last executing test programs: 8m18.6296558s ago: executing program 4 (id=5170): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r2 = eventfd2(0x800, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0xb, r1, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r2}]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x52e, &(0x7f0000000600)="$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") 8m18.29434763s ago: executing program 4 (id=5180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 8m18.250069164s ago: executing program 4 (id=5182): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='gpu_mem_total\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r3 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 8m18.211358218s ago: executing program 4 (id=5183): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0xb, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 8m17.333262055s ago: executing program 4 (id=5190): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x11, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb5cf}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x2, &(0x7f0000000000)=0x3, 0x4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) personality(0x4000005) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 8m17.294186018s ago: executing program 4 (id=5192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 8m2.256702869s ago: executing program 32 (id=5192): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.860994354s ago: executing program 5 (id=13452): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x4, 0x7ff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x7ff, 0x7fff, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x7, 0xf, "6fae9977d22ebd14912a565c3d"}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x9, "1742af85cf4f51"}, {0x5, 0x6, "ca6bd5fc"}, {0x6, 0x5, "5ecc44"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', r5, 0x2f, 0x0, 0xfa, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x200}}) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c003f6f3980"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000005c0)=[{{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x20) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r9) 1.389101916s ago: executing program 0 (id=13460): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002c00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x9, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff8, 0xffff, 0xa07, 0x2, 0x35d097ae, 0x4d538412}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8da83b9db035a58}, 0x0) 1.344241291s ago: executing program 2 (id=13462): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 1.325782772s ago: executing program 2 (id=13463): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='cq_reschedule\x00', r6}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 1.288316165s ago: executing program 0 (id=13465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) 1.262684148s ago: executing program 3 (id=13467): mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000400)=0x4, 0x7ff, 0x4) r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x842, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x9c, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x88, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x6, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x200124, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r6}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r7, 0x0, 0x3ffff) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x23, 0x0, 0x1) io_setup(0x2007, &(0x7f0000000980)=0x0) r9 = eventfd2(0x9, 0x0) io_pgetevents(r8, 0x1, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r8, 0x8, &(0x7f0000001500)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1, 0xffffffffffffffff, &(0x7f0000000580)="a665f46c71042f63c9badf020c2cde63e81d380e11f0c322efb288174557b529079b1199b65787c7bf88ffa2cd6ba60c66d0b9ab0a4e2cd3b8a4541ed36dcc963f7ed217e2e4961111a472ceab53661b3ef938ceac8139ef00550a7639c9cd18f4ce3e9afe82a5a785b42699e91d61670c94dfd68cec26791babd09a2001b376238fb3a615695d5dfb56694861", 0x8d, 0x7f}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f0000000380)="18e7072524c9c86eee2e5a174131a05e5110b93f146adbd8", 0x18, 0x9}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000480)="adcdf7961cf1f951f00f708bbd82e40211e0b878f5bd93a5afe3135bdc3f2891e99822c3df4da9b4825bdae954ba", 0x2e, 0x5, 0x0, 0x5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f0000000680)="784e6696e706ac131edcc04dc0df001d1b1905379daa6a91ebcf2f89fce6d33c5a268c306061f986fb153532fef72e2c96d5b3c43475f40e552ad1a7577459eb68eaf37059e1e1d36515753aac895b7c7032c6244a2b57a846b0fbe3c54e43f34f33807c640ad4667b77dcfbca5a3e0f272756f106ae6fe2e76bad5ea9b9c36ec6f21f156858caafc7bd17971af517cbc8caa503448cdb7d299dbc0a37eb3cc55c6ca53fa07a379ffe06ca782e1e7cc5835948267a033955cc5413b1a95d1fd9d1c9390e2c4401b84858e193d5c64e6053f0a6f0bb6d70365d14937e58dc11fbe428e1c1", 0xe4, 0x10000, 0x0, 0x2, r9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x1ff, r4, &(0x7f0000000880)="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", 0xfb, 0x9d, 0x0, 0x3, r7}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f0000000800)="4eed3c19a9d3ede040c6256d9e8f", 0xe, 0x2, 0x0, 0x3}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000a00)="301b7bafab17adac09bd33f2a8e471407bea9bd341f3498238fe771acb70873a6bc7feeeedcf93f3e87bb2642c6dacd1796084a85e20fb973bc0efbcd782242683ef288ae5f945f50c0e5259bb6a", 