last executing test programs: 14m28.6307784s ago: executing program 0 (id=886): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x100000, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) setsockopt(r3, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) dup3(r8, r3, 0x80000) 14m28.422644154s ago: executing program 0 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = dup2(r0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)="00100b0000001000002a0000", 0xc, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000340)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000e80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x4, [@struct={0x6, 0x5, 0x0, 0x4, 0x1, 0xdce1, [{0xb, 0x4, 0xffffff1a}, {0x10, 0x4, 0x8348b31}, {0xb, 0x5, 0x6}, {0x5, 0x3, 0xe000000}, {0x10, 0x5, 0x100}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @struct={0xb, 0x5, 0x0, 0x4, 0x1, 0x2, [{0xc, 0x4, 0x3}, {0x6, 0x4, 0xab0c}, {0x8, 0x5, 0x1}, {0x6, 0x3, 0x4}, {0xc, 0x0, 0x3}]}, @const={0x6, 0x0, 0x0, 0xa, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x1, 0x5}, @fwd={0x5}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x3}}, @struct={0xc, 0x2, 0x0, 0x4, 0x0, 0x3, [{0x9, 0x2, 0x7}, {0xc, 0x0, 0x9}]}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000940)=""/105, 0x128, 0x69, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0xffffffffffffffe0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x1e}, @ldst={0x1, 0x2, 0x1, 0x3, 0x0, 0xffffffffffffffa2, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x5a6, 0x0, 0x0, 0x40f00, 0x17, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x2, 0xf, 0x81, 0xef2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r1, r1], 0x0, 0x10, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lchown(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x6) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000600)="00214717db8300000000030600710a5eeb9d0471048beb00000000000000000000000000000094cb46291d6baae9e7b59552", 0x32}], 0x1, 0xee, 0x4000004) 14m28.275713857s ago: executing program 0 (id=892): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0002020000000000370500000000060015000200000014001680100008800c0003800800020000000003"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000002c0)={0x4}) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r5, &(0x7f0000000500)={'#! ', './file0'}, 0xb) unshare(0x20060400) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0xffffff31, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c40000001900010500000000fbdbdf25fc000000000000000000000000000000fc000000000000000000000000000000000000000000000001ffec0000000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000c001c00", @ANYRES32=r10, @ANYBLOB="04000000"], 0xc4}}, 0x0) 14m28.124017299s ago: executing program 0 (id=893): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x34020000) 14m28.10523653s ago: executing program 0 (id=895): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x7) fstat(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0xee01, 0x0, 0x0, 0x0, 0x0, r1]) fchownat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, r1, 0x100) 14m28.043309881s ago: executing program 0 (id=896): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000010"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="1f66d1217f3e20d2264bc7fcb9cd1addee287649fd3ea8f76f2c2c66e532dcc6b858fc71d63279e4aec98dd272e9", @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="1f66d1217f3e20d2264bc7fcb9cd1addee287649fd3ea8f76f2c2c66e532dcc6b858fc71d63279e4aec98dd272e9", @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup(r2) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0x0) 14m12.850371258s ago: executing program 32 (id=896): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000), 0x0) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000010"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="1f66d1217f3e20d2264bc7fcb9cd1addee287649fd3ea8f76f2c2c66e532dcc6b858fc71d63279e4aec98dd272e9", @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="1f66d1217f3e20d2264bc7fcb9cd1addee287649fd3ea8f76f2c2c66e532dcc6b858fc71d63279e4aec98dd272e9", @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = dup(r2) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0x0) (async) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0x0) 8m12.689560149s ago: executing program 5 (id=7226): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 8m12.592737181s ago: executing program 5 (id=7229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000050f23900000000000900000000000000"], 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000702f8ffffffb7030ccd78eb0100000000000000000085975f00030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSETELEM={0x7e4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x658, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}, {0x608, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x50, 0x6, 0x1, 0x0, "e049923a5a7369a8c7b8876f400414aec6d4e7091782856bad55d415308257967864b508e4b3f38e53e41a1cb4de714b96287111b9c91088a0e04b2531aadc6766bd7c0d6bd9b119d07610e6"}, @NFTA_SET_ELEM_DATA={0x274, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x74, 0x1, "e1bbeda20545792bf2b66b1ff679bc6134bfb7913fd82edd4a27194db77a8cf5d4e3660edccad899933eda291025fb15973e929e053cc7669da0d1ce2e1ce89f141a3b66d0833de10ea172085f23762d3152759d7acb9d36cedb39ce64a4f3cae7508eb4529b7ec747f7dfb8de7dae3c"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x25, 0x1, "35c193ecd03185c76271afe265d9a163040d56071d908b63ace389c2f95f22e488"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xb6, 0x1, "a216006deaa65342dcc1581b9e31e48406d659b497efddd95b0d4d21d7d48b538f569c6fd2fa7bff9f643fe2139ad8ce5928c06e972b55375a2d2fdc5559937618c7163a326ea91fbd423984f0d3b8a53974bac8d8af87db2c168a22eb476de914ed82cde3e8e8183e493ce3f67177e47eab326c8f07a1dd7e0a8cf9310a38686ad51aa578b2d42bef26a80de81891df970e90a53b1eaad473655398077c36ffba433c4425728982afd5b49d29c8b61dad51"}, @NFTA_DATA_VALUE={0x3d, 0x1, "3c45ce3be0e2c946efc8e6421331b10dddab91bc9d8580497c6e1c9e1a15663085a9dab02e6d4b1402b399343424a72d3b72f123d49520239b"}, @NFTA_DATA_VALUE={0x4a, 0x1, "dd96b8c652876afa485432f91d27ebaf36453e2fe7bb721af3f08425a1e0f30677b909f3ab913bacaf223da435ed665381cd25f59eb08b2726d1579d944e8bd9f8aedcf52aed"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "8dc205f2f661a3a9939d2be67008161b7eaaab06690b03e409586d137d8205563f4a27953b76fc75e5439c6a979171e4be19fe6eec78a4581799e68217c16da43920df0662f75dd7ccb06e9198d2b9faf9991ff63f5e5f1836b9152b4129fa52f3411f89e5fd97c855a4253e43527144492ab4729ea41d5d936ac10c30ad8fc52f20902cea506939ce9e680e3d9f26487aa99f52a5d08ad3c3a06abdc8934a0d729b6868bf268e626b270f8c313911f74b5b"}, @NFTA_SET_ELEM_KEY_END={0x27c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "f8e78f4b5748dce5d604912fef597be546ef1362bf755d1dd8331a1297bd4e1daa81ceb7cc0f82fe2f587c25a015d19d0c937ce2094f99fc29baeacb07267c27"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x63, 0x1, "9d58e8dd4017a68feb520d58e695e6966736f1fc154a827f7d32693f3ee7da6c0617cedcb244c9c3d87055e3bc00361938d0a07d950fe9f3816b8b5e336e53e7ceefe53b444c4437168996e467e0c4ec6dcee6af079ee10834b5c956c2f45c"}, @NFTA_DATA_VALUE={0xdf, 0x1, "9ef7bb3e3be6f830053a36a49c249528f54775f7553005df8939458dc37a5f4728f302c445ca4ac7b5d8ad8d32af111141dcacb5f9ef2fa49cc4b742e2b6f272c30f34c772159d37a5cb1918c3e0fd362777028d98e209f1cb3a774e3079c842f7f85ab03b02e0113597638ca0cdcd51448f2f6711022deaa566bff76011e5bc35ed14582a1942824e16a868673d18d3576fe3a5032abb4264c86553d0a32c9f9048a2d8c14f9cbd5ff9384d04ac6aab660d453f767934293d327be5f20fe9aaf13fac6d1f822b4d2847e7343790f30a1cca8e1b77aee2a6c2f22d"}, @NFTA_DATA_VALUE={0xc5, 0x1, "f659fc98860909df74bcf3d2d4ef94b160c2b91bdfd52e8f76ff626943cbf2a309799aa59a886fc1624999a6fe5d94c2210e7cabdf1f180f0b9c2d0274f1459686df48b04f2a9fff7f79a3eddcb1195c54352cbf98bd8ce73ebdab25fa05b6367f20ff273e395a590f625c603f4a5d34d03fe2573845bec8d1b66a81fcaf9b9f35b5a2b3e15db2911ddf47d8033d68adb5c0eefb49747c7a9d57891b0238f560d0c06979084e88bf5ed8b2b0969025b51c7c60af73f6285853a8d757c1b8fe1946"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x160, 0x3, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_USERDATA={0xee, 0x6, 0x1, 0x0, "a25e85f97fd18f9c204f29446dce7f0a002e89084bd40f8399f3e64d68882921fe5d946bbec3a3009e50d3ab8b91d502a3973fb3d5c97d012db77a1108a25a1be854f00f7bc84f684af8fe75528f1624a5e2152d0bd3b9c0e6ecd6aba3c1374a665cb07906b845112a54282b89392c137ad20c86ba59a9adeb4c76a1ba68a2095434e9e4ef764dab9bf4726b6cb754f7df751cd31b286f6a531391e513f2b4d0e941a3c2525b85e206314f44162bbc6bc297e7619b2a75b0b89713ef7d58d2d4c1fe811b29e5aacfed5f80d12cb22e9801a3eaac60c89f0cf34ecf8aa06d5c6190d1b3e23c4b85f00858"}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xf8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd8, 0xc, "1986ae033a35b3c50e744cdff3b7f66bd37578407b4ccd8476a34141ed9086977eaa94a6a67e9572d53e3054d2f139feecc1074dd07731b09760d7434b76ba64b3d27f35cd631480ecbd0ade0048685d4929f3da000a35f90456d4eb37f3f12cbbfb0317b6856a7409baf798fdc99563917dba4d156d7d4a1c84ca289b20f319a8b8967a049e66f629b2b823640de6ae37d6dbcb40f00c8047246a32d7524e6c6014751ea196273e671831ba3d3fdd60bb6cfb71f59f9d931811ce60c89c72a6aacee7cf44c0e8827a4aaab8c6365a836fe40914"}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8e}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x98c}}, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) 8m11.61102549s ago: executing program 5 (id=7243): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 8m11.561269901s ago: executing program 5 (id=7246): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0xb, 0x80000, 0x6) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="20150700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getitimer(0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f00000000c0), &(0x7f0000000400)=r1}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f0000000180)="73e1415fa2972e7a8b11011406", &(0x7f0000000540)=""/192, &(0x7f00000001c0)="9e2f1fe4e0159885c647913e092a967c8c291f4bd5441838f718c40268077f97ef3fc289d7", &(0x7f00000006c0)="4da014a3a09291909e36b55932b08f8163bb8095adb7e0fe8c5cc3f57f14209aaa4925451bed79498d908f56f90633db5b71572f9301c550cdea9614f2d094fbe63a43690f9ecc41d2261b0c6bc9e2949ea0d4b2752a300ad247aebde8bbfe807f82206f8f9e91eb642b88d929b851f2a16f", 0x10000, 0xffffffffffffffff, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000000000000004000000a000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="00e5b19a5f000000f2ffffff0000000000040000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) mlockall(0x7) 8m10.012545621s ago: executing program 5 (id=7257): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 8m9.879241974s ago: executing program 5 (id=7258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x2b65, &(0x7f0000002f40)={0x0, 0x5c8b, 0x1000, 0x1, 0x2c7}, &(0x7f0000002fc0), &(0x7f0000003000)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003400)={0x1, 0x9b144e97bc8ff4f8, 0x0, &(0x7f0000003380)=[{0x0}], 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d7461ce191b69c594f970636c2c64666c747569643d", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d7461ce191b69c594f970636c2c64666c747569643d", @ANYRESHEX]) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") (async) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") 7m54.71411805s ago: executing program 33 (id=7258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x2b65, &(0x7f0000002f40)={0x0, 0x5c8b, 0x1000, 0x1, 0x2c7}, &(0x7f0000002fc0), &(0x7f0000003000)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000003400)={0x1, 0x9b144e97bc8ff4f8, 0x0, &(0x7f0000003380)=[{0x0}], 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d7461ce191b69c594f970636c2c64666c747569643d", @ANYRESHEX]) (async) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c63616368653d6d7461ce191b69c594f970636c2c64666c747569643d", @ANYRESHEX]) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") (async) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") 13.654413204s ago: executing program 2 (id=15124): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11.890374128s ago: executing program 2 (id=15148): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 11.889856578s ago: executing program 2 (id=15150): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be48381"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000cc0)="7e6822ef4683eeee17ecb5ecb6811f31b70cec47aa261c5fa0da149de9262bf5c348d44ac84ba94d24c008d95b", 0x2d}, {0x0}], 0x2}}], 0x1, 0x8011) recvmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x89}], 0x1, 0x10120, 0x0) shutdown(r1, 0x1) 11.844153019s ago: executing program 2 (id=15151): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_open(0x0, 0x1, 0x0, 0x0) 11.843661369s ago: executing program 2 (id=15152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x24000000) 11.783376s ago: executing program 2 (id=15153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00000004c0)=0x7f, 0x4) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="102a9a05000000c9dcdf1b1e19449ad113bfcea7f6aef93fa3d6c148e28efd4b6387b2c1e7e2610401ff5fe6285418587a630b72859a255a27e57de0985ea7991f", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=r3], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r5, &(0x7f0000000040)=""/57, 0x39) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 9.321566308s ago: executing program 1 (id=15165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa86, 0x0) 9.275013029s ago: executing program 4 (id=15167): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRESDEC=r6, @ANYBLOB="0001000000000000000000000000000000000000fa9b7b18197be8474874bda7105a67c0b03b7598081ad58ce8ef0765955242b19e7efde4ff53303a630141c9e8a3201d03cd81f36b2b209c2ee310d8dad80ab1e0cce87139", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000001700000000000000000000b70800000c0000007b8af8ff00000000b7080000081000007b8af0ff00000000bf0000000000000007010000f8ffffffbfa400000000000007040000f0fff7ffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11, 0x0, 0x4}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x9, 0x8}]}) ioctl$GIO_SCRNMAP(r13, 0x4b40, &(0x7f0000000080)=""/191) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 7.597888132s ago: executing program 6 (id=15170): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 7.547222763s ago: executing program 4 (id=15172): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r5, 0x2f, 0x7f, 0x81, 0x11, 0x40, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, 0x7, 0x7, 0x9, 0x63}}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xf5ef, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r10, &(0x7f0000000100)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000040)=""/136, 0x88}], 0x2, 0x1a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xa, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @generic={0x9, 0xb, 0x3, 0xce34, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xee}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000300)=""/170, 0x0, 0x18, '\x00', r6, @cgroup_sock=0x22, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000000600)=[r9, r4, r10, r4], &(0x7f0000000640)=[{0x2, 0x2, 0xc, 0x3}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xc}, {0x3, 0x5, 0xf, 0x9}, {0x4, 0x5, 0xc, 0xc}, {0x2, 0x5, 0xb, 0x9}, {0x4, 0x2, 0x10, 0xb}], 0x10, 0x3}, 0x94) 6.580882802s ago: executing program 6 (id=15173): r0 = syz_io_uring_setup(0x1124, &(0x7f0000000540)={0x0, 0x2, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x70, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) 6.580463262s ago: executing program 3 (id=15174): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000cc0)="7e6822ef4683eeee17ecb5ecb6811f31b70cec47aa261c5fa0da149de9262bf5c348d44ac84ba94d24c008d95b", 0x2d}, {0x0}], 0x2}}], 0x1, 0x8011) recvmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x89}], 0x1, 0x10120, 0x0) shutdown(r1, 0x1) 6.580045672s ago: executing program 4 (id=15175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.465594403s ago: executing program 6 (id=15176): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.465127953s ago: executing program 1 (id=15177): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x34c4d310, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, &(0x7f0000000100)=[{0x2, 0x400, 0x800}, {0x4, 0x7ff, 0x800}, {0x1, 0xd8, 0x2800}, {0x4, 0x7701, 0x1800}, {0x4}, {0x1, 0x9, 0x1000}, {0x0, 0xe000}, {0x3, 0x4}, {0x4, 0x5cc1, 0x800}], 0x9) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r3, 0x0, 0x3ffff) sendfile(r6, r3, 0x0, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r7 = socket(0x10, 0x3, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0xfffe, 0x0, 0x7f, 0x5, 0x6, @multicast}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.463320604s