last executing test programs: 6.308948637s ago: executing program 4 (id=1089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x100, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000008c0), 0xe}, 0x10000a, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x196f07b7424272f8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES8=r5], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r10, r9) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fcntl$setflags(r0, 0x2, 0x1) kexec_load(0x1, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="94a80226c2ba93762a127e4c6ee00810c5bd623d127b1945ad4f7032d570d474b9a6143d7802bed0847054a88300e43d6b5db5803180c2d4bc302bac5c92dc3d891ec67835ac5394f45b6799332e30c4d0189361af33aa46bdea12", 0x5b, 0xf1cb, 0x5}, {&(0x7f0000000100)="1a3b96bdde49793b5e402bd36d935071617b95c48c04a7204dbfec3ce18e81f7ce0b183d75d9f33f4d6a6514a2aff007374c82122271de11d782c35ba95d6487e1624899f397bb85a38affe4eb5f9098b2f2f5ee6edab7291dd3181908781650f796c0d4849d76433e430b69dd8cb5e078c6a8901ba11dcdd0fdc89a", 0x7c, 0x3, 0x4}], 0x160000) socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xff73, 0x0, 0x41000, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r14, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.186637658s ago: executing program 0 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 3.161869079s ago: executing program 0 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x6, 0x6, 0x3a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0x9, 0xffff3a61}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000580)=0x10000, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xf}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, r4, r4, r4, r4, r4], 0x0, 0x10, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4beef9dfc61ce46991ddc5", @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES16=r5], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000140)={0x8, 0x6, 0x4}) sendmsg$can_bcm(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r8, @ANYRES64=r9, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2.986215172s ago: executing program 0 (id=1114): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 2.965463142s ago: executing program 0 (id=1115): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = socket(0x18, 0x800, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x10000, 0x0, 0x81, 0xffffffff, 0x1}) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0x2, r4, 0x2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 2.502629722s ago: executing program 0 (id=1120): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc72, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001a000000000000000c0000000c00000000000000000000400000000500000000070000000000001201000000010000000000000e01000000000000000000de2095a5295fbb720ae9312b81f1ea00544bbe73aa4465a90046fc65eabaa5f472220bc9dc31e14c43a1e3d15b9c1510dfccb3c31aa3dd8f53833e95f0a41acdd66ead24a695e01e0cf271f0"], &(0x7f00000004c0)=""/261, 0x26, 0xf6, 0x1}, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) socket(0x1e, 0x80004, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 1.772452406s ago: executing program 3 (id=1125): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.746134826s ago: executing program 3 (id=1126): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 1.694707447s ago: executing program 1 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="080004006401010108000200e0000002080008001000000008000200ec1414bb08000100ffffffff08000900"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 1.650190188s ago: executing program 0 (id=1128): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r1, &(0x7f0000000380)="c7", 0x1, 0x20000810, &(0x7f0000000080)={0xa, 0x4e23, 0x7, @local, 0x5}, 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000101010200000000000000000a000000300002802c0001801400030000000000000000000000ffff0a01010014000400fe8000000000000000000000000000aa08001a40000000060c001980"], 0x60}}, 0x808) socket$nl_generic(0x10, 0x3, 0x10) 1.608477989s ago: executing program 1 (id=1129): unshare(0x26020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.605531389s ago: executing program 3 (id=1130): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.580629069s ago: executing program 1 (id=1131): socket(0x840000000002, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r5, &(0x7f0000000080)=[{&(0x7f0000000280)="14", 0x1}], 0x1, 0x9, 0xfffffffc, 0xa0) iopl(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) unlink(&(0x7f0000000180)='./file1\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@journal_path={'journal_path', 0x3d, './file1/../file0'}}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fff}}]}, 0x21, 0x59f, &(0x7f0000000c00)="$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") 1.193695597s ago: executing program 3 (id=1132): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r7 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000300)=""/115, 0x73, 0x0, &(0x7f00000003c0)=""/186, 0xba}}, 0x10) pipe2$watch_queue(&(0x7f00000005c0), 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, r10}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 1.125564068s ago: executing program 4 (id=1133): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) setgroups(0x1, &(0x7f0000000180)=[0xee00]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) shutdown(r2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1.125019108s ago: executing program 3 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) (fail_nth: 6) 976.465311ms ago: executing program 3 (id=1135): syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x0, 0xd, 0x1, 0x8, 0x8, 0x7}, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="050f0f0095f0925c02010002"], 0x4, [{0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x7c61}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x444}}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000001c0)=0x2, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x904c01, &(0x7f00000000c0)={[], [{@uid_lt}, {@subj_user={'subj_user', 0x3d, 'syzkaller\x00'}}]}, 0x2, 0x5b1, &(0x7f0000000180)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) getpid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d40)={[], [{@permit_directio}, {@fowner_gt}, {@fowner_lt}, {@measure}, {@euid_eq}, {@fsname={'fsname', 0x3d, '\\*\\),(-:p'}}]}, 0x1, 0x4bc, &(0x7f0000000540)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") 847.878623ms ago: executing program 2 (id=1136): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) (fail_nth: 9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) 830.855864ms ago: executing program 4 (id=1137): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) setgroups(0x1, &(0x7f0000000180)=[0xee00]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) shutdown(r2, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 418.774532ms ago: executing program 2 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25022000cb", @ANYRES32=r2, @ANYBLOB="080004006401010108000200e0000002080008001000000008000200ec1414bb08000100ffffffff0800090031"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 384.466903ms ago: executing program 4 (id=1139): r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) close(r0) 291.904824ms ago: executing program 4 (id=1140): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 252.207365ms ago: executing program 1 (id=1141): fsopen(&(0x7f0000000180)='proc\x00', 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$sg(0x0, 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) getitimer(0x2, 0x0) io_setup(0x3, &(0x7f0000000280)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 238.039656ms ago: executing program 2 (id=1142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000000)=0x6e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r5, 0x25, 0x2, @val=@target_btf_id=0xffffffffffffffff}, 0x14) write$binfmt_register(r1, &(0x7f0000000540)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'sched_switch\x00', 0x3a, 'GPL\x00', 0x3a, './file1', 0x3a, [0x16, 0x50, 0x50, 0x43, 0x50]}, 0x3d) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}]}]}, 0x9c}}, 0x4048000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r9, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x100, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340), &(0x7f0000000500)=@v3={0x3000000, [{0xb6, 0x9}, {0x8, 0x1}], r10}, 0x18, 0x1) 158.983767ms ago: executing program 4 (id=1143): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xd, 0x2, 0x0, 0xffffffffffffffff, 0xfffb}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r3, 0x2001}], 0x1, 0x0, 0x0, 0x0) 128.170198ms ago: executing program 2 (id=1144): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) unshare(0x2c020400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 96.189568ms ago: executing program 1 (id=1145): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000080001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 65.817909ms ago: executing program 1 (id=1146): unshare(0x20060400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x4020c0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="4ecec27cf18820a4ec18ee210249ec702546b28b4c5f493dcd2c11e3196dff3bcc2e6c0a404411b6d5c50e0c63cd149f8ead3c7649648a89819b27f75f6bae4a0066941724496461619a30d3afcca1c53a57e4013f60fdb1052c1296e4d2f4b214a3ef152dcde73e99fe1bce0c63fddadef196f0d44879ff94d8408a4f8dbd33d48a66d0e60541dac7276f7e34a40a4dd7b752c3d88c63bf1416d851ec91dcfff6dd7cfa38edba20ada5e7e852687a9c1e3ff0109c9fc23ab2b8b813092ea1bda0ef97a86e9fbda3d374edc5e7702987587313f09d727875ee676d00"/234, @ANYRES64=r2, @ANYBLOB='\t\x00\x00\x00', @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38479d81f33b9d565e000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000200007f00000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000940)="912a31a3e770234f2c4e52c03da5a7dfa5aa54f85a39d58496c464cffce6bf60ce229bd6bf11744080e7cfe730a831c2238fbef25847ae4588872caae41959a439ddeca96f54e8748c7f361545d809d7814d09d010f16d41f3dab527474e61371bb2bf4b734ac423dde1aa73ed30138cffac8013dee6cc8f07e5490d0bb07297f0f69317f9f43c9acd9ab624e47d623ff3c41ee717ecb0ac814958e85f"}, {&(0x7f0000000b80)="250f2f6c0caf4062889c778f50896aad1daa31d6a2322857600cabf49cdc08701be57784da9d4e34941d9781106f56f2032f83ac8ae4798c3ead6dc108ba7000a9874370669968d0c72b795041aa64884be384e5c7b6f62ac4cbc6614d4dfe54aae2136db566cf0885c467546a698ef5d5d6f39068cc860c4281e03db56e9a46a9b70c428bbb70b976ae3ce3857178ae3c50d0831789131717eab92ca6ac4016765fc8dba371af16483f2b9a6c957dc1328b4ef76a1160eefa0d8c95ca1f5653704838cacfa2b81a1343775a92b62535dc6ff50838a9a668525a6afbfecd"}, {&(0x7f0000000c80)="ef3a45b0cd0c3f7b0b2c1cfca32e657498f050a3137f674f9b67181baf48c49b00b3bd582aaaeeb71de5b0c3ed3e99636fc74a1a65aabb5022ec11579c44e403482d86013d27705648f5855f2b02a5cbb21e69f0f775d86ba0e43e6c7b24bb02885f2f2d4cc39a43a29a66442c8e6df08847a4909563c6772007b1dae8eeacaa5b962099f99a2d40c281f5e7545c4f64a7744e5bbdfd8e64d4828ce26f1e3cf87df6ada811dae8131628ca617fddf9a9dc3d8d96eeba46fa254174c4f3f7630aec2030d0710c9bbcb4d91d21f66050d55d0bc441fbb4405b919b64d046330eeb632e35678e618d3c4dceca3a72fffcfec5419304a5"}, {&(0x7f0000000d80)="781273415217f4577745b419adea274f22429ba43090cc98b3e2938c5e1394c6a7b511365548674360415fa48c880be686b0acf12586c912a4d0c3aec56b9dc96c442dff2424594b23bb3a95de89879dfb96d9416a284490845c0c6ccdcc2f56a0550036d1c3f29b5eca185e2d92437222c5c8bbceba177f2070761bddf844e49b8bfae0fa0bb37c1ff55353d1f8eb62efb0573b44960c57db313853c151fa3aecb71ed1f0c57734db2b4feca9f191abfc5592fc3961216c7b2a8191219d189680d73184d1808780ec4da326febe81727376831f297b43468fd1e7e7c69b"}, {&(0x7f0000000f80)="16266a204a0b32e8cac12b11043905c2e605cd5e3b09e5dff49601ee9aa30f1d8a8338d5b8a9b40a07cc4f745e9dfd1b5c97e4b900534428fb5c3e2dc40111094ee847e447072b608e85053c755cd3f14222a7b3167af29158ac71057b8219731b7bcc4879f7124b6fa06566df7ee140c6d7e3245a00c9402bf3e43b47dce107f694a6"}], 0x2a, 0x0, 0x0, 0x1f00c00e}, 0x20040084) capget(&(0x7f0000000500)={0x20080522, r2}, &(0x7f0000000600)={0x400, 0x4, 0x6, 0xffffffff, 0xaa, 0xb}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0x20, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, 0x0, 0x405, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0xffffff0d, 0x2, 0x0, 0x1, [{0xffffffffffffff3b, 0x1, @lb_port_stats={{{}, {}, {0x0, 0x4, 0x6}}, {0x0, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x88c0) sendfile(r0, r1, &(0x7f0000000080), 0x8) fcntl$addseals(r1, 0x409, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0xd, 0xff, 0xbe, 0x20, 0x5c6, 0x9203, 0xaee0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x86, 0x4, 0x90, 0x3, [{{0x9, 0x4, 0x1e, 0x3, 0x0, 0x91, 0x49, 0xf7, 0x3}}]}}]}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x100000000000000) 55.672779ms ago: executing program 2 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES8], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) r2 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x166, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6c00000001302b0100000000000000000000ffffac1414aafe8000000000000000000000000000aaff"], 0x0) recvmmsg(r2, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x100, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x48812, &(0x7f0000000000)={0x2, 0x1, @multicast2}, 0x10) 0s ago: executing program 2 (id=1148): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000000000008500000003000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7c2", 0x26}], 0x2}, 0x404c080) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000000050000000000000000003e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}}) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) mbind(&(0x7f0000454000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (rerun: 32) write$binfmt_register(r8, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r9, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) (async) r10 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x3}, 0x18) (async) mq_timedsend(r10, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd970", 0xf53, 0x6, 0x0) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4368 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 54.676196][ T4369] syz.4.284 (4369) used greatest stack depth: 10704 bytes left [ 54.863565][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 54.983615][ T4392] smc: net device bond0 applied user defined pnetid SYZ0 [ 54.991434][ T4392] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.060403][ T29] audit: type=1326 audit(55.033:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 55.083254][ T29] audit: type=1326 audit(55.033:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 55.113630][ T4399] sch_fq: defrate 4294967295 ignored. [ 55.120672][ T29] audit: type=1326 audit(55.033:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 55.143739][ T29] audit: type=1326 audit(55.033:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 55.166499][ T29] audit: type=1326 audit(55.033:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4396 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 55.255282][ T4403] serio: Serial port ttyS3 [ 55.342053][ T4403] block device autoloading is deprecated and will be removed. [ 55.642273][ T4412] FAULT_INJECTION: forcing a failure. [ 55.642273][ T4412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.655439][ T4412] CPU: 1 UID: 0 PID: 4412 Comm: syz.0.