0x4e, 0x8a2e, 0x0, 0x2, r7}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x2, r7, &(0x7f0000000b40)="088008b34a334186a7a918aaeb8a746ff5e19aaee82550995f3b971bf26f47772d89d7ca9540a3da65bc6f805e6efdf697219723a2717fa618296d35c26392c187c8e5dae7644b00ca000be7d62b1381ba34", 0x52, 0xfff, 0x0, 0x2}]) io_destroy(r8) 1.252112129s ago: executing program 0 (id=13468): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 1.205669103s ago: executing program 0 (id=13469): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 1.108466261s ago: executing program 3 (id=13470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 1.046687787s ago: executing program 2 (id=13471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd27, 0x100000, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb2768bed0a89ab55}, {}, {0x10, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4004080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.030697018s ago: executing program 2 (id=13472): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 992.360931ms ago: executing program 5 (id=13473): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 991.482011ms ago: executing program 3 (id=13474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) 974.067073ms ago: executing program 5 (id=13475): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x18, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 957.155315ms ago: executing program 2 (id=13476): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000003e00)='./file0\x00', 0x900002, &(0x7f0000003e40)={[{@nombcache}]}, 0x1, 0x787, &(0x7f0000003e80)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040)="8b", 0x1, 0x40, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000200), &(0x7f0000000280)=0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x88}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) iopl(0x3) 946.606346ms ago: executing program 5 (id=13477): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x0, 0x3, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newtaction={0x1a0, 0x30, 0x1, 0x3fffffc, 0x0, {0x0, 0x0, 0x6a00}, [{0x18c, 0x1, [@m_ctinfo={0xdc, 0x5, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4f12}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2a1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x800}]}, {0x76, 0x6, "562116369c88eb0c2bc554cacb6e1856b217b9989490eac6f9c908491cf98795f27d421efe8ac2d1515213c28ffa2068beefaa74621b4316150a08be3e5386351f430dd3be9eaa9fdb5724299d9df6bc33fe440820551559005ad1d6f598ee119c55f960b0778ad87fbcd9b44298a3b114d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xac, 0x14, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3, 0x2, 0x4, 0x4}, {0x10, 0xc1, 0x4, 0x1}, {0x8, 0xfb, 0x1, 0x7}, {0x200, 0x8, 0x8, 0x4000003}]}]}, {0x5f, 0x6, "06e1370cc26bb8c8a2de4d162b5b0503cff44bbbc6114f13ac270b7dab12b7ae3a3b67a76bedb81b8512f616f19de6818cd70641de325818cbdf7b5e78f243f5e09a7816648841d26275b0953d544cb6705418ad8764284d05e05a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0xc0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x800000000c0}, 0x0, 0xdbffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r5) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 930.906827ms ago: executing program 3 (id=13478): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 902.36964ms ago: executing program 2 (id=13479): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) 895.73344ms ago: executing program 5 (id=13480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 868.513162ms ago: executing program 5 (id=13481): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141081) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) 802.111948ms ago: executing program 3 (id=13483): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 610.834145ms ago: executing program 3 (id=13484): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x4, 0x7ff) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = gettid() process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a0000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x7ff, 0x7fff, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@generic={0x7, 0xf, "6fae9977d22ebd14912a565c3d"}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x9, "1742af85cf4f51"}, {0x5, 0x6, "ca6bd5fc"}, {0x6, 0x5, "5ecc44"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', r5, 0x2f, 0x0, 0xfa, 0x4, 0x10, @dev={0xfe, 0x80, '\x00', 0x1f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x200}}) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c003f6f3980"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000005c0)=[{{0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}], 0x20) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r9) 339.93365ms ago: executing program 0 (id=13485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 201.877602ms ago: executing program 0 (id=13486): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x18, r2, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r6}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000007c0)=@keyring={'key_or_keyring:', r5}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r7}, 0x18) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r8, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) process_vm_readv(0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/99, 