ago: executing program 3 (id=15178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="102a9a05000000c9dcdf1b1e19449ad113bfcea7f6aef93fa3d6c148e28efd4b6387b2c1e7e2610401ff5fe6285418587a630b72859a255a27e57de0985ea7991f", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=r3], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r5, &(0x7f0000000040)=""/57, 0x39) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 5.463177293s ago: executing program 4 (id=15179): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_open(0x0, 0x1, 0x0, 0x0) 4.250924367s ago: executing program 1 (id=15180): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x2000000000000000) 4.250624797s ago: executing program 3 (id=15181): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xdf, 0xbf, ""/191}, &(0x7f0000000140)=0x1c, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r6, @ANYRESDEC=r6, @ANYBLOB="0001000000000000000000000000000000000000fa9b7b18197be8474874bda7105a67c0b03b7598081ad58ce8ef0765955242b19e7efde4ff53303a630141c9e8a3201d03cd81f36b2b209c2ee310d8dad80ab1e0cce87139", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r6], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000001700000000000000000000b70800000c0000007b8af8ff00000000b7080000081000007b8af0ff00000000bf0000000000000007010000f8ffffffbfa400000000000007040000f0fff7ffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11, 0x0, 0x4}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r13 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x9, 0x8}]}) ioctl$GIO_SCRNMAP(r13, 0x4b40, &(0x7f0000000080)=""/191) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 4.250363207s ago: executing program 4 (id=15182): r0 = io_uring_setup(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x231}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 2.923422113s ago: executing program 6 (id=15183): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) 2.923089793s ago: executing program 1 (id=15184): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpid() mmap(&(0x7f00001bc000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xe0930000) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0xa8002, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r5, 0x6, 0x5004) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xd215) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.922706853s ago: executing program 3 (id=15185): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8954, &(0x7f0000000000)={{}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x0, {0x2, 0x0, @private=0xa010102}, 'lo\x00'}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r5, 0x2f, 0x7f, 0x81, 0x11, 0x40, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, 0x7, 0x7, 0x9, 0x63}}) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xf5ef, '\x00', r5, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') preadv(r10, &(0x7f0000000100)=[{&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000040)=""/136, 0x88}], 0x2, 0x1a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xa, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @generic={0x9, 0xb, 0x3, 0xce34, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xee}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000300)=""/170, 0x0, 0x18, '\x00', r6, @cgroup_sock=0x22, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x7, &(0x7f0000000600)=[r9, r4, r10, r4], &(0x7f0000000640)=[{0x2, 0x2, 0xc, 0x3}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xc}, {0x3, 0x5, 0xf, 0x9}, {0x4, 0x5, 0xc, 0xc}, {0x2, 0x5, 0xb, 0x9}, {0x4, 0x2, 0x10, 0xb}], 0x10, 0x3}, 0x94) 2.921904493s ago: executing program 4 (id=15186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xa86, 0x0) 1.513614991s ago: executing program 6 (id=15187): r0 = syz_io_uring_setup(0x1124, &(0x7f0000000540)={0x0, 0x2, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x5452, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x70, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) 1.513116561s ago: executing program 1 (id=15188): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000cc0)="7e6822ef4683eeee17ecb5ecb6811f31b70cec47aa261c5fa0da149de9262bf5c348d44ac84ba94d24c008d95b", 0x2d}, {0x0}], 0x2}}], 0x1, 0x8011) recvmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x89}], 0x1, 0x10120, 0x0) shutdown(r1, 0x1) 1.435693143s ago: executing program 3 (id=15189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2.46215ms ago: executing program 6 (id=15190): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x34c4d310, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, &(0x7f0000000100)=[{0x2, 0x400, 0x800}, {0x4, 0x7ff, 0x800}, {0x1, 0xd8, 0x2800}, {0x4, 0x7701, 0x1800}, {0x4}, {0x1, 0x9, 0x1000}, {0x0, 0xe000}, {0x3, 0x4}, {0x4, 0x5cc1, 0x800}], 0x9) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r3, 0x0, 0x3ffff) sendfile(r6, r3, 0x0, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r7 = socket(0x10, 0x3, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0xfffe, 0x0, 0x7f, 0x5, 0x6, @multicast}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.17246ms ago: executing program 1 (id=15191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) listen(r4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="102a9a05000000c9dcdf1b1e19449ad113bfcea7f6aef93fa3d6c148e28efd4b6387b2c1e7e2610401ff5fe6285418587a630b72859a255a27e57de0985ea7991f", @ANYRESOCT=r4, @ANYRES32, @ANYRES32=r3], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) fchdir(0xffffffffffffffff) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r5, &(0x7f0000000040)=""/57, 0x39) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=15192): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) kernel console output (not intermixed with test programs): 46][T11533] dump_stack+0x15/0x1b [ 919.942868][T11533] should_fail_ex+0x265/0x280 [ 919.942947][T11533] should_fail+0xb/0x20 [ 919.942998][T11533] should_fail_usercopy+0x1a/0x20 [ 919.943032][T11533] _copy_from_user+0x1c/0xb0 [ 919.943073][T11533] ___sys_sendmsg+0xc1/0x1d0 [ 919.943123][T11533] __x64_sys_sendmsg+0xd4/0x160 [ 919.943206][T11533] x64_sys_call+0x191e/0x2ff0 [ 919.943234][T11533] do_syscall_64+0xd2/0x200 [ 919.943339][T11533] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 919.943373][T11533] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 919.943464][T11533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.943491][T11533] RIP: 0033:0x7f7458a4ec29 [ 919.943511][T11533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.943534][T11533] RSP: 002b:00007f74574b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 919.943559][T11533] RAX: ffffffffffffffda RBX: 00007f7458c95fa0 RCX: 00007f7458a4ec29 [ 919.943576][T11533] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 919.943642][T11533] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 919.943658][T11533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.943669][T11533] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 919.943693][T11533] [ 920.723745][T11543] wireguard1: entered promiscuous mode [ 920.729359][T11543] wireguard1: entered allmulticast mode [ 920.748717][T11545] loop2: detected capacity change from 0 to 1024 [ 920.765986][T11545] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 920.776988][T11545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 920.810113][T11545] JBD2: no valid journal superblock found [ 920.816042][T11545] EXT4-fs (loop2): Could not load journal inode [ 920.848248][T11545] siw: device registration error -23 [ 921.009866][T11559] loop2: detected capacity change from 0 to 512 [ 921.043777][T11559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 921.114037][T11559] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 921.224779][T11563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11563 comm=syz.3.14201 [ 921.265090][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.589821][T11576] SELinux: failed to load policy [ 921.665052][T11578] SELinux: failed to load policy [ 921.846129][T11590] loop2: detected capacity change from 0 to 1024 [ 921.866727][T11590] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 921.877716][T11590] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 921.892548][T11590] JBD2: no valid journal superblock found [ 921.898418][T11590] EXT4-fs (loop2): Could not load journal inode [ 921.919910][T11590] siw: device registration error -23 [ 921.982318][T11601] siw: device registration error -23 [ 922.017068][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14219'. [ 922.025678][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14218'. [ 922.062327][T11603] loop2: detected capacity change from 0 to 128 [ 922.809376][T11624] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 922.895884][T11633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14230'. [ 923.043079][T11648] 9p: Unknown Cache mode or invalid value mtaÎiÅ”ùpcl [ 923.568256][T11651] rdma_rxe: rxe_newlink: failed to add lo [ 923.634832][T11655] SELinux: failed to load policy [ 923.663534][T11657] block device autoloading is deprecated and will be removed. [ 923.674150][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 923.674165][ T29] audit: type=1326 audit(1758345428.097:67169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.742871][T11660] siw: device registration error -23 [ 923.777401][ T29] audit: type=1326 audit(1758345428.097:67170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.801281][ T29] audit: type=1326 audit(1758345428.097:67171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.825216][ T29] audit: type=1326 audit(1758345428.097:67172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.849101][ T29] audit: type=1326 audit(1758345428.097:67173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.872830][ T29] audit: type=1326 audit(1758345428.097:67174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.896569][ T29] audit: type=1326 audit(1758345428.097:67175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.920254][ T29] audit: type=1326 audit(1758345428.097:67176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.943953][ T29] audit: type=1326 audit(1758345428.137:67177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 923.967634][ T29] audit: type=1326 audit(1758345428.137:67178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.6.14238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 924.004735][T11666] loop2: detected capacity change from 0 to 512 [ 924.027899][T11665] SELinux: failed to load policy [ 924.044543][T11666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.070583][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14242'. [ 924.100074][T11666] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 924.188807][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 924.206769][T11672] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 924.227683][T11672] SELinux: failed to load policy [ 924.349185][T11679] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 924.349185][T11679] program syz.6.14246 not setting count and/or reply_len properly [ 924.510374][T11681] SELinux: failed to load policy [ 924.709134][T11685] lo speed is unknown, defaulting to 1000 [ 924.716667][T11685] lo speed is unknown, defaulting to 1000 [ 925.356954][T11693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.365685][T11693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.500947][T11698] wireguard3: entered promiscuous mode [ 925.506605][T11698] wireguard3: entered allmulticast mode [ 925.529074][T11701] blktrace: Concurrent blktraces are not allowed on loop12 [ 925.594332][T11708] siw: device registration error -23 [ 925.634160][T11710] block device autoloading is deprecated and will be removed. [ 925.946996][T11720] loop3: detected capacity change from 0 to 512 [ 925.955809][T11720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.978858][T11720] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 926.017719][ T6119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.078203][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14264'. [ 926.191430][T11740] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 926.452559][T11744] loop6: detected capacity change from 0 to 1024 [ 926.459283][T11744] /dev/loop6: Can't open blockdev [ 926.465336][T11744] siw: device registration error -23 [ 926.495328][T11746] wireguard1: entered promiscuous mode [ 926.500981][T11746] wireguard1: entered allmulticast mode [ 926.583875][T11750] loop2: detected capacity change from 0 to 128 [ 926.606676][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14276'. [ 926.715171][T11774] siw: device registration error -23 [ 926.743743][T11776] wireguard1: entered promiscuous mode [ 926.749292][T11776] wireguard1: entered allmulticast mode [ 926.913444][T11784] SELinux: failed to load policy [ 927.008948][T11792] loop3: detected capacity change from 0 to 1024 [ 927.016004][T11792] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 927.027102][T11792] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 927.038096][T11792] JBD2: no valid journal superblock found [ 927.043891][T11792] EXT4-fs (loop3): Could not load journal inode [ 927.478311][T11812] SELinux: failed to load policy [ 927.535906][T11816] loop2: detected capacity change from 0 to 512 [ 927.544638][T11816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 927.573592][T11816] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 927.616326][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.717534][T11826] siw: device registration error -23 [ 927.743021][T11830] loop2: detected capacity change from 0 to 1024 [ 927.750056][T11830] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 927.761058][T11830] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 927.772341][T11830] JBD2: no valid journal superblock found [ 927.778113][T11830] EXT4-fs (loop2): Could not load journal inode [ 927.787321][T11830] siw: device registration error -23 [ 927.854950][T11839] siw: device registration error -23 [ 927.872013][T11837] wireguard0: entered promiscuous mode [ 927.877619][T11837] wireguard0: entered allmulticast mode [ 928.059122][T11847] siw: device registration error -23 [ 928.112958][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14317'. [ 928.142808][T11861] loop3: detected capacity change from 0 to 1024 [ 928.149733][T11861] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 928.160769][T11861] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 928.174686][T11861] JBD2: no valid journal superblock found [ 928.180485][T11861] EXT4-fs (loop3): Could not load journal inode [ 928.225761][T11867] 9p: Unknown Cache mode or invalid value mtaÎiÅ”ùpcl [ 928.254854][T11871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11871 comm=syz.4.14324 [ 928.467516][T11872] rdma_rxe: rxe_newlink: failed to add lo [ 928.813942][T11879] FAULT_INJECTION: forcing a failure. [ 928.813942][T11879] name failslab, interval 1, probability 0, space 0, times 0 [ 928.826695][T11879] CPU: 1 UID: 0 PID: 11879 Comm: syz.4.14326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 928.826781][T11879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 928.826793][T11879] Call Trace: [ 928.826799][T11879] [ 928.826809][T11879] __dump_stack+0x1d/0x30 [ 928.826858][T11879] dump_stack_lvl+0xe8/0x140 [ 928.826880][T11879] dump_stack+0x15/0x1b [ 928.826896][T11879] should_fail_ex+0x265/0x280 [ 928.826975][T11879] should_failslab+0x8c/0xb0 [ 928.827006][T11879] __kmalloc_noprof+0xa5/0x3e0 [ 928.827074][T11879] ? copy_splice_read+0xc2/0x660 [ 928.827099][T11879] copy_splice_read+0xc2/0x660 [ 928.827172][T11879] ? __pfx_copy_splice_read+0x10/0x10 [ 928.827200][T11879] splice_direct_to_actor+0x26c/0x680 [ 928.827225][T11879] ? __pfx_direct_splice_actor+0x10/0x10 [ 928.827248][T11879] do_splice_direct+0xda/0x150 [ 928.827330][T11879] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 928.827438][T11879] do_sendfile+0x380/0x650 [ 928.827468][T11879] __x64_sys_sendfile64+0x105/0x150 [ 928.827573][T11879] x64_sys_call+0x2bb0/0x2ff0 [ 928.827616][T11879] do_syscall_64+0xd2/0x200 [ 928.827648][T11879] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 928.827676][T11879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 928.827779][T11879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.827797][T11879] RIP: 0033:0x7f5395b9ec29 [ 928.827863][T11879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.827881][T11879] RSP: 002b:00007f5394607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 928.827898][T11879] RAX: ffffffffffffffda RBX: 00007f5395de5fa0 RCX: 00007f5395b9ec29 [ 928.827909][T11879] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 928.827920][T11879] RBP: 00007f5394607090 R08: 0000000000000000 