0000000000000000 [ 669.757519][T16656] FAULT_INJECTION: forcing a failure. [ 669.757519][T16656] name failslab, interval 1, probability 0, space 0, times 0 [ 669.770247][T16656] CPU: 1 UID: 0 PID: 16656 Comm: syz.1.10834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 669.770280][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 669.770293][T16656] Call Trace: [ 669.770300][T16656] [ 669.770310][T16656] __dump_stack+0x1d/0x30 [ 669.770337][T16656] dump_stack_lvl+0xe8/0x140 [ 669.770439][T16656] dump_stack+0x15/0x1b [ 669.770456][T16656] should_fail_ex+0x265/0x280 [ 669.770481][T16656] should_failslab+0x8c/0xb0 [ 669.770506][T16656] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 669.770542][T16656] ? __d_alloc+0x3d/0x340 [ 669.770653][T16656] __d_alloc+0x3d/0x340 [ 669.770759][T16656] ? __pfx_proc_self_get_link+0x10/0x10 [ 669.770792][T16656] d_alloc_parallel+0x53/0xc60 [ 669.770865][T16656] ? bpf_ringbuf_reserve+0x46/0x60 [ 669.770961][T16656] ? __rcu_read_unlock+0x34/0x70 [ 669.770989][T16656] ? lockref_get_not_dead+0x120/0x1c0 [ 669.771042][T16656] ? __rcu_read_unlock+0x4f/0x70 [ 669.771064][T16656] __lookup_slow+0x8c/0x250 [ 669.771132][T16656] lookup_slow+0x3c/0x60 [ 669.771172][T16656] link_path_walk+0x753/0x900 [ 669.771204][T16656] path_openat+0x1de/0x2170 [ 669.771228][T16656] ? _parse_integer_limit+0x170/0x190 [ 669.771350][T16656] do_filp_open+0x109/0x230 [ 669.771380][T16656] ? __pfx_kfree_link+0x10/0x10 [ 669.771439][T16656] do_sys_openat2+0xa6/0x110 [ 669.771484][T16656] __x64_sys_openat+0xf2/0x120 [ 669.771526][T16656] x64_sys_call+0x2e9c/0x2ff0 [ 669.771552][T16656] do_syscall_64+0xd2/0x200 [ 669.771604][T16656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 669.771709][T16656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 669.771748][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.771773][T16656] RIP: 0033:0x7f179d6ed590 [ 669.771861][T16656] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 669.771883][T16656] RSP: 002b:00007f179c135f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 669.771903][T16656] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f179d6ed590 [ 669.771917][T16656] RDX: 0000000000000000 RSI: 00007f179d771f2e RDI: 00000000ffffff9c [ 669.771931][T16656] RBP: 00007f179d771f2e R08: 0000000000000000 R09: 0000000000000000 [ 669.771945][T16656] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 669.772009][T16656] R13: 00007f179d936128 R14: 00007f179d936090 R15: 00007fff6cffa668 [ 669.772029][T16656] [ 670.259370][T16693] netlink: 'syz.0.10848': attribute type 1 has an invalid length. [ 670.264327][T16690] ip6gre6: entered allmulticast mode [ 670.332045][T16710] atomic_op ffff888133095128 conn xmit_atomic 0000000000000000 [ 670.837580][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 670.837598][ T29] audit: type=1400 audit(692.810:257060): avc: denied { tracepoint } for pid=16740 comm="syz.2.10861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 670.874766][ T29] audit: type=1326 audit(692.860:257061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.5.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 670.882316][T16743] ip6gre7: entered allmulticast mode [ 670.898050][ T29] audit: type=1326 audit(692.860:257062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.5.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 670.952420][ T29] audit: type=1400 audit(692.930:257063): avc: denied { map_create } for pid=16740 comm="syz.2.10861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 670.977848][ T29] audit: type=1400 audit(692.930:257064): avc: denied { prog_load } for pid=16740 comm="syz.2.10861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 670.997144][ T29] audit: type=1400 audit(692.930:257065): avc: denied { bpf } for pid=16740 comm="syz.2.10861" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 671.017761][ T29] audit: type=1400 audit(692.930:257066): avc: denied { perfmon } for pid=16740 comm="syz.2.10861" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 671.067879][ T29] audit: type=1326 audit(692.990:257067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.5.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 671.091200][ T29] audit: type=1326 audit(692.990:257068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.5.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc96e20ec63 code=0x7ffc0000 [ 671.114376][ T29] audit: type=1326 audit(693.010:257069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.5.10853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc96e20d6df code=0x7ffc0000 [ 671.154753][T16762] atomic_op ffff888133097928 conn xmit_atomic 0000000000000000 [ 671.237912][T16779] FAULT_INJECTION: forcing a failure. [ 671.237912][T16779] name failslab, interval 1, probability 0, space 0, times 0 [ 671.250878][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.6.10867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 671.250969][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 671.250983][T16779] Call Trace: [ 671.250991][T16779] [ 671.250998][T16779] __dump_stack+0x1d/0x30 [ 671.251023][T16779] dump_stack_lvl+0xe8/0x140 [ 671.251113][T16779] dump_stack+0x15/0x1b [ 671.251133][T16779] should_fail_ex+0x265/0x280 [ 671.251163][T16779] should_failslab+0x8c/0xb0 [ 671.251187][T16779] kmem_cache_alloc_node_noprof+0x57/0x320 [ 671.251297][T16779] ? __alloc_skb+0x101/0x320 [ 671.251386][T16779] __alloc_skb+0x101/0x320 [ 671.251413][T16779] netlink_alloc_large_skb+0xba/0xf0 [ 671.251435][T16779] netlink_sendmsg+0x3cf/0x6b0 [ 671.251542][T16779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 671.251569][T16779] __sock_sendmsg+0x142/0x180 [ 671.251601][T16779] ____sys_sendmsg+0x31e/0x4e0 [ 671.251631][T16779] ___sys_sendmsg+0x17b/0x1d0 [ 671.251729][T16779] __x64_sys_sendmsg+0xd4/0x160 [ 671.251792][T16779] x64_sys_call+0x191e/0x2ff0 [ 671.251813][T16779] do_syscall_64+0xd2/0x200 [ 671.251843][T16779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 671.251868][T16779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 671.251970][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.251991][T16779] RIP: 0033:0x7fef5b7fec29 [ 671.252008][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.252029][T16779] RSP: 002b:00007fef5a25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.252050][T16779] RAX: ffffffffffffffda RBX: 00007fef5ba45fa0 RCX: 00007fef5b7fec29 [ 671.252066][T16779] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 671.252077][T16779] RBP: 00007fef5a25f090 R08: 0000000000000000 R09: 0000000000000000 [ 671.252092][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.252107][T16779] R13: 00007fef5ba46038 R14: 00007fef5ba45fa0 R15: 00007ffe280c5918 [ 671.252129][T16779] [ 671.572694][T16796] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 671.587361][T16800] netlink: 'syz.6.10874': attribute type 1 has an invalid length. [ 671.602212][T16800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 672.173945][T16880] bridge: RTM_NEWNEIGH with invalid ether address [ 672.498668][T16911] ip6gre5: entered allmulticast mode [ 672.766560][T16929] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 672.995095][T16938] FAULT_INJECTION: forcing a failure. [ 672.995095][T16938] name failslab, interval 1, probability 0, space 0, times 0 [ 673.007969][T16938] CPU: 0 UID: 0 PID: 16938 Comm: syz.2.10910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 673.007999][T16938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.008079][T16938] Call Trace: [ 673.008085][T16938] [ 673.008092][T16938] __dump_stack+0x1d/0x30 [ 673.008114][T16938] dump_stack_lvl+0xe8/0x140 [ 673.008133][T16938] dump_stack+0x15/0x1b [ 673.008154][T16938] should_fail_ex+0x265/0x280 [ 673.008185][T16938] should_failslab+0x8c/0xb0 [ 673.008266][T16938] kmem_cache_alloc_node_noprof+0x57/0x320 [ 673.008298][T16938] ? __alloc_skb+0x101/0x320 [ 673.008406][T16938] __alloc_skb+0x101/0x320 [ 673.008435][T16938] netlink_alloc_large_skb+0xba/0xf0 [ 673.008464][T16938] netlink_sendmsg+0x3cf/0x6b0 [ 673.008526][T16938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.008553][T16938] __sock_sendmsg+0x142/0x180 [ 673.008643][T16938] ____sys_sendmsg+0x31e/0x4e0 [ 673.008677][T16938] ___sys_sendmsg+0x17b/0x1d0 [ 673.008724][T16938] __x64_sys_sendmsg+0xd4/0x160 [ 673.008770][T16938] x64_sys_call+0x191e/0x2ff0 [ 673.008797][T16938] do_syscall_64+0xd2/0x200 [ 673.008837][T16938] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 673.008898][T16938] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 673.009031][T16938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.009059][T16938] RIP: 0033:0x7f6a65f5ec29 [ 673.009078][T16938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.009097][T16938] RSP: 002b:00007f6a649c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.009116][T16938] RAX: ffffffffffffffda RBX: 00007f6a661a5fa0 RCX: 00007f6a65f5ec29 [ 673.009151][T16938] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 673.009167][T16938] RBP: 00007f6a649c7090 R08: 0000000000000000 R09: 0000000000000000 [ 673.009182][T16938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.009196][T16938] R13: 00007f6a661a6038 R14: 00007f6a661a5fa0 R15: 00007ffd7e1a6ad8 [ 673.009221][T16938] [ 673.364750][T16944] bridge: RTM_NEWNEIGH with invalid ether address [ 673.395356][T16948] syz_tun: entered promiscuous mode [ 673.410879][T16948] batadv_slave_0: entered promiscuous mode [ 673.417654][T16948] debugfs: 'hsr0' already exists in 'hsr' [ 673.423427][T16948] Cannot create hsr debugfs directory [ 673.461815][T16955] macvlan1: entered promiscuous mode [ 673.483221][T16961] __nla_validate_parse: 19 callbacks suppressed [ 673.483239][T16961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10918'. [ 673.496753][T16955] ipvlan0: entered promiscuous mode [ 673.504639][T16955] ipvlan0: left promiscuous mode [ 673.519037][T16955] macvlan1: left promiscuous mode [ 673.705107][T16994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10924'. [ 673.788077][T17008] netlink: 'syz.6.10927': attribute type 1 has an invalid length. [ 673.831380][T17008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 673.876847][T17008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10927'. [ 674.145783][T17132] atomic_op ffff888133097128 conn xmit_atomic 0000000000000000 [ 674.256889][T17137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10932'. [ 674.493120][T17160] FAULT_INJECTION: forcing a failure. [ 674.493120][T17160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.493302][T17160] CPU: 0 UID: 0 PID: 17160 Comm: syz.0.10936 Not tainted syzkaller #0 PREEMPT(voluntary) [ 674.493333][T17160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.493349][T17160] Call Trace: [ 674.493357][T17160] [ 674.493425][T17160] __dump_stack+0x1d/0x30 [ 674.493450][T17160] dump_stack_lvl+0xe8/0x140 [ 674.493476][T17160] dump_stack+0x15/0x1b [ 674.493492][T17160] should_fail_ex+0x265/0x280 [ 674.493588][T17160] should_fail+0xb/0x20 [ 674.493656][T17160] should_fail_usercopy+0x1a/0x20 [ 674.493689][T17160] _copy_from_user+0x1c/0xb0 [ 674.493729][T17160] ___sys_sendmsg+0xc1/0x1d0 [ 674.493783][T17160] __sys_sendmmsg+0x178/0x300 [ 674.493890][T17160] __x64_sys_sendmmsg+0x57/0x70 [ 674.493924][T17160] x64_sys_call+0x1c4a/0x2ff0 [ 674.493952][T17160] do_syscall_64+0xd2/0x200 [ 674.494013][T17160] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 674.494044][T17160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 674.494106][T17160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.494138][T17160] RIP: 0033:0x7f4e312cec29 [ 674.494161][T17160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.494188][T17160] RSP: 002b:00007f4e2fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 674.494209][T17160] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cec29 [ 674.494292][T17160] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: 0000000000000006 [ 674.494310][T17160] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 674.494326][T17160] R10: 000000002400c042 R11: 0000000000000246 R12: 0000000000000001 [ 674.494344][T17160] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 674.494372][T17160] [ 674.650226][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10941'. [ 674.661690][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10939'. [ 674.734691][T17171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10940'. [ 674.781100][T17171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10940'. [ 674.953129][T17198] bridge: RTM_NEWNEIGH with invalid ether address [ 674.973334][T17200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10944'. [ 675.123906][T17206] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 675.130579][T17206] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 675.138508][T17206] vhci_hcd vhci_hcd.0: Device attached [ 675.172609][T17208] vhci_hcd: connection closed [ 675.172745][T17064] vhci_hcd: stop threads [ 675.181878][T17064] vhci_hcd: release socket [ 675.186489][T17064] vhci_hcd: disconnect device [ 675.341079][T17216] netlink: 'syz.5.10951': attribute type 1 has an invalid length. [ 675.393911][T17216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 675.418534][T17216] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10951'. [ 675.948691][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 675.948710][ T29] audit: type=1400 audit(697.930:257598): avc: denied { execute } for pid=17286 comm="syz.0.10963" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=113759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 676.008472][ T29] audit: type=1400 audit(697.990:257599): avc: denied { tracepoint } for pid=17291 comm="syz.2.10965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 676.083251][ T29] audit: type=1400 audit(698.040:257600): avc: denied { map_create } for pid=17291 comm="syz.2.10965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 676.102364][ T29] audit: type=1400 audit(698.040:257601): avc: denied { prog_load } for pid=17291 comm="syz.2.10965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 676.121279][ T29] audit: type=1400 audit(698.050:257602): avc: denied { bpf } for pid=17291 comm="syz.2.10965" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 676.141607][ T29] audit: type=1400 audit(698.050:257603): avc: denied { read } for pid=17215 comm="syz.5.10951" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 676.164624][ T29] audit: type=1400 audit(698.050:257604): avc: denied { perfmon } for pid=17293 comm="syz.0.10966" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 676.185375][ T29] audit: type=1400 audit(698.060:257605): avc: denied { execute } for pid=17293 comm="syz.0.10966" dev="tmpfs" ino=2295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.206387][ T29] audit: type=1400 audit(698.060:257606): avc: denied { execute_no_trans } for pid=17293 comm="syz.0.10966" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.319464][ T29] audit: type=1400 audit(698.060:257607): avc: denied { mounton } for pid=17293 comm="syz.0.10966" path="/540/file0" dev="tmpfs" ino=2798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 676.420636][T17329] macvlan1: entered promiscuous mode [ 676.436286][T17329] ipvlan0: entered promiscuous mode [ 676.442650][T17329] ipvlan0: left promiscuous mode [ 676.448965][T17329] macvlan1: left promiscuous mode [ 676.488193][T17343] macvlan1: entered promiscuous mode [ 676.495351][T17343] ipvlan0: entered promiscuous mode [ 676.503454][T17343] ipvlan0: left promiscuous mode [ 676.509005][T17343] macvlan1: left promiscuous mode [ 676.786188][T17382] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17382 comm=syz.2.10987 [ 676.828194][T17200] syz.1.10944 (17200) used greatest stack depth: 6120 bytes left [ 676.877666][T17387] ip6gre8: entered allmulticast mode [ 676.952387][T17399] atomic_op ffff888137a70928 conn xmit_atomic 0000000000000000 [ 676.976376][T17401] FAULT_INJECTION: forcing a failure. [ 676.976376][T17401] name failslab, interval 1, probability 0, space 0, times 0 [ 676.989173][T17401] CPU: 0 UID: 0 PID: 17401 Comm: syz.6.10998 Not tainted syzkaller #0 PREEMPT(voluntary) [ 676.989201][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 676.989215][T17401] Call Trace: [ 676.989294][T17401] [ 676.989303][T17401] __dump_stack+0x1d/0x30 [ 676.989330][T17401] dump_stack_lvl+0xe8/0x140 [ 676.989356][T17401] dump_stack+0x15/0x1b [ 676.989436][T17401] should_fail_ex+0x265/0x280 [ 676.989467][T17401] should_failslab+0x8c/0xb0 [ 676.989494][T17401] kmem_cache_alloc_node_noprof+0x57/0x320 [ 676.989524][T17401] ? __alloc_skb+0x101/0x320 [ 676.989552][T17401] __alloc_skb+0x101/0x320 [ 676.989645][T17401] netlink_alloc_large_skb+0xba/0xf0 [ 676.989674][T17401] netlink_sendmsg+0x3cf/0x6b0 [ 676.989705][T17401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.989774][T17401] __sock_sendmsg+0x142/0x180 [ 676.989813][T17401] ____sys_sendmsg+0x31e/0x4e0 [ 676.989866][T17401] ___sys_sendmsg+0x17b/0x1d0 [ 676.989914][T17401] __x64_sys_sendmsg+0xd4/0x160 [ 676.990015][T17401] x64_sys_call+0x191e/0x2ff0 [ 676.990042][T17401] do_syscall_64+0xd2/0x200 [ 676.990074][T17401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 676.990127][T17401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 676.990162][T17401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.990260][T17401] RIP: 0033:0x7fef5b7fec29 [ 676.990275][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.990293][T17401] RSP: 002b:00007fef5a25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.990314][T17401] RAX: ffffffffffffffda RBX: 00007fef5ba45fa0 RCX: 00007fef5b7fec29 [ 676.990346][T17401] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 676.990362][T17401] RBP: 00007fef5a25f090 R08: 0000000000000000 R09: 0000000000000000 [ 676.990375][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.990442][T17401] R13: 00007fef5ba46038 R14: 00007fef5ba45fa0 R15: 00007ffe280c5918 [ 676.990468][T17401] [ 677.442666][T17434] macvlan1: entered promiscuous mode [ 677.467314][T17434] ipvlan0: entered promiscuous mode [ 677.489619][T17434] ipvlan0: left promiscuous mode [ 677.510390][T17434] macvlan1: left promiscuous mode [ 677.655264][T17458] macvlan1: entered promiscuous mode [ 677.664459][T17458] ipvlan0: entered promiscuous mode [ 677.682256][T17458] ipvlan0: left promiscuous mode [ 677.700577][T17458] macvlan1: left promiscuous mode [ 677.789800][T17480] netlink: '': attribute type 4 has an invalid length. [ 677.833818][ T23] lo speed is unknown, defaulting to 1000 [ 677.839757][ T23] syz2: Port: 1 Link DOWN [ 678.686928][T17563] lo speed is unknown, defaulting to 1000 [ 678.695450][T17563] lo speed is unknown, defaulting to 1000 [ 678.718635][T17574] netlink: 'syz.6.11038': attribute type 13 has an invalid length. [ 678.726895][T17574] netlink: 'syz.6.11038': attribute type 17 has an invalid length. [ 678.783291][T17574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.799412][ T23] lo speed is unknown, defaulting to 1000 [ 678.805179][ T23] syz2: Port: 1 Link ACTIVE [ 679.207748][T17624] netlink: 'syz.2.11049': attribute type 1 has an invalid length. [ 679.262126][T17624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 