0xfdd3}, {&(0x7f0000000400)=""/28, 0x1c}], 0x6, &(0x7f0000008640), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ppoll(&(0x7f0000000040)=[{r10, 0x1182}], 0x1, &(0x7f00000000c0), &(0x7f0000000200)={[0xbbc6]}, 0x8) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r11, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) 174.561884ms ago: executing program 1 (id=13487): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x18, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 154.877396ms ago: executing program 1 (id=13488): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 137.810728ms ago: executing program 1 (id=13489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(0xffffffffffffffff, 0x2) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) 102.687221ms ago: executing program 1 (id=13490): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x0, 0x3, 0x5, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newtaction={0x1a0, 0x30, 0x1, 0x3fffffc, 0x0, {0x0, 0x0, 0x6a00}, [{0x18c, 0x1, [@m_ctinfo={0xdc, 0x5, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4f12}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2a1}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x800}]}, {0x76, 0x6, "562116369c88eb0c2bc554cacb6e1856b217b9989490eac6f9c908491cf98795f27d421efe8ac2d1515213c28ffa2068beefaa74621b4316150a08be3e5386351f430dd3be9eaa9fdb5724299d9df6bc33fe440820551559005ad1d6f598ee119c55f960b0778ad87fbcd9b44298a3b114d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0xac, 0x14, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3, 0x2, 0x4, 0x4}, {0x10, 0xc1, 0x4, 0x1}, {0x8, 0xfb, 0x1, 0x7}, {0x200, 0x8, 0x8, 0x4000003}]}]}, {0x5f, 0x6, "06e1370cc26bb8c8a2de4d162b5b0503cff44bbbc6114f13ac270b7dab12b7ae3a3b67a76bedb81b8512f616f19de6818cd70641de325818cbdf7b5e78f243f5e09a7816648841d26275b0953d544cb6705418ad8764284d05e05a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0xc0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x0, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x7, 0x0, 0x0, 0x0, 0x800000000c0}, 0x0, 0xdbffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r5) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 64.795374ms ago: executing program 1 (id=13491): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0xf5, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, r1, 0x1}}, 0x48) (fail_nth: 1) 0s ago: executing program 1 (id=13492): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev_mcast\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x30, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000380)="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", 0x111}], 0x1}}], 0x1, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) r7 = syz_io_uring_setup(0x416c, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x792, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x4, 0x9, 0xf, 0x9}, {0xc, 0x81, 0x81, 0x5}, {0x6, 0x1, 0x7, 0x1000}, {0xfff0, 0x6, 0x1}, {0x8, 0x2, 0x6, 0x6}, {0xf000, 0x9, 0x8, 0x3}, {0xf, 0xf7, 0x3, 0x1ff}, {0xff0, 0x7, 0x2, 0x8}, {0x5, 0x3, 0xe, 0x9}, {0x5, 0x2, 0x3c, 0x69d8}]}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000280)={r0}, 0x1) kernel console output (not intermixed with test programs): id=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.468608][ T29] audit: type=1326 audit(1767665846.251:67546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.492440][ T29] audit: type=1326 audit(1767665846.261:67547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.516428][ T29] audit: type=1326 audit(1767665846.261:67548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.540132][ T29] audit: type=1326 audit(1767665846.261:67549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.564099][ T29] audit: type=1326 audit(1767665846.261:67550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.588217][ T29] audit: type=1326 audit(1767665846.261:67551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.612089][ T29] audit: type=1326 audit(1767665846.261:67552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.635995][ T29] audit: type=1326 audit(1767665846.261:67553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.1.12598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 746.672997][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12598'. [ 746.745678][T11217] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 746.810313][T11227] batman_adv: batadv0: Adding interface: dummy0 [ 746.816659][T11227] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.834922][T11230] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12600'. [ 746.841944][T11227] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 746.891984][T11230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.911299][T11230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.967579][T11230] bond0 (unregistering): Released all slaves [ 747.140829][T13063] net_ratelimit: 13 callbacks suppressed [ 747.140850][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 748.029211][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 748.150920][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12614'. [ 748.160043][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 748.176581][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12614'. [ 748.207762][T11262] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 748.279311][T11267] netlink: 'syz.2.12616': attribute type 13 has an