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.655475][ T4412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 55.655487][ T4412] Call Trace: [ 55.655494][ T4412] [ 55.655505][ T4412] __dump_stack+0x1d/0x30 [ 55.655539][ T4412] dump_stack_lvl+0xe8/0x140 [ 55.655565][ T4412] dump_stack+0x15/0x1b [ 55.655586][ T4412] should_fail_ex+0x265/0x280 [ 55.655619][ T4412] should_fail+0xb/0x20 [ 55.655647][ T4412] should_fail_usercopy+0x1a/0x20 [ 55.655749][ T4412] _copy_from_user+0x1c/0xb0 [ 55.655792][ T4412] ___sys_sendmsg+0xc1/0x1d0 [ 55.655857][ T4412] __x64_sys_sendmsg+0xd4/0x160 [ 55.655934][ T4412] x64_sys_call+0x191e/0x2ff0 [ 55.656012][ T4412] do_syscall_64+0xd2/0x200 [ 55.656086][ T4412] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.656129][ T4412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.656157][ T4412] RIP: 0033:0x7fc93d65ec29 [ 55.656177][ T4412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.656213][ T4412] RSP: 002b:00007fc93c0bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.656237][ T4412] RAX: ffffffffffffffda RBX: 00007fc93d8a5fa0 RCX: 00007fc93d65ec29 [ 55.656252][ T4412] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000005 [ 55.656267][ T4412] RBP: 00007fc93c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 55.656281][ T4412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.656296][ T4412] R13: 00007fc93d8a6038 R14: 00007fc93d8a5fa0 R15: 00007ffd2b1d7ef8 [ 55.656320][ T4412] [ 56.006768][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.306'. [ 56.010525][ T4426] netlink: 'syz.0.305': attribute type 6 has an invalid length. [ 56.098597][ T4437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.308'. [ 56.118436][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 56.133271][ T4437] syz_tun: entered allmulticast mode [ 56.167728][ T4436] syz_tun: left allmulticast mode [ 56.270226][ T4441] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.277875][ T4441] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.485084][ T4451] netlink: 'syz.0.314': attribute type 6 has an invalid length. [ 56.584295][ T4458] loop1: detected capacity change from 0 to 8192 [ 56.605291][ T4459] netlink: 'syz.0.316': attribute type 13 has an invalid length. [ 56.613207][ T4459] netlink: 'syz.0.316': attribute type 17 has an invalid length. [ 56.663697][ T4459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.720599][ T4464] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.728025][ T4464] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.768727][ T4468] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.776408][ T4468] smc: net device bond0 erased user defined pnetid SYZ0 [ 56.804039][ T4474] program syz.2.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.815181][ T4472] FAULT_INJECTION: forcing a failure. [ 56.815181][ T4472] name failslab, interval 1, probability 0, space 0, times 0 [ 56.828082][ T4472] CPU: 0 UID: 0 PID: 4472 Comm: syz.4.322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.828108][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 56.828129][ T4472] Call Trace: [ 56.828136][ T4472] [ 56.828145][ T4472] __dump_stack+0x1d/0x30 [ 56.828194][ T4472] dump_stack_lvl+0xe8/0x140 [ 56.828213][ T4472] dump_stack+0x15/0x1b [ 56.828230][ T4472] should_fail_ex+0x265/0x280 [ 56.828296][ T4472] ? ftrace_profile_set_filter+0x96/0x1b0 [ 56.828320][ T4472] should_failslab+0x8c/0xb0 [ 56.828382][ T4472] __kmalloc_cache_noprof+0x4c/0x320 [ 56.828435][ T4472] ftrace_profile_set_filter+0x96/0x1b0 [ 56.828459][ T4472] perf_ioctl+0x7b3/0x12e0 [ 56.828495][ T4472] ? ioctl_has_perm+0x289/0x2a0 [ 56.828536][ T4472] ? do_vfs_ioctl+0x866/0xe10 [ 56.828559][ T4472] ? selinux_file_ioctl+0x308/0x3a0 [ 56.828584][ T4472] ? __fget_files+0x184/0x1c0 [ 56.828616][ T4472] ? __pfx_perf_ioctl+0x10/0x10 [ 56.828650][ T4472] __se_sys_ioctl+0xce/0x140 [ 56.828699][ T4472] __x64_sys_ioctl+0x43/0x50 [ 56.828754][ T4472] x64_sys_call+0x1816/0x2ff0 [ 56.828776][ T4472] do_syscall_64+0xd2/0x200 [ 56.828832][ T4472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.828857][ T4472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.828889][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.828912][ T4472] RIP: 0033:0x7f22fa61ec29 [ 56.828980][ T4472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.829002][ T4472] RSP: 002b:00007f22f907f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.829025][ T4472] RAX: ffffffffffffffda RBX: 00007f22fa865fa0 RCX: 00007f22fa61ec29 [ 56.829040][ T4472] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000005 [ 56.829054][ T4472] RBP: 00007f22f907f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.829068][ T4472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.829082][ T4472] R13: 00007f22fa866038 R14: 00007f22fa865fa0 R15: 00007ffdf9f8d6f8 [ 56.829140][ T4472] [ 57.086428][ T4479] program syz.2.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.196810][ T4491] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 57.282588][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4499 comm=syz.2.333 [ 57.297363][ T4499] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 57.311165][ T4499] netlink: 'syz.2.333': attribute type 4 has an invalid length. [ 57.324761][ T4499] FAULT_INJECTION: forcing a failure. [ 57.324761][ T4499] name failslab, interval 1, probability 0, space 0, times 0 [ 57.337443][ T4499] CPU: 1 UID: 0 PID: 4499 Comm: syz.2.333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.337519][ T4499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.337530][ T4499] Call Trace: [ 57.337537][ T4499] [ 57.337568][ T4499] __dump_stack+0x1d/0x30 [ 57.337588][ T4499] dump_stack_lvl+0xe8/0x140 [ 57.337627][ T4499] dump_stack+0x15/0x1b [ 57.337642][ T4499] should_fail_ex+0x265/0x280 [ 57.337664][ T4499] should_failslab+0x8c/0xb0 [ 57.337687][ T4499] __kmalloc_noprof+0xa5/0x3e0 [ 57.337764][ T4499] ? sock_kmalloc+0x85/0xc0 [ 57.337787][ T4499] ? iovec_from_user+0x179/0x210 [ 57.337891][ T4499] sock_kmalloc+0x85/0xc0 [ 57.337925][ T4499] ____sys_sendmsg+0xf8/0x4e0 [ 57.337957][ T4499] ___sys_sendmsg+0x17b/0x1d0 [ 57.338026][ T4499] __x64_sys_sendmsg+0xd4/0x160 [ 57.338099][ T4499] x64_sys_call+0x191e/0x2ff0 [ 57.338178][ T4499] do_syscall_64+0xd2/0x200 [ 57.338206][ T4499] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.338275][ T4499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.338293][ T4499] RIP: 0033:0x7f0d7068ec29 [ 57.338307][ T4499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.338394][ T4499] RSP: 002b:00007f0d6f0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.338411][ T4499] RAX: ffffffffffffffda RBX: 00007f0d708d5fa0 RCX: 00007f0d7068ec29 [ 57.338422][ T4499] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000e [ 57.338433][ T4499] RBP: 00007f0d6f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.338517][ T4499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.338528][ T4499] R13: 00007f0d708d6038 R14: 00007f0d708d5fa0 R15: 00007ffdc6bd64b8 [ 57.338552][ T4499] [ 57.612454][ T4507] __nla_validate_parse: 1 callbacks suppressed [ 57.612472][ T4507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 57.646235][ T4499] syz.2.333 (4499) used greatest stack depth: 10080 bytes left [ 57.675092][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.685464][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.831949][ T4520] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.875202][ T4520] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.914344][ T4533] IPv6: Can't replace route, no match found [ 57.924490][ T4520] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.974048][ T4520] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.986660][ T4537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 57.997795][ T4537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.350'. [ 58.017840][ T3423] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060790][ T3423] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.076532][ T3423] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.090071][ T3423] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.091167][ T4539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'. [ 58.128800][ T4541] process 'syz.0.352' launched '/dev/fd/4' with NULL argv: empty string added [ 58.512112][ T4547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4547 comm=syz.1.354 [ 58.551236][ T4547] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 58.633762][ T4551] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 58.784434][ T4562] netlink: 64 bytes leftover after parsing attributes in process `syz.1.358'. [ 59.162036][ T4569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.362'. [ 59.657281][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 59.657302][ T29] audit: type=1400 audit(59.603:1587): avc: denied { setopt } for pid=4570 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.915679][ T4578] 9pnet: Could not find request transport: 0xffffffffffffffff [ 59.991122][ T4580] 9pnet: Could not find request transport: 0xffffffffffffffff [ 60.076641][ T4588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 60.204164][ T29] audit: type=1326 audit(60.183:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.239638][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 60.252636][ T4592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 60.266112][ T29] audit: type=1326 audit(60.213:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.288883][ T29] audit: type=1326 audit(60.213:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.311569][ T29] audit: type=1326 audit(60.213:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.334283][ T29] audit: type=1326 audit(60.213:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.357086][ T29] audit: type=1326 audit(60.213:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.380091][ T29] audit: type=1326 audit(60.213:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.402742][ T29] audit: type=1326 audit(60.213:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 60.425457][ T29] audit: type=1326 audit(60.213:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4591 comm="syz.0.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc93d660b47 code=0x7ffc0000 [ 60.451541][ T4595] syz.4.369 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 61.596178][ T4614] netlink: 'syz.3.377': attribute type 6 has an invalid length. [ 61.914500][ T4625] random: crng reseeded on system resumption [ 61.926087][ T4627] syz.0.382 uses obsolete (PF_INET,SOCK_PACKET) [ 61.934645][ T4627] FAULT_INJECTION: forcing a failure. [ 61.934645][ T4627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.947888][ T4627] CPU: 1 UID: 0 PID: 4627 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 61.947915][ T4627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.947927][ T4627] Call Trace: [ 61.947934][ T4627] [ 61.947941][ T4627] __dump_stack+0x1d/0x30 [ 61.947966][ T4627] dump_stack_lvl+0xe8/0x140 [ 61.948042][ T4627] dump_stack+0x15/0x1b [ 61.948060][ T4627] should_fail_ex+0x265/0x280 [ 61.948082][ T4627] should_fail+0xb/0x20 [ 61.948099][ T4627] should_fail_usercopy+0x1a/0x20 [ 61.948121][ T4627] _copy_from_iter+0xd2/0xe80 [ 61.948148][ T4627] ? skb_set_owner_w+0x16a/0x1c0 [ 61.948208][ T4627] ? sock_alloc_send_pskb+0x456/0x4f0 [ 61.948234][ T4627] skb_copy_datagram_from_iter+0xb1/0x490 [ 61.948261][ T4627] ? skb_put+0xa9/0xf0 [ 61.948279][ T4627] tun_get_user+0xafa/0x2680 [ 61.948366][ T4627] ? ref_tracker_alloc+0x1f2/0x2f0 [ 61.948390][ T4627] ? selinux_file_permission+0x1e4/0x320 [ 61.948441][ T4627] tun_chr_write_iter+0x15e/0x210 [ 61.948459][ T4627] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 61.948475][ T4627] vfs_write+0x527/0x960 [ 61.948500][ T4627] ksys_write+0xda/0x1a0 [ 61.948533][ T4627] __x64_sys_write+0x40/0x50 [ 61.948552][ T4627] x64_sys_call+0x27fe/0x2ff0 [ 61.948571][ T4627] do_syscall_64+0xd2/0x200 [ 61.948665][ T4627] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 61.948686][ T4627] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 61.948712][ T4627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.948730][ T4627] RIP: 0033:0x7fc93d65ec29 [ 61.948813][ T4627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.948828][ T4627] RSP: 002b:00007fc93c0bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.948843][ T4627] RAX: ffffffffffffffda RBX: 00007fc93d8a5fa0 RCX: 00007fc93d65ec29 [ 61.948855][ T4627] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000003 [ 61.948872][ T4627] RBP: 00007fc93c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.948887][ T4627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.948906][ T4627] R13: 00007fc93d8a6038 R14: 00007fc93d8a5fa0 R15: 00007ffd2b1d7ef8 [ 61.948928][ T4627] [ 62.175864][ T4628] netlink: 464 bytes leftover after parsing attributes in process `syz.1.381'. [ 62.202563][ T4630] smc: net device bond0 applied