R09: 0000000000000000 [ 928.827931][T11879] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 928.827992][T11879] R13: 00007f5395de6038 R14: 00007f5395de5fa0 R15: 00007fff5d144d68 [ 928.828074][T11879] [ 929.061817][T11891] loop2: detected capacity change from 0 to 1024 [ 929.069521][T11891] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 929.080565][T11891] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 929.123833][T11891] JBD2: no valid journal superblock found [ 929.129617][T11891] EXT4-fs (loop2): Could not load journal inode [ 929.153959][T11891] siw: device registration error -23 [ 929.160270][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 929.160287][ T29] audit: type=1326 audit(1758345433.577:67505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.162922][T11895] siw: device registration error -23 [ 929.204506][ T29] audit: type=1326 audit(1758345433.587:67506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.228419][ T29] audit: type=1326 audit(1758345433.587:67507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.252193][ T29] audit: type=1326 audit(1758345433.587:67508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.275935][ T29] audit: type=1326 audit(1758345433.587:67509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.299634][ T29] audit: type=1326 audit(1758345433.587:67510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.323331][ T29] audit: type=1326 audit(1758345433.587:67511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.347021][ T29] audit: type=1326 audit(1758345433.587:67512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.370697][ T29] audit: type=1326 audit(1758345433.587:67513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.394429][ T29] audit: type=1326 audit(1758345433.587:67514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11892 comm="syz.6.14334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 929.490809][T11909] siw: device registration error -23 [ 930.043224][T11952] loop6: detected capacity change from 0 to 128 [ 930.156092][T11955] FAULT_INJECTION: forcing a failure. [ 930.156092][T11955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.169363][T11955] CPU: 0 UID: 0 PID: 11955 Comm: syz.2.14359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 930.169389][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 930.169401][T11955] Call Trace: [ 930.169407][T11955] [ 930.169414][T11955] __dump_stack+0x1d/0x30 [ 930.169441][T11955] dump_stack_lvl+0xe8/0x140 [ 930.169465][T11955] dump_stack+0x15/0x1b [ 930.169511][T11955] should_fail_ex+0x265/0x280 [ 930.169617][T11955] should_fail+0xb/0x20 [ 930.169647][T11955] should_fail_usercopy+0x1a/0x20 [ 930.169750][T11955] _copy_from_user+0x1c/0xb0 [ 930.169808][T11955] ___sys_recvmsg+0xaa/0x370 [ 930.169856][T11955] ? 0xffffffff81000000 [ 930.169869][T11955] ? __rcu_read_unlock+0x4f/0x70 [ 930.169907][T11955] __x64_sys_recvmsg+0xd1/0x160 [ 930.170022][T11955] x64_sys_call+0x2b42/0x2ff0 [ 930.170049][T11955] do_syscall_64+0xd2/0x200 [ 930.170164][T11955] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 930.170188][T11955] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 930.170266][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.170340][T11955] RIP: 0033:0x7f7458a4ec29 [ 930.170358][T11955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.170381][T11955] RSP: 002b:00007f74574b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 930.170473][T11955] RAX: ffffffffffffffda RBX: 00007f7458c95fa0 RCX: 00007f7458a4ec29 [ 930.170489][T11955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 930.170504][T11955] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 930.170594][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.170607][T11955] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 930.170629][T11955] [ 930.467302][T11961] loop2: detected capacity change from 0 to 1024 [ 930.474960][T11961] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 930.485903][T11961] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 930.500218][T11961] JBD2: no valid journal superblock found [ 930.506128][T11961] EXT4-fs (loop2): Could not load journal inode [ 930.518526][T11961] siw: device registration error -23 [ 930.559534][T11965] loop2: detected capacity change from 0 to 1024 [ 930.569957][T11965] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 930.581005][T11965] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 930.594701][T11965] JBD2: no valid journal superblock found [ 930.600516][T11965] EXT4-fs (loop2): Could not load journal inode [ 930.611045][T11965] siw: device registration error -23 [ 931.745510][T12000] loop3: detected capacity change from 0 to 1024 [ 931.772993][T12000] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 931.784081][T12000] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 931.824305][T12000] JBD2: no valid journal superblock found [ 931.830105][T12000] EXT4-fs (loop3): Could not load journal inode [ 931.876522][T12005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14380'. [ 931.901570][T12009] siw: device registration error -23 [ 932.165648][T12017] lo speed is unknown, defaulting to 1000 [ 932.181628][T12017] lo speed is unknown, defaulting to 1000 [ 932.451874][T12020] loop3: detected capacity change from 0 to 1024 [ 932.474503][T12020] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 932.485498][T12020] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 932.515444][T12020] JBD2: no valid journal superblock found [ 932.521278][T12020] EXT4-fs (loop3): Could not load journal inode [ 932.833906][T12032] siw: device registration error -23 [ 932.961261][T12035] SELinux: failed to load policy [ 932.975397][T12035] netlink: 'syz.4.14391': attribute type 4 has an invalid length. [ 932.983348][T12035] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14391'. [ 933.000841][T12043] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 933.024183][T12043] SELinux: failed to load policy [ 933.752377][T12060] SELinux: failed to load policy [ 933.887124][T12065] siw: device registration error -23 [ 933.949686][T12070] SELinux: failed to load policy [ 934.235687][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 934.235704][ T29] audit: type=1326 audit(1758345438.657:67709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.335745][ T29] audit: type=1326 audit(1758345438.657:67710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.359510][ T29] audit: type=1326 audit(1758345438.697:67711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.383294][ T29] audit: type=1326 audit(1758345438.697:67712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.407540][ T29] audit: type=1326 audit(1758345438.697:67713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.431333][ T29] audit: type=1326 audit(1758345438.697:67714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.455253][ T29] audit: type=1326 audit(1758345438.697:67715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.478976][ T29] audit: type=1326 audit(1758345438.697:67716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12079 comm="syz.6.14409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 934.620132][ T29] audit: type=1400 audit(1758345439.037:67717): avc: denied { read } for pid=12086 comm="syz.6.14412" path="socket:[164327]" dev="sockfs" ino=164327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 934.674298][ T29] audit: type=1400 audit(1758345439.087:67718): avc: denied { watch watch_reads } for pid=12086 comm="syz.6.14412" path="/244" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 934.723579][T12090] loop6: detected capacity change from 0 to 1024 [ 934.742754][T12090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.985673][T12102] loop3: detected capacity change from 0 to 1024 [ 934.993227][T12102] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 935.004157][T12102] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 935.017770][T12102] JBD2: no valid journal superblock found [ 935.023680][T12102] EXT4-fs (loop3): Could not load journal inode [ 935.449348][ T8710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.573804][T12123] lo speed is unknown, defaulting to 1000 [ 935.580323][T12123] lo speed is unknown, defaulting to 1000 [ 935.671766][T12125] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 935.716336][T12125] SELinux: failed to load policy [ 936.427601][T12148] SELinux: failed to load policy [ 936.588951][T12154] SELinux: failed to load policy [ 936.674700][T12156] loop3: detected capacity change from 0 to 128 [ 936.811348][T12163] loop6: detected capacity change from 0 to 512 [ 936.820140][T12163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 936.863452][T12163] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 936.901781][ T8710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.942505][T12173] siw: device registration error -23 [ 937.555990][T12188] SELinux: failed to load policy [ 937.858723][T12198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.888356][T12198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.924730][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14454'. [ 937.964494][T12206] SELinux: failed to load policy [ 938.150311][T12216] SELinux: failed to load policy [ 939.155768][T12255] loop2: detected capacity change from 0 to 1024 [ 939.181340][T12255] EXT4-fs: Ignoring removed orlov option [ 939.187232][T12255] EXT4-fs: Ignoring removed nobh option [ 939.192938][T12255] EXT4-fs: Ignoring removed bh option [ 939.243744][T12255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 939.284367][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 939.284381][ T29] audit: type=1400 audit(1758345443.707:67931): avc: denied { read write open } for pid=12254 comm="syz.2.14476" path="/435/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 939.343672][T12255] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.14476: Allocating blocks 481-513 which overlap fs metadata [ 939.391320][T12255] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.14476: Allocating blocks 465-513 which overlap fs metadata [ 939.457252][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.521041][ T29] audit: type=1400 audit(1758345443.937:67932): avc: denied { wake_alarm } for pid=12269 comm="syz.2.14481" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 939.553152][T12267] siw: device registration error -23 [ 939.588176][T12271] loop6: detected capacity change from 0 to 1024 [ 939.601048][ T29] audit: type=1400 audit(1758345443.947:67933): avc: denied { read } for pid=12269 comm="syz.2.14481" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 939.624605][ T29] audit: type=1400 audit(1758345443.947:67934): avc: denied { open } for pid=12269 comm="syz.2.14481" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 939.669373][T12271] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 939.680370][T12271] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 939.713761][T12271] JBD2: no valid journal superblock found [ 939.719531][T12271] EXT4-fs (loop6): Could not load journal inode [ 939.736342][T12271] siw: device registration error -23 [ 939.798430][T12280] netlink: 'syz.4.14483': attribute type 10 has an invalid length. [ 939.806429][T12280] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14483'. [ 939.869300][T12280] team0: Port device geneve1 added [ 939.884341][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14486'. [ 939.956426][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14486'. [ 940.037135][ T29] audit: type=1326 audit(1758345444.457:67935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.092631][ T29] audit: type=1326 audit(1758345444.487:67936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.116547][ T29] audit: type=1326 audit(1758345444.497:67937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.141415][ T29] audit: type=1326 audit(1758345444.497:67938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.165126][ T29] audit: type=1326 audit(1758345444.497:67939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.188884][ T29] audit: type=1326 audit(1758345444.497:67940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12285 comm="syz.6.14487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f3aefec29 code=0x7ffc0000 [ 940.235397][T12288] loop6: detected capacity change from 0 to 1024 [ 940.273988][T12288] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 940.284976][T12288] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 940.414492][T12288] JBD2: no valid journal superblock found [ 940.420286][T12288] EXT4-fs (loop6): Could not load journal inode [ 940.458759][T12292] loop2: detected capacity change from 0 to 512 [ 940.484242][T12286] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 940.492180][T12292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 940.533549][T12292] EXT4-fs (loop2): 1 truncate cleaned up [ 940.539632][T12292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.636598][T12295] SELinux: failed to load policy [ 940.825985][T12302] loop6: detected capacity change from 0 to 1024 [ 940.833087][T12302] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 940.844084][T12302] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 940.885339][T12302] JBD2: no valid journal superblock found [ 940.891267][T12302] EXT4-fs (loop6): Could not load journal inode [ 940.921424][T12302] siw: device registration error -23 [ 942.035021][T12325] SELinux: failed to load policy [ 942.055031][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.321196][T12338] lo speed is unknown, defaulting to 1000 [ 942.327752][T12338] lo speed is unknown, defaulting to 1000 [ 943.074459][T12351] loop2: detected capacity change from 0 to 1024 [ 943.087497][T12353] loop6: detected capacity change from 0 to 1024 [ 943.124779][T12353] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 943.135834][T12353] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 943.212284][T12353] JBD2: no valid journal superblock found [ 943.218108][T12353] EXT4-fs (loop6): Could not load journal inode [ 943.237519][T12351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.250771][T12353] siw: device registration error -23 [ 943.684168][T12365] SELinux: failed to load policy [ 943.804274][T12369] loop6: detected capacity change from 0 to 128 [ 943.852441][ T6794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.082575][T12384] lo speed is unknown, defaulting to 1000 [ 944.089030][T12384] lo speed is unknown, defaulting to 1000 [ 944.246257][T12387] loop3: detected capacity change from 0 to 1024 [ 944.269351][T12387] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 944.280493][T12387] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 944.296216][T12387] JBD2: no valid journal superblock found [ 944.302050][T12387] EXT4-fs (loop3): Could not load journal inode [ 944.706973][T12395] siw: device registration error -23 [ 944.726245][T12393] loop6: detected capacity change from 0 to 1024 [ 944.767777][T12393] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 944.778799][T12393] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 944.832753][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 944.832770][ T29] audit: type=1326 audit(1758345449.257:68160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.4.14528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5395b9ec29 code=0x0 [ 944.871334][T12393] JBD2: no valid journal superblock found [ 944.877265][T12393] EXT4-fs (loop6): Could not load journal inode [ 944.910088][T12393] siw: device registration error -23 [ 944.935716][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14531'. [ 944.972142][ T29] audit: type=1326 audit(1758345449.397:68161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 944.996075][ T29] audit: type=1326 audit(1758345449.397:68162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.019917][ T29] audit: type=1326 audit(1758345449.397:68163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.043884][ T29] audit: type=1326 audit(1758345449.397:68164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.067618][ T29] audit: type=1326 audit(1758345449.397:68165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.091451][ T29] audit: type=1326 audit(1758345449.397:68166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.150848][ T29] audit: type=1326 audit(1758345449.397:68167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.174776][ T29] audit: type=1326 audit(1758345449.397:68168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.198535][ T29] audit: type=1326 audit(1758345449.397:68169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12405 comm="syz.3.14533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06980aec29 