invalid length. [ 748.297381][T11250] 9pnet_fd: p9_fd_create_tcp (11250): problem connecting socket to 127.0.0.1 [ 748.364779][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 748.422684][T11281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12621'. [ 748.501052][T11289] pim6reg: entered allmulticast mode [ 748.519127][T11289] pim6reg: left allmulticast mode [ 748.573454][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 748.684481][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 749.567620][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 749.796361][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 749.917777][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 749.936617][T11320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.945255][T11320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.034840][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 750.106010][T11322] tipc: Enabling of bearer rejected, already enabled [ 750.126241][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12634'. [ 750.207804][T11333] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 750.365666][T11353] pim6reg: entered allmulticast mode [ 750.371645][T11353] pim6reg: left allmulticast mode [ 750.444934][T11349] tipc: Started in network mode [ 750.449896][T11349] tipc: Node identity ac14140f, cluster identity 4711 [ 750.457496][T11349] tipc: New replicast peer: 255.255.255.83 [ 750.463501][T11349] tipc: Enabled bearer , priority 10 [ 750.503727][T11313] 9pnet_fd: p9_fd_create_tcp (11313): problem connecting socket to 127.0.0.1 [ 750.552558][T11370] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12649'. [ 750.563545][T11370] SELinux: failed to load policy [ 750.568656][T11370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12649'. [ 750.714882][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12653'. [ 750.734817][T11378] tipc: Started in network mode [ 750.739794][T11378] tipc: Node identity ac14140f, cluster identity 4711 [ 750.762658][T11378] tipc: New replicast peer: 255.255.255.83 [ 750.768621][T11378] tipc: Enabled bearer , priority 10 [ 750.966284][T11385] futex_wake_op: syz.2.12654 tries to shift op by -1; fix this program [ 751.211609][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.241608][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.387454][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 751.387473][ T29] audit: type=1326 audit(1767665851.251:67954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11391 comm="syz.1.12656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803c652005 code=0x7ffc0000 [ 751.485064][ T29] audit: type=1326 audit(1767665851.351:67955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.509169][ T29] audit: type=1326 audit(1767665851.351:67956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.533163][ T29] audit: type=1326 audit(1767665851.351:67957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.556969][ T29] audit: type=1326 audit(1767665851.351:67958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.580735][ T29] audit: type=1326 audit(1767665851.351:67959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.604507][ T29] audit: type=1326 audit(1767665851.351:67960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.628349][ T29] audit: type=1326 audit(1767665851.351:67961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.651968][ T29] audit: type=1326 audit(1767665851.351:67962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.675885][ T29] audit: type=1326 audit(1767665851.351:67963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11393 comm="syz.0.12657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 751.740500][T11397] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12658'. [ 751.761370][ T23] tipc: Node number set to 2886997007 [ 751.773441][ T3484] tipc: Node number set to 2886997007 [ 751.786437][T11399] 9pnet_fd: p9_fd_create_tcp (11399): problem connecting socket to 127.0.0.1 [ 751.857561][T11409] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 751.966459][T11430] FAULT_INJECTION: forcing a failure. [ 751.966459][T11430] name failslab, interval 1, probability 0, space 0, times 0 [ 751.979242][T11430] CPU: 1 UID: 0 PID: 11430 Comm: syz.0.12669 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 751.979327][T11430] Tainted: [W]=WARN [ 751.979337][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.979354][T11430] Call Trace: [ 751.979363][T11430] [ 751.979373][T11430] __dump_stack+0x1d/0x30 [ 751.979457][T11430] dump_stack_lvl+0x95/0xd0 [ 751.979488][T11430] dump_stack+0x15/0x1b [ 751.979586][T11430] should_fail_ex+0x265/0x280 [ 751.979615][T11430] should_failslab+0x8c/0xb0 [ 751.979706][T11430] __kmalloc_cache_noprof+0x65/0x4c0 [ 751.979748][T11430] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 751.979789][T11430] ? mutex_unlock+0x4f/0x90 [ 751.979882][T11430] __se_sys_memfd_create+0x1d6/0x6b0 [ 751.979932][T11430] __x64_sys_memfd_create+0x31/0x40 [ 751.979971][T11430] x64_sys_call+0x28cb/0x3000 [ 751.980059][T11430] do_syscall_64+0xca/0x2b0 [ 751.980104][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.980164][T11430] RIP: 0033:0x7f1a458ff749 [ 751.980185][T11430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.980280][T11430] RSP: 002b:00007f1a4435ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 751.980307][T11430] RAX: ffffffffffffffda RBX: 0000000000000480 RCX: 