679.326509][T17624] __nla_validate_parse: 13 callbacks suppressed [ 679.326533][T17624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11049'. [ 679.511069][T17675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17675 comm=syz.0.11052 [ 679.538122][T17676] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17676 comm=syz.1.11054 [ 679.757024][T17698] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 679.763701][T17698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 679.771185][T17698] vhci_hcd vhci_hcd.0: Device attached [ 679.787349][T17699] vhci_hcd: connection closed [ 679.787642][T10764] vhci_hcd: stop threads [ 679.796797][T10764] vhci_hcd: release socket [ 679.801289][T10764] vhci_hcd: disconnect device [ 679.814611][T17702] tun0: tun_chr_ioctl cmd 1074025677 [ 679.822311][T17702] tun0: linktype set to 6 [ 679.961932][T17709] blktrace: Concurrent blktraces are not allowed on sg0 [ 680.062534][T17716] macvlan1: entered promiscuous mode [ 680.069643][T17716] ipvlan0: entered promiscuous mode [ 680.075532][T17716] ipvlan0: left promiscuous mode [ 680.082857][T17716] macvlan1: left promiscuous mode [ 680.241524][T17732] bridge: RTM_NEWNEIGH with invalid ether address [ 680.318484][T17740] macvlan1: entered promiscuous mode [ 680.324902][T17740] ipvlan0: entered promiscuous mode [ 680.339937][T17740] ipvlan0: left promiscuous mode [ 680.345282][T17740] macvlan1: left promiscuous mode [ 680.364635][T17742] SELinux: ebitmap: truncated map [ 680.366031][T17747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11076'. [ 680.374481][T17742] SELinux: failed to load policy [ 680.435917][T17758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11079'. [ 681.409401][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 681.409420][ T29] audit: type=1400 audit(702.600:258562): avc: denied { write } for pid=17759 comm="syz.0.11081" name="pfkey" dev="proc" ino=4026533377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 681.647836][ T29] audit: type=1400 audit(703.630:258563): avc: denied { module_request } for pid=17771 comm="syz.1.11083" kmod="netdev-macvlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.682327][T17770] bridge: RTM_NEWNEIGH with invalid ether address [ 681.810703][ T29] audit: type=1400 audit(703.720:258564): avc: denied { sys_module } for pid=17771 comm="syz.1.11083" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 681.831692][ T29] audit: type=1400 audit(703.760:258565): avc: denied { read } for pid=17780 comm="syz.2.11085" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 681.855726][ T29] audit: type=1400 audit(703.760:258566): avc: denied { open } for pid=17780 comm="syz.2.11085" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 681.880315][ T29] audit: type=1400 audit(703.760:258567): avc: denied { ioctl } for pid=17780 comm="syz.2.11085" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 681.906191][ T29] audit: type=1400 audit(703.770:258568): avc: denied { read write } for pid=5408 comm="syz-executor" name="loop0" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 681.929012][ T29] audit: type=1400 audit(703.770:258569): avc: denied { open } for pid=5408 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 681.975398][ T29] audit: type=1400 audit(703.950:258570): avc: denied { create } for pid=17790 comm="syz.5.11088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 681.994740][ T29] audit: type=1400 audit(703.950:258571): avc: denied { write } for pid=17790 comm="syz.5.11088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 682.124149][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11096'. [ 682.149932][T17825] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17825 comm=syz.0.11093 [ 682.183747][T17835] bridge: RTM_NEWNEIGH with invalid ether address [ 682.243578][T17840] ip6gre9: entered allmulticast mode [ 682.353357][T17860] netlink: 168 bytes leftover after parsing attributes in process `syz.6.11106'. [ 682.381131][T17864] netlink: 264 bytes leftover after parsing attributes in process `syz.1.11107'. [ 682.395237][T17865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11108'. [ 682.480717][T17871] bridge: RTM_NEWNEIGH with invalid ether address [ 682.540353][T17880] ip6gre7: entered allmulticast mode [ 682.649644][T17892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11119'. [ 682.882656][T17897] FAULT_INJECTION: forcing a failure. [ 682.882656][T17897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.882691][T17897] CPU: 1 UID: 0 PID: 17897 Comm: syz.2.11121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 682.882715][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.882728][T17897] Call Trace: [ 682.882735][T17897] [ 682.882760][T17897] __dump_stack+0x1d/0x30 [ 682.882786][T17897] dump_stack_lvl+0xe8/0x140 [ 682.882810][T17897] dump_stack+0x15/0x1b [ 682.882830][T17897] should_fail_ex+0x265/0x280 [ 682.882904][T17897] should_fail+0xb/0x20 [ 682.882928][T17897] should_fail_usercopy+0x1a/0x20 [ 682.882959][T17897] _copy_from_user+0x1c/0xb0 [ 682.883024][T17897] ___sys_sendmsg+0xc1/0x1d0 [ 682.883071][T17897] __x64_sys_sendmsg+0xd4/0x160 [ 682.883156][T17897] x64_sys_call+0x191e/0x2ff0 [ 682.883182][T17897] do_syscall_64+0xd2/0x200 [ 682.883222][T17897] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 682.883259][T17897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 682.883360][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.883389][T17897] RIP: 0033:0x7f6a65f5ec29 [ 682.883411][T17897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.883436][T17897] RSP: 002b:00007f6a649c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.883461][T17897] RAX: ffffffffffffffda RBX: 00007f6a661a5fa0 RCX: 00007f6a65f5ec29 [ 682.883531][T17897] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 682.883547][T17897] RBP: 00007f6a649c7090 R08: 0000000000000000 R09: 0000000000000000 [ 682.883564][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.883581][T17897] R13: 00007f6a661a6038 R14: 00007f6a661a5fa0 R15: 00007ffd7e1a6ad8 [ 682.883640][T17897] [ 682.989656][T17905] bridge: RTM_NEWNEIGH with invalid ether address [ 683.218971][T17912] netlink: 360 bytes leftover after parsing attributes in process `syz.0.11125'. [ 683.420541][T17921] ip6gre6: entered allmulticast mode [ 683.780918][T17949] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17949 comm=syz.5.11134 [ 683.856137][T17953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11139'. [ 683.993462][T17979] ip6gre7: entered allmulticast mode [ 684.011324][T17968] lo speed is unknown, defaulting to 1000 [ 684.022881][T17968] lo speed is unknown, defaulting to 1000 [ 684.095576][T17968] chnl_net:caif_netlink_parms(): no params data found [ 684.175321][T18111] macvlan1: entered promiscuous mode [ 684.185149][T18111] ipvlan0: entered promiscuous mode [ 684.192116][T18111] ipvlan0: left promiscuous mode [ 684.199670][T18111] macvlan1: left promiscuous mode [ 684.239855][T17968] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.246990][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.254730][T17968] bridge_slave_0: entered allmulticast mode [ 684.261533][T17968] bridge_slave_0: entered promiscuous mode [ 684.268417][T17968] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.275567][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.282990][T17968] bridge_slave_1: entered allmulticast mode [ 684.289713][T17968] bridge_slave_1: entered promiscuous mode [ 684.318103][T17968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.337198][T17968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.363141][T17968] team0: Port device team_slave_0 added [ 684.372952][T17968] team0: Port device team_slave_1 added [ 684.398096][T17968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.405168][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.431167][T17968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.462402][T17968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.469467][T17968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.495546][T17968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.539980][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11149'. [ 684.650789][T18250] ip6gre10: entered allmulticast mode [ 684.685565][T17968] hsr_slave_0: entered promiscuous mode [ 684.692862][T17968] hsr_slave_1: entered promiscuous mode [ 684.737736][T17968] debugfs: 'hsr0' already exists in 'hsr' [ 684.743532][T17968] Cannot create hsr debugfs directory [ 684.762431][T18289] atomic_op ffff88811019a528 conn xmit_atomic 0000000000000000 [ 684.777672][T18283] macvlan1: entered promiscuous mode [ 684.797469][T18283] ipvlan0: entered promiscuous mode [ 684.803695][T18283] ipvlan0: left promiscuous mode [ 684.809283][T18283] macvlan1: left promiscuous mode [ 684.847372][T18321] bridge: RTM_NEWNEIGH with invalid ether address [ 684.905887][T17968] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.916313][T17968] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.098410][T17968] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.108780][T17968] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.168678][T17968] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.179199][T17968] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.247215][T17968] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.257632][T17968] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.350290][T17968] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 685.360902][T17968] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 685.373287][T17968] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 