code=0x7ffc0000 [ 945.362157][T12421] loop6: detected capacity change from 0 to 128 [ 945.847854][T12436] netlink: 'syz.1.14544': attribute type 21 has an invalid length. [ 945.973291][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14546'. [ 945.995557][T12444] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14548'. [ 946.007291][T12444] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 946.033010][T12444] 0ªî{X¹¦: entered allmulticast mode [ 946.039218][T12444] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 946.142845][T12444] loop2: detected capacity change from 0 to 164 [ 946.184547][T12444] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 946.209412][T12450] siw: device registration error -23 [ 946.214324][T12444] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 946.246034][T12444] rock: directory entry would overflow storage [ 946.252367][T12444] rock: sig=0x4f50, size=4, remaining=3 [ 946.257954][T12444] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 946.421522][T12459] netlink: 56 bytes leftover after parsing attributes in process `syz.6.14553'. [ 946.507921][T12456] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 946.567947][T12465] tipc: Started in network mode [ 946.572969][T12465] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 946.580242][T12465] tipc: Enabled bearer , priority 18 [ 947.073641][T12489] wireguard1: entered promiscuous mode [ 947.079327][T12489] wireguard1: entered allmulticast mode [ 947.226747][T12495] geneve2: entered promiscuous mode [ 947.232093][T12495] geneve2: entered allmulticast mode [ 947.251735][ T3702] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 947.271129][ T3702] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 947.279996][ T3702] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 947.309437][ T3702] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 947.581117][ T1035] tipc: Node number set to 15444650 [ 947.736041][T12512] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14575'. [ 947.745276][T12512] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 947.753635][T12512] 0ªî{X¹¦: entered allmulticast mode [ 947.760125][T12512] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 947.844569][T12514] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14576'. [ 947.853768][T12514] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 947.872085][T12514] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 947.911937][T12519] wireguard3: entered promiscuous mode [ 947.917699][T12519] wireguard3: entered allmulticast mode [ 948.074848][T12539] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14586'. [ 948.084019][T12539] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 948.091901][T12539] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 948.138324][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14587'. [ 948.406394][T12568] netlink: 5 bytes leftover after parsing attributes in process `syz.6.14598'. [ 948.415728][T12568] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 948.425950][T12568] 0ªî{X¹¦: entered allmulticast mode [ 948.432080][T12568] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 948.756055][T12595] FAULT_INJECTION: forcing a failure. [ 948.756055][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.769266][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.1.14611 Not tainted syzkaller #0 PREEMPT(voluntary) [ 948.769314][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 948.769328][T12595] Call Trace: [ 948.769335][T12595] [ 948.769342][T12595] __dump_stack+0x1d/0x30 [ 948.769363][T12595] dump_stack_lvl+0xe8/0x140 [ 948.769461][T12595] dump_stack+0x15/0x1b [ 948.769479][T12595] should_fail_ex+0x265/0x280 [ 948.769502][T12595] should_fail+0xb/0x20 [ 948.769520][T12595] should_fail_usercopy+0x1a/0x20 [ 948.769626][T12595] _copy_from_user+0x1c/0xb0 [ 948.769661][T12595] kstrtouint_from_user+0x69/0xf0 [ 948.769692][T12595] ? 0xffffffff81000000 [ 948.769714][T12595] ? selinux_file_permission+0x1e4/0x320 [ 948.769741][T12595] proc_fail_nth_write+0x50/0x160 [ 948.769812][T12595] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.769880][T12595] vfs_write+0x266/0x960 [ 948.769955][T12595] ? vfs_read+0x4e6/0x770 [ 948.769974][T12595] ? __rcu_read_unlock+0x4f/0x70 [ 948.769998][T12595] ? __fget_files+0x184/0x1c0 [ 948.770030][T12595] ksys_write+0xda/0x1a0 [ 948.770056][T12595] __x64_sys_write+0x40/0x50 [ 948.770122][T12595] x64_sys_call+0x27fe/0x2ff0 [ 948.770212][T12595] do_syscall_64+0xd2/0x200 [ 948.770267][T12595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 948.770293][T12595] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 948.770328][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.770354][T12595] RIP: 0033:0x7fda43c7d6df [ 948.770415][T12595] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 948.770437][T12595] RSP: 002b:00007fda426df030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 948.770454][T12595] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda43c7d6df [ 948.770468][T12595] RDX: 0000000000000001 RSI: 00007fda426df0a0 RDI: 0000000000000003 [ 948.770483][T12595] RBP: 00007fda426df090 R08: 0000000000000000 R09: 0000000000000000 [ 948.770495][T12595] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 948.770505][T12595] R13: 00007fda43ec6038 R14: 00007fda43ec5fa0 R15: 00007ffc503ad1e8 [ 948.770522][T12595] [ 949.026995][T12604] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 949.035900][T12606] FAULT_INJECTION: forcing a failure. [ 949.035900][T12606] name failslab, interval 1, probability 0, space 0, times 0 [ 949.048581][T12606] CPU: 1 UID: 0 PID: 12606 Comm: syz.2.14616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 949.048608][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.048621][T12606] Call Trace: [ 949.048661][T12606] [ 949.048668][T12606] __dump_stack+0x1d/0x30 [ 949.048686][T12606] dump_stack_lvl+0xe8/0x140 [ 949.048701][T12606] dump_stack+0x15/0x1b [ 949.048714][T12606] should_fail_ex+0x265/0x280 [ 949.048734][T12606] should_failslab+0x8c/0xb0 [ 949.048785][T12606] kmem_cache_alloc_node_noprof+0x57/0x320 [ 949.048809][T12606] ? __alloc_skb+0x101/0x320 [ 949.048827][T12606] __alloc_skb+0x101/0x320 [ 949.048843][T12606] ? audit_log_start+0x365/0x6c0 [ 949.048881][T12606] audit_log_start+0x380/0x6c0 [ 949.049022][T12606] audit_seccomp+0x48/0x100 [ 949.049042][T12606] ? __seccomp_filter+0x68c/0x10d0 [ 949.049065][T12606] __seccomp_filter+0x69d/0x10d0 [ 949.049122][T12606] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 949.049145][T12606] ? vfs_write+0x7e8/0x960 [ 949.049163][T12606] ? __rcu_read_unlock+0x4f/0x70 [ 949.049216][T12606] ? __fget_files+0x184/0x1c0 [ 949.049239][T12606] __secure_computing+0x82/0x150 [ 949.049256][T12606] syscall_trace_enter+0xcf/0x1e0 [ 949.049326][T12606] do_syscall_64+0xac/0x200 [ 949.049352][T12606] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 949.049377][T12606] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 949.049414][T12606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.049463][T12606] RIP: 0033:0x7f7458a4ec29 [ 949.049476][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.049552][T12606] RSP: 002b:00007f74574b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 949.049568][T12606] RAX: ffffffffffffffda RBX: 00007f7458c95fa0 RCX: 00007f7458a4ec29 [ 949.049578][T12606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 949.049616][T12606] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 949.049636][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.049646][T12606] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 949.049662][T12606] [ 949.054633][T12604] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 949.435706][T12632] lo speed is unknown, defaulting to 1000 [ 949.450607][T12632] lo speed is unknown, defaulting to 1000 [ 949.499895][T12658] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 949.519299][T12658] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 949.629114][T12676] netlink: 'syz.1.14644': attribute type 10 has an invalid length. [ 949.639063][T12679] FAULT_INJECTION: forcing a failure. [ 949.639063][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.652270][T12679] CPU: 1 UID: 0 PID: 12679 Comm: syz.6.14645 Not tainted syzkaller #0 PREEMPT(voluntary) [ 949.652309][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 949.652325][T12679] Call Trace: [ 949.652334][T12679] [ 949.652343][T12679] __dump_stack+0x1d/0x30 [ 949.652366][T12679] dump_stack_lvl+0xe8/0x140 [ 949.652387][T12679] dump_stack+0x15/0x1b [ 949.652434][T12679] should_fail_ex+0x265/0x280 [ 949.652461][T12679] should_fail+0xb/0x20 [ 949.652535][T12679] should_fail_usercopy+0x1a/0x20 [ 949.652565][T12679] _copy_from_user+0x1c/0xb0 [ 949.652639][T12679] kstrtouint_from_user+0x69/0xf0 [ 949.652670][T12679] ? 0xffffffff81000000 [ 949.652684][T12679] ? selinux_file_permission+0x1e4/0x320 [ 949.652709][T12679] proc_fail_nth_write+0x50/0x160 [ 949.652749][T12679] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 949.652774][T12679] vfs_write+0x266/0x960 [ 949.652793][T12679] ? vfs_read+0x4e6/0x770 [ 949.652812][T12679] ? __rcu_read_unlock+0x4f/0x70 [ 949.652900][T12679] ? __fget_files+0x184/0x1c0 [ 949.652926][T12679] ksys_write+0xda/0x1a0 [ 949.652973][T12679] __x64_sys_write+0x40/0x50 [ 949.653047][T12679] x64_sys_call+0x27fe/0x2ff0 [ 949.653069][T12679] do_syscall_64+0xd2/0x200 [ 949.653107][T12679] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 949.653132][T12679] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 949.653162][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.653194][T12679] RIP: 0033:0x7f6f3aefd6df [ 949.653209][T12679] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 949.653262][T12679] RSP: 002b:00007f6f3995f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 949.653281][T12679] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f3aefd6df [ 949.653293][T12679] RDX: 0000000000000001 RSI: 00007f6f3995f0a0 RDI: 0000000000000003 [ 949.653361][T12679] RBP: 00007f6f3995f090 R08: 0000000000000000 R09: 0000000000000000 [ 949.653372][T12679] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 949.653384][T12679] R13: 00007f6f3b146038 R14: 00007f6f3b145fa0 R15: 00007ffcf3d7e7f8 [ 949.653432][T12679] [ 949.673703][T12676] team0: Port device dummy0 added [ 949.763389][T12677] netlink: 'syz.1.14644': attribute type 10 has an invalid length. [ 949.858368][ T29] kauditd_printk_skb: 1088 callbacks suppressed [ 949.858388][ T29] audit: type=1400 audit(1758345454.287:69256): avc: denied { read write } for pid=8710 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 949.923679][T12677] team0: Port device dummy0 removed [ 949.945395][T12677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 949.947567][ T29] audit: type=1400 audit(1758345454.307:69257): avc: denied { read write } for pid=12682 comm="syz.3.14648" name="loop3" dev="devtmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 949.977594][ T29] audit: type=1400 audit(1758345454.317:69258): avc: denied { prog_load } for pid=12682 comm="syz.3.14648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 949.997081][ T29] audit: type=1400 audit(1758345454.317:69259): avc: denied { execmem } for pid=12682 comm="syz.3.14648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 950.001045][T12693] __nla_validate_parse: 2 callbacks suppressed [ 950.001080][T12693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14646'. [ 950.016690][ T29] audit: type=1400 audit(1758345454.317:69260): avc: denied { prog_load } for pid=12682 comm="syz.3.14648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 950.022872][T12693] bridge_slave_0: default FDB implementation only supports local addresses [ 950.060457][ T29] audit: type=1400 audit(1758345454.317:69261): avc: denied { map_create } for pid=12682 comm="syz.3.14648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 950.079905][ T29] audit: type=1400 audit(1758345454.317:69262): avc: denied { prog_load } for pid=12682 comm="syz.3.14648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 950.099503][ T29] audit: type=1400 audit(1758345454.337:69263): avc: denied { prog_load } for pid=12690 comm="syz.2.14646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 950.118873][ T29] audit: type=1400 audit(1758345454.337:69264): avc: denied { read write } for pid=12690 comm="syz.2.14646" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 950.142766][ T29] audit: type=1400 audit(1758345454.347:69265): avc: denied { map_create } for pid=12690 comm="syz.2.14646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 950.201470][T12700] lo speed is unknown, defaulting to 1000 [ 950.208818][T12700] lo speed is unknown, defaulting to 1000 [ 950.265794][T12724] FAULT_INJECTION: forcing a failure. [ 950.265794][T12724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.279012][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.4.14659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 950.279040][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 950.279050][T12724] Call Trace: [ 950.279056][T12724] [ 950.279063][T12724] __dump_stack+0x1d/0x30 [ 950.279161][T12724] dump_stack_lvl+0xe8/0x140 [ 950.279182][T12724] dump_stack+0x15/0x1b [ 950.279205][T12724] should_fail_ex+0x265/0x280 [ 950.279231][T12724] should_fail+0xb/0x20 [ 950.279253][T12724] should_fail_usercopy+0x1a/0x20 [ 950.279285][T12724] _copy_to_user+0x20/0xa0 [ 950.279312][T12724] simple_read_from_buffer+0xb5/0x130 [ 950.279393][T12724] proc_fail_nth_read+0x10e/0x150 [ 950.279474][T12724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 950.279497][T12724] vfs_read+0x1a5/0x770 [ 950.279520][T12724] ? __rcu_read_unlock+0x4f/0x70 [ 950.279543][T12724] ? __fget_files+0x184/0x1c0 [ 950.279641][T12724] ksys_read+0xda/0x1a0 [ 950.279668][T12724] __x64_sys_read+0x40/0x50 [ 950.279692][T12724] x64_sys_call+0x27bc/0x2ff0 [ 950.279716][T12724] do_syscall_64+0xd2/0x200 [ 950.279817][T12724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 950.279892][T12724] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 950.279924][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.279948][T12724] RIP: 0033:0x7f5395b9d63c [ 950.279979][T12724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 950.280010][T12724] RSP: 002b:00007f5394607030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 950.280027][T12724] RAX: ffffffffffffffda RBX: 00007f5395de5fa0 RCX: 00007f5395b9d63c [ 950.280039][T12724] RDX: 000000000000000f RSI: 00007f53946070a0 RDI: 0000000000000004 [ 950.280053][T12724] RBP: 00007f5394607090 R08: 0000000000000000 R09: 0000000000000000 [ 950.280068][T12724] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 950.280082][T12724] R13: 00007f5395de6038 R14: 00007f5395de5fa0 R15: 00007fff5d144d68 [ 950.280178][T12724] [ 950.708694][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14672'. [ 950.748914][T12758] FAULT_INJECTION: forcing a failure. [ 950.748914][T12758] name failslab, interval 1, probability 0, space 0, times 0 [ 950.762163][T12758] CPU: 1 UID: 0 PID: 12758 Comm: syz.6.14674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 950.762196][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 950.762211][T12758] Call Trace: [ 950.762254][T12758] [ 950.762263][T12758] __dump_stack+0x1d/0x30 [ 950.762287][T12758] dump_stack_lvl+0xe8/0x140 [ 950.762310][T12758] dump_stack+0x15/0x1b [ 950.762329][T12758] should_fail_ex+0x265/0x280 [ 950.762366][T12758] should_failslab+0x8c/0xb0 [ 950.762394][T12758] kmem_cache_alloc_node_noprof+0x57/0x320 [ 950.762429][T12758] ? __alloc_skb+0x101/0x320 [ 950.762455][T12758] __alloc_skb+0x101/0x320 [ 950.762544][T12758] alloc_skb_with_frags+0x7d/0x470 [ 950.762576][T12758] sock_alloc_send_pskb+0x43a/0x4f0 [ 950.762615][T12758] __ip6_append_data+0x1896/0x2390 [ 950.762723][T12758] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 950.762761][T12758] ? __rcu_read_lock+0x37/0x50 [ 950.762844][T12758] ? __rcu_read_unlock+0x4f/0x70 [ 950.762868][T12758] ? __pfx_ip6_mtu+0x10/0x10 [ 950.762909][T12758] ? ip6_mtu+0xf5/0x120 [ 950.762947][T12758] ip6_make_skb+0x1da/0x4a0 [ 950.763050][T12758] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 950.763103][T12758] udpv6_sendmsg+0x137e/0x1590 [ 950.763188][T12758] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 950.763223][T12758] ? __rcu_read_unlock+0x4f/0x70 [ 950.763260][T12758] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 950.763282][T12758] inet6_sendmsg+0xac/0xd0 [ 950.763337][T12758] __sock_sendmsg+0x8b/0x180 [ 950.763372][T12758] ____sys_sendmsg+0x345/0x4e0 [ 950.763445][T12758] ___sys_sendmsg+0x17b/0x1d0 [ 950.763491][T12758] __sys_sendmmsg+0x178/0x300 [ 950.763534][T12758] __x64_sys_sendmmsg+0x57/0x70 [ 