00007f1a458ff749 [ 751.980323][T11430] RDX: 00007f1a4435eef0 RSI: 0000000000000000 RDI: 00007f1a45984960 [ 751.980351][T11430] RBP: 00002000000012c0 R08: 00007f1a4435ebb7 R09: 00007f1a4435ee40 [ 751.980368][T11430] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 751.980384][T11430] R13: 00007f1a4435eef0 R14: 00007f1a4435eeb0 R15: 00002000000002c0 [ 751.980411][T11430] [ 752.193324][T13078] net_ratelimit: 14 callbacks suppressed [ 752.193343][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 752.210149][T11433] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12668'. [ 752.236023][T11433] wg1 speed is unknown, defaulting to 1000 [ 752.241889][T11433] wg1 speed is unknown, defaulting to 1000 [ 752.263804][T11433] wg1 speed is unknown, defaulting to 1000 [ 752.279096][T11433] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 752.323923][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 752.487126][T11440] wg1 speed is unknown, defaulting to 1000 [ 752.514539][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 753.292367][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 753.320115][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.431119][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.454571][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.464864][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.471540][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.478000][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.485113][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.492166][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.498900][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.626668][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.632941][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.639912][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.645949][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 753.654169][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.671017][T11433] wg1 speed is unknown, defaulting to 1000 [ 753.726089][T11455] 9pnet_fd: p9_fd_create_tcp (11455): problem connecting socket to 127.0.0.1 [ 753.763219][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 753.873271][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 753.885689][T11477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12683'. [ 753.983743][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 754.170220][T11488] wg1 speed is unknown, defaulting to 1000 [ 754.529053][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 754.644367][T11448] bond0: (slave bridge8): failed to get link speed/duplex [ 754.737768][T11498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12689'. [ 754.746859][T11498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12689'. [ 754.871655][T11504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.899808][T11510] netlink: 'syz.3.12694': attribute type 13 has an invalid length. [ 754.908143][T11504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.008780][T11516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12695'. [ 755.185459][T11528] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12696'. [ 755.595322][T11533] wg1 speed is unknown, defaulting to 1000 [ 756.256862][T11541] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12705'. [ 756.285227][T11543] netlink: 'syz.5.12706': attribute type 13 has an invalid length. [ 756.346796][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.354145][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.383796][T11543] batman_adv: batadv0: Interface deactivated: dummy0 [ 756.414294][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 756.414309][ T29] audit: type=1326 audit(1767665856.281:68125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.0.12692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a45932005 code=0x7ffc0000 [ 756.468211][T11543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.479982][T11543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.514504][ T29] audit: type=1326 audit(1767665856.381:68126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.0.12692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a45932005 code=0x7ffc0000 [ 756.571375][ T29] audit: type=1326 audit(1767665856.431:68127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.5.12706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 756.596230][ T29] audit: type=1326 audit(1767665856.461:68128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11542 comm="syz.5.12706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 756.623900][ T29] audit: type=1326 audit(1767665856.491:68129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.0.12692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1a45932005 code=0x7ffc0000 [ 756.653482][T23700] wg1 speed is unknown, defaulting to 1000 [ 756.653608][T13063] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.659461][T23700] syz0: Port: 1 Link DOWN [ 756.682829][T13063] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.702143][T13063] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.724117][ T29] audit: type=1326 audit(1767665856.591:68130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.0.12692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 756.731618][T13063] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.827062][T11561] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12711'. [ 