685.384682][T17968] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 685.470582][T17968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.487326][T17968] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.498262][T17075] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.505358][T17075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.564568][T17064] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.571728][T17064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.664410][T17968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.687142][T17064] bridge_slave_1: left allmulticast mode [ 685.692842][T17064] bridge_slave_1: left promiscuous mode [ 685.698652][T17064] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.712426][T17064] bridge_slave_0: left promiscuous mode [ 685.718277][T17064] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.822901][T17064] bond1 (unregistering): (slave gretap1): Releasing active interface [ 685.879254][T17064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.890131][T17064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.904570][T17064] bond0 (unregistering): Released all slaves [ 685.916178][T17064] bond1 (unregistering): Released all slaves [ 685.925524][T17064] bond2 (unregistering): Released all slaves [ 685.935326][T17064] bond3 (unregistering): Released all slaves [ 685.948248][T18412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.958657][T18412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.008743][T17064] hsr_slave_0: left promiscuous mode [ 686.024282][T17064] hsr_slave_1: left promiscuous mode [ 686.037553][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.045062][T17064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.071935][T17064] veth1_macvtap: left promiscuous mode [ 686.084132][T17064] veth0_macvtap: left promiscuous mode [ 686.096451][T17064] veth1_vlan: left promiscuous mode [ 686.109076][T17064] veth0_vlan: left promiscuous mode [ 686.431121][T17064] team0 (unregistering): Port device team_slave_1 removed [ 686.465266][T17064] team0 (unregistering): Port device team_slave_0 removed [ 686.530065][T18412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.540445][T18412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.556547][ T10] lo speed is unknown, defaulting to 1000 [ 686.562330][ T10] infiniband syz2: ib_query_port failed (-19) [ 686.590003][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 686.590021][ T29] audit: type=1326 audit(708.570:258892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.626489][T18412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.636941][T18412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.637816][ T29] audit: type=1326 audit(708.600:258893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.670562][ T29] audit: type=1326 audit(708.600:258894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.694055][ T29] audit: type=1326 audit(708.600:258895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.717220][ T29] audit: type=1326 audit(708.600:258896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.740430][ T29] audit: type=1326 audit(708.600:258897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.749485][T18451] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11169'. [ 686.763728][ T29] audit: type=1326 audit(708.600:258898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.795918][ T29] audit: type=1326 audit(708.600:258899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.819106][ T29] audit: type=1326 audit(708.600:258900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.842309][ T29] audit: type=1326 audit(708.600:258901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18443 comm="syz.5.11169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc96e20ec29 code=0x7ffc0000 [ 686.939791][T18412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.950159][T18412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.989124][T17968] veth0_vlan: entered promiscuous mode [ 686.998524][T17968] veth1_vlan: entered promiscuous mode [ 687.035865][T17968] veth0_macvtap: entered promiscuous mode [ 687.055796][T10766] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.064037][T10766] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.083984][T17968] veth1_macvtap: entered promiscuous mode [ 687.109277][T10766] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.117608][T10766] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.128996][T17968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.147374][T17968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.156445][T10766] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.164691][T10766] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.190870][T10766] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.199135][T10766] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.230534][T18477] FAULT_INJECTION: forcing a failure. [ 687.230534][T18477] name failslab, interval 1, probability 0, space 0, times 0 [ 687.243232][T18477] CPU: 1 UID: 0 PID: 18477 Comm: syz.0.11174 Not tainted syzkaller #0 PREEMPT(voluntary) [ 687.243302][T18477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.243317][T18477] Call Trace: [ 687.243325][T18477] [ 687.243334][T18477] __dump_stack+0x1d/0x30 [ 687.243360][T18477] dump_stack_lvl+0xe8/0x140 [ 687.243384][T18477] dump_stack+0x15/0x1b [ 687.243419][T18477] should_fail_ex+0x265/0x280 [ 687.243450][T18477] should_failslab+0x8c/0xb0 [ 687.243466][T10766] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.243483][T18477] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 687.243559][T18477] ? security_context_to_sid_core+0x69/0x3b0 [ 687.243593][T18477] ? avc_denied+0xe4/0x100 [ 687.243631][T18477] kmemdup_nul+0x36/0xc0 [ 687.243668][T18477] security_context_to_sid_core+0x69/0x3b0 [ 687.243772][T18477] security_context_to_sid+0x2e/0x40 [ 687.243802][T18477] selinux_inode_setxattr+0x4af/0x6e0 [ 687.243867][T18477] ? mntput+0x4b/0x80 [ 687.243911][T18477] security_inode_setxattr+0x13a/0x1b0 [ 687.244045][T18477] __vfs_setxattr_locked+0x83/0x1d0 [ 687.244145][T18477] vfs_setxattr+0x132/0x270 [ 687.244180][T18477] file_setxattr+0x139/0x1b0 [ 687.244215][T18477] path_setxattrat+0x290/0x310 [ 687.244332][T18477] __x64_sys_fsetxattr+0x6b/0x80 [ 687.244369][T18477] x64_sys_call+0x1ced/0x2ff0 [ 687.244410][T18477] do_syscall_64+0xd2/0x200 [ 687.244537][T18477] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 687.244572][T18477] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 687.244616][T18477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.244721][T18477] RIP: 0033:0x7f4e312cec29 [ 687.244742][T18477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.244767][T18477] RSP: 002b:00007f4e2fd37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 687.244794][T18477] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cec29 [ 687.244812][T18477] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 687.244830][T18477] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 687.244874][T18477] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000002 [ 687.244892][T18477] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 687.244920][T18477] [ 687.544585][T18487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11176'. [ 687.604922][T10766] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.614035][T10766] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.628321][T10766] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.647775][T18506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11178'. [ 687.832169][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11183'. [ 687.946311][T18554] FAULT_INJECTION: forcing a failure. [ 687.946311][T18554] name failslab, interval 1, probability 0, space 0, times 0 [ 687.959092][T18554] CPU: 0 UID: 0 PID: 18554 Comm: syz.6.11184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 687.959124][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.959139][T18554] Call Trace: [ 687.959147][T18554] [ 687.959156][T18554] __dump_stack+0x1d/0x30 [ 687.959180][T18554] dump_stack_lvl+0xe8/0x140 [ 687.959204][T18554] dump_stack+0x15/0x1b [ 687.959220][T18554] should_fail_ex+0x265/0x280 [ 687.959248][T18554] ? __io_uring_add_tctx_node+0xbf/0x2d0 [ 687.959311][T18554] should_failslab+0x8c/0xb0 [ 687.959340][T18554] __kmalloc_cache_noprof+0x4c/0x320 [ 687.959380][T18554] __io_uring_add_tctx_node+0xbf/0x2d0 [ 687.959444][T18554] __io_uring_add_tctx_node_from_submit+0x69/0xc0 [ 687.959472][T18554] __se_sys_io_uring_enter+0x195b/0x1b70 [ 687.959578][T18554] ? 