950.763579][T12758] x64_sys_call+0x1c4a/0x2ff0 [ 950.763604][T12758] do_syscall_64+0xd2/0x200 [ 950.763687][T12758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 950.763709][T12758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 950.763754][T12758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.763775][T12758] RIP: 0033:0x7f6f3aefec29 [ 950.763789][T12758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.763806][T12758] RSP: 002b:00007f6f3995f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 950.763823][T12758] RAX: ffffffffffffffda RBX: 00007f6f3b145fa0 RCX: 00007f6f3aefec29 [ 950.763834][T12758] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 950.763848][T12758] RBP: 00007f6f3995f090 R08: 0000000000000000 R09: 0000000000000000 [ 950.763918][T12758] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.763933][T12758] R13: 00007f6f3b146038 R14: 00007f6f3b145fa0 R15: 00007ffcf3d7e7f8 [ 950.763954][T12758] [ 951.529889][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14702'. [ 951.590867][T12827] lo speed is unknown, defaulting to 1000 [ 951.597699][T12827] lo speed is unknown, defaulting to 1000 [ 951.616983][T12837] FAULT_INJECTION: forcing a failure. [ 951.616983][T12837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.630107][T12837] CPU: 1 UID: 0 PID: 12837 Comm: syz.6.14705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 951.630134][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 951.630224][T12837] Call Trace: [ 951.630231][T12837] [ 951.630282][T12837] __dump_stack+0x1d/0x30 [ 951.630308][T12837] dump_stack_lvl+0xe8/0x140 [ 951.630333][T12837] dump_stack+0x15/0x1b [ 951.630362][T12837] should_fail_ex+0x265/0x280 [ 951.630390][T12837] should_fail+0xb/0x20 [ 951.630410][T12837] should_fail_usercopy+0x1a/0x20 [ 951.630447][T12837] _copy_to_user+0x20/0xa0 [ 951.630486][T12837] simple_read_from_buffer+0xb5/0x130 [ 951.630514][T12837] proc_fail_nth_read+0x10e/0x150 [ 951.630551][T12837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.630580][T12837] vfs_read+0x1a5/0x770 [ 951.630626][T12837] ? vt_ioctl+0x75f/0x1880 [ 951.630665][T12837] ? __rcu_read_unlock+0x4f/0x70 [ 951.630690][T12837] ? __fget_files+0x184/0x1c0 [ 951.630717][T12837] ksys_read+0xda/0x1a0 [ 951.630789][T12837] __x64_sys_read+0x40/0x50 [ 951.630812][T12837] x64_sys_call+0x27bc/0x2ff0 [ 951.630841][T12837] do_syscall_64+0xd2/0x200 [ 951.630962][T12837] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 951.630991][T12837] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 951.631030][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.631128][T12837] RIP: 0033:0x7f6f3aefd63c [ 951.631147][T12837] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 951.631165][T12837] RSP: 002b:00007f6f3995f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.631184][T12837] RAX: ffffffffffffffda RBX: 00007f6f3b145fa0 RCX: 00007f6f3aefd63c [ 951.631196][T12837] RDX: 000000000000000f RSI: 00007f6f3995f0a0 RDI: 0000000000000005 [ 951.631212][T12837] RBP: 00007f6f3995f090 R08: 0000000000000000 R09: 0000000000000000 [ 951.631228][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.631270][T12837] R13: 00007f6f3b146038 R14: 00007f6f3b145fa0 R15: 00007ffcf3d7e7f8 [ 951.631295][T12837] [ 951.837329][T12849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14709'. [ 952.029356][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14717'. [ 952.109571][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14717'. [ 952.135317][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14717'. [ 952.148115][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14717'. [ 952.159718][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14719'. [ 952.186269][T12871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14717'. [ 952.260857][T12892] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 952.269338][T12892] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 952.363649][T12903] FAULT_INJECTION: forcing a failure. [ 952.363649][T12903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.376889][T12903] CPU: 1 UID: 0 PID: 12903 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 952.376914][T12903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 952.376928][T12903] Call Trace: [ 952.376935][T12903] [ 952.376944][T12903] __dump_stack+0x1d/0x30 [ 952.376965][T12903] dump_stack_lvl+0xe8/0x140 [ 952.377051][T12903] dump_stack+0x15/0x1b [ 952.377065][T12903] should_fail_ex+0x265/0x280 [ 952.377091][T12903] should_fail+0xb/0x20 [ 952.377112][T12903] should_fail_usercopy+0x1a/0x20 [ 952.377173][T12903] _copy_from_user+0x1c/0xb0 [ 952.377224][T12903] ___sys_sendmsg+0xc1/0x1d0 [ 952.377301][T12903] __x64_sys_sendmsg+0xd4/0x160 [ 952.377336][T12903] x64_sys_call+0x191e/0x2ff0 [ 952.377360][T12903] do_syscall_64+0xd2/0x200 [ 952.377459][T12903] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 952.377486][T12903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 952.377548][T12903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.377573][T12903] RIP: 0033:0x7f6f3aefec29 [ 952.377590][T12903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.377685][T12903] RSP: 002b:00007f6f3993e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.377765][T12903] RAX: ffffffffffffffda RBX: 00007f6f3b146090 RCX: 00007f6f3aefec29 [ 952.377779][T12903] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 952.377792][T12903] RBP: 00007f6f3993e090 R08: 0000000000000000 R09: 0000000000000000 [ 952.377806][T12903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.377821][T12903] R13: 00007f6f3b146128 R14: 00007f6f3b146090 R15: 00007ffcf3d7e7f8 [ 952.377841][T12903] [ 952.866595][T12925] netlink: 'syz.1.14738': attribute type 10 has an invalid length. [ 952.912421][T12925] team0: Port device geneve1 added [ 952.934583][T12929] wireguard0: entered promiscuous mode [ 952.940161][T12929] wireguard0: entered allmulticast mode [ 953.713557][T12966] wireguard1: entered promiscuous mode [ 953.719104][T12966] wireguard1: entered allmulticast mode [ 953.847850][T12970] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 953.855797][T12970] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 953.944857][T12974] FAULT_INJECTION: forcing a failure. [ 953.944857][T12974] name failslab, interval 1, probability 0, space 0, times 0 [ 953.957633][T12974] CPU: 1 UID: 0 PID: 12974 Comm: syz.3.14758 Not tainted syzkaller #0 PREEMPT(voluntary) [ 953.957661][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 953.957672][T12974] Call Trace: [ 953.957678][T12974] [ 953.957686][T12974] __dump_stack+0x1d/0x30 [ 953.957703][T12974] dump_stack_lvl+0xe8/0x140 [ 953.957770][T12974] dump_stack+0x15/0x1b [ 953.957784][T12974] should_fail_ex+0x265/0x280 [ 953.957805][T12974] should_failslab+0x8c/0xb0 [ 953.957826][T12974] __kmalloc_noprof+0xa5/0x3e0 [ 953.957915][T12974] ? security_prepare_creds+0x52/0x120 [ 953.957965][T12974] security_prepare_creds+0x52/0x120 [ 953.957983][T12974] prepare_creds+0x34a/0x4c0 [ 953.958015][T12974] set_current_groups+0x1b/0x180 [ 953.958034][T12974] __se_sys_setgroups+0x282/0x300 [ 953.958116][T12974] __x64_sys_setgroups+0x31/0x40 [ 953.958141][T12974] x64_sys_call+0x2e5a/0x2ff0 [ 953.958160][T12974] do_syscall_64+0xd2/0x200 [ 953.958187][T12974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 953.958247][T12974] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 953.958272][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.958290][T12974] RIP: 0033:0x7f06980aec29 [ 953.958303][T12974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.958318][T12974] RSP: 002b:00007f0696b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 953.958445][T12974] RAX: ffffffffffffffda RBX: 00007f06982f5fa0 RCX: 00007f06980aec29 [ 953.958461][T12974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.958476][T12974] RBP: 00007f0696b17090 R08: 0000000000000000 R09: 0000000000000000 [ 953.958491][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.958502][T12974] R13: 00007f06982f6038 R14: 00007f06982f5fa0 R15: 00007ffd1869dd78 [ 953.958518][T12974] [ 954.276120][T12984] lo speed is unknown, defaulting to 1000 [ 954.286404][T12984] lo speed is unknown, defaulting to 1000 [ 954.337326][T12995] netlink: 'syz.3.14764': attribute type 10 has an invalid length. [ 954.355243][T12995] team0: Port device geneve1 added [ 954.361079][ T3447] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.378737][ T3447] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.396757][ T3447] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.406530][ T3447] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.538096][T12998] wireguard0: entered promiscuous mode [ 954.543749][T12998] wireguard0: entered allmulticast mode [ 954.867611][ T29] kauditd_printk_skb: 1146 callbacks suppressed [ 954.867628][ T29] audit: type=1400 audit(1758345459.287:70408): avc: denied { kexec_image_load } for pid=13019 comm="syz.4.14773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=0 [ 954.909688][ T29] audit: type=1400 audit(1758345459.287:70409): avc: denied { open } for pid=13019 comm="syz.4.14773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 954.929398][ T29] audit: type=1400 audit(1758345459.317:70410): avc: denied { read write } for pid=8710 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 954.952873][ T29] audit: type=1400 audit(1758345459.327:70411): avc: denied { prog_load } for pid=13023 comm="syz.1.14775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 954.972338][ T29] audit: type=1400 audit(1758345459.327:70412): avc: denied { prog_load } for pid=13023 comm="syz.1.14775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 955.019537][ T29] audit: type=1400 audit(1758345459.327:70413): avc: denied { create } for pid=13021 comm="syz.6.14774" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 955.040671][ T29] audit: type=1400 audit(1758345459.377:70414): avc: denied { map_create } for pid=13021 comm="syz.6.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 955.060143][ T29] audit: type=1400 audit(1758345459.377:70415): avc: denied { prog_load } for pid=13021 comm="syz.6.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 955.079497][ T29] audit: type=1400 audit(1758345459.377:70416): avc: denied { allowed } for pid=13021 comm="syz.6.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 955.099184][ T29] audit: type=1400 audit(1758345459.377:70417): avc: denied { map_create } for pid=13021 comm="syz.6.14774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 955.132373][T13030] wireguard0: entered promiscuous mode [ 955.137912][T13030] wireguard0: entered allmulticast mode [ 955.203083][T13042] netdevsim netdevsim2: Direct firmware load for x failed with error -2 [ 955.407795][T13057] lo speed is unknown, defaulting to 1000 [ 955.414450][T13057] lo speed is unknown, defaulting to 1000 [ 956.026297][T13066] netlink: 'syz.6.14789': attribute type 10 has an invalid length. [ 956.034377][T13066] __nla_validate_parse: 6 callbacks suppressed [ 956.034390][T13066] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14789'. [ 956.069019][T13066] team0: Port device geneve1 added [ 956.139246][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14791'. [ 956.148409][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14791'. [ 956.168385][T13072] wireguard0: entered promiscuous mode [ 956.174208][T13072] wireguard0: entered allmulticast mode [ 956.775990][T13105] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 956.808520][T13108] netlink: 5 bytes leftover after parsing attributes in process `syz.6.14806'. [ 956.817986][T13108] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 956.829254][T13108] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 956.845198][T13106] lo speed is unknown, defaulting to 1000 [ 956.851805][T13106] lo speed is unknown, defaulting to 1000 [ 957.356810][T13139] netlink: 'syz.6.14816': attribute type 10 has an invalid length. [ 957.364828][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14816'. [ 957.605427][T13147] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14820'. [ 957.625764][T13147] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 957.649648][T13147] 0ªî{X¹¦: entered allmulticast mode [ 957.658909][T13147] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 957.830951][T13158] lo speed is unknown, defaulting to 1000 [ 957.837651][T13158] lo speed is unknown, defaulting to 1000 [ 958.157137][T13177] netlink: 'syz.6.14833': attribute type 21 has an invalid length. [ 958.165238][T13177] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14833'. [ 958.178685][T13179] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14834'. [ 958.190122][T13179] 0ªî{X¹¦: renamed from gretap0 [ 958.198194][T13179] 0ªî{X¹¦: entered allmulticast mode [ 958.206566][T13179] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 958.257146][T13185] FAULT_INJECTION: forcing a failure. [ 958.257146][T13185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.270424][T13185] CPU: 0 UID: 0 PID: 13185 Comm: syz.3.14837 Not tainted syzkaller #0 PREEMPT(voluntary) [ 958.270450][T13185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 958.270471][T13185] Call Trace: [ 958.270477][T13185] [ 958.270485][T13185] __dump_stack+0x1d/0x30 [ 958.270510][T13185] dump_stack_lvl+0xe8/0x140 [ 958.270542][T13185] dump_stack+0x15/0x1b [ 958.270569][T13185] should_fail_ex+0x265/0x280 [ 958.270593][T13185] should_fail+0xb/0x20 [ 958.270613][T13185] should_fail_usercopy+0x1a/0x20 [ 958.270710][T13185] _copy_to_user+0x20/0xa0 [ 958.270750][T13185] simple_read_from_buffer+0xb5/0x130 [ 958.270780][T13185] proc_fail_nth_read+0x10e/0x150 [ 958.270818][T13185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.270852][T13185] vfs_read+0x1a5/0x770 [ 958.270873][T13185] ? __rcu_read_unlock+0x4f/0x70 [ 958.270981][T13185] ? __fget_files+0x184/0x1c0 [ 958.271018][T13185] ksys_read+0xda/0x1a0 [ 958.271110][T13185] __x64_sys_read+0x40/0x50 [ 958.271136][T13185] x64_sys_call+0x27bc/0x2ff0 [ 958.271157][T13185] do_syscall_64+0xd2/0x200 [ 958.271223][T13185] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 958.271253][T13185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 958.271290][T13185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.271316][T13185] RIP: 0033:0x7f06980ad63c [ 958.271373][T13185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 958.271395][T13185] RSP: 002b:00007f0696b17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.271418][T13185] RAX: ffffffffffffffda RBX: 00007f06982f5fa0 RCX: 00007f06980ad63c [ 958.271433][T13185] RDX: 000000000000000f RSI: 00007f0696b170a0 RDI: 0000000000000006 [ 958.271448][T13185] RBP: 00007f0696b17090 R08: 0000000000000000 R09: 0000000000000000 [ 958.271463][T13185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.271477][T13185] R13: 00007f06982f6038 R14: 00007f06982f5fa0 R15: 00007ffd1869dd78 [ 958.271534][T13185] [ 958.503788][T13191] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14840'. [ 958.662470][T13204] netlink: 'syz.2.14844': attribute type 10 has an invalid length. [ 958.670503][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14844'. [ 958.694976][T13204] team0: Port device geneve1 added [ 958.701836][ T3702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.731763][ T3702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.740777][ T3702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.749836][ T3702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.789310][T13206] FAULT_INJECTION: forcing a failure. [ 958.789310][T13206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.802557][T13206] CPU: 0 UID: 0 PID: 13206 Comm: syz.4.14846 Not tainted syzkaller #0 PREEMPT(voluntary) [ 958.802585][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 958.802600][T13206] Call Trace: [ 958.802607][T13206] [ 958.802616][T13206] __dump_stack+0x1d/0x30 [ 958.802664][T13206] dump_stack_lvl+0xe8/0x140 [ 958.802723][T13206] dump_stack+0x15/0x1b [ 958.802740][T13206] should_fail_ex+0x265/0x280 [ 958.802804][T13206] should_fail+0xb/0x20 [ 958.802830][T13206] should_fail_usercopy+0x1a/0x20 [ 958.802912][T13206] _copy_from_iter+0xd2/0xe80 [ 958.802948][T13206] ? alloc_pages_mpol+0x201/0x250 [ 958.802992][T13206] copy_page_from_iter+0x178/0x2a0 [ 958.803031][T13206] tun_get_user+0x679/0x2680 [ 958.803098][T13206] ? ref_tracker_alloc+0x1f2/0x2f0 [ 958.803132][T13206] tun_chr_write_iter+0x15e/0x210 [ 958.803237][T13206] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 958.803261][T13206] vfs_write+0x527/0x960 [ 958.803295][T13206] ksys_write+0xda/0x1a0 [ 958.803339][T13206] __x64_sys_write+0x40/0x50 [ 958.803396][T13206] x64_sys_call+0x27fe/0x2ff0 [ 958.803479][T13206] do_syscall_64+0xd2/0x200 [ 958.803561][T13206] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 