756.859357][T11563] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 756.874921][ T29] audit: type=1326 audit(1767665856.741:68131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11554 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 756.939410][T11564] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12708'. [ 756.948799][ T29] audit: type=1326 audit(1767665856.771:68132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11554 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 756.972610][ T29] audit: type=1326 audit(1767665856.771:68133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11554 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 756.996345][ T29] audit: type=1326 audit(1767665856.771:68134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11554 comm="syz.5.12708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8b5b71667 code=0x7ffc0000 [ 757.025131][T11570] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12713'. [ 757.273270][T13063] net_ratelimit: 14 callbacks suppressed [ 757.273290][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 757.403247][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 757.513413][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 757.623216][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 757.733264][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 757.853307][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 757.949835][T11579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 757.958468][T11579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 757.973530][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 758.059748][T11580] wg1 speed is unknown, defaulting to 1000 [ 758.122336][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 758.413298][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 758.523360][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 758.660912][T11585] wg1 speed is unknown, defaulting to 1000 [ 759.289272][T11591] wg1 speed is unknown, defaulting to 1000 [ 759.704644][T11604] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 760.000474][T11619] tipc: Enabling of bearer rejected, already enabled [ 760.257393][T11631] wg1 speed is unknown, defaulting to 1000 [ 760.467053][T11627] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12726'. [ 760.502334][T11618] wg1 speed is unknown, defaulting to 1000 [ 761.049686][T11637] wg1 speed is unknown, defaulting to 1000 [ 761.185821][T11642] wg1 speed is unknown, defaulting to 1000 [ 761.190854][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.212446][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.428446][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 761.428463][ T29] audit: type=1326 audit(1767665861.291:68585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.1.12731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 761.461992][T11652] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 761.472397][ T29] audit: type=1326 audit(1767665861.321:68586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.1.12731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 761.472474][ T29] audit: type=1326 audit(1767665861.321:68587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11639 comm="syz.1.12731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 761.472531][ T29] audit: type=1326 audit(1767665861.331:68588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8b5ba2005 code=0x7ffc0000 [ 761.545367][ T29] audit: type=1326 audit(1767665861.411:68589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 761.586467][ T29] audit: type=1326 audit(1767665861.431:68590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd8b5ba2005 code=0x7ffc0000 [ 761.610390][ T29] audit: type=1326 audit(1767665861.431:68591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 761.634103][ T29] audit: type=1326 audit(1767665861.431:68592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 761.657874][ T29] audit: type=1326 audit(1767665861.431:68593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 761.681922][ T29] audit: type=1326 audit(1767665861.431:68594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11654 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 761.984803][T11674] wg1 speed is unknown, defaulting to 1000 [ 762.272166][T11673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12741'. [ 762.323852][T13101] net_ratelimit: 19 callbacks suppressed [ 762.323874][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 762.434553][T11670] tipc: Started in network mode [ 762.439550][T11670] tipc: Node identity ac14140f, cluster identity 4711 [ 762.482437][T11670] tipc: New replicast peer: 255.255.255.83 [ 762.488507][T11670] tipc: Enabled bearer , priority 10 [ 762.522417][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 762.594066][T11683] wg1 speed is unknown, defaulting to 1000 [ 762.633332][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 762.646108][T11687] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 762.652687][T11687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 762.660285][T11687] vhci_hcd vhci_hcd.0: Device attached [ 762.673603][T11691] vhci_hcd: connection closed [ 762.673692][ T53] vhci_hcd vhci_hcd.3: stop threads [ 762.683783][ T53] vhci_hcd vhci_hcd.3: release socket [ 762.688401][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12744'. [ 762.689185][ T53] vhci_hcd vhci_hcd.3: disconnect device [ 