user defined pnetid SYZ0 [ 62.210186][ T4630] smc: net device bond0 erased user defined pnetid SYZ0 [ 62.368155][ T4645] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 62.549461][ T4657] loop1: detected capacity change from 0 to 512 [ 62.588769][ T4657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.632051][ T4676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.672922][ T4676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.840122][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.055258][ T4708] sch_fq: defrate 4294967295 ignored. [ 63.269329][ T4710] loop1: detected capacity change from 0 to 1024 [ 63.333703][ T4710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.429504][ T4723] syzkaller0: entered allmulticast mode [ 63.437114][ T4723] syzkaller0: entered promiscuous mode [ 63.444825][ T4723] __nla_validate_parse: 1 callbacks suppressed [ 63.444840][ T4723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.397'. [ 63.460235][ T4723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.397'. [ 63.469280][ T4723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.397'. [ 63.484402][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.491977][ T4723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.501353][ T4723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.508832][ T4723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.517311][ T4723] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 63.524471][ T4723] batman_adv: batadv0: Removing interface: veth1_vlan [ 63.645115][ T4722] syzkaller0: left promiscuous mode [ 63.650699][ T4722] syzkaller0: left allmulticast mode [ 63.753657][ T4739] netlink: 'syz.4.399': attribute type 6 has an invalid length. [ 63.813580][ T4743] smc: net device bond0 applied user defined pnetid SYZ0 [ 63.823547][ T4743] smc: net device bond0 erased user defined pnetid SYZ0 [ 63.975239][ T4748] lo speed is unknown, defaulting to 1000 [ 63.981079][ T4748] lo speed is unknown, defaulting to 1000 [ 63.987000][ T4748] lo speed is unknown, defaulting to 1000 [ 63.993520][ T4748] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.003870][ T4748] lo speed is unknown, defaulting to 1000 [ 64.010131][ T4748] lo speed is unknown, defaulting to 1000 [ 64.016473][ T4748] lo speed is unknown, defaulting to 1000 [ 64.022676][ T4748] lo speed is unknown, defaulting to 1000 [ 64.028825][ T4748] lo speed is unknown, defaulting to 1000 [ 64.042836][ T4753] random: crng reseeded on system resumption [ 64.053314][ T4753] netlink: 464 bytes leftover after parsing attributes in process `syz.4.405'. [ 64.084497][ T4755] sch_fq: defrate 4294967295 ignored. [ 64.125109][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.193361][ T4763] lo speed is unknown, defaulting to 1000 [ 64.317626][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 64.326996][ T4767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.411'. [ 64.339068][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 64.407477][ T4768] lo speed is unknown, defaulting to 1000 [ 64.924640][ T4775] smc: net device bond0 applied user defined pnetid SYZ0 [ 64.932202][ T4775] smc: net device bond0 erased user defined pnetid SYZ0 [ 64.952803][ T4777] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.427376][ T4788] loop1: detected capacity change from 0 to 256 [ 65.488525][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 65.488545][ T29] audit: type=1326 audit(65.463:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.535208][ T4787] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 65.540068][ T4792] lo speed is unknown, defaulting to 1000 [ 65.558721][ T29] audit: type=1326 audit(65.493:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.581459][ T29] audit: type=1326 audit(65.503:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.604196][ T29] audit: type=1326 audit(65.503:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.626988][ T29] audit: type=1326 audit(65.503:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.649502][ T29] audit: type=1326 audit(65.503:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.672177][ T29] audit: type=1326 audit(65.503:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.694959][ T29] audit: type=1326 audit(65.503:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.695023][ T29] audit: type=1326 audit(65.503:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.695133][ T29] audit: type=1326 audit(65.503:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4787 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 65.915747][ T4806] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.055855][ T4814] loop1: detected capacity change from 0 to 512 [ 66.072864][ T4810] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 66.087908][ T4814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 66.089853][ T4813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.428'. [ 66.151232][ T4816] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.251117][ T4826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.434'. [ 66.346000][ T4836] 9pnet: Could not find request transport: 0xffffffffffffffff [ 66.395387][ T4841] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 66.709418][ T4854] siw: device registration error -23 [ 67.255811][ T4865] 9pnet: Could not find request transport: 0xffffffffffffffff [ 67.275595][ T4868] 9pnet: Could not find request transport: 0xffffffffffffffff [ 67.445471][ T4891] random: crng reseeded on system resumption [ 67.472580][ T4896] SELinux: security_context_str_to_sid (L) failed with errno=-22 [ 67.480546][ T4894] 9pnet: Could not find request transport: 0xffffffffffffffff [ 67.573859][ T4903] loop1: detected capacity change from 0 to 8192 [ 67.767217][ T4919] SELinux: Context system_u:object_r:dmidecode_exec_t:s0 is not valid (left unmapped). [ 67.846168][ T4927] lo speed is unknown, defaulting to 1000 [ 67.866985][ T4925] 9pnet: Could not find request transport: 0xffffffffffffffff [ 67.936532][ T4932] lo speed is unknown, defaulting to 1000 [ 67.961102][ T4937] netlink: 'syz.4.481': attribute type 6 has an invalid length. [ 68.065428][ T4952] random: crng reseeded on system resumption [ 68.121027][ T4954] 9pnet: Could not find request transport: 0xffffffffffffffff [ 68.250226][ T4963] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.257573][ T4963] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.282905][ T4969] random: crng reseeded on system resumption [ 68.310240][ T4972] lo speed is unknown, defaulting to 1000 [ 68.341332][ T4976] lo speed is unknown, defaulting to 1000 [ 68.350473][ T4978] netlink: 'syz.4.498': attribute type 6 has an invalid length. [ 68.363358][ T4977] lo speed is unknown, defaulting to 1000 [ 68.378280][ T4980] FAULT_INJECTION: forcing a failure. [ 68.378280][ T4980] name failslab, interval 1, probability 0, space 0, times 0 [ 68.391027][ T4980] CPU: 0 UID: 0 PID: 4980 Comm: syz.3.503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.391073][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.391086][ T4980] Call Trace: [ 68.391093][ T4980] [ 68.391100][ T4980] __dump_stack+0x1d/0x30 [ 68.391124][ T4980] dump_stack_lvl+0xe8/0x140 [ 68.391148][ T4980] dump_stack+0x15/0x1b [ 68.391169][ T4980] should_fail_ex+0x265/0x280 [ 68.391235][ T4980] should_failslab+0x8c/0xb0 [ 68.391310][ T4980] kmem_cache_alloc_node_noprof+0x57/0x320 [ 68.391345][ T4980] ? __alloc_skb+0x101/0x320 [ 68.391412][ T4980] __alloc_skb+0x101/0x320 [ 68.391432][ T4980] ? audit_log_start+0x365/0x6c0 [ 68.391474][ T4980] audit_log_start+0x380/0x6c0 [ 68.391513][ T4980] audit_seccomp+0x48/0x100 [ 68.391578][ T4980] ? __seccomp_filter+0x68c/0x10d0 [ 68.391605][ T4980] __seccomp_filter+0x69d/0x10d0 [ 68.391643][ T4980] __secure_computing+0x82/0x150 [ 68.391740][ T4980] syscall_trace_enter+0xcf/0x1e0 [ 68.391773][ T4980] do_syscall_64+0xac/0x200 [ 68.391812][ T4980] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.391841][ T4980] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.391875][ T4980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.391941][ T4980] RIP: 0033:0x7f6d6e5cd63c [ 68.391958][ T4980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 68.391975][ T4980] RSP: 002b:00007f6d6d037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 68.391998][ T4980] RAX: ffffffffffffffda RBX: 00007f6d6e815fa0 RCX: 00007f6d6e5cd63c [ 68.392031][ T4980] RDX: 000000000000000f RSI: 00007f6d6d0370a0 RDI: 000000000000000a [ 68.392042][ T4980] RBP: 00007f6d6d037090 R08: 0000000000000000 R09: 0000000000000000 [ 68.392112][ T4980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.392123][ T4980] R13: 00007f6d6e816038 R14: 00007f6d6e815fa0 R15: 00007ffe1daa6dd8 [ 68.392142][ T4980] [ 68.633103][ T4986] __nla_validate_parse: 7 callbacks suppressed [ 68.633122][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.504'. [ 68.653582][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'. [ 68.692674][ T4992] lo speed is unknown, defaulting to 1000 [ 68.703969][ T4996] loop1: detected capacity change from 0 to 256 [ 68.735949][ T4992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 68.765281][ T4995] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 68.785123][ T5002] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.792687][ T5002] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.805552][ T5004] smc: net device bond0 applied user defined pnetid SYZ0 [ 68.813404][ T5004] smc: net device bond0 erased user defined pnetid SYZ0 [ 68.840538][ T5008] random: crng reseeded on system resumption [ 68.992017][ T5020] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.011827][ T5017] siw: device registration error -23 [ 69.066991][ T5031] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.074817][ T5031] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.083353][ T5033] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.091856][ T5033] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.250556][ T5051] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.387807][ T5057] netlink: 'syz.0.533': attribute type 6 has an invalid length. [ 69.426159][ T5056] lo speed is unknown, defaulting to 1000 [ 69.482266][ T5054] lo speed is unknown, defaulting to 1000 [ 69.807969][ T5068] sch_fq: defrate 4294967295 ignored. [ 69.848249][ T5072] FAULT_INJECTION: forcing a failure. [ 69.848249][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 69.860996][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.4.540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.861029][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 69.861046][ T5072] Call Trace: [ 69.861054][ T5072] [ 69.861063][ T5072] __dump_stack+0x1d/0x30 [ 69.861089][ T5072] dump_stack_lvl+0xe8/0x140 [ 69.861113][ T5072] dump_stack+0x15/0x1b [ 69.861133][ T5072] should_fail_ex+0x265/0x280 [ 69.861159][ T5072] should_failslab+0x8c/0xb0 [ 69.861197][ T5072] kmem_cache_alloc_noprof+0x50/0x310 [ 69.861224][ T5072] ? mas_alloc_nodes+0x265/0x520 [ 69.861265][ T5072] mas_alloc_nodes+0x265/0x520 [ 69.861306][ T5072] mas_preallocate+0x33e/0x520 [ 69.861340][ T5072] __split_vma+0x240/0x650 [ 69.861374][ T5072] ? put_dec+0xd3/0xe0 [ 69.861400][ T5072] ? put_dec_trunc8+0x119/0x140 [ 69.861431][ T5072] vma_modify+0x21e/0xc80 [ 69.861453][ T5072] ? number+0x9ae/0xab0 [ 69.861485][ T5072] vma_modify_flags+0x101/0x130 [ 69.861531][ T5072] madvise_vma_behavior+0xde5/0x1cf0 [ 69.861577][ T5072] madvise_do_behavior+0x5b7/0x970 [ 69.861610][ T5072] do_madvise+0x10e/0x190 [ 69.861644][ T5072] __x64_sys_madvise+0x64/0x80 [ 69.861679][ T5072] x64_sys_call+0x1f1a/0x2ff0 [ 69.861700][ T5072] do_syscall_64+0xd2/0x200 [ 69.861733][ T5072] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.861762][ T5072] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 69.861796][ T5072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.861822][ T5072] RIP: 0033:0x7f22fa61ec29 [ 69.861840][ T5072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.861857][ T5072] RSP: 002b:00007f22f907f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 69.861876][ T5072] RAX: ffffffffffffffda RBX: 00007f22fa865fa0 RCX: 00007f22fa61ec29 [ 69.861888][ T5072] RDX: 0000000000000010 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 69.861899][ T5072] RBP: 00007f22f907f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.861912][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.861926][ T5072] R13: 00007f22fa866038 R14: 00007f22fa865fa0 R15: 00007ffdf9f8d6f8 [ 69.861949][ T5072] [ 70.104018][ T5078] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.303915][ T5090] smc: net device bond0 applied user defined pnetid SYZ0 [ 70.319966][ T5090] smc: net device bond0 erased user defined pnetid SYZ0 [ 70.367472][ T5092] lo speed is unknown, defaulting to 1000 [ 70.393701][ T5094] netlink: 'syz.1.548': attribute type 6 has an invalid length. [ 70.456360][ T5098] siw: device registration error -23 [ 70.617510][ T5105] sch_fq: defrate 4294967295 ignored. [ 70.750582][ T5107] loop1: detected capacity change from 0 to 8192 [ 70.798186][ T5111] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 70.828570][ T5113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.838907][ T5113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.850751][ T5114] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 71.193489][ T5116] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.293497][ T5116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.332774][ T5116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.366766][ T5122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.393151][ T5116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.417480][ T5122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.475499][ T3434] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.513264][ T3434] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.526918][ T3434] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.537287][ T3434] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.675792][ T5132] sch_fq: defrate 4294967295 ignored. [ 71.693632][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 71.693652][ T29] audit: type=1400 audit(71.673:2236): avc: denied { listen } for pid=5135 comm="syz.2.565" lport=47571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.772347][ T29] audit: type=1400 audit(71.723:2237): avc: denied { accept } for pid=5135 comm="syz.2.565" lport=47571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.794710][ T29] audit: type=1400 audit(71.743:2238): avc: denied { setopt } for pid=5135 comm="syz.2.565" lport=47571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.817667][ T29] audit: type=1400 audit(71.743:2239): avc: denied { write } for pid=5135 comm="syz.2.565" lport=47571 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 71.877790][ T5145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.930881][ T5143] loop1: detected capacity change from 0 to 8192 [ 71.971520][ T29] audit: type=1400 audit(71.943:2240): avc: denied { setopt } for pid=5135 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.990793][ T29] audit: type=1400 audit(71.943:2241): avc: denied { bind } for pid=5135 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.014103][ T5151] program syz.2.