958.803585][T13206] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 958.803613][T13206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.803659][T13206] RIP: 0033:0x7f5395b9d6df [ 958.803675][T13206] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 958.803692][T13206] RSP: 002b:00007f5394607000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 958.803711][T13206] RAX: ffffffffffffffda RBX: 00007f5395de5fa0 RCX: 00007f5395b9d6df [ 958.803723][T13206] RDX: 0000000000000046 RSI: 0000200000000240 RDI: 00000000000000c8 [ 958.803735][T13206] RBP: 00007f5394607090 R08: 0000000000000000 R09: 0000000000000000 [ 958.803750][T13206] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 958.803764][T13206] R13: 00007f5395de6038 R14: 00007f5395de5fa0 R15: 00007fff5d144d68 [ 958.803846][T13206] [ 959.091225][T13210] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 959.105925][T13210] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 959.441033][T13215] lo speed is unknown, defaulting to 1000 [ 959.448107][T13215] lo speed is unknown, defaulting to 1000 [ 959.508619][T13221] FAULT_INJECTION: forcing a failure. [ 959.508619][T13221] name failslab, interval 1, probability 0, space 0, times 0 [ 959.521386][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.2.14852 Not tainted syzkaller #0 PREEMPT(voluntary) [ 959.521462][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.521479][T13221] Call Trace: [ 959.521488][T13221] [ 959.521497][T13221] __dump_stack+0x1d/0x30 [ 959.521525][T13221] dump_stack_lvl+0xe8/0x140 [ 959.521549][T13221] dump_stack+0x15/0x1b [ 959.521571][T13221] should_fail_ex+0x265/0x280 [ 959.521645][T13221] should_failslab+0x8c/0xb0 [ 959.521725][T13221] kmem_cache_alloc_noprof+0x50/0x310 [ 959.521759][T13221] ? audit_log_start+0x365/0x6c0 [ 959.521815][T13221] audit_log_start+0x365/0x6c0 [ 959.521902][T13221] audit_seccomp+0x48/0x100 [ 959.521935][T13221] ? __seccomp_filter+0x68c/0x10d0 [ 959.522039][T13221] __seccomp_filter+0x69d/0x10d0 [ 959.522062][T13221] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 959.522093][T13221] ? vfs_write+0x7e8/0x960 [ 959.522135][T13221] __secure_computing+0x82/0x150 [ 959.522207][T13221] syscall_trace_enter+0xcf/0x1e0 [ 959.522239][T13221] do_syscall_64+0xac/0x200 [ 959.522279][T13221] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 959.522305][T13221] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 959.522478][T13221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.522554][T13221] RIP: 0033:0x7f7458a4ec29 [ 959.522574][T13221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.522599][T13221] RSP: 002b:00007f74574b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 959.522619][T13221] RAX: ffffffffffffffda RBX: 0000000000000486 RCX: 00007f7458a4ec29 [ 959.522632][T13221] RDX: 00007f74574b6ef0 RSI: 0000000000000000 RDI: 00007f7458ad2810 [ 959.522698][T13221] RBP: 0000200000001080 R08: 00007f74574b6bb7 R09: 00007f74574b6e40 [ 959.522714][T13221] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 959.522810][T13221] R13: 00007f74574b6ef0 R14: 00007f74574b6eb0 R15: 0000200000000300 [ 959.522850][T13221] [ 959.873820][ T29] kauditd_printk_skb: 1083 callbacks suppressed [ 959.873834][ T29] audit: type=1400 audit(1758345464.297:71499): avc: denied { allowed } for pid=13231 comm="syz.1.14857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 959.900451][ T29] audit: type=1326 audit(1758345464.297:71500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 959.924138][ T29] audit: type=1326 audit(1758345464.297:71501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 959.947825][ T29] audit: type=1326 audit(1758345464.297:71502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 959.971546][ T29] audit: type=1400 audit(1758345464.297:71503): avc: denied { map_create } for pid=13231 comm="syz.1.14857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 959.991016][ T29] audit: type=1326 audit(1758345464.297:71504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 960.014764][ T29] audit: type=1326 audit(1758345464.297:71505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 960.038451][ T29] audit: type=1326 audit(1758345464.297:71506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 960.062196][ T29] audit: type=1400 audit(1758345464.297:71507): avc: denied { prog_load } for pid=13231 comm="syz.1.14857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 960.081611][ T29] audit: type=1326 audit(1758345464.297:71508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13231 comm="syz.1.14857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda43c7ec29 code=0x7ffc0000 [ 960.254811][T13239] lo speed is unknown, defaulting to 1000 [ 960.261196][T13239] lo speed is unknown, defaulting to 1000 [ 960.643132][T13244] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 960.651241][T13244] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 960.801449][T13254] netlink: 'syz.2.14862': attribute type 10 has an invalid length. [ 960.820605][T13254] tipc: Resetting bearer [ 960.839090][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.860020][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.879290][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.893382][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.074598][T13263] netlink: 'syz.3.14869': attribute type 1 has an invalid length. [ 961.099677][T13263] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 961.297955][T13274] __nla_validate_parse: 3 callbacks suppressed [ 961.297974][T13274] netlink: 5 bytes leftover after parsing attributes in process `syz.6.14872'. [ 961.326435][T13274] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 961.334401][T13274] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 961.582359][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14875'. [ 961.594516][T13282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14875'. [ 962.035144][T13296] FAULT_INJECTION: forcing a failure. [ 962.035144][T13296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.049150][T13296] CPU: 1 UID: 0 PID: 13296 Comm: syz.3.14881 Not tainted syzkaller #0 PREEMPT(voluntary) [ 962.049175][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 962.049197][T13296] Call Trace: [ 962.049204][T13296] [ 962.049211][T13296] __dump_stack+0x1d/0x30 [ 962.049238][T13296] dump_stack_lvl+0xe8/0x140 [ 962.049255][T13296] dump_stack+0x15/0x1b [ 962.049270][T13296] should_fail_ex+0x265/0x280 [ 962.049330][T13296] should_fail+0xb/0x20 [ 962.049349][T13296] should_fail_usercopy+0x1a/0x20 [ 962.049408][T13296] _copy_from_iter+0xd2/0xe80 [ 962.049468][T13296] ? __build_skb_around+0x1a0/0x200 [ 962.049489][T13296] ? __alloc_skb+0x223/0x320 [ 962.049510][T13296] netlink_sendmsg+0x471/0x6b0 [ 962.049536][T13296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.049592][T13296] __sock_sendmsg+0x142/0x180 [ 962.049664][T13296] ____sys_sendmsg+0x31e/0x4e0 [ 962.049749][T13296] ___sys_sendmsg+0x17b/0x1d0 [ 962.049786][T13296] __x64_sys_sendmsg+0xd4/0x160 [ 962.049897][T13296] x64_sys_call+0x191e/0x2ff0 [ 962.049916][T13296] do_syscall_64+0xd2/0x200 [ 962.049943][T13296] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 962.049965][T13296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 962.050074][T13296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.050093][T13296] RIP: 0033:0x7f06980aec29 [ 962.050106][T13296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 962.050123][T13296] RSP: 002b:00007f0696b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.050219][T13296] RAX: ffffffffffffffda RBX: 00007f06982f5fa0 RCX: 00007f06980aec29 [ 962.050230][T13296] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 962.050241][T13296] RBP: 00007f0696b17090 R08: 0000000000000000 R09: 0000000000000000 [ 962.050251][T13296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.050261][T13296] R13: 00007f06982f6038 R14: 00007f06982f5fa0 R15: 00007ffd1869dd78 [ 962.050277][T13296] [ 962.276219][T13294] lo speed is unknown, defaulting to 1000 [ 962.282598][T13294] lo speed is unknown, defaulting to 1000 [ 962.336885][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14883'. [ 962.367652][T13305] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14884'. [ 962.376909][T13305] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 962.384456][T13305] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 962.579669][T13315] netlink: 'syz.2.14887': attribute type 10 has an invalid length. [ 962.587785][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14887'. [ 963.005822][T13325] lo speed is unknown, defaulting to 1000 [ 963.012555][T13325] lo speed is unknown, defaulting to 1000 [ 963.343455][T13330] FAULT_INJECTION: forcing a failure. [ 963.343455][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.356684][T13330] CPU: 1 UID: 0 PID: 13330 Comm: syz.2.14895 Not tainted syzkaller #0 PREEMPT(voluntary) [ 963.356716][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 963.356731][T13330] Call Trace: [ 963.356739][T13330] [ 963.356784][T13330] __dump_stack+0x1d/0x30 [ 963.356811][T13330] dump_stack_lvl+0xe8/0x140 [ 963.356833][T13330] dump_stack+0x15/0x1b [ 963.356848][T13330] should_fail_ex+0x265/0x280 [ 963.356873][T13330] should_fail+0xb/0x20 [ 963.356895][T13330] should_fail_usercopy+0x1a/0x20 [ 963.356927][T13330] _copy_from_user+0x1c/0xb0 [ 963.357009][T13330] kstrtouint_from_user+0x69/0xf0 [ 963.357041][T13330] ? 0xffffffff81000000 [ 963.357064][T13330] ? selinux_file_permission+0x1e4/0x320 [ 963.357096][T13330] proc_fail_nth_write+0x50/0x160 [ 963.357190][T13330] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 963.357268][T13330] vfs_write+0x266/0x960 [ 963.357289][T13330] ? vfs_read+0x4e6/0x770 [ 963.357309][T13330] ? __rcu_read_unlock+0x4f/0x70 [ 963.357358][T13330] ? __fget_files+0x184/0x1c0 [ 963.357392][T13330] ksys_write+0xda/0x1a0 [ 963.357420][T13330] __x64_sys_write+0x40/0x50 [ 963.357504][T13330] x64_sys_call+0x27fe/0x2ff0 [ 963.357580][T13330] do_syscall_64+0xd2/0x200 [ 963.357619][T13330] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 963.357648][T13330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 963.357715][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.357741][T13330] RIP: 0033:0x7f7458a4d6df [ 963.357759][T13330] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 963.357778][T13330] RSP: 002b:00007f74574b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 963.357798][T13330] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7458a4d6df [ 963.357813][T13330] RDX: 0000000000000001 RSI: 00007f74574b70a0 RDI: 0000000000000003 [ 963.357844][T13330] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 963.357855][T13330] R10: 0000000000000020 R11: 0000000000000293 R12: 0000000000000001 [ 963.357867][T13330] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 963.357891][T13330] [ 963.595548][T13334] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14897'. [ 963.613572][T13334] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 963.623465][T13334] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 963.817407][T13355] lo speed is unknown, defaulting to 1000 [ 963.827845][T13355] lo speed is unknown, defaulting to 1000 [ 963.858931][T13359] netlink: 'syz.3.14906': attribute type 10 has an invalid length. [ 963.866960][T13359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14906'. [ 963.904058][ T3707] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.922910][ T3707] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.932786][ T3707] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.949878][ T3707] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.637564][T13370] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14912'. [ 964.649176][T13370] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 964.657207][T13370] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 964.942627][ T29] kauditd_printk_skb: 1236 callbacks suppressed [ 964.942718][ T29] audit: type=1400 audit(1758345469.367:72550): avc: denied { prog_load } for pid=13393 comm="syz.4.14922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 964.992959][T13395] lo speed is unknown, defaulting to 1000 [ 965.003744][T13395] lo speed is unknown, defaulting to 1000 [ 965.018610][ T29] audit: type=1400 audit(1758345469.397:72551): avc: denied { execmem } for pid=13393 comm="syz.4.14922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 965.038258][ T29] audit: type=1400 audit(1758345469.397:72552): avc: denied { map_create } for pid=13393 comm="syz.4.14922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 965.057854][ T29] audit: type=1400 audit(1758345469.397:72553): avc: denied { prog_load } for pid=13393 comm="syz.4.14922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 965.077450][ T29] audit: type=1400 audit(1758345469.427:72554): avc: denied { allowed } for pid=13396 comm="syz.4.14923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 965.097021][ T29] audit: type=1400 audit(1758345469.437:72555): avc: denied { map_create } for pid=13396 comm="syz.4.14923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 965.116503][ T29] audit: type=1400 audit(1758345469.437:72556): avc: denied { prog_load } for pid=13396 comm="syz.4.14923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 965.282837][ T29] audit: type=1400 audit(1758345469.707:72557): avc: denied { read write } for pid=8710 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 965.317792][ T29] audit: type=1400 audit(1758345469.737:72558): avc: denied { prog_load } for pid=13399 comm="syz.6.14924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 965.337394][ T29] audit: type=1400 audit(1758345469.737:72559): avc: denied { read write } for pid=13399 comm="syz.6.14924" name="loop6" dev="devtmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 965.425206][T13402] netlink: 'syz.6.14924': attribute type 10 has an invalid length. [ 965.433229][T13402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14924'. [ 965.645816][T13414] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 965.663142][T13414] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 966.353908][T13448] lo speed is unknown, defaulting to 1000 [ 966.360358][T13448] lo speed is unknown, defaulting to 1000 [ 966.806543][T13459] FAULT_INJECTION: forcing a failure. [ 966.806543][T13459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.819756][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.3.14948 Not tainted syzkaller #0 PREEMPT(voluntary) [ 966.819820][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 966.819837][T13459] Call Trace: [ 966.819846][T13459] [ 966.819856][T13459] __dump_stack+0x1d/0x30 [ 966.819882][T13459] dump_stack_lvl+0xe8/0x140 [ 966.819977][T13459] dump_stack+0x15/0x1b [ 966.820009][T13459] should_fail_ex+0x265/0x280 [ 966.820038][T13459] should_fail+0xb/0x20 [ 966.820058][T13459] should_fail_usercopy+0x1a/0x20 [ 966.820100][T13459] _copy_from_user+0x1c/0xb0 [ 966.820203][T13459] kstrtouint_from_user+0x69/0xf0 [ 966.820276][T13459] ? 