762.698284][T11697] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12744'. [ 762.720557][T11695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12746'. [ 762.737774][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12746'. [ 762.746871][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 762.863300][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 762.883117][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12748'. [ 762.892263][T11701] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12748'. [ 762.935365][T13078] Bluetooth: hci0: Frame reassembly failed (-84) [ 762.960190][T11715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.969064][T11715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.985267][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 763.095041][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 763.213560][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 763.253358][T11720] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12755'. [ 763.323420][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 763.433320][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 763.562726][T11728] pim6reg: entered allmulticast mode [ 763.568613][T11728] pim6reg: left allmulticast mode [ 763.603551][ T23] tipc: Node number set to 2886997007 [ 763.624446][T11730] netlink: 'syz.0.12759': attribute type 13 has an invalid length. [ 763.820689][T11734] wg1 speed is unknown, defaulting to 1000 [ 764.085646][T11719] 9pnet_fd: p9_fd_create_tcp (11719): problem connecting socket to 127.0.0.1 [ 764.142764][T11745] wg1 speed is unknown, defaulting to 1000 [ 764.743737][T11755] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12765'. [ 764.803769][T11752] tipc: Started in network mode [ 764.808711][T11752] tipc: Node identity ac14140f, cluster identity 4711 [ 764.836107][T11752] tipc: New replicast peer: 255.255.255.83 [ 764.842010][T11752] tipc: Enabled bearer , priority 10 [ 764.953394][T25624] Bluetooth: hci0: command 0x1003 tx timeout [ 764.954161][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 764.985763][T11760] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 765.064960][T11771] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12771'. [ 765.144157][T11778] syzkaller0: entered promiscuous mode [ 765.149707][T11778] syzkaller0: entered allmulticast mode [ 765.347028][T11783] wg1 speed is unknown, defaulting to 1000 [ 766.006472][T23700] tipc: Node number set to 2886997007 [ 766.241679][T11794] wg1 speed is unknown, defaulting to 1000 [ 766.332814][T11796] wg1 speed is unknown, defaulting to 1000 [ 766.679364][T13067] bridge_slave_1: left allmulticast mode [ 766.685107][T13067] bridge_slave_1: left promiscuous mode [ 766.690826][T13067] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.702854][T13067] bridge_slave_0: left allmulticast mode [ 766.708668][T13067] bridge_slave_0: left promiscuous mode [ 766.714566][T13067] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.838608][T11801] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 766.969640][T11811] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 767.049287][T13067] bond0 (unregistering): Released all slaves [ 767.081684][T11819] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 767.129434][T13067] hsr_slave_0: left promiscuous mode [ 767.147232][T13067] hsr_slave_1: left promiscuous mode [ 767.174171][T13067] veth1_macvtap: left promiscuous mode [ 767.186426][T13067] veth0_macvtap: left promiscuous mode [ 767.199648][T13067] veth1_vlan: left promiscuous mode [ 767.211244][T13067] veth0_vlan: left promiscuous mode [ 767.287466][T11831] netlink: 'syz.2.12787': attribute type 13 has an invalid length. [ 767.640255][T13118] net_ratelimit: 22 callbacks suppressed [ 767.640274][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 767.654553][T11827] __nla_validate_parse: 1 callbacks suppressed [ 767.660767][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12785'. [ 767.764758][T11835] wg1 speed is unknown, defaulting to 1000 [ 767.793371][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 767.903489][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 767.975884][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12789'. [ 767.984964][T11839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12789'. [ 768.033240][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 768.057703][T11842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.069908][T11842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.143215][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 768.291258][T13078] bond0: (slave bridge8): failed to get link speed/duplex [ 768.318788][T11853] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 768.433558][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 768.548273][T11861] wg1 speed is unknown, defaulting to 1000 [ 768.603215][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 768.713325][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 768.833213][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 769.022840][T11870] pim6reg: entered allmulticast mode [ 769.029088][T11870] pim6reg: left allmulticast mode [ 769.116675][T11871] wg1 speed is unknown, defaulting to 1000 [ 770.002270][T11891] wg1 speed is unknown, defaulting to 1000 [ 770.153212][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 770.404216][T11896] wg1 speed is unknown, defaulting to 1000 [ 