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.029479][ T5145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.040182][ T29] audit: type=1326 audit(72.003:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 72.062888][ T29] audit: type=1326 audit(72.003:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 72.085583][ T29] audit: type=1326 audit(72.003:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 72.108343][ T29] audit: type=1326 audit(72.003:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5150 comm="syz.2.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7068ec29 code=0x7ffc0000 [ 72.164815][ T5145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.217095][ T5145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.359144][ T3434] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.367740][ T3434] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.380847][ T3434] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.389900][ T3434] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.636451][ T5163] loop1: detected capacity change from 0 to 1024 [ 72.643854][ T5163] ext4: Bad value for 'max_dir_size_kb' [ 72.723130][ T5165] lo speed is unknown, defaulting to 1000 [ 72.764938][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 73.024712][ T5175] sch_fq: defrate 4294967295 ignored. [ 73.315509][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 73.345580][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 73.347051][ T5184] 9pnet: Could not find request transport: 0xffffffffffffffff [ 73.432457][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 73.442313][ T5197] netlink: 36 bytes leftover after parsing attributes in process `syz.2.587'. [ 73.480043][ T5198] lo speed is unknown, defaulting to 1000 [ 73.524960][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 74.505206][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.591'. [ 74.745019][ T5217] FAULT_INJECTION: forcing a failure. [ 74.745019][ T5217] name failslab, interval 1, probability 0, space 0, times 0 [ 74.757723][ T5217] CPU: 0 UID: 0 PID: 5217 Comm: syz.4.594 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.757758][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.757772][ T5217] Call Trace: [ 74.757834][ T5217] [ 74.757845][ T5217] __dump_stack+0x1d/0x30 [ 74.757872][ T5217] dump_stack_lvl+0xe8/0x140 [ 74.757898][ T5217] dump_stack+0x15/0x1b [ 74.757914][ T5217] should_fail_ex+0x265/0x280 [ 74.757938][ T5217] should_failslab+0x8c/0xb0 [ 74.758002][ T5217] __kmalloc_node_noprof+0xa9/0x410 [ 74.758041][ T5217] ? alloc_slab_obj_exts+0x31/0x80 [ 74.758078][ T5217] alloc_slab_obj_exts+0x31/0x80 [ 74.758114][ T5217] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 74.758242][ T5217] __kmalloc_noprof+0x27c/0x3e0 [ 74.758272][ T5217] ? __d_alloc+0x90/0x340 [ 74.758319][ T5217] __d_alloc+0x90/0x340 [ 74.758428][ T5217] d_alloc+0x2e/0x100 [ 74.758458][ T5217] lookup_one_qstr_excl+0x99/0x250 [ 74.758496][ T5217] filename_create+0x149/0x230 [ 74.758567][ T5217] do_mknodat+0xe7/0x610 [ 74.758609][ T5217] __x64_sys_mknod+0x51/0x60 [ 74.758648][ T5217] x64_sys_call+0x2d47/0x2ff0 [ 74.758677][ T5217] do_syscall_64+0xd2/0x200 [ 74.758721][ T5217] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.758882][ T5217] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.758921][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.758950][ T5217] RIP: 0033:0x7f22fa61ec29 [ 74.758970][ T5217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.758993][ T5217] RSP: 002b:00007f22f905e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 74.759074][ T5217] RAX: ffffffffffffffda RBX: 00007f22fa866090 RCX: 00007f22fa61ec29 [ 74.759088][ T5217] RDX: 0000000000000709 RSI: 0000000000000000 RDI: 0000200000000000 [ 74.759102][ T5217] RBP: 00007f22f905e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.759118][ T5217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.759133][ T5217] R13: 00007f22fa866128 R14: 00007f22fa866090 R15: 00007ffdf9f8d6f8 [ 74.759158][ T5217] [ 75.016723][ T5219] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.271422][ T5225] lo speed is unknown, defaulting to 1000 [ 75.653579][ T5232] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.774046][ T5234] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.999182][ T5246] 9pnet: Could not find request transport: 0xffffffffffffffff [ 76.177383][ T5258] sch_fq: defrate 4294967295 ignored. [ 76.255541][ T5263] siw: device registration error -23 [ 76.317478][ T5260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 76.438289][ T5272] netlink: 'syz.0.614': attribute type 6 has an invalid length. [ 76.486155][ T5273] random: crng reseeded on system resumption [ 76.641473][ T5266] lo speed is unknown, defaulting to 1000 [ 76.780087][ T5281] lo speed is unknown, defaulting to 1000 [ 77.019280][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 77.119341][ T5285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.621'. [ 77.136432][ T5287] 9pnet: Could not find request transport: 0xffffffffffffffff [ 77.203608][ T5285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'. [ 77.228363][ T5295] sch_fq: defrate 4294967295 ignored. [ 77.278359][ T5296] lo speed is unknown, defaulting to 1000 [ 77.321659][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 77.345442][ T5299] program syz.4.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.683434][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 77.683449][ T29] audit: type=1326 audit(77.366:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.712503][ T29] audit: type=1326 audit(77.366:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.735363][ T29] audit: type=1326 audit(77.366:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.758109][ T29] audit: type=1326 audit(77.366:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.780746][ T29] audit: type=1326 audit(77.366:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.803481][ T29] audit: type=1326 audit(77.666:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.826244][ T29] audit: type=1326 audit(77.666:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.849058][ T29] audit: type=1326 audit(77.666:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.872244][ T29] audit: type=1326 audit(77.666:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.894935][ T29] audit: type=1326 audit(77.666:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5297 comm="syz.4.625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 77.908463][ T5304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 78.004419][ T5310] lo speed is unknown, defaulting to 1000 [ 78.071813][ T5313] smc: net device bond0 applied user defined pnetid SYZ0 [ 78.086960][ T5310] netlink: 'syz.2.630': attribute type 6 has an invalid length. [ 78.321016][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 78.487382][ T5321] lo speed is unknown, defaulting to 1000 [ 78.580966][ T5324] 9pnet: Could not find request transport: 0xffffffffffffffff [ 78.746637][ T5331] random: crng reseeded on system resumption [ 78.782793][ T5331] netlink: 464 bytes leftover after parsing attributes in process `syz.4.637'. [ 78.879750][ T5336] syzkaller0: entered allmulticast mode [ 78.906017][ T5336] syzkaller0: entered promiscuous mode [ 78.924404][ T5336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.639'. [ 78.945761][ T5334] syzkaller0: left promiscuous mode [ 78.951349][ T5334] syzkaller0: left allmulticast mode [ 79.303368][ T5346] lo speed is unknown, defaulting to 1000 [ 79.338594][ T5347] netlink: 'syz.4.644': attribute type 6 has an invalid length. [ 79.568411][ T5352] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.698324][ T5358] __nla_validate_parse: 3 callbacks suppressed [ 79.698397][ T5358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.648'. [ 79.744752][ T5360] syzkaller0: entered allmulticast mode [ 79.761170][ T5360] syzkaller0: entered promiscuous mode [ 79.784373][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'. [ 79.793414][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'. [ 79.802487][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.650'. [ 79.852451][ T5359] syzkaller0: left promiscuous mode [ 79.857839][ T5359] syzkaller0: left allmulticast mode [ 79.895662][ T5365] lo speed is unknown, defaulting to 1000 [ 79.923869][ T5367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 80.013014][ T5373] lo speed is unknown, defaulting to 1000 [ 80.047290][ T5373] netlink: 'syz.4.655': attribute type 6 has an invalid length. [ 80.090655][ T5377] FAULT_INJECTION: forcing a failure. [ 80.090655][ T5377] name failslab, interval 1, probability 0, space 0, times 0 [ 80.103315][ T5377] CPU: 1 UID: 0 PID: 5377 Comm: syz.4.657 Not tainted syzkaller #0 PREEMPT(voluntary) [ 80.103343][ T5377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 80.103356][ T5377] Call Trace: [ 80.103362][ T5377] [ 80.103369][ T5377] __dump_stack+0x1d/0x30 [ 80.103460][ T5377] dump_stack_lvl+0xe8/0x140 [ 80.103482][ T5377] dump_stack+0x15/0x1b [ 80.103498][ T5377] should_fail_ex+0x265/0x280 [ 80.103577][ T5377] should_failslab+0x8c/0xb0 [ 80.103620][ T5377] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 80.103725][ T5377] ? sidtab_context_to_sid+0x1c5/0x5e0 [ 80.103772][ T5377] ? context_to_sid+0x2da/0x310 [ 80.103797][ T5377] kstrdup+0x3e/0xd0 [ 80.103840][ T5377] sidtab_context_to_sid+0x1c5/0x5e0 [ 80.103866][ T5377] security_context_to_sid_core+0x294/0x3b0 [ 80.103893][ T5377] security_context_to_sid_force+0x30/0x40 [ 80.103987][ T5377] selinux_inode_setxattr+0x4e8/0x6e0 [ 80.104137][ T5377] ? mntput+0x4b/0x80 [ 80.104227][ T5377] security_inode_setxattr+0x13a/0x1b0 [ 80.104268][ T5377] __vfs_setxattr_locked+0x83/0x1d0 [ 80.104302][ T5377] vfs_setxattr+0x132/0x270 [ 80.104344][ T5377] file_setxattr+0x139/0x1b0 [ 80.104401][ T5377] path_setxattrat+0x290/0x310 [ 80.104455][ T5377] __x64_sys_fsetxattr+0x6b/0x80 [ 80.104486][ T5377] x64_sys_call+0x1ced/0x2ff0 [ 80.104510][ T5377] do_syscall_64+0xd2/0x200 [ 80.104604][ T5377] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.104642][ T5377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 80.104681][ T5377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.104788][ T5377] RIP: 0033:0x7f22fa61ec29 [ 80.104803][ T5377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.104820][ T5377] RSP: 002b:00007f22f907f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 80.104842][ T5377] RAX: ffffffffffffffda RBX: 00007f22fa865fa0 RCX: 00007f22fa61ec29 [ 80.104857][ T5377] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 80.104872][ T5377] RBP: 00007f22f907f090 R08: 0000000000000003 R09: 0000000000000000 [ 80.104887][ T5377] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 80.104902][ T5377] R13: 00007f22fa866038 R14: 00007f22fa865fa0 R15: 00007ffdf9f8d6f8 [ 80.104966][ T5377] [ 80.973631][ T5396] syzkaller0: entered allmulticast mode [ 80.980195][ T5396] syzkaller0: entered promiscuous mode [ 80.987543][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 80.996589][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 81.005524][ T5396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 81.017399][ T5395] syzkaller0: left promiscuous mode [ 81.023044][ T5395] syzkaller0: left allmulticast mode [ 81.052488][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 81.203385][ T5406] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.264089][ T5414] block device autoloading is deprecated and will be removed. [ 81.281179][ T5414] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 81.423943][ T5422] lo speed is unknown, defaulting to 1000 [ 81.454780][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 81.503193][ T5429] syzkaller0: entered allmulticast mode [ 81.510349][ T5429] syzkaller0: entered promiscuous mode [ 81.519757][ T5428] syzkaller0: left promiscuous mode [ 81.525388][ T5428] syzkaller0: left allmulticast mode [ 81.820742][ T5439] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 82.047461][ T5447] block device autoloading is deprecated and will be removed. [ 82.056860][ T5447] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 82.216368][ T5457] lo speed is unknown, defaulting to 1000 [ 82.257941][ T5457] netlink: 'syz.0.693': attribute type 6 has an invalid length. [ 82.519471][ T5469] lo speed is unknown, defaulting to 1000 [ 82.686851][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.712616][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 82.712631][ T29] audit: type=1400 audit(82.696:2835): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop1" dev="devtmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.741432][ T29] audit: type=1400 audit(82.696:2836): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.763918][ T29] audit: type=1400 audit(82.696:2837): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=593 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 82.791968][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.436004][ T5476] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.534919][ T5476] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.612908][ T5476] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.647033][ T5487] lo speed is unknown, defaulting to 1000 [ 83.675646][ T5476] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.902970][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.920595][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.932333][ T29] audit: type=1326 audit(83.896:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 83.938772][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.955061][ T29] audit: type=1326 audit(83.896:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 83.985862][ T29] audit: type=1326 audit(83.896:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 83.987749][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.008516][ T29] audit: type=1326 audit(83.896:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 84.008551][ T29] audit: type=1326 audit(83.896:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 84.062120][ T29] audit: type=1326 audit(83.906:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 84.102668][ T29] audit: type=1326 audit(84.086:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.1.