0xffffffff81000000 [ 966.820289][T13459] ? selinux_file_permission+0x1e4/0x320 [ 966.820320][T13459] proc_fail_nth_write+0x50/0x160 [ 966.820349][T13459] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 966.820376][T13459] vfs_write+0x266/0x960 [ 966.820436][T13459] ? vfs_read+0x4e6/0x770 [ 966.820462][T13459] ? __rcu_read_unlock+0x4f/0x70 [ 966.820497][T13459] ? __fget_files+0x184/0x1c0 [ 966.820587][T13459] ksys_write+0xda/0x1a0 [ 966.820610][T13459] __x64_sys_write+0x40/0x50 [ 966.820722][T13459] x64_sys_call+0x27fe/0x2ff0 [ 966.820750][T13459] do_syscall_64+0xd2/0x200 [ 966.820791][T13459] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 966.820822][T13459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 966.820942][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.820969][T13459] RIP: 0033:0x7f06980ad6df [ 966.820988][T13459] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 966.821011][T13459] RSP: 002b:00007f0696b17030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 966.821034][T13459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f06980ad6df [ 966.821054][T13459] RDX: 0000000000000001 RSI: 00007f0696b170a0 RDI: 0000000000000003 [ 966.821066][T13459] RBP: 00007f0696b17090 R08: 0000000000000000 R09: 0000000000000000 [ 966.821078][T13459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 966.821122][T13459] R13: 00007f06982f6038 R14: 00007f06982f5fa0 R15: 00007ffd1869dd78 [ 966.821147][T13459] [ 967.265892][T13478] netlink: 'syz.4.14954': attribute type 10 has an invalid length. [ 967.273877][T13478] __nla_validate_parse: 1 callbacks suppressed [ 967.273891][T13478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14954'. [ 967.561568][T13484] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14959'. [ 967.570758][T13484] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 967.592378][T13484] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 967.938394][T13491] lo speed is unknown, defaulting to 1000 [ 967.954448][T13491] lo speed is unknown, defaulting to 1000 [ 968.615403][T13516] bridge5: entered allmulticast mode [ 968.615740][T13518] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14971'. [ 968.661987][T13518] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 968.672376][T13518] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 968.965726][T13531] netlink: 'syz.2.14976': attribute type 10 has an invalid length. [ 968.973797][T13531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14976'. [ 968.986844][T13530] syzkaller0: entered promiscuous mode [ 968.992444][T13530] syzkaller0: entered allmulticast mode [ 969.061862][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14977'. [ 969.085189][T13530] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 969.217649][T13535] FAULT_INJECTION: forcing a failure. [ 969.217649][T13535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.230865][T13535] CPU: 0 UID: 0 PID: 13535 Comm: syz.6.14979 Not tainted syzkaller #0 PREEMPT(voluntary) [ 969.230959][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 969.230975][T13535] Call Trace: [ 969.230983][T13535] [ 969.230993][T13535] __dump_stack+0x1d/0x30 [ 969.231019][T13535] dump_stack_lvl+0xe8/0x140 [ 969.231044][T13535] dump_stack+0x15/0x1b [ 969.231062][T13535] should_fail_ex+0x265/0x280 [ 969.231093][T13535] should_fail+0xb/0x20 [ 969.231116][T13535] should_fail_usercopy+0x1a/0x20 [ 969.231184][T13535] _copy_to_user+0x20/0xa0 [ 969.231238][T13535] simple_read_from_buffer+0xb5/0x130 [ 969.231263][T13535] proc_fail_nth_read+0x10e/0x150 [ 969.231312][T13535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.231346][T13535] vfs_read+0x1a5/0x770 [ 969.231373][T13535] ? __rcu_read_unlock+0x4f/0x70 [ 969.231400][T13535] ? __fget_files+0x184/0x1c0 [ 969.231427][T13535] ksys_read+0xda/0x1a0 [ 969.231470][T13535] __x64_sys_read+0x40/0x50 [ 969.231499][T13535] x64_sys_call+0x27bc/0x2ff0 [ 969.231536][T13535] do_syscall_64+0xd2/0x200 [ 969.231632][T13535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 969.231737][T13535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 969.231772][T13535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.231822][T13535] RIP: 0033:0x7f6f3aefd63c [ 969.231842][T13535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 969.231864][T13535] RSP: 002b:00007f6f3995f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 969.231888][T13535] RAX: ffffffffffffffda RBX: 00007f6f3b145fa0 RCX: 00007f6f3aefd63c [ 969.231902][T13535] RDX: 000000000000000f RSI: 00007f6f3995f0a0 RDI: 0000000000000003 [ 969.231914][T13535] RBP: 00007f6f3995f090 R08: 0000000000000000 R09: 0000000000000000 [ 969.231926][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.231980][T13535] R13: 00007f6f3b146038 R14: 00007f6f3b145fa0 R15: 00007ffcf3d7e7f8 [ 969.232003][T13535] [ 969.668815][T13547] lo speed is unknown, defaulting to 1000 [ 969.684525][T13547] lo speed is unknown, defaulting to 1000 [ 969.850174][T13566] syzkaller0: entered promiscuous mode [ 969.855788][T13566] syzkaller0: entered allmulticast mode [ 969.951009][ T29] kauditd_printk_skb: 987 callbacks suppressed [ 969.951085][ T29] audit: type=1326 audit(1758345474.367:73547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 969.982231][ T29] audit: type=1326 audit(1758345474.407:73548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 970.006171][ T29] audit: type=1326 audit(1758345474.407:73549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 970.029934][ T29] audit: type=1326 audit(1758345474.407:73550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 970.053681][ T29] audit: type=1326 audit(1758345474.407:73551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 970.077597][ T29] audit: type=1326 audit(1758345474.407:73552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.2.14992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7458a4ec29 code=0x7ffc0000 [ 970.150214][ T29] audit: type=1400 audit(1758345474.567:73553): avc: denied { read write } for pid=6794 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 970.226301][ T29] audit: type=1400 audit(1758345474.617:73554): avc: denied { create } for pid=13570 comm="syz.2.14993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 970.247257][ T29] audit: type=1400 audit(1758345474.627:73555): avc: denied { create } for pid=13570 comm="syz.2.14993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 970.253843][T13573] netlink: 5 bytes leftover after parsing attributes in process `syz.2.14994'. [ 970.267392][ T29] audit: type=1400 audit(1758345474.627:73556): avc: denied { create } for pid=13570 comm="syz.2.14993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 970.306533][T13573] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 970.314845][T13573] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 970.394912][T13582] FAULT_INJECTION: forcing a failure. [ 970.394912][T13582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 970.408246][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.2.14998 Not tainted syzkaller #0 PREEMPT(voluntary) [ 970.408341][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 970.408354][T13582] Call Trace: [ 970.408362][T13582] [ 970.408372][T13582] __dump_stack+0x1d/0x30 [ 970.408400][T13582] dump_stack_lvl+0xe8/0x140 [ 970.408499][T13582] dump_stack+0x15/0x1b [ 970.408521][T13582] should_fail_ex+0x265/0x280 [ 970.408547][T13582] should_fail+0xb/0x20 [ 970.408613][T13582] should_fail_usercopy+0x1a/0x20 [ 970.408646][T13582] _copy_from_user+0x1c/0xb0 [ 970.408758][T13582] kstrtouint_from_user+0x69/0xf0 [ 970.408785][T13582] ? 0xffffffff81000000 [ 970.408821][T13582] ? selinux_file_permission+0x1e4/0x320 [ 970.408844][T13582] proc_fail_nth_write+0x50/0x160 [ 970.408870][T13582] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 970.408947][T13582] vfs_write+0x266/0x960 [ 970.408967][T13582] ? vfs_read+0x4e6/0x770 [ 970.408992][T13582] ? __rcu_read_unlock+0x4f/0x70 [ 970.409023][T13582] ? __fget_files+0x184/0x1c0 [ 970.409070][T13582] ksys_write+0xda/0x1a0 [ 970.409093][T13582] __x64_sys_write+0x40/0x50 [ 970.409123][T13582] x64_sys_call+0x27fe/0x2ff0 [ 970.409254][T13582] do_syscall_64+0xd2/0x200 [ 970.409289][T13582] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 970.409312][T13582] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 970.409356][T13582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.409384][T13582] RIP: 0033:0x7f7458a4d6df [ 970.409402][T13582] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 970.409523][T13582] RSP: 002b:00007f74574b7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 970.409547][T13582] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7458a4d6df [ 970.409594][T13582] RDX: 0000000000000001 RSI: 00007f74574b70a0 RDI: 0000000000000003 [ 970.409606][T13582] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 970.409617][T13582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 970.409628][T13582] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 970.409648][T13582] [ 970.696242][T13588] syzkaller0: entered promiscuous mode [ 970.701846][T13588] syzkaller0: entered allmulticast mode [ 970.746071][T13594] netlink: 'syz.1.14999': attribute type 10 has an invalid length. [ 970.754083][T13594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14999'. [ 970.787543][T13598] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.806685][T13598] netlink: 57 bytes leftover after parsing attributes in process `syz.2.15005'. [ 970.899827][T13606] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15009'. [ 970.912531][T13606] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 970.921914][T13606] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 971.129465][T13615] lo speed is unknown, defaulting to 1000 [ 971.161096][T13615] lo speed is unknown, defaulting to 1000 [ 971.223470][T13619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13619 comm=syz.6.15013 [ 971.644317][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15019'. [ 971.737023][T13639] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 971.751069][T13639] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 971.769447][T13637] lo speed is unknown, defaulting to 1000 [ 971.777309][T13637] lo speed is unknown, defaulting to 1000 [ 971.913555][T13651] FAULT_INJECTION: forcing a failure. [ 971.913555][T13651] name failslab, interval 1, probability 0, space 0, times 0 [ 971.926283][T13651] CPU: 0 UID: 0 PID: 13651 Comm: syz.2.15027 Not tainted syzkaller #0 PREEMPT(voluntary) [ 971.926315][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.926401][T13651] Call Trace: [ 971.926408][T13651] [ 971.926416][T13651] __dump_stack+0x1d/0x30 [ 971.926436][T13651] dump_stack_lvl+0xe8/0x140 [ 971.926485][T13651] dump_stack+0x15/0x1b [ 971.926505][T13651] should_fail_ex+0x265/0x280 [ 971.926529][T13651] should_failslab+0x8c/0xb0 [ 971.926553][T13651] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 971.926651][T13651] ? __d_alloc+0x3d/0x340 [ 971.926687][T13651] __d_alloc+0x3d/0x340 [ 971.926793][T13651] ? selinux_file_open+0x2df/0x330 [ 971.926818][T13651] d_alloc_parallel+0x53/0xc60 [ 971.926853][T13651] ? selinux_inode_permission+0x62d/0x740 [ 971.926962][T13651] ? lockref_get_not_dead+0x120/0x1c0 [ 971.926998][T13651] ? __rcu_read_unlock+0x4f/0x70 [ 971.927019][T13651] __lookup_slow+0x8c/0x250 [ 971.927059][T13651] lookup_slow+0x3c/0x60 [ 971.927108][T13651] walk_component+0x1ec/0x220 [ 971.927174][T13651] path_lookupat+0xfe/0x2a0 [ 971.927210][T13651] filename_lookup+0x147/0x340 [ 971.927281][T13651] user_path_at+0x3e/0x130 [ 971.927400][T13651] do_fchownat+0xb0/0x210 [ 971.927435][T13651] __x64_sys_chown+0x47/0x60 [ 971.927463][T13651] x64_sys_call+0x2840/0x2ff0 [ 971.927483][T13651] do_syscall_64+0xd2/0x200 [ 971.927567][T13651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 971.927596][T13651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 971.927648][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.927674][T13651] RIP: 0033:0x7f7458a4ec29 [ 971.927702][T13651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.927725][T13651] RSP: 002b:00007f74574b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 971.927749][T13651] RAX: ffffffffffffffda RBX: 00007f7458c95fa0 RCX: 00007f7458a4ec29 [ 971.927764][T13651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 971.927779][T13651] RBP: 00007f74574b7090 R08: 0000000000000000 R09: 0000000000000000 [ 971.927793][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.927886][T13651] R13: 00007f7458c96038 R14: 00007f7458c95fa0 R15: 00007ffed1fc9858 [ 971.927909][T13651] [ 972.058673][T13655] netlink: 'syz.1.15028': attribute type 10 has an invalid length. [ 972.539434][T13669] lo speed is unknown, defaulting to 1000 [ 972.554551][T13669] lo speed is unknown, defaulting to 1000 [ 972.609190][T13671] __nla_validate_parse: 2 callbacks suppressed [ 972.609279][T13671] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15035'. [ 972.649048][T13671] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 972.672468][T13671] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 973.028891][T13697] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15045'. [ 973.039054][T13697] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 973.049395][T13697] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 973.282368][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15049'. [ 974.135092][T13737] netlink: 'syz.3.15060': attribute type 10 has an invalid length. [ 974.143079][T13737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15060'. [ 974.267659][T13736] lo speed is unknown, defaulting to 1000 [ 974.300413][T13736] lo speed is unknown, defaulting to 1000 [ 974.968352][ T29] kauditd_printk_skb: 926 callbacks suppressed [ 974.968368][ T29] audit: type=1400 audit(1758345479.387:74483): avc: denied { read write } for pid=6794 comm="syz-executor" name="loop2" dev="devtmpfs" ino=1421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 975.009030][ T29] audit: type=1400 audit(1758345479.427:74484): avc: denied { map_create } for pid=13749 comm="syz.3.15065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.014523][T13752] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15066'. [ 975.028525][ T29] audit: type=1400 audit(1758345479.427:74485): avc: denied { prog_load } for pid=13749 comm="syz.3.15065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.046369][T13752] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 975.057004][ T29] audit: type=1400 audit(1758345479.427:74486): avc: denied { prog_load } for pid=13749 comm="syz.3.15065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.057031][ T29] audit: type=1400 audit(1758345479.427:74487): avc: denied { create } for pid=13749 comm="syz.3.15065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 975.057090][ T29] audit: type=1400 audit(1758345479.427:74488): avc: denied { prog_load } for pid=13751 comm="syz.2.15066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.119127][T13748] audit: audit_backlog=65 > audit_backlog_limit=64 [ 975.121917][ T29] audit: type=1400 audit(1758345479.427:74489): avc: denied { map_create } for pid=13751 comm="syz.2.15066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.128432][T13748] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 975.147889][ T29] audit: type=1400 audit(1758345479.427:74490): avc: denied { prog_load } for pid=13751 comm="syz.2.15066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 975.176860][T13752] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 975.262300][T13765] netlink: 5 bytes leftover after parsing attributes in process `syz.6.15071'. [ 975.271458][T13765] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 975.279584][T13765] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 975.482509][T13784] netlink: 'syz.6.15076': attribute type 10 has an invalid length. [ 975.490493][T13784] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15076'. [ 975.594191][T13786] netlink: 5 bytes leftover after parsing attributes in process `syz.3.15079'. [ 975.606975][T13786] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 975.627170][T13786] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 976.236018][T13796] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15083'. [ 976.255434][T13796] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 976.264648][T13796] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 976.454290][T13816] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15092'. [ 976.467504][T13816] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 976.475342][T13816] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 976.732110][T13828] netlink: 'syz.3.15096': attribute type 10 has an invalid length. [ 976.834394][T13834] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 976.855721][T13834] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 976.960598][T13841] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 976.995169][T13841] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 977.312543][T13856] FAULT_INJECTION: forcing a failure. [ 977.312543][T13856] name failslab, interval 1, probability 0, space 0, times 0 [ 977.325283][T13856] CPU: 0 UID: 0 PID: 13856 Comm: syz.6.15109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 977.325316][T13856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.325332][T13856] Call Trace: [ 977.325340][T13856] [ 977.325350][T13856] __dump_stack+0x1d/0x30 [ 977.325405][T13856] dump_stack_lvl+0xe8/0x140 [ 977.325430][T13856] dump_stack+0x15/0x1b [ 977.325450][T13856] should_fail_ex+0x265/0x280 [ 977.325555][T13856] should_failslab+0x8c/0xb0 [ 977.325580][T13856] kmem_cache_alloc_noprof+0x50/0x310 [ 977.325682][T13856] ? prepare_creds+0x37/0x4c0 [ 977.325706][T13856] prepare_creds+0x37/0x4c0 [ 977.325729][T13856] copy_creds+0x8f/0x3f0 [ 977.325757][T13856] copy_process+0x658/0x2000 [ 977.325833][T13856] ? copy_clone_args_from_user+0x3ce/0x490 [ 977.325883][T13856] kernel_clone+0x16c/0x5c0 [ 977.325912][T13856] __se_sys_clone3+0x1c2/0x200 [ 977.325950][T13856] __x64_sys_clone3+0x31/0x40 [ 977.325982][T13856] x64_sys_call+0x1fc9/0x2ff0 [ 977.326043][T13856] do_syscall_64+0xd2/0x200 [ 977.326080][T13856] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 977.326104][T13856] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 977.326207][T13856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.326345][T13856] RIP: 0033:0x7f6f3aefec29 [ 