0xffffffff81000000 [ 687.959592][T18554] ? __rcu_read_unlock+0x4f/0x70 [ 687.959614][T18554] ? get_pid_task+0x96/0xd0 [ 687.959636][T18554] ? proc_fail_nth_write+0x13b/0x160 [ 687.959666][T18554] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 687.959707][T18554] ? vfs_write+0x7e8/0x960 [ 687.959804][T18554] ? __rcu_read_unlock+0x4f/0x70 [ 687.959826][T18554] ? __fget_files+0x184/0x1c0 [ 687.959878][T18554] ? fput+0x8f/0xc0 [ 687.959912][T18554] __x64_sys_io_uring_enter+0x78/0x90 [ 687.959962][T18554] x64_sys_call+0x2de1/0x2ff0 [ 687.959984][T18554] do_syscall_64+0xd2/0x200 [ 687.960039][T18554] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 687.960071][T18554] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 687.960103][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.960125][T18554] RIP: 0033:0x7f9097a2ec29 [ 687.960207][T18554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.960242][T18554] RSP: 002b:00007f90963b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 687.960262][T18554] RAX: ffffffffffffffda RBX: 00007f9097c76090 RCX: 00007f9097a2ec29 [ 687.960289][T18554] RDX: 000000000000effd RSI: 00000000000847ba RDI: 0000000000000004 [ 687.960302][T18554] RBP: 00007f90963b1090 R08: 0000000000000000 R09: 0000000000000000 [ 687.960316][T18554] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 687.960328][T18554] R13: 00007f9097c76128 R14: 00007f9097c76090 R15: 00007ffe0d319a38 [ 687.960349][T18554] [ 688.321750][T18556] FAULT_INJECTION: forcing a failure. [ 688.321750][T18556] name failslab, interval 1, probability 0, space 0, times 0 [ 688.334585][T18556] CPU: 1 UID: 0 PID: 18556 Comm: syz.1.11188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 688.334612][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.334625][T18556] Call Trace: [ 688.334633][T18556] [ 688.334643][T18556] __dump_stack+0x1d/0x30 [ 688.334691][T18556] dump_stack_lvl+0xe8/0x140 [ 688.334714][T18556] dump_stack+0x15/0x1b [ 688.334730][T18556] should_fail_ex+0x265/0x280 [ 688.334755][T18556] should_failslab+0x8c/0xb0 [ 688.334850][T18556] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 688.334908][T18556] ? sidtab_sid2str_get+0xa0/0x130 [ 688.334934][T18556] kmemdup_noprof+0x2b/0x70 [ 688.334964][T18556] sidtab_sid2str_get+0xa0/0x130 [ 688.335037][T18556] security_sid_to_context_core+0x1eb/0x2e0 [ 688.335094][T18556] security_sid_to_context+0x27/0x40 [ 688.335114][T18556] avc_audit_post_callback+0x10f/0x520 [ 688.335145][T18556] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 688.335178][T18556] common_lsm_audit+0x1bb/0x230 [ 688.335292][T18556] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 688.335396][T18556] slow_avc_audit+0x104/0x140 [ 688.335424][T18556] avc_has_perm+0x13a/0x180 [ 688.335456][T18556] selinux_socket_sendmsg+0x175/0x1b0 [ 688.335558][T18556] security_socket_sendmsg+0x48/0x80 [ 688.335608][T18556] __sock_sendmsg+0x30/0x180 [ 688.335651][T18556] ____sys_sendmsg+0x31e/0x4e0 [ 688.335757][T18556] ___sys_sendmsg+0x17b/0x1d0 [ 688.335804][T18556] __x64_sys_sendmsg+0xd4/0x160 [ 688.335835][T18556] x64_sys_call+0x191e/0x2ff0 [ 688.335862][T18556] do_syscall_64+0xd2/0x200 [ 688.335919][T18556] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 688.335950][T18556] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 688.335981][T18556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.336056][T18556] RIP: 0033:0x7f179d6eec29 [ 688.336153][T18556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.336251][T18556] RSP: 002b:00007f179c157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.336281][T18556] RAX: ffffffffffffffda RBX: 00007f179d935fa0 RCX: 00007f179d6eec29 [ 688.336298][T18556] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000003 [ 688.336310][T18556] RBP: 00007f179c157090 R08: 0000000000000000 R09: 0000000000000000 [ 688.336323][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.336335][T18556] R13: 00007f179d936038 R14: 00007f179d935fa0 R15: 00007fff6cffa668 [ 688.336432][T18556] [ 688.676809][T18569] FAULT_INJECTION: forcing a failure. [ 688.676809][T18569] name failslab, interval 1, probability 0, space 0, times 0 [ 688.689753][T18569] CPU: 1 UID: 0 PID: 18569 Comm: syz.1.11193 Not tainted syzkaller #0 PREEMPT(voluntary) [ 688.689785][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.689802][T18569] Call Trace: [ 688.689809][T18569] [ 688.689818][T18569] __dump_stack+0x1d/0x30 [ 688.689845][T18569] dump_stack_lvl+0xe8/0x140 [ 688.689866][T18569] dump_stack+0x15/0x1b [ 688.689903][T18569] should_fail_ex+0x265/0x280 [ 688.689929][T18569] should_failslab+0x8c/0xb0 [ 688.689957][T18569] kmem_cache_alloc_node_noprof+0x57/0x320 [ 688.690008][T18569] ? __alloc_skb+0x101/0x320 [ 688.690029][T18569] ? mpls_dev_sysctl_unregister+0x59/0x80 [ 688.690061][T18569] __alloc_skb+0x101/0x320 [ 688.690117][T18569] mpls_netconf_notify_devconf+0x46/0x100 [ 688.690149][T18569] mpls_dev_sysctl_unregister+0x6b/0x80 [ 688.690178][T18569] ? __pfx_mpls_dev_notify+0x10/0x10 [ 688.690206][T18569] mpls_dev_notify+0x7a7/0x8d0 [ 688.690311][T18569] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 688.690343][T18569] ? batadv_hard_if_event+0x217/0xf10 [ 688.690385][T18569] ? ovs_netdev_get_vport+0x5a/0x60 [ 688.690416][T18569] ? __pfx_mpls_dev_notify+0x10/0x10 [ 688.690444][T18569] raw_notifier_call_chain+0x6f/0x1b0 [ 688.690579][T18569] ? call_netdevice_notifiers_info+0x9c/0x100 [ 688.690654][T18569] call_netdevice_notifiers_info+0xae/0x100 [ 688.690691][T18569] unregister_netdevice_many_notify+0xda9/0x15d0 [ 688.690730][T18569] unregister_netdevice_queue+0x1f5/0x220 [ 688.690829][T18569] unregister_netdev+0xb3/0xe0 [ 688.690858][T18569] slip_close+0xe4/0x100 [ 688.690877][T18569] ? __pfx_slip_hangup+0x10/0x10 [ 688.690899][T18569] slip_hangup+0x15/0x20 [ 688.690918][T18569] tty_ldisc_hangup+0x12f/0x370 [ 688.690939][T18569] __tty_hangup+0x3c2/0x540 [ 688.691008][T18569] tty_ioctl+0x601/0xb80 [ 688.691101][T18569] ? __pfx_tty_ioctl+0x10/0x10 [ 688.691120][T18569] __se_sys_ioctl+0xce/0x140 [ 688.691140][T18569] __x64_sys_ioctl+0x43/0x50 [ 688.691159][T18569] x64_sys_call+0x1816/0x2ff0 [ 688.691181][T18569] do_syscall_64+0xd2/0x200 [ 688.691242][T18569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 688.691273][T18569] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 688.691377][T18569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.691438][T18569] RIP: 0033:0x7f179d6eec29 [ 688.691455][T18569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.691474][T18569] RSP: 002b:00007f179c157038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.691493][T18569] RAX: ffffffffffffffda RBX: 00007f179d935fa0 RCX: 00007f179d6eec29 [ 688.691506][T18569] RDX: 0000000000000002 RSI: 0000000000005437 RDI: 0000000000000005 [ 688.691519][T18569] RBP: 00007f179c157090 R08: 0000000000000000 R09: 0000000000000000 [ 688.691568][T18569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.691582][T18569] R13: 00007f179d936038 R14: 00007f179d935fa0 R15: 00007fff6cffa668 [ 688.691602][T18569] [ 688.695547][T18571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11194'. [ 688.753984][T18581] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11195'. [ 688.810205][T18583] netlink: 'syz.2.11194': attribute type 1 has an invalid length. [ 689.021881][T18583] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 689.068971][T18601] netlink: 'syz.2.11196': attribute type 1 has an invalid length. [ 689.092400][T18601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.114729][T18601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.122225][T18601] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 689.134155][T18601] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 689.138935][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11198'. [ 689.174922][T18644] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11197'. [ 689.263146][T18667] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 689.269708][T18667] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 689.277240][T18667] vhci_hcd vhci_hcd.0: Device attached [ 689.366153][T18668] vhci_hcd: connection closed [ 689.368181][T17089] vhci_hcd: stop threads [ 689.377191][T17089] vhci_hcd: release socket [ 689.381742][T17089] vhci_hcd: disconnect device [ 690.269882][T18694] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11207'. [ 690.443600][T18699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11209'. [ 690.529022][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11212'. [ 690.587993][T18708] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11213'. [ 690.625466][T18708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.902154][T18739] bridge: RTM_NEWNEIGH with invalid ether address [ 690.984054][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11223'. [ 691.078413][T18757] FAULT_INJECTION: forcing a failure. [ 691.078413][T18757] name failslab, interval 1, probability 0, space 0, times 0 [ 691.078448][T18757] CPU: 1 UID: 0 PID: 18757 Comm: syz.0.11224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 691.078493][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.078506][T18757] Call Trace: [ 691.078512][T18757] [ 691.078520][T18757] __dump_stack+0x1d/0x30 [ 691.078547][T18757] dump_stack_lvl+0xe8/0x140 [ 691.078572][T18757] dump_stack+0x15/0x1b [ 691.078611][T18757] should_fail_ex+0x265/0x280 [ 691.078693][T18757] should_failslab+0x8c/0xb0 [ 691.078718][T18757] __kmalloc_cache_node_noprof+0x54/0x320 [ 691.078840][T18757] ? __get_vm_area_node+0x106/0x1d0 [ 691.078879][T18757] __get_vm_area_node+0x106/0x1d0 [ 691.078926][T18757] __vmalloc_node_range_noprof+0x273/0xe00 [ 691.078975][T18757] ? bpf_check+0xe0/0xd9e0 [ 691.079005][T18757] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 691.079086][T18757] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 691.079126][T18757] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 691.079165][T18757] ? bpf_check+0xe0/0xd9e0 [ 691.079187][T18757] vzalloc_noprof+0x82/0xc0 [ 691.079299][T18757] ? bpf_check+0xe0/0xd9e0 [ 691.079324][T18757] bpf_check+0xe0/0xd9e0 [ 691.079344][T18757] ? __rcu_read_unlock+0x4f/0x70 [ 691.079366][T18757] ? __memcg_kmem_charge_page+0xd1/0x170 [ 691.079458][T18757] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 691.079498][T18757] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 691.079586][T18757] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 691.079621][T18757] ? css_rstat_updated+0xb7/0x240 [ 691.079681][T18757] ? try_charge_memcg+0x200/0x9e0 [ 691.079770][T18757] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 691.079803][T18757] ? _find_next_zero_bit+0x29/0xa0 [ 691.079844][T18757] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 691.079895][T18757] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 691.079955][T18757] ? css_rstat_updated+0xb7/0x240 [ 691.080008][T18757] ? __rcu_read_unlock+0x4f/0x70 [ 691.080084][T18757] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 691.080112][T18757] ? should_fail_ex+0xdb/0x280 [ 691.080144][T18757] ? selinux_bpf_prog_load+0x36/0xf0 [ 691.080173][T18757] ? should_failslab+0x8c/0xb0 [ 691.080275][T18757] ? __kmalloc_cache_noprof+0x189/0x320 [ 691.080318][T18757] ? selinux_bpf_prog_load+0xbf/0xf0 [ 691.080348][T18757] ? security_bpf_prog_load+0x2c/0xa0 [ 691.080377][T18757] bpf_prog_load+0xedd/0x1070 [ 691.080504][T18757] ? security_bpf+0x2b/0x90 [ 691.080528][T18757] __sys_bpf+0x462/0x7b0 [ 691.080614][T18757] __x64_sys_bpf+0x41/0x50 [ 691.080725][T18757] x64_sys_call+0x2aea/0x2ff0 [ 691.080749][T18757] do_syscall_64+0xd2/0x200 [ 691.080781][T18757] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 691.080814][T18757] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 691.080890][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.080993][T18757] RIP: 0033:0x7f4e312cec29 [ 691.081015][T18757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.081038][T18757] RSP: 002b:00007f4e2fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.081063][T18757] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cec29 [ 691.081081][T18757] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 691.081098][T18757] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 691.081115][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.081211][T18757] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 691.081237][T18757] [ 691.081264][T18757] syz.0.11224: vmalloc error: size 264, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 691.201243][T18759] FAULT_INJECTION: forcing a failure. [ 691.201243][T18759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.202855][T18757] ,cpuset=/,mems_allowed=0 [ 691.207952][T18759] CPU: 0 UID: 0 PID: 18759 Comm: syz.2.11225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 691.208015][T18759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.208032][T18759] Call Trace: [ 691.208041][T18759] [ 691.208050][T18759] __dump_stack+0x1d/0x30 [ 691.208161][T18759] dump_stack_lvl+0xe8/0x140 [ 691.208188][T18759] dump_stack+0x15/0x1b [ 691.208255][T18759] should_fail_ex+0x265/0x280 [ 691.208289][T18759] should_fail+0xb/0x20 [ 691.208377][T18759] should_fail_usercopy+0x1a/0x20 [ 691.208436][T18759] _copy_to_iter+0xd2/0xe70 [ 691.208477][T18759] ? __pfx_woken_wake_function+0x10/0x10 [ 691.208530][T18759] tty_read+0x1a9/0x4a0 [ 691.208606][T18759] ? __import_iovec+0x428/0x540 [ 691.208653][T18759] do_iter_readv_writev+0x499/0x540 [ 691.208732][T18759] vfs_readv+0x1ea/0x690 [ 691.208787][T18759] do_readv+0xe7/0x210 [ 691.208841][T18759] __x64_sys_readv+0x45/0x50 [ 691.208957][T18759] x64_sys_call+0x29f8/0x2ff0 [ 691.208994][T18759] do_syscall_64+0xd2/0x200 [ 691.209038][T18759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 691.209170][T18759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 691.209212][T18759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.209243][T18759] RIP: 0033:0x7f6a65f5ec29 [ 691.209309][T18759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.209336][T18759] RSP: 002b:00007f6a649c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 691.209364][T18759] RAX: ffffffffffffffda RBX: 00007f6a661a5fa0 RCX: 00007f6a65f5ec29 [ 691.209382][T18759] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 691.209402][T18759] RBP: 00007f6a649c7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.209419][T18759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.209437][T18759] R13: 00007f6a661a6038 R14: 00007f6a661a5fa0 R15: 00007ffd7e1a6ad8 [ 691.209523][T18759] [ 691.280199][T18762] tipc: Started in network mode [ 691.280254][T18757] [ 691.280265][T18757] CPU: 1 UID: 0 PID: 18757 Comm: syz.0.11224 Not tainted syzkaller #0 PREEMPT(voluntary) [ 691.280289][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.280302][T18757] Call Trace: [ 691.280308][T18757] [ 691.280317][T18757] __dump_stack+0x1d/0x30 [ 691.280346][T18757] dump_stack_lvl+0xe8/0x140 [ 691.280474][T18757] dump_stack+0x15/0x1b [ 691.280495][T18757] warn_alloc+0x12b/0x1a0 [ 691.280546][T18757] __vmalloc_node_range_noprof+0x297/0xe00 [ 691.280596][T18757] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 691.280664][T18757] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 691.280715][T18757] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 691.280769][T18757] ? bpf_check+0xe0/0xd9e0 [ 691.280798][T18757] vzalloc_noprof+0x82/0xc0 [ 691.280897][T18757] ? bpf_check+0xe0/0xd9e0 [ 691.280927][T18757] bpf_check+0xe0/0xd9e0 [ 691.280954][T18757] ? __rcu_read_unlock+0x4f/0x70 [ 691.281080][T18757] ? __memcg_kmem_charge_page+0xd1/0x170 [ 691.281127][T18757] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 691.281252][T18757] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 691.281297][T18757] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 691.281339][T18757] ? css_rstat_updated+0xb7/0x240 [ 691.281393][T18757] ? try_charge_memcg+0x200/0x9e0 [ 691.281461][T18757] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 691.281499][T18757] ? _find_next_zero_bit+0x29/0xa0 [ 691.281530][T18757] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 691.281576][T18757] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 691.281636][T18757] ? css_rstat_updated+0xb7/0x240 [ 691.281680][T18757] ? __rcu_read_unlock+0x4f/0x70 [ 691.281708][T18757] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 691.281743][T18757] ? should_fail_ex+0xdb/0x280 [ 691.281775][T18757] ? selinux_bpf_prog_load+0x36/0xf0 [ 691.281822][T18757] ? should_failslab+0x8c/0xb0 [ 691.281898][T18757] ? __kmalloc_cache_noprof+0x189/0x320 [ 691.282026][T18757] ? selinux_bpf_prog_load+0xbf/0xf0 [ 691.282058][T18757] ? security_bpf_prog_load+0x2c/0xa0 [ 691.282087][T18757] bpf_prog_load+0xedd/0x1070 [ 691.282197][T18757] ? security_bpf+0x2b/0x90 [ 691.282222][T18757] __sys_bpf+0x462/0x7b0 [ 691.282271][T18757] __x64_sys_bpf+0x41/0x50 [ 691.282304][T18757] x64_sys_call+0x2aea/0x2ff0 [ 691.282383][T18757] do_syscall_64+0xd2/0x200 [ 691.282449][T18757] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 691.282483][T18757] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 691.282525][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.282599][T18757] RIP: 0033:0x7f4e312cec29 [ 691.282688][T18757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.282713][T18757] RSP: 002b:00007f4e2fd37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.282819][T18757] RAX: ffffffffffffffda RBX: 00007f4e31515fa0 RCX: 00007f4e312cec29 [ 691.282836][T18757] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 691.282854][T18757] RBP: 00007f4e2fd37090 R08: 0000000000000000 R09: 0000000000000000 [ 691.282950][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 691.282966][T18757] R13: 00007f4e31516038 R14: 00007f4e31515fa0 R15: 00007fff14617a88 [ 691.283046][T18757] [ 691.283209][T18757] Mem-Info: [ 691.285090][T18762] tipc: Node identity decc30cd303e, cluster identity 4711 [ 691.285134][T18762] tipc: Enabled bearer , priority 0 [ 691.292928][T18762] syzkaller0: entered promiscuous mode [ 691.295427][T18757] active_anon:7179 inactive_anon:1859 isolated_anon:0 [ 691.295427][T18757] active_file:10299 inactive_file:3243 isolated_file:0 [ 691.295427][T18757] unevictable:1539 dirty:135 writeback:0 [ 691.295427][T18757] slab_reclaimable:3686 slab_unreclaimable:51931 [ 691.295427][T18757] mapped:31381 shmem:3214 pagetables:1904 [ 691.295427][T18757] sec_pagetables:0 bounce:0 [ 691.295427][T18757] kernel_misc_reclaimable:0 [ 691.295427][T18757] free:1851324 free_pcp:7138 free_cma:0 [ 691.301117][T18762] syzkaller0: entered allmulticast mode [ 691.306413][T18757] Node 0 active_anon:28716kB inactive_anon:7436kB active_file:41196kB inactive_file:12972kB unevictable:6156kB isolated(anon):0kB isolated(file):0kB mapped:125524kB dirty:540kB writeback:0kB shmem:12856kB kernel_stack:4800kB pagetables:7616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 691.638178][ T29] kauditd_printk_skb: 282 callbacks suppressed [ 691.638195][ T29] audit: type=1400 audit(713.630:259184): avc: denied { setopt } for pid=18768 comm="syz.1.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 691.645602][T18757] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 691.666876][ T29] audit: type=1400 audit(713.650:259185): avc: denied { create } for pid=18768 comm="syz.1.