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 84.263868][ T5496] loop1: detected capacity change from 0 to 1024 [ 84.321269][ T5496] ext4: Bad value for 'max_dir_size_kb' [ 84.571361][ T5503] lo speed is unknown, defaulting to 1000 [ 84.590163][ T5507] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 84.811402][ T5521] syzkaller0: entered allmulticast mode [ 84.817548][ T5521] syzkaller0: entered promiscuous mode [ 84.905336][ T5520] syzkaller0: left promiscuous mode [ 84.910872][ T5520] syzkaller0: left allmulticast mode [ 85.930626][ T5540] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.014925][ T5540] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.033094][ T5542] __nla_validate_parse: 12 callbacks suppressed [ 86.033108][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 86.048966][ T5542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.723'. [ 86.061247][ T5540] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.071194][ T5542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 86.113620][ T5540] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.145823][ T5546] sch_fq: defrate 4294967295 ignored. [ 86.264211][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.273023][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.501542][ T5557] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.597616][ T5557] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.641784][ T5559] syzkaller0: entered allmulticast mode [ 86.647911][ T5559] syzkaller0: entered promiscuous mode [ 86.658755][ T5557] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.676765][ T5559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 86.685987][ T5559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 86.694908][ T5559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.730'. [ 86.719188][ T5557] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.734707][ T5558] syzkaller0: left promiscuous mode [ 86.740139][ T5558] syzkaller0: left allmulticast mode [ 86.817625][ T3434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.833684][ T3434] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.842258][ T3434] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.850561][ T3434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.053095][ T5571] lo speed is unknown, defaulting to 1000 [ 88.314648][ T5573] syzkaller0: entered allmulticast mode [ 88.338967][ T5573] syzkaller0: entered promiscuous mode [ 88.373106][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 88.382107][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 88.391034][ T5573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.735'. [ 88.479966][ T5572] syzkaller0: left promiscuous mode [ 88.485493][ T5572] syzkaller0: left allmulticast mode [ 88.719460][ T5586] syzkaller0: entered allmulticast mode [ 88.728539][ T5586] syzkaller0: entered promiscuous mode [ 88.738236][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 88.738255][ T29] audit: type=1326 audit(88.717:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.767518][ T29] audit: type=1326 audit(88.717:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.790455][ T29] audit: type=1326 audit(88.717:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.813427][ T29] audit: type=1326 audit(88.747:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.836196][ T29] audit: type=1326 audit(88.747:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.858979][ T29] audit: type=1326 audit(88.747:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.881625][ T29] audit: type=1326 audit(88.777:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.904395][ T29] audit: type=1326 audit(88.847:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.927214][ T29] audit: type=1326 audit(88.847:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.950056][ T29] audit: type=1326 audit(88.847:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5587 comm="syz.1.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 88.972897][ T5585] syzkaller0: left promiscuous mode [ 88.978260][ T5585] syzkaller0: left allmulticast mode [ 89.088376][ T5598] block device autoloading is deprecated and will be removed. [ 89.100288][ T5598] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 89.120223][ T5596] lo speed is unknown, defaulting to 1000 [ 89.141754][ T5600] netlink: 'syz.2.746': attribute type 6 has an invalid length. [ 90.355752][ T5604] lo speed is unknown, defaulting to 1000 [ 90.401366][ T5611] random: crng reseeded on system resumption [ 90.414324][ T5613] lo speed is unknown, defaulting to 1000 [ 90.449685][ T5613] netlink: 'syz.2.752': attribute type 6 has an invalid length. [ 90.473204][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.494365][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.512284][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.522176][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.538780][ T5620] syzkaller0: entered allmulticast mode [ 90.544966][ T5621] syzkaller0: entered allmulticast mode [ 90.550884][ T5620] syzkaller0: entered promiscuous mode [ 90.557209][ T5621] syzkaller0: entered promiscuous mode [ 90.585030][ T5619] syzkaller0: left promiscuous mode [ 90.590406][ T5619] syzkaller0: left allmulticast mode [ 90.596493][ T5618] syzkaller0: left promiscuous mode [ 90.601872][ T5618] syzkaller0: left allmulticast mode [ 90.644781][ T5627] syzkaller0: entered allmulticast mode [ 90.658249][ T5627] syzkaller0: entered promiscuous mode [ 90.674857][ T5625] syzkaller0: left promiscuous mode [ 90.680303][ T5625] syzkaller0: left allmulticast mode [ 90.716235][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 90.726997][ T5632] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.767470][ T5637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.813077][ T5641] lo speed is unknown, defaulting to 1000 [ 90.851894][ T5641] netlink: 'syz.1.766': attribute type 6 has an invalid length. [ 90.917107][ T5650] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.027848][ T5651] lo speed is unknown, defaulting to 1000 [ 91.159372][ T5650] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.218558][ T5652] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 91.237312][ T5650] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.325916][ T5650] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.446365][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.455120][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.461388][ T5654] block device autoloading is deprecated and will be removed. [ 91.463644][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.480194][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489623][ T5654] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 91.508272][ T5656] block device autoloading is deprecated and will be removed. [ 91.604077][ T5662] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.707851][ T5669] __nla_validate_parse: 3 callbacks suppressed [ 91.707869][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 91.723634][ T5669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.775'. [ 91.733548][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 91.746640][ T5670] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.856161][ T5681] block device autoloading is deprecated and will be removed. [ 91.873729][ T5681] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 91.926720][ T5684] lo speed is unknown, defaulting to 1000 [ 91.937604][ T5686] 9pnet_fd: Insufficient options for proto=fd [ 91.988253][ T5690] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 92.088366][ T5692] smc: net device bond0 erased user defined pnetid SYZ0 [ 92.097287][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.106295][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.120239][ T5696] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.162719][ T5696] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.184872][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 92.223373][ T5698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'. [ 92.244101][ T5696] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.267164][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 92.325189][ T5696] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.434186][ T5701] 9pnet: Could not find request transport: 0xffffffffffffffff [ 92.446906][ T3423] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.466426][ T3423] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.492219][ T3423] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.511643][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799520][ T5711] 9pnet_fd: Insufficient options for proto=fd [ 92.806609][ T5711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 92.872290][ T5710] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.922179][ T5710] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.973111][ T5710] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.995119][ T5714] smc: net device bond0 applied user defined pnetid SYZ0 [ 93.019695][ T5716] 9pnet_fd: Insufficient options for proto=fd [ 93.028092][ T5710] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.048455][ T5718] sch_fq: defrate 4294967295 ignored. [ 93.067787][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.079267][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.090478][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.102582][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118878][ T5720] block device autoloading is deprecated and will be removed. [ 93.128038][ T5720] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 93.158349][ T5722] block device autoloading is deprecated and will be removed. [ 93.169464][ T5722] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 93.313789][ T5733] smc: net device bond0 erased user defined pnetid SYZ0 [ 93.345620][ T5734] lo speed is unknown, defaulting to 1000 [ 93.450633][ T5737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.799'. [ 93.557947][ T5743] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 93.635820][ T5745] lo speed is unknown, defaulting to 1000 [ 93.884575][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 93.890916][ T29] audit: type=1326 audit(93.867:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 93.947728][ T29] audit: type=1326 audit(93.897:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 93.970522][ T29] audit: type=1326 audit(93.897:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 93.993365][ T29] audit: type=1326 audit(93.897:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.014952][ T5749] sch_fq: defrate 4294967295 ignored. [ 94.016157][ T29] audit: type=1326 audit(93.897:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.045415][ T29] audit: type=1326 audit(93.897:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.068439][ T29] audit: type=1326 audit(93.897:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.091113][ T29] audit: type=1326 audit(93.907:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.113869][ T29] audit: type=1326 audit(93.907:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.136721][ T29] audit: type=1326 audit(93.907:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5746 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 94.515670][ T5754] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 94.537085][ T5755] lo speed is unknown, defaulting to 1000 [ 94.645228][ T5755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 94.780271][ T5759] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 95.086033][ T5766] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.154172][ T5767] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.204347][ T5769] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.351388][ T5777] sch_fq: defrate 4294967295 ignored. [ 95.444380][ T5786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.503043][ T5786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.538864][ T5790] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.564164][ T5786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.581928][ T5794] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.589563][ T5794] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.623824][ T5786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.626829][ T5796] 9pnet: Could not find request transport: 0xffffffffffffffff [ 95.736590][ T5807] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.929178][ T5813] 9pnet_fd: Insufficient options for proto=fd [ 96.044696][ T5821] smc: net device bond0 erased user defined pnetid SYZ0 [ 96.935349][ T5847] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.227282][ T5861] 9pnet: Could not find request transport: 0xffffffffffffffff [ 97.252517][ T5864] sch_fq: defrate 4294967295 ignored. [ 97.458994][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.477749][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486293][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.496079][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.519088][ T5880] random: crng reseeded on system resumption [ 97.547904][ T5884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.865'. [ 97.589424][ T5888] lo speed is unknown, defaulting to 1000 [ 97.660312][ T5888] netlink: 'syz.0.867': attribute type 6 has an invalid length. [ 97.691897][ T5891] block device autoloading is deprecated and will be removed. [ 97.703346][ T5891] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 97.805393][ T5893] siw: device registration error -23 [ 97.889113][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 97.915381][ T5900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.872'. [ 97.991556][ T5909] block device autoloading is deprecated and will be removed. [ 98.012901][ T5909] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.047285][ T5907] loop1: detected capacity change from 0 to 8192 [ 98.076964][ T5911] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.103681][ T5889] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 98.104005][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 98.123832][ T5915] lo speed is unknown, defaulting to 1000 [ 98.166138][ T5916] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 98.202448][ T5919] netlink: 'syz.4.879': attribute type 6 has an invalid length. [ 98.482858][ T5933] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.523378][ T5933] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.604846][ T5933] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.648981][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 98.660301][ T5933] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.672082][ T5935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.887'. [ 98.706595][ T5937] block device autoloading is deprecated and will be removed. [ 98.816112][ T5943] random: crng reseeded on system resumption [ 98.835222][ T5945] sch_fq: defrate 4294967295 ignored. [ 99.169349][ T5959] siw: device registration error -23 [ 99.229850][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 99.239512][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.898'. [ 99.282472][ T5964] block device autoloading is deprecated and will be removed. [ 99.294368][ T5964] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 99.503562][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.2.902'. [ 99.514042][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 99.514105][ T29] audit: type=1400 audit(99.497:3295): avc: denied { ioctl } for pid=5972 comm="syz.2.902" path="socket:[17731]" dev="sockfs" ino=17731 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.609164][ T5974] lo speed is unknown, defaulting to 1000 [ 99.752668][ T5976] random: crng reseeded on system resumption [ 99.815491][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.865579][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.297570][ T5985] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.454396][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.909'. [ 100.582842][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.910'. [ 100.733415][ T5985] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.768181][ T29] audit: type=1326 audit(100.747:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.791137][ T29] audit: type=1326 audit(100.747:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.817300][ T5985] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.844902][ T29] audit: type=1326 audit(100.797:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.867765][ T29] audit: type=1326 audit(100.797:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.891312][ T29] audit: type=1326 audit(100.797:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.914281][ T29] audit: type=1326 audit(100.797:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.940407][ T29] audit: type=1326 audit(100.797:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.963880][ T29] audit: type=1326 audit(100.797:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 100.988615][ T29] audit: type=1326 audit(100.797:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f22fa61ec29 code=0x7ffc0000 [ 101.033674][ T5985] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.049145][ T6001] syzkaller0: entered allmulticast mode [ 101.055118][ T6001] syzkaller0: entered promiscuous mode [ 101.063400][ T6000] syzkaller0: left promiscuous mode [ 101.069027][ T6000] syzkaller0: left allmulticast mode [ 101.094603][ T6003] sch_fq: defrate 4294967295 ignored. [ 101.105831][ T3423] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.115491][ T3423] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.124740][ T3423] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.137845][ T3423] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.161950][ T6005] lo speed is unknown, defaulting to 1000 [ 101.206439][ T6005] netlink: 'syz.1.916': attribute type 6 has an invalid length. [ 101.449646][ T6015] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.770005][ T6022] lo speed is unknown, defaulting to 1000 [ 102.327009][ T6028] siw: device registration error -23 [ 102.376699][ T6027] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.372812][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.400862][ T6033] sch_fq: defrate 4294967295 ignored. [ 103.413058][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.432937][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461225][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.566794][ T6045] block device autoloading is deprecated and will be removed. [ 103.613679][ T6045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 103.616744][ T6051] capability: warning: `syz.2.933' uses deprecated v2 capabilities in a way that may be insecure [ 103.717348][ T6055] lo speed is unknown, defaulting to 1000 [ 103.796072][ T6057] __nla_validate_parse: 4 callbacks suppressed [ 103.796093][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 103.884446][ T6061] block device autoloading is deprecated and will be removed. [ 103.914022][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.939042][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.963035][ T6061] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 104.362534][ T6070] lo speed is unknown, defaulting to 1000 [ 106.968064][ T6067] lo speed is unknown, defaulting to 1000 [ 109.077286][ T6079] sch_fq: defrate 4294967295 ignored. [ 109.085664][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 109.085749][ T29] audit: type=1400 audit(109.070:3378): avc: denied { mount } for pid=6081 comm="syz.1.944" name="/" dev="ramfs" ino=18895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 109.095289][ T6082] netlink: 36 bytes leftover after parsing attributes in process `syz.1.944'. [ 109.162759][ T6085] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.171423][ T6085] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.178506][ T6090] smc: net device bond0 applied user defined pnetid SYZ0 [ 109.198173][ T6086] smc: net device bond0 erased user defined pnetid SYZ0 [ 109.223712][ T29] audit: type=1326 audit(109.200:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.246768][ T29] audit: type=1326 audit(109.200:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.275132][ T29] audit: type=1326 audit(109.250:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.298215][ T29] audit: type=1326 audit(109.250:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.321455][ T29] audit: type=1326 audit(109.250:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.344525][ T29] audit: type=1326 audit(109.250:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.367409][ T29] audit: type=1326 audit(109.250:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.390435][ T29] audit: type=1400 audit(109.250:3386): avc: denied { name_bind } for pid=6093 comm="syz.3.950" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.412171][ T29] audit: type=1326 audit(109.250:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6091 comm="syz.0.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93d65ec29 code=0x7ffc0000 [ 109.417244][ T6098] FAULT_INJECTION: forcing a failure. [ 109.417244][ T6098] name failslab, interval 1, probability 0, space 0, times 0 [ 109.447636][ T6098] CPU: 1 UID: 0 PID: 6098 Comm: syz.0.952 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.447677][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 109.447694][ T6098] Call Trace: [ 109.447701][ T6098] [ 109.447710][ T6098] __dump_stack+0x1d/0x30 [ 109.447733][ T6098] dump_stack_lvl+0xe8/0x140 [ 109.447752][ T6098] dump_stack+0x15/0x1b [ 109.447774][ T6098] should_fail_ex+0x265/0x280 [ 109.447845][ T6098] should_failslab+0x8c/0xb0 [ 109.447877][ T6098] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 109.447923][ T6098] ? sidtab_context_to_sid+0x1c5/0x5e0 [ 109.447944][ T6098] ? context_to_sid+0x2da/0x310 [ 109.448042][ T6098] kstrdup+0x3e/0xd0 [ 109.448069][ T6098] sidtab_context_to_sid+0x1c5/0x5e0 [ 109.448164][ T6098] security_context_to_sid_core+0x294/0x3b0 [ 109.448197][ T6098] security_context_to_sid_force+0x30/0x40 [ 109.448219][ T6098] selinux_inode_setxattr+0x4e8/0x6e0 [ 109.448322][ T6098] ? mntput+0x4b/0x80 [ 109.448354][ T6098] security_inode_setxattr+0x13a/0x1b0 [ 109.448422][ T6098] __vfs_setxattr_locked+0x83/0x1d0 [ 109.448454][ T6098] vfs_setxattr+0x132/0x270 [ 109.448544][ T6098] file_setxattr+0x139/0x1b0 [ 109.448575][ T6098] path_setxattrat+0x290/0x310 [ 109.448626][ T6098] __x64_sys_fsetxattr+0x6b/0x80 [ 109.448659][ T6098] x64_sys_call+0x1ced/0x2ff0 [ 109.448731][ T6098] do_syscall_64+0xd2/0x200 [ 109.448771][ T6098] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.448860][ T6098] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.448896][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.448917][ T6098] RIP: 0033:0x7fc93d65ec29 [ 109.448933][ T6098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.449023][ T6098] RSP: 002b:00007fc93c0bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 109.449052][ T6098] RAX: ffffffffffffffda RBX: 00007fc93d8a5fa0 RCX: 00007fc93d65ec29 [ 109.449068][ T6098] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 109.449080][ T6098] RBP: 00007fc93c0bf090 R08: 0000000000000003 R09: 0000000000000000 [ 109.449092][ T6098] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 109.449105][ T6098] R13: 00007fc93d8a6038 R14: 00007fc93d8a5fa0 R15: 00007ffd2b1d7ef8 [ 109.449129][ T6098] [ 109.681890][ T6099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.690401][ T6099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.782228][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.950'. [ 109.810385][ T6103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6103 comm=syz.1.953 [ 109.822963][ T6103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6103 comm=syz.1.953 [ 109.990322][ T6109] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 110.007191][ T6112] lo speed is unknown, defaulting to 1000 [ 110.030347][ T6114] syzkaller0: entered allmulticast mode [ 110.043299][ T6114] syzkaller0: entered promiscuous mode [ 110.055658][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 110.064755][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 110.073655][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 110.094358][ T6115] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.142782][ T6112] netlink: 'syz.4.956': attribute type 6 has an invalid length. [ 110.157705][ T6115] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.186768][ T6113] syzkaller0: left promiscuous mode [ 110.192242][ T6113] syzkaller0: left allmulticast mode [ 110.232221][ T6115] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.292599][ T6115] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.336784][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 110.354008][ T6123] smc: net device bond0 applied user defined pnetid SYZ0 [ 110.374138][ T6122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.959'. [ 110.388479][ T6122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.959'. [ 110.423654][ T3423] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.438260][ T3423] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.450723][ T3423] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.459461][ T3423] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.469072][ T6125] smc: net device bond0 erased user defined pnetid SYZ0 [ 110.511579][ T6132] sch_fq: defrate 4294967295 ignored. [ 110.666645][ T6143] lo speed is unknown, defaulting to 1000 [ 110.691865][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 110.825427][ T6149] lo speed is unknown, defaulting to 1000 [ 111.348580][ T6151] FAULT_INJECTION: forcing a failure. [ 111.348580][ T6151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.361847][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.4.969 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.361881][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.361926][ T6151] Call Trace: [ 111.361933][ T6151] [ 111.361940][ T6151] __dump_stack+0x1d/0x30 [ 111.361960][ T6151] dump_stack_lvl+0xe8/0x140 [ 111.361976][ T6151] dump_stack+0x15/0x1b [ 111.361990][ T6151] should_fail_ex+0x265/0x280 [ 111.362067][ T6151] should_fail+0xb/0x20 [ 111.362093][ T6151] should_fail_usercopy+0x1a/0x20 [ 111.362158][ T6151] _copy_to_user+0x20/0xa0 [ 111.362187][ T6151] simple_read_from_buffer+0xb5/0x130 [ 111.362261][ T6151] proc_fail_nth_read+0x10e/0x150 [ 111.362371][ T6151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.362394][ T6151] vfs_read+0x1a5/0x770 [ 111.362447][ T6151] ? __rcu_read_unlock+0x4f/0x70 [ 111.362475][ T6151] ? __fget_files+0x184/0x1c0 [ 111.362511][ T6151] ksys_read+0xda/0x1a0 [ 111.362533][ T6151] __x64_sys_read+0x40/0x50 [ 111.362552][ T6151] x64_sys_call+0x27bc/0x2ff0 [ 111.362659][ T6151] do_syscall_64+0xd2/0x200 [ 111.362688][ T6151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.362720][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.362750][ T6151] RIP: 0033:0x7f22fa61d63c [ 111.362763][ T6151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.362784][ T6151] RSP: 002b:00007f22f907f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.362866][ T6151] RAX: ffffffffffffffda RBX: 00007f22fa865fa0 RCX: 00007f22fa61d63c [ 111.362882][ T6151] RDX: 000000000000000f RSI: 00007f22f907f0a0 RDI: 0000000000000005 [ 111.362897][ T6151] RBP: 00007f22f907f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.362912][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.362926][ T6151] R13: 00007f22fa866038 R14: 00007f22fa865fa0 R15: 00007ffdf9f8d6f8 [ 111.362947][ T6151] [ 111.643706][ T6157] syzkaller0: entered promiscuous mode [ 111.649604][ T6157] syzkaller0: entered allmulticast mode [ 111.680407][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 111.695212][ T6165] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.702696][ T6165] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.756018][ T6173] sch_fq: defrate 4294967295 ignored. [ 111.852815][ T6185] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.886237][ T6192] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.894968][ T6192] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.895112][ T6190] loop1: detected capacity change from 0 to 8192 [ 111.934019][ T6195] FAULT_INJECTION: forcing a failure. [ 111.934019][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 111.946769][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.0.988 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.946800][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.946818][ T6195] Call Trace: [ 111.946827][ T6195] [ 111.946836][ T6195] __dump_stack+0x1d/0x30 [ 111.946879][ T6195] dump_stack_lvl+0xe8/0x140 [ 111.947042][ T6195] dump_stack+0x15/0x1b [ 111.947058][ T6195] should_fail_ex+0x265/0x280 [ 111.947082][ T6195] should_failslab+0x8c/0xb0 [ 111.947113][ T6195] kmem_cache_alloc_noprof+0x50/0x310 [ 111.947173][ T6195] ? skb_clone+0x151/0x1f0 [ 111.947207][ T6195] skb_clone+0x151/0x1f0 [ 111.947238][ T6195] __netlink_deliver_tap+0x2c9/0x500 [ 111.947311][ T6195] ? netlink_attachskb+0x2d0/0x610 [ 111.947389][ T6195] netlink_sendskb+0x126/0x150 [ 111.947414][ T6195] netlink_unicast+0x2a2/0x690 [ 111.947460][ T6195] netlink_ack+0x4c8/0x500 [ 111.947486][ T6195] netlink_rcv_skb+0x192/0x220 [ 111.947510][ T6195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.947557][ T6195] rtnetlink_rcv+0x1c/0x30 [ 111.947626][ T6195] netlink_unicast+0x5bd/0x690 [ 111.947650][ T6195] netlink_sendmsg+0x58b/0x6b0 [ 111.947679][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.947759][ T6195] __sock_sendmsg+0x142/0x180 [ 111.947794][ T6195] ____sys_sendmsg+0x31e/0x4e0 [ 111.947855][ T6195] ___sys_sendmsg+0x17b/0x1d0 [ 111.947968][ T6195] __x64_sys_sendmsg+0xd4/0x160 [ 111.948007][ T6195] x64_sys_call+0x191e/0x2ff0 [ 111.948042][ T6195] do_syscall_64+0xd2/0x200 [ 111.948081][ T6195] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.948111][ T6195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 111.948148][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.948214][ T6195] RIP: 0033:0x7fc93d65ec29 [ 111.948234][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.948315][ T6195] RSP: 002b:00007fc93c0bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.948338][ T6195] RAX: ffffffffffffffda RBX: 00007fc93d8a5fa0 RCX: 00007fc93d65ec29 [ 111.948353][ T6195] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 111.948367][ T6195] RBP: 00007fc93c0bf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.948381][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.948396][ T6195] R13: 00007fc93d8a6038 R14: 00007fc93d8a5fa0 R15: 00007ffd2b1d7ef8 [ 111.948482][ T6195] [ 112.204654][ T6197] loop1: detected capacity change from 0 to 1024 [ 112.225140][ T6197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.271466][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.288381][ T6206] sch_fq: defrate 4294967295 ignored. [ 112.394319][ T6221] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 112.406082][ T6224] smc: net device bond0 applied user defined pnetid SYZ0 [ 112.415182][ T6224] smc: net device bond0 erased user defined pnetid SYZ0 [ 112.447037][ T6227] FAULT_INJECTION: forcing a failure. [ 112.447037][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 112.460013][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.2.1001 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.460047][ T6227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 112.460059][ T6227] Call Trace: [ 112.460066][ T6227] [ 112.460073][ T6227] __dump_stack+0x1d/0x30 [ 112.460094][ T6227] dump_stack_lvl+0xe8/0x140 [ 112.460114][ T6227] dump_stack+0x15/0x1b [ 112.460135][ T6227] should_fail_ex+0x265/0x280 [ 112.460165][ T6227] should_failslab+0x8c/0xb0 [ 112.460196][ T6227] kmem_cache_alloc_noprof+0x50/0x310 [ 112.460230][ T6227] ? mas_alloc_nodes+0x265/0x520 [ 112.460274][ T6227] mas_alloc_nodes+0x265/0x520 [ 112.460316][ T6227] mas_preallocate+0x33e/0x520 [ 112.460361][ T6227] mmap_region+0xbdd/0x1630 [ 112.460413][ T6227] do_mmap+0x9b3/0xbe0 [ 112.460456][ T6227] vm_mmap_pgoff+0x17a/0x2e0 [ 112.460498][ T6227] ksys_mmap_pgoff+0xc2/0x310 [ 112.460520][ T6227] ? __x64_sys_mmap+0x49/0x70 [ 112.460563][ T6227] x64_sys_call+0x14a3/0x2ff0 [ 112.460590][ T6227] do_syscall_64+0xd2/0x200 [ 112.460628][ T6227] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 112.460658][ T6227] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.460693][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.460714][ T6227] RIP: 0033:0x7f0d7068ec63 [ 112.460731][ T6227] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 112.460751][ T6227] RSP: 002b:00007f0d6f0f6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 112.460782][ T6227] RAX: ffffffffffffffda RBX: 0000000000000551 RCX: 00007f0d7068ec63 [ 112.460797][ T6227] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 112.460812][ T6227] RBP: 0000200000000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 112.460827][ T6227] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 112.460842][ T6227] R13: 00007f0d6f0f6ef0 R14: 00007f0d6f0f6eb0 R15: 0000200000000fc0 [ 112.460865][ T6227] [ 112.704847][ T6235] sch_fq: defrate 4294967295 ignored. [ 112.840756][ T6253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.849627][ T6253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.871229][ T6255] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.915700][ T6257] syzkaller0: entered allmulticast mode [ 112.932578][ T6255] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.944098][ T6257] syzkaller0: entered promiscuous mode [ 112.958443][ T6256] syzkaller0: left promiscuous mode [ 112.963997][ T6256] syzkaller0: left allmulticast mode [ 113.001758][ T6259] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.059805][ T6255] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.104152][ T6259] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.128531][ T6255] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.216283][ T6259] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.243809][ T6261] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.340765][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.350339][ T6261] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.382119][ T6259] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.395593][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.404107][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.413754][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.425451][ T6263] vlan2: entered promiscuous mode [ 113.430596][ T6263] bridge0: entered promiscuous mode [ 113.463934][ T6261] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.483479][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.493251][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.610244][ T6261] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.762326][ T6270] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.823392][ T6270] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.883371][ T6270] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.943217][ T6270] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.958352][ T6269] loop3: detected capacity change from 0 to 512 [ 114.080913][ T6269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.369091][ T6276] 9pnet: Could not find request transport: 0xffffffffffffffff [ 114.474327][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 114.474400][ T29] audit: type=1326 audit(114.440:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.503799][ T29] audit: type=1326 audit(114.440:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.527010][ T29] audit: type=1326 audit(114.440:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.550117][ T29] audit: type=1326 audit(114.440:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.573431][ T29] audit: type=1326 audit(114.440:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.596416][ T29] audit: type=1326 audit(114.440:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.619243][ T29] audit: type=1326 audit(114.440:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.642085][ T29] audit: type=1326 audit(114.440:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.665002][ T29] audit: type=1326 audit(114.440:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.687863][ T29] audit: type=1326 audit(114.440:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39ade7ec29 code=0x7ffc0000 [ 114.711879][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.765489][ T6290] random: crng reseeded on system resumption [ 114.788656][ T6294] __nla_validate_parse: 7 callbacks suppressed [ 114.788670][ T6294] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1026'. [ 114.879486][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 114.920126][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.939356][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.952557][ T6303] smc: net device bond0 applied user defined pnetid SYZ0 [ 114.952662][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.968493][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.022761][ T6305] loop3: detected capacity change from 0 to 164 [ 115.031879][ T6305] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 115.322333][ T6314] loop3: detected capacity change from 0 to 256 [ 115.343645][ T6313] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 115.404789][ T6316] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.565783][ T6322] random: crng reseeded on system resumption [ 115.627839][ T6324] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1039'. [ 115.796351][ T6332] smc: net device bond0 erased user defined pnetid SYZ0 [ 115.818350][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'. [ 115.839377][ T6336] lo speed is unknown, defaulting to 1000 [ 115.869450][ T6336] netlink: 'syz.1.1045': attribute type 6 has an invalid length. [ 115.904209][ T6341] 9pnet: Could not find request transport: 0xffffffffffffffff [ 115.946375][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.954983][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.179686][ T6354] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.238125][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1052'. [ 116.250076][ T6354] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.313043][ T6354] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.356491][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.379144][ T6354] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.427205][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.516517][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.528467][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.536795][ T6361] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 116.544757][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.553203][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.561587][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.570063][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.643860][ T6367] 9pnet: Could not find request transport: 0xffffffffffffffff [ 116.672975][ T6370] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 116.848054][ T6382] random: crng reseeded on system resumption [ 116.899225][ T6384] syzkaller0: entered allmulticast mode [ 116.905124][ T6384] syzkaller0: entered promiscuous mode [ 116.912260][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 116.921301][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 116.930288][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1065'. [ 116.946348][ T6383] syzkaller0: left promiscuous mode [ 116.952031][ T6383] syzkaller0: left allmulticast mode [ 116.979591][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1067'. [ 117.005220][ T6390] 9pnet: Could not find request transport: 0xffffffffffffffff [ 117.035160][ T6398] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1072'. [ 117.053573][ T6395] smc: net device bond0 applied user defined pnetid SYZ0 [ 117.108407][ T6405] lo speed is unknown, defaulting to 1000 [ 117.138272][ T6409] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 117.334819][ T6418] lo speed is unknown, defaulting to 1000 [ 117.490997][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.499992][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.792892][ T6425] syzkaller0: entered allmulticast mode [ 117.798757][ T6425] syzkaller0: entered promiscuous mode [ 117.806887][ T6424] syzkaller0: left promiscuous mode [ 117.812287][ T6424] syzkaller0: left allmulticast mode [ 117.856762][ T6429] SELinux: Context @ is not valid (left unmapped). [ 117.870622][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.882476][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.894342][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.905139][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.987271][ T6434] sch_fq: defrate 4294967295 ignored. [ 118.043612][ T6440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.052372][ T6440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.476379][ T6450] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.553805][ T6450] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.643145][ T6450] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.682764][ T6450] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.080495][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.090954][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.412425][ T6461] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.473731][ T6461] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.543297][ T6461] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.593416][ T6461] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.090818][ T6463] __nla_validate_parse: 7 callbacks suppressed [ 120.090838][ T6463] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1095'. [ 120.106490][ T6463] team0: No ports can be present during mode change [ 120.117708][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1095'. [ 120.329128][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.350625][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.366493][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.379150][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.390318][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.401582][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.412643][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.426619][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.443145][ T6467] sch_fq: defrate 4294967295 ignored. [ 120.915112][ T6476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.925798][ T6476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.074990][ T6478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1101'. [ 121.084746][ T6478] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1101'. [ 121.126339][ T6482] random: crng reseeded on system resumption [ 121.214712][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 121.214732][ T29] audit: type=1326 audit(121.190:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.220222][ T6484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1104'. [ 121.221689][ T29] audit: type=1326 audit(121.190:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.221775][ T29] audit: type=1326 audit(121.190:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.299914][ T29] audit: type=1326 audit(121.190:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.322951][ T29] audit: type=1326 audit(121.190:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.346159][ T29] audit: type=1326 audit(121.190:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.369090][ T29] audit: type=1326 audit(121.190:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.392126][ T29] audit: type=1326 audit(121.190:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.415656][ T29] audit: type=1326 audit(121.190:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d6e5cec29 code=0x7ffc0000 [ 121.438876][ T29] audit: type=1326 audit(121.190:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.3.1104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d6e5d0b47 code=0x7ffc0000 [ 121.554490][ T6495] sch_fq: defrate 4294967295 ignored. [ 121.607056][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 121.636536][ T6502] siw: device registration error -23 [ 121.791933][ T6508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6508 comm=syz.2.1113 [ 121.806565][ T6508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6508 comm=syz.2.1113 [ 121.897265][ T6514] FAULT_INJECTION: forcing a failure. [ 121.897265][ T6514] name failslab, interval 1, probability 0, space 0, times 0 [ 121.910194][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.2.1117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.910227][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.910242][ T6514] Call Trace: [ 121.910250][ T6514] [ 121.910257][ T6514] __dump_stack+0x1d/0x30 [ 121.910279][ T6514] dump_stack_lvl+0xe8/0x140 [ 121.910379][ T6514] dump_stack+0x15/0x1b [ 121.910396][ T6514] should_fail_ex+0x265/0x280 [ 121.910420][ T6514] should_failslab+0x8c/0xb0 [ 121.910445][ T6514] __kmalloc_node_noprof+0xa9/0x410 [ 121.910515][ T6514] ? crypto_create_tfm_node+0x5c/0x250 [ 121.910539][ T6514] crypto_create_tfm_node+0x5c/0x250 [ 121.910563][ T6514] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 121.910664][ T6514] crypto_alloc_tfm_node+0xdc/0x2b0 [ 121.910694][ T6514] crypto_alloc_aead+0x2d/0x40 [ 121.910799][ T6514] esp_init_state+0x3f3/0xa00 [ 121.910857][ T6514] ? xas_load+0x413/0x430 [ 121.910895][ T6514] __xfrm_init_state+0x73d/0xbb0 [ 121.910940][ T6514] xfrm_init_state+0x1a/0x80 [ 121.910969][ T6514] pfkey_add+0xebc/0x12e0 [ 121.911011][ T6514] pfkey_sendmsg+0x718/0x900 [ 121.911064][ T6514] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 121.911137][ T6514] __sock_sendmsg+0x142/0x180 [ 121.911188][ T6514] ____sys_sendmsg+0x31e/0x4e0 [ 121.911223][ T6514] ___sys_sendmsg+0x17b/0x1d0 [ 121.911277][ T6514] __x64_sys_sendmsg+0xd4/0x160 [ 121.911308][ T6514] x64_sys_call+0x191e/0x2ff0 [ 121.911329][ T6514] do_syscall_64+0xd2/0x200 [ 121.911368][ T6514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.911401][ T6514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.911502][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.911595][ T6514] RIP: 0033:0x7f0d7068ec29 [ 121.911614][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.911635][ T6514] RSP: 002b:00007f0d6f0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.911721][ T6514] RAX: ffffffffffffffda RBX: 00007f0d708d5fa0 RCX: 00007f0d7068ec29 [ 121.911734][ T6514] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 121.911746][ T6514] RBP: 00007f0d6f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.911757][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.911769][ T6514] R13: 00007f0d708d6038 R14: 00007f0d708d5fa0 R15: 00007ffdc6bd64b8 [ 121.911792][ T6514] [ 122.316645][ T6523] sch_fq: defrate 4294967295 ignored. [ 122.449257][ T6527] lo speed is unknown, defaulting to 1000 [ 122.740456][ T6533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.799527][ T6533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.111832][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6540 comm=syz.1.1127 [ 123.124964][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6540 comm=syz.1.1127 [ 123.219758][ T6548] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.254325][ T6549] lo speed is unknown, defaulting to 1000 [ 123.289525][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 123.301433][ T6548] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.342881][ T6548] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.393685][ T6548] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.502945][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.515012][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.525024][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.536589][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.632857][ T6556] lo speed is unknown, defaulting to 1000 [ 123.639218][ T6558] FAULT_INJECTION: forcing a failure. [ 123.639218][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 123.652336][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.3.1134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.652441][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.652454][ T6558] Call Trace: [ 123.652461][ T6558] [ 123.652469][ T6558] __dump_stack+0x1d/0x30 [ 123.652590][ T6558] dump_stack_lvl+0xe8/0x140 [ 123.652611][ T6558] dump_stack+0x15/0x1b [ 123.652627][ T6558] should_fail_ex+0x265/0x280 [ 123.652651][ T6558] should_failslab+0x8c/0xb0 [ 123.652733][ T6558] __kmalloc_noprof+0xa5/0x3e0 [ 123.652769][ T6558] ? security_prepare_creds+0x52/0x120 [ 123.652798][ T6558] security_prepare_creds+0x52/0x120 [ 123.652823][ T6558] prepare_creds+0x34a/0x4c0 [ 123.652918][ T6558] copy_creds+0x8f/0x3f0 [ 123.653010][ T6558] copy_process+0x658/0x2000 [ 123.653035][ T6558] ? kstrtouint+0x76/0xc0 [ 123.653059][ T6558] ? __rcu_read_unlock+0x4f/0x70 [ 123.653087][ T6558] kernel_clone+0x16c/0x5c0 [ 123.653161][ T6558] ? vfs_write+0x7e8/0x960 [ 123.653186][ T6558] __x64_sys_clone+0xe6/0x120 [ 123.653220][ T6558] x64_sys_call+0x119c/0x2ff0 [ 123.653274][ T6558] do_syscall_64+0xd2/0x200 [ 123.653306][ T6558] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.653406][ T6558] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.653439][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.653535][ T6558] RIP: 0033:0x7f6d6e5cec29 [ 123.653550][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.653571][ T6558] RSP: 002b:00007f6d6d036fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 123.653594][ T6558] RAX: ffffffffffffffda RBX: 00007f6d6e815fa0 RCX: 00007f6d6e5cec29 [ 123.653610][ T6558] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 123.653678][ T6558] RBP: 00007f6d6d037090 R08: 0000000000000000 R09: 0000000000000000 [ 123.653757][ T6558] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 123.653769][ T6558] R13: 00007f6d6e816038 R14: 00007f6d6e815fa0 R15: 00007ffe1daa6dd8 [ 123.653793][ T6558] [ 123.687359][ T6556] netlink: 'syz.4.1133': attribute type 6 has an invalid length. [ 123.945202][ T6563] lo speed is unknown, defaulting to 1000 [ 123.984809][ T6564] FAULT_INJECTION: forcing a failure. [ 123.984809][ T6564] name failslab, interval 1, probability 0, space 0, times 0 [ 123.997603][ T6564] CPU: 0 UID: 0 PID: 6564 Comm: syz.2.1136 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.997686][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.997700][ T6564] Call Trace: [ 123.997709][ T6564] [ 123.997718][ T6564] __dump_stack+0x1d/0x30 [ 123.997743][ T6564] dump_stack_lvl+0xe8/0x140 [ 123.997765][ T6564] dump_stack+0x15/0x1b [ 123.997855][ T6564] should_fail_ex+0x265/0x280 [ 123.997959][ T6564] should_failslab+0x8c/0xb0 [ 123.998087][ T6564] __kmalloc_noprof+0xa5/0x3e0 [ 123.998123][ T6564] ? iter_file_splice_write+0xf9/0xa60 [ 123.998151][ T6564] iter_file_splice_write+0xf9/0xa60 [ 123.998176][ T6564] ? copy_splice_read+0x623/0x660 [ 123.998273][ T6564] ? copy_splice_read+0x623/0x660 [ 123.998296][ T6564] ? __pfx_iter_file_splice_write+0x10/0x10 [ 123.998333][ T6564] direct_splice_actor+0x156/0x2a0 [ 123.998356][ T6564] ? shmem_mmap+0x61/0xb0 [ 123.998386][ T6564] splice_direct_to_actor+0x312/0x680 [ 123.998465][ T6564] ? __pfx_direct_splice_actor+0x10/0x10 [ 123.998494][ T6564] do_splice_direct+0xda/0x150 [ 123.998521][ T6564] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 123.998665][ T6564] do_sendfile+0x380/0x650 [ 123.998705][ T6564] __x64_sys_sendfile64+0x105/0x150 [ 123.998866][ T6564] x64_sys_call+0x2bb0/0x2ff0 [ 123.998897][ T6564] do_syscall_64+0xd2/0x200 [ 123.999023][ T6564] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.999053][ T6564] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.999090][ T6564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.999157][ T6564] RIP: 0033:0x7f0d7068ec29 [ 123.999175][ T6564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.999196][ T6564] RSP: 002b:00007f0d6f0f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 123.999220][ T6564] RAX: ffffffffffffffda RBX: 00007f0d708d5fa0 RCX: 00007f0d7068ec29 [ 123.999266][ T6564] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 123.999281][ T6564] RBP: 00007f0d6f0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.999349][ T6564] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 123.999364][ T6564] R13: 00007f0d708d6038 R14: 00007f0d708d5fa0 R15: 00007ffdc6bd64b8 [ 123.999387][ T6564] [ 124.231978][ T6563] netlink: 'syz.4.1137': attribute type 6 has an invalid length. [ 124.316715][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 124.577047][ T6576] sch_fq: defrate 4294967295 ignored. [ 124.671337][ T6578] block device autoloading is deprecated and will be removed. [ 124.679399][ T6580] lo speed is unknown, defaulting to 1000 [ 124.737976][ T6588] 9pnet: Could not find request transport: 0xffffffffffffffff [ 124.760489][ T6593] ================================================================== [ 124.768803][ T6593] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk [ 124.776209][ T6593] [ 124.778543][ T6593] write to 0xffff888103836000 of 8 bytes by task 6592 on cpu 1: [ 124.786270][ T6593] mas_replace_node+0x1a6/0x410 [ 124.791269][ T6593] mas_wr_store_entry+0x2406/0x2b50 [ 124.797767][ T6593] mas_store_prealloc+0x74d/0x9e0 [ 124.802937][ T6593] vma_iter_store_new+0x1c5/0x200 [ 124.808004][ T6593] mmap_region+0x1100/0x1630 [ 124.812819][ T6593] do_mmap+0x9b3/0xbe0 [ 124.817717][ T6593] vm_mmap_pgoff+0x17a/0x2e0 [ 124.822366][ T6593] ksys_mmap_pgoff+0xc2/0x310 [ 124.827154][ T6593] x64_sys_call+0x14a3/0x2ff0 [ 124.831858][ T6593] do_syscall_64+0xd2/0x200 [ 124.836517][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.842528][ T6593] [ 124.844910][ T6593] read to 0xffff888103836000 of 8 bytes by task 6593 on cpu 0: [ 124.852558][ T6593] mas_state_walk+0x485/0x650 [ 124.857268][ T6593] mas_walk+0x60/0x150 [ 124.861357][ T6593] lock_vma_under_rcu+0x8d/0x160 [ 124.866347][ T6593] do_user_addr_fault+0x233/0x1090 [ 124.871489][ T6593] exc_page_fault+0x62/0xa0 [ 124.876108][ T6593] asm_exc_page_fault+0x26/0x30 [ 124.881066][ T6593] [ 124.883408][ T6593] value changed: 0xffff888103836b06 -> 0xffff888103836000 [ 124.890526][ T6593] [ 124.892886][ T6593] Reported by Kernel Concurrency Sanitizer on: [ 124.899173][ T6593] CPU: 0 UID: 0 PID: 6593 Comm: syz.2.1148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.908911][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.919516][ T6593] ================================================================== [ 124.936488][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1148'. [ 124.946725][ T6596] bridge_slave_1: left allmulticast mode [ 124.947032][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.953186][ T6596] bridge_slave_1: left promiscuous mode [ 124.967570][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.975617][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.985565][ T6596] bridge_slave_0: left allmulticast mode [ 124.991401][ T6596] bridge_slave_0: left promiscuous mode [ 124.997090][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state