977.326364][T13856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.326384][T13856] RSP: 002b:00007f6f3995ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 977.326403][T13856] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6f3aefec29 [ 977.326419][T13856] RDX: 00007f6f3995ef20 RSI: 0000000000000058 RDI: 00007f6f3995ef20 [ 977.326434][T13856] RBP: 00007f6f3995f090 R08: 0000000000000000 R09: 0000000000000058 [ 977.326446][T13856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.326502][T13856] R13: 00007f6f3b146038 R14: 00007f6f3b145fa0 R15: 00007ffcf3d7e7f8 [ 977.326526][T13856] [ 977.601347][T13866] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 977.608815][T13866] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 977.834667][T13882] __nla_validate_parse: 4 callbacks suppressed [ 977.834680][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15120'. [ 978.005885][T13892] netlink: 'syz.6.15123': attribute type 10 has an invalid length. [ 978.013882][T13892] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15123'. [ 978.526904][T13907] netlink: 5 bytes leftover after parsing attributes in process `syz.4.15131'. [ 978.556702][T13907] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 978.582432][T13907] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 978.771057][T13910] lo speed is unknown, defaulting to 1000 [ 978.783327][T13910] lo speed is unknown, defaulting to 1000 [ 979.616935][T13945] netlink: 'syz.6.15145': attribute type 10 has an invalid length. [ 979.625035][T13945] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15145'. [ 979.987187][ T29] kauditd_printk_skb: 1116 callbacks suppressed [ 979.987205][ T29] audit: type=1400 audit(1758345484.407:75606): avc: denied { execmem } for pid=13964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 980.021775][ T29] audit: type=1400 audit(1758345484.417:75607): avc: denied { execmem } for pid=13965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 980.233568][ T29] audit: type=1400 audit(1758345484.657:75608): avc: denied { read write } for pid=6119 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 980.384366][ T29] audit: type=1400 audit(1758345484.807:75609): avc: denied { read write } for pid=8710 comm="syz-executor" name="loop6" dev="devtmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 980.425889][ T29] audit: type=1400 audit(1758345484.847:75610): avc: denied { execmem } for pid=13966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 980.446484][ T3707] team0: Port device geneve1 removed [ 980.453481][ T3707] tipc: Disabling bearer [ 980.475106][ T29] audit: type=1400 audit(1758345484.897:75611): avc: denied { create } for pid=13967 comm="syz.6.15155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 980.495964][ T29] audit: type=1400 audit(1758345484.897:75612): avc: denied { map_create } for pid=13967 comm="syz.6.15155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 980.515389][ T29] audit: type=1400 audit(1758345484.897:75613): avc: denied { prog_load } for pid=13967 comm="syz.6.15155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 980.534761][ T29] audit: type=1400 audit(1758345484.897:75614): avc: denied { prog_load } for pid=13967 comm="syz.6.15155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 980.554154][ T29] audit: type=1400 audit(1758345484.897:75615): avc: denied { create } for pid=13967 comm="syz.6.15155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 980.683704][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.695487][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.706519][ T3707] bond0 (unregistering): Released all slaves [ 980.717978][ T3707] bond1 (unregistering): Released all slaves [ 980.763808][ T3707] tipc: Left network mode [ 980.815543][ T3707] hsr_slave_0: left promiscuous mode [ 980.824957][ T3707] hsr_slave_1: left promiscuous mode [ 980.830733][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.839278][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.894213][ T3707] team0 (unregistering): Port device team_slave_1 removed [ 980.908401][ T3707] team0 (unregistering): Port device team_slave_0 removed [ 981.663345][T13991] lo speed is unknown, defaulting to 1000 [ 981.669676][T13991] lo speed is unknown, defaulting to 1000 [ 985.065173][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 985.065191][ T29] audit: type=1400 audit(1758345489.487:75779): avc: denied { execmem } for pid=14018 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 985.091046][ T29] audit: type=1400 audit(1758345489.487:75780): avc: denied { prog_load } for pid=14019 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 985.109682][ T29] audit: type=1400 audit(1758345489.487:75781): avc: denied { name_bind } for pid=14019 comm="gtp" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 985.131265][ T29] audit: type=1400 audit(1758345489.487:75782): avc: denied { allowed } for pid=14020 comm="syz.6.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 985.150907][ T29] audit: type=1400 audit(1758345489.487:75783): avc: denied { map_create } for pid=14022 comm="syz.4.15175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 985.170317][ T29] audit: type=1400 audit(1758345489.487:75784): avc: denied { prog_load } for pid=14022 comm="syz.4.15175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 985.189648][ T29] audit: type=1400 audit(1758345489.487:75785): avc: denied { create } for pid=14022 comm="syz.4.15175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 985.210547][ T29] audit: type=1400 audit(1758345489.497:75786): avc: denied { map_create } for pid=14020 comm="syz.6.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 985.229929][ T29] audit: type=1400 audit(1758345489.497:75787): avc: denied { prog_load } for pid=14020 comm="syz.6.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 985.249310][ T29] audit: type=1400 audit(1758345489.497:75788): avc: denied { prog_load } for pid=14020 comm="syz.6.15173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 986.314697][T14039] netlink: 'syz.1.15177': attribute type 10 has an invalid length. [ 986.322725][T14039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15177'. [ 990.130953][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 990.130974][ T29] audit: type=1400 audit(1758345494.547:75911): avc: denied { execmem } for pid=14059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 990.159562][ T29] audit: type=1400 audit(1758345494.557:75912): avc: denied { map_create } for pid=14063 comm="syz.3.15189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 990.179041][ T29] audit: type=1400 audit(1758345494.557:75913): avc: denied { prog_load } for pid=14063 comm="syz.3.15189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 990.198623][ T29] audit: type=1400 audit(1758345494.557:75914): avc: denied { create } for pid=14063 comm="syz.3.15189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 990.219812][ T29] audit: type=1400 audit(1758345494.557:75915): avc: denied { read write } for pid=6119 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 990.243459][ T29] audit: type=1400 audit(1758345494.557:75916): avc: denied { prog_load } for pid=14060 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 990.262071][ T29] audit: type=1400 audit(1758345494.557:75917): avc: denied { name_bind } for pid=14060 comm="gtp" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 990.283389][ T29] audit: type=1400 audit(1758345494.587:75918): avc: denied { allowed } for pid=14061 comm="syz.6.15187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 990.302963][ T29] audit: type=1400 audit(1758345494.587:75919): avc: denied { map_create } for pid=14061 comm="syz.6.15187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 990.322389][ T29] audit: type=1400 audit(1758345494.587:75920): avc: denied { prog_load } for pid=14061 comm="syz.6.15187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 991.792063][T14075] netlink: 'syz.6.15190': attribute type 10 has an invalid length. [ 991.800087][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15190'. [ 992.081018][T14072] ================================================================== [ 992.089202][T14072] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 992.096535][T14072] [ 992.098872][T14072] write to 0xffff8881044e9830 of 4 bytes by task 14074 on cpu 0: [ 992.106593][T14072] touch_atime+0x1e8/0x340 [ 992.111040][T14072] shmem_file_read_iter+0x477/0x540 [ 992.116271][T14072] copy_splice_read+0x43f/0x660 [ 992.121147][T14072] splice_direct_to_actor+0x290/0x680 [ 992.126537][T14072] do_splice_direct+0xda/0x150 [ 992.131305][T14072] do_sendfile+0x380/0x650 [ 992.135745][T14072] __x64_sys_sendfile64+0x105/0x150 [ 992.140976][T14072] x64_sys_call+0x2bb0/0x2ff0 [ 992.145665][T14072] do_syscall_64+0xd2/0x200 [ 992.150195][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.156136][T14072] [ 992.158471][T14072] read to 0xffff8881044e9830 of 4 bytes by task 14072 on cpu 1: [ 992.166120][T14072] atime_needs_update+0x25f/0x3e0 [ 992.171186][T14072] touch_atime+0x4a/0x340 [ 992.175544][T14072] shmem_file_read_iter+0x477/0x540 [ 992.180759][T14072] copy_splice_read+0x43f/0x660 [ 992.185628][T14072] splice_direct_to_actor+0x290/0x680 [ 992.191031][T14072] do_splice_direct+0xda/0x150 [ 992.195825][T14072] do_sendfile+0x380/0x650 [ 992.200257][T14072] __x64_sys_sendfile64+0x105/0x150 [ 992.205494][T14072] x64_sys_call+0x2bb0/0x2ff0 [ 992.210183][T14072] do_syscall_64+0xd2/0x200 [ 992.214722][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.220636][T14072] [ 992.222963][T14072] value changed: 0x1da662b3 -> 0x1e3ef933 [ 992.228711][T14072] [ 992.231041][T14072] Reported by Kernel Concurrency Sanitizer on: [ 992.237195][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.6.15190 Not tainted syzkaller #0 PREEMPT(voluntary) [ 992.247100][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 992.257170][T14072] ================================================================== [ 993.348935][ T3702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.493250][ T3702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.552598][ T3702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.622118][ T3702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.715772][ T3702] bridge_slave_1: left allmulticast mode [ 993.721498][ T3702] bridge_slave_1: left promiscuous mode [ 993.727254][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.735096][ T3702] bridge_slave_0: left allmulticast mode [ 993.740732][ T3702] bridge_slave_0: left promiscuous mode [ 993.746463][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.772186][ T3702] team0: Port device geneve1 removed [ 993.983565][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 993.993025][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.002473][ T3702] bond0 (unregistering): Released all slaves [ 994.010724][ T3702] bond1 (unregistering): Released all slaves [ 994.053195][ T3702] tipc: Disabling bearer [ 994.058426][ T3702] tipc: Left network mode [ 994.096552][ T3702] hsr_slave_0: left promiscuous mode [ 994.104680][ T3702] hsr_slave_1: left promiscuous mode [ 994.110360][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.118764][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.169879][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 994.179860][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 994.485230][ T3702] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.524217][ T3702] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.583938][ T3702] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.633901][ T3702] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.686743][ T3702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.697119][ T3702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.743602][ T3702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.753972][ T3702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.794302][ T3702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.804617][ T3702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.843667][ T3702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.854124][ T3702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 994.917972][ T3702] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.943773][ T3702] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.994075][ T3702] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.053785][ T3702] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.115152][ T3702] bridge_slave_1: left allmulticast mode [ 995.120818][ T3702] bridge_slave_1: left promiscuous mode [ 995.126613][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.134584][ T3702] bridge_slave_0: left allmulticast mode [ 995.140238][ T3702] bridge_slave_0: left promiscuous mode [ 995.146022][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.155658][ T3702] bridge_slave_1: left allmulticast mode [ 995.161352][ T3702] bridge_slave_1: left promiscuous mode [ 995.166960][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.175085][ T3702] bridge_slave_0: left allmulticast mode [ 995.180731][ T3702] bridge_slave_0: left promiscuous mode [ 995.186519][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.195671][ T3702] bridge_slave_1: left allmulticast mode [ 995.201398][ T3702] bridge_slave_1: left promiscuous mode [ 995.207164][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.215000][ T3702] bridge_slave_0: left allmulticast mode [ 995.220665][ T3702] bridge_slave_0: left promiscuous mode [ 995.226446][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.313900][ T3702] team0: Port device geneve1 removed [ 995.503720][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.513587][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.523803][ T3702] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 995.533056][ T3702] bond0 (unregistering): Released all slaves [ 995.557802][ T3702] team0: Port device geneve1 removed [ 995.693227][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.703423][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.713238][ T3702] bond0 (unregistering): Released all slaves [ 995.735734][ T3702] team0: Port device geneve1 removed [ 995.843323][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.853388][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.863204][ T3702] bond0 (unregistering): Released all slaves [ 995.915016][ T3702] tipc: Disabling bearer [ 995.920345][ T3702] tipc: Left network mode [ 996.019320][ T3702] hsr_slave_0: left promiscuous mode [ 996.025643][ T3702] hsr_slave_1: left promiscuous mode [ 996.031418][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.038793][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.046329][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.053732][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.063884][ T3702] hsr_slave_0: left promiscuous mode [ 996.069536][ T3702] hsr_slave_1: left promiscuous mode [ 996.075297][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.082724][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.090248][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.097658][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.107477][ T3702] hsr_slave_0: left promiscuous mode [ 996.113159][ T3702] hsr_slave_1: left promiscuous mode [ 996.118789][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.126201][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.133834][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.141313][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.157773][ T3702] veth1_macvtap: left promiscuous mode [ 996.163290][ T3702] veth0_macvtap: left promiscuous mode [ 996.169455][ T3702] veth1_macvtap: left promiscuous mode [ 996.174980][ T3702] veth0_macvtap: left promiscuous mode [ 996.180559][ T3702] veth1_vlan: left promiscuous mode [ 996.185805][ T3702] veth0_vlan: left promiscuous mode [ 996.191656][ T3702] veth1_macvtap: left promiscuous mode [ 996.197191][ T3702] veth0_macvtap: left promiscuous mode [ 996.202824][ T3702] veth1_vlan: left promiscuous mode [ 996.208043][ T3702] veth0_vlan: left promiscuous mode [ 996.329714][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 996.340294][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 996.371551][T27338] smc: removing ib device sz1 [ 996.418362][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 996.432066][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 996.547219][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 996.559226][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 996.617146][T27343] lo speed is unknown, defaulting to 1000 [ 996.623013][T27343] sz1: Port: 1 Link DOWN [ 997.285391][ T3702] IPVS: stop unused estimator thread 0...