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.673891][T18757] lowmem_reserve[]: [ 691.704852][ T29] audit: type=1400 audit(713.680:259186): avc: denied { connect } for pid=18768 comm="syz.1.11227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 691.707820][T18757] 0 2883 7862 7862 [ 691.707850][T18757] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 691.729447][ T29] audit: type=1400 audit(713.710:259187): avc: denied { open } for pid=18770 comm="syz.1.11228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 691.730873][T18757] lowmem_reserve[]: [ 691.735272][ T29] audit: type=1400 audit(713.710:259188): avc: denied { kernel } for pid=18770 comm="syz.1.11228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 691.739995][T18757] 0 [ 691.747667][ T29] audit: type=1400 audit(713.730:259189): avc: denied { tracepoint } for pid=18770 comm="syz.1.11228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 691.748569][T18757] 0 [ 691.853783][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11228'. [ 691.856942][T18757] 4978 4978 [ 691.856964][T18757] Node 0 Normal free:4440700kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28652kB inactive_anon:7436kB active_file:41196kB inactive_file:12972kB unevictable:6196kB writepending:576kB present:5242880kB managed:5098240kB mlocked:6152kB bounce:0kB free_pcp:24696kB local_pcp:10332kB free_cma:0kB [ 692.295656][T10726] tipc: Node number set to 4008849613 [ 692.321788][T18757] lowmem_reserve[]: 0 0 0 0 [ 692.327406][T18757] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 692.327888][T18757] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 692.328178][T18757] Node 0 Normal: 17*4kB (ME) 1001*8kB (UME) 3075*16kB (UME) 2252*32kB (UME) 1777*64kB (UM) 1220*128kB (UME) 895*256kB (UM) 628*512kB (UM) 663*1024kB (UME) 115*2048kB (UME) 629*4096kB (UM) = 4440700kB [ 692.328435][T18757] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 692.328454][T18757] 17055 total pagecache pages [ 692.328461][T18757] 414 pages in swap cache [ 692.328484][T18757] Free swap = 51508kB [ 692.328491][T18757] Total swap = 124996kB [ 692.328498][T18757] 2097051 pages RAM [ 692.328505][T18757] 0 pages HighMem/MovableOnly [ 692.328513][T18757] 80446 pages reserved [ 692.330254][T18762] tipc: Resetting bearer [ 692.387430][T18762] tipc: Disabling bearer [ 692.457585][ T29] audit: type=1400 audit(714.420:259190): avc: denied { perfmon } for pid=18770 comm="syz.1.11228" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.481206][ T29] audit: type=1400 audit(714.440:259191): avc: denied { map_create } for pid=18776 comm="syz.0.11229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.500221][ T29] audit: type=1400 audit(714.440:259192): avc: denied { bpf } for pid=18776 comm="syz.0.11229" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 692.520633][ T29] audit: type=1400 audit(714.440:259193): avc: denied { map_read map_write } for pid=18776 comm="syz.0.11229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 692.689872][T18820] hub 8-0:1.0: USB hub found [ 692.694619][T18820] hub 8-0:1.0: 8 ports detected [ 692.909341][T18858] 9pnet: Could not find request transport: r [ 692.916559][T18863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11245'. [ 693.491857][T18894] bond4: entered promiscuous mode [ 693.497271][T18894] bond4: entered allmulticast mode [ 693.528748][T18894] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.608672][T18894] bond4 (unregistering): Released all slaves [ 693.650218][T18937] ip6gre8: entered allmulticast mode [ 693.778467][T18976] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 693.785060][T18976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 693.792560][T18976] vhci_hcd vhci_hcd.0: Device attached [ 693.849668][T18977] vhci_hcd: connection closed [ 693.855542][T17061] vhci_hcd: stop threads [ 693.864648][T17061] vhci_hcd: release socket [ 693.869902][T17061] vhci_hcd: disconnect device [ 694.056725][T18997] gretap1: entered promiscuous mode [ 694.078488][T18988] syzkaller0: entered promiscuous mode [ 694.084113][T18988] syzkaller0: entered allmulticast mode [ 694.106867][T19003] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11261'. [ 694.147817][T19007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11266'. [ 694.313845][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11270'. [ 694.710101][T19076] FAULT_INJECTION: forcing a failure. [ 694.710101][T19076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.723982][T19076] CPU: 0 UID: 0 PID: 19076 Comm: syz.2.11279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 694.724008][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 694.724098][T19076] Call Trace: [ 694.724105][T19076] [ 694.724113][T19076] __dump_stack+0x1d/0x30 [ 694.724134][T19076] dump_stack_lvl+0xe8/0x140 [ 694.724154][T19076] dump_stack+0x15/0x1b [ 694.724307][T19076] should_fail_ex+0x265/0x280 [ 694.724354][T19076] should_fail+0xb/0x20 [ 694.724375][T19076] should_fail_usercopy+0x1a/0x20 [ 694.724413][T19076] _copy_from_user+0x1c/0xb0 [ 694.724502][T19076] __se_sys_io_uring_setup+0x11f/0x210 [ 694.724543][T19076] __x64_sys_io_uring_setup+0x31/0x40 [ 694.724621][T19076] x64_sys_call+0x2b21/0x2ff0 [ 694.724649][T19076] do_syscall_64+0xd2/0x200 [ 694.724690][T19076] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 694.724811][T19076] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 694.724850][T19076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.724922][T19076] RIP: 0033:0x7f6a65f5ec29 [ 694.724941][T19076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.724964][T19076] RSP: 002b:00007f6a649c6fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 694.725061][T19076] RAX: ffffffffffffffda RBX: 00007f6a661a5fa0 RCX: 00007f6a65f5ec29 [ 694.725077][T19076] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003232 [ 694.725092][T19076] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 694.725107][T19076] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 694.725122][T19076] R13: 0000000000000000 R14: 0000000000003232 R15: 0000000000000000 [ 694.725146][T19076] [ 694.929899][T19081] bridge: RTM_NEWNEIGH with invalid ether address [ 694.957359][T19070] lo speed is unknown, defaulting to 1000 [ 694.958206][T19091] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 694.969657][T19091] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 694.977971][T19091] vhci_hcd vhci_hcd.0: Device attached [ 694.999946][T19109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19109 comm=syz.6.11280 [ 695.019203][T19109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19109 comm=syz.6.11280 [ 695.021012][T19092] vhci_hcd: connection closed [ 695.034630][T17061] vhci_hcd: stop threads [ 695.043778][T17061] vhci_hcd: release socket [ 695.048968][T17061] vhci_hcd: disconnect device [ 695.057030][T10780] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.066991][T10780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.117273][T19070] chnl_net:caif_netlink_parms(): no params data found [ 695.129019][T10780] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.138875][T10780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.217725][T10780] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.227729][T10780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.240885][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.248168][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.265768][T19070] bridge_slave_0: entered allmulticast mode [ 695.272463][T19070] bridge_slave_0: entered promiscuous mode [ 695.291133][T10780] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.301047][T10780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.313676][T19070] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.320787][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.328086][T19070] bridge_slave_1: entered allmulticast mode [ 695.334679][T19070] bridge_slave_1: entered promiscuous mode [ 695.370474][T19070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.403023][T19070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.417324][T10780] bridge_slave_1: left allmulticast mode [ 695.423070][T10780] bridge_slave_1: left promiscuous mode [ 695.428785][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.447014][T10780] bridge_slave_0: left promiscuous mode [ 695.452750][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.658179][T10780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.679355][T10780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.701099][T10780] bond0 (unregistering): Released all slaves [ 695.717231][T10780] bond1 (unregistering): Released all slaves [ 695.731595][T10780] bond2 (unregistering): Released all slaves [ 695.740636][T10780] bond3 (unregistering): Released all slaves [ 695.750142][T10780] bond4 (unregistering): Released all slaves [ 695.768538][T10780] bond5 (unregistering): Released all slaves [ 695.813331][T19070] team0: Port device team_slave_0 added [ 695.828991][T19070] team0: Port device team_slave_1 added [ 695.879402][T10780] hsr_slave_0: left promiscuous mode [ 695.885181][T10780] hsr_slave_1: left promiscuous mode [ 695.892229][T10780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.909758][T10780] veth1_macvtap: left promiscuous mode [ 695.923090][T10780] veth0_macvtap: left promiscuous mode [ 695.933042][T10780] veth1_vlan: left promiscuous mode [ 695.945527][T10780] veth0_vlan: left promiscuous mode [ 696.000015][T19365] __nla_validate_parse: 2 callbacks suppressed [ 696.000035][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11296'. [ 696.154445][T19376] FAULT_INJECTION: forcing a failure. [ 696.154445][T19376] name failslab, interval 1, probability 0, space 0, times 0 [ 696.167322][T19376] CPU: 1 UID: 0 PID: 19376 Comm: syz.5.11298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 696.167361][T19376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.167373][T19376] Call Trace: [ 696.167379][T19376] [ 696.167387][T19376] __dump_stack+0x1d/0x30 [ 696.167412][T19376] dump_stack_lvl+0xe8/0x140 [ 696.167437][T19376] dump_stack+0x15/0x1b [ 696.167521][T19376] should_fail_ex+0x265/0x280 [ 696.167558][T19376] ? nft_trans_table_add+0x36/0x190 [ 696.167593][T19376] should_failslab+0x8c/0xb0 [ 696.167692][T19376] __kmalloc_cache_noprof+0x4c/0x320 [ 696.167731][T19376] nft_trans_table_add+0x36/0x190 [ 696.167762][T19376] nf_tables_newtable+0x955/0xea0 [ 696.167814][T19376] nfnetlink_rcv+0xb96/0x1690 [ 696.167870][T19376] netlink_unicast+0x5bd/0x690 [ 696.167901][T19376] netlink_sendmsg+0x58b/0x6b0 [ 696.167968][T19376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.168001][T19376] __sock_sendmsg+0x142/0x180 [ 696.168044][T19376] ____sys_sendmsg+0x31e/0x4e0 [ 696.168080][T19376] ___sys_sendmsg+0x17b/0x1d0 [ 696.168202][T19376] __x64_sys_sendmsg+0xd4/0x160 [ 696.168291][T19376] x64_sys_call+0x191e/0x2ff0 [ 696.168317][T19376] do_syscall_64+0xd2/0x200 [ 696.168357][T19376] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 696.168460][T19376] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 696.168496][T19376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.168517][T19376] RIP: 0033:0x7fc96e20ec29 [ 696.168539][T19376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.168641][T19376] RSP: 002b:00007fc96cc6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.168660][T19376] RAX: ffffffffffffffda RBX: 00007fc96e455fa0 RCX: 00007fc96e20ec29 [ 696.168729][T19376] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 696.168745][T19376] RBP: 00007fc96cc6f090 R08: 0000000000000000 R09: 0000000000000000 [ 696.168760][T19376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.168774][T19376] R13: 00007fc96e456038 R14: 00007fc96e455fa0 R15: 00007ffeb188d128 [ 696.168797][T19376] [ 696.173211][T10780] team0 (unregistering): Port device team_slave_1 removed [ 696.400803][T10780] team0 (unregistering): Port device team_slave_0 removed [ 696.438136][T19070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.445105][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.471361][T19070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.488008][T19070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.495000][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.521116][T19070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.539234][T19388] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 696.545916][T19388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 696.553550][T19388] vhci_hcd vhci_hcd.0: Device attached [ 696.570651][T19070] hsr_slave_0: entered promiscuous mode [ 696.577109][T19070] hsr_slave_1: entered promiscuous mode [ 696.583725][T19070] debugfs: 'hsr0' already exists in 'hsr' [ 696.589593][T19070] Cannot create hsr debugfs directory [ 696.595505][T19389] vhci_hcd: connection closed [ 696.595718][T17062] vhci_hcd: stop threads [ 696.604717][T17062] vhci_hcd: release socket [ 696.609209][T17062] vhci_hcd: disconnect device [ 696.650905][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 696.650920][ T29] audit: type=1326 audit(718.630:259585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.682087][ T29] audit: type=1326 audit(718.630:259586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.708799][ T29] audit: type=1326 audit(718.670:259587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.732140][ T29] audit: type=1326 audit(718.670:259588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.755509][ T29] audit: type=1326 audit(718.670:259589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.778879][ T29] audit: type=1326 audit(718.670:259590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.788670][T19442] audit: audit_lost=36671 audit_rate_limit=0 audit_backlog_limit=64 [ 696.804933][ T29] audit: type=1326 audit(718.770:259591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a65f5ec29 code=0x7ffc0000 [ 696.810313][T19442] audit: out of memory in audit_log_start [ 696.833603][ T29] audit: type=1326 audit(718.770:259592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.2.11303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a65f5d590 code=0x7ffc0000 [ 696.936650][T19492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19492 comm=syz.1.11304 [ 696.960145][T19492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19492 comm=syz.1.11304 [ 697.022095][T19498] veth0: entered promiscuous mode [ 697.027797][T19498] serio: Serial port ptm1 [ 697.079757][T19497] veth0: left promiscuous mode [ 697.187592][T19523] netlink: 'syz.2.11311': attribute type 12 has an invalid length. [ 697.263706][T19534] FAULT_INJECTION: forcing a failure. [ 697.263706][T19534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 697.277259][T19534] CPU: 0 UID: 0 PID: 19534 Comm: syz.6.11318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 697.277294][T19534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 697.277311][T19534] Call Trace: [ 697.277320][T19534] [ 697.277327][T19534] __dump_stack+0x1d/0x30 [ 697.277403][T19534] dump_stack_lvl+0xe8/0x140 [ 697.277422][T19534] dump_stack+0x15/0x1b [ 697.277447][T19534] should_fail_ex+0x265/0x280 [ 697.277497][T19534] should_fail_alloc_page+0xf2/0x100 [ 697.277532][T19534] alloc_pages_bulk_noprof+0xef/0x540 [ 697.277661][T19534] copy_splice_read+0xf3/0x660 [ 697.277694][T19534] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 697.277727][T19534] splice_direct_to_actor+0x290/0x680 [ 697.277816][T19534] ? __pfx_direct_splice_actor+0x10/0x10 [ 697.277845][T19534] do_splice_direct+0xda/0x150 [ 697.277865][T19534] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 697.277954][T19534] do_sendfile+0x380/0x650 [ 697.277987][T19534] __x64_sys_sendfile64+0x105/0x150 [ 697.278026][T19534] x64_sys_call+0x2bb0/0x2ff0 [ 697.278076][T19534] do_syscall_64+0xd2/0x200 [ 697.278214][T19534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 697.278246][T19534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 697.278292][T19534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.278321][T19534] RIP: 0033:0x7f9097a2ec29 [ 697.278340][T19534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.278364][T19534] RSP: 002b:00007f9096497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 697.278524][T19534] RAX: ffffffffffffffda RBX: 00007f9097c75fa0 RCX: 00007f9097a2ec29 [ 697.278541][T19534] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 697.278555][T19534] RBP: 00007f9096497090 R08: 0000000000000000 R09: 0000000000000000 [ 697.278569][T19534] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 697.278586][T19534] R13: 00007f9097c76038 R14: 00007f9097c75fa0 R15: 00007ffe0d319a38 [ 697.278610][T19534] [ 697.286873][T19541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19541 comm=syz.5.11316 [ 697.325197][T19070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.327848][T19541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=19541 comm=syz.5.11316 [ 697.522626][T19070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.532198][T19070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.541357][T19070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.600168][T19070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.613357][T19070] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.623412][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.630901][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.647190][T10786] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.654304][T10786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.687384][T19070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.762546][T19070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.836629][T19583] ================================================================== [ 697.844770][T19583] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 697.851476][T19583] [ 697.853797][T19583] write to 0xffff88816e498e08 of 8 bytes by task 19584 on cpu 1: [ 697.861528][T19583] call_rcu+0x51/0x3f0 [ 697.865614][T19583] mas_replace_node+0x2e7/0x410 [ 697.870470][T19583] mas_wr_store_entry+0x2406/0x2b50 [ 697.875690][T19583] mas_store_prealloc+0x74d/0x9e0 [ 697.880735][T19583] vma_iter_store_new+0x1c5/0x200 [ 697.885773][T19583] mmap_region+0x1100/0x1630 [ 697.890376][T19583] do_mmap+0x9b3/0xbe0 [ 697.894464][T19583] vm_mmap_pgoff+0x17a/0x2e0 [ 697.899075][T19583] ksys_mmap_pgoff+0xc2/0x310 [ 697.903800][T19583] x64_sys_call+0x14a3/0x2ff0 [ 697.908491][T19583] do_syscall_64+0xd2/0x200 [ 697.913018][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.918921][T19583] [ 697.921250][T19583] read to 0xffff88816e498e08 of 8 bytes by task 19583 on cpu 0: [ 697.928882][T19583] mas_state_walk+0x28f/0x650 [ 697.933690][T19583] mas_walk+0x60/0x150 [ 697.937778][T19583] lock_vma_under_rcu+0x8d/0x160 [ 697.942732][T19583] do_user_addr_fault+0x233/0x1090 [ 697.947864][T19583] exc_page_fault+0x62/0xa0 [ 697.952382][T19583] asm_exc_page_fault+0x26/0x30 [ 697.957244][T19583] [ 697.959569][T19583] value changed: 0x000000110c22ffff -> 0x0000000000000000 [ 697.966699][T19583] [ 697.969025][T19583] Reported by Kernel Concurrency Sanitizer on: [ 697.975195][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.6.11325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 697.985100][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 697.995245][T19583] ================================================================== [ 698.022208][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11325'. [ 698.032413][T19586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11325'. [ 698.056349][T19070] veth0_vlan: entered promiscuous mode [ 698.064381][T19070] veth1_vlan: entered promiscuous mode [ 698.086568][T19070] veth0_macvtap: entered promiscuous mode [ 698.094317][T19070] veth1_macvtap: entered promiscuous mode [ 698.108618][T19070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.120944][T19070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.134469][T17061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.143600][T17061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.154628][T17061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.165357][T17061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0