770.759518][T13082] Bluetooth: hci0: Frame reassembly failed (-84) [ 770.858077][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12809'. [ 770.867184][T11906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12809'. [ 770.918050][T11911] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12811'. [ 771.125124][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 771.125144][ T29] audit: type=1326 audit(1767665870.991:68906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3accf749 code=0x7ffc0000 [ 771.163033][T11914] wg1 speed is unknown, defaulting to 1000 [ 771.175241][ T29] audit: type=1326 audit(1767665871.021:68907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6d3accf749 code=0x7ffc0000 [ 771.199094][ T29] audit: type=1326 audit(1767665871.021:68908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6d3accf783 code=0x7ffc0000 [ 771.222748][ T29] audit: type=1326 audit(1767665871.021:68909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d3acce1ff code=0x7ffc0000 [ 771.246368][ T29] audit: type=1326 audit(1767665871.021:68910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6d3accf7d7 code=0x7ffc0000 [ 771.269965][ T29] audit: type=1326 audit(1767665871.021:68911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d3accdf90 code=0x7ffc0000 [ 771.293694][ T29] audit: type=1326 audit(1767665871.021:68912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d3acce3aa code=0x7ffc0000 [ 771.317360][ T29] audit: type=1326 audit(1767665871.021:68913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3accf749 code=0x7ffc0000 [ 771.341075][ T29] audit: type=1326 audit(1767665871.021:68914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3accf749 code=0x7ffc0000 [ 771.364809][ T29] audit: type=1326 audit(1767665871.021:68915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11913 comm="syz.2.12812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d3accf749 code=0x7ffc0000 [ 771.455211][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12813'. [ 771.464263][T11918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12813'. [ 771.533607][T25624] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 771.539813][T10033] Bluetooth: hci1: command 0x1003 tx timeout [ 771.642641][T13063] team0: left allmulticast mode [ 771.647672][T13063] team_slave_0: left allmulticast mode [ 771.653286][T13063] team_slave_1: left allmulticast mode [ 771.658965][T13063] bridge0: port 3(team0) entered disabled state [ 771.704550][T13063] bridge_slave_1: left allmulticast mode [ 771.710250][T13063] bridge_slave_1: left promiscuous mode [ 771.716187][T13063] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.733508][T13063] bridge_slave_0: left allmulticast mode [ 771.739207][T13063] bridge_slave_0: left promiscuous mode [ 771.745114][T13063] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.754355][T11929] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12815'. [ 771.763884][T11930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12814'. [ 772.316957][T13063] hsr_slave_0: left promiscuous mode [ 772.331540][T13063] hsr_slave_1: left promiscuous mode [ 772.339078][T13063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.346770][T13063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.358715][T13063] veth1_macvtap: left promiscuous mode [ 772.364254][T13063] veth0_macvtap: left promiscuous mode [ 772.369815][T13063] veth1_vlan: left promiscuous mode [ 772.375385][T13063] veth0_vlan: left promiscuous mode [ 772.463968][T13063] team_slave_1 (unregistering): left promiscuous mode [ 772.471411][T13063] team0 (unregistering): Port device team_slave_1 removed [ 772.482524][T13063] team_slave_0 (unregistering): left promiscuous mode [ 772.489945][T13063] team0 (unregistering): Port device team_slave_0 removed [ 772.653282][ T53] net_ratelimit: 22 callbacks suppressed [ 772.653324][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 772.774518][T11943] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 772.790018][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 772.800977][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 772.807273][T10033] Bluetooth: hci0: command 0x1003 tx timeout [ 772.893106][T11948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12821'. [ 772.903398][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 772.932027][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12822'. [ 772.945143][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12821'. [ 772.992957][T11957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12824'. [ 773.020436][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12824'. [ 773.043441][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 773.106774][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12828'. [ 773.144057][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12830'. [ 773.153377][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 773.184279][T11973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12831'. [ 773.263286][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 773.443830][T11981] wg1 speed is unknown, defaulting to 1000 [ 773.714704][T11983] wg1 speed is unknown, defaulting to 1000 [ 773.822384][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 774.373463][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.399272][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.419688][T11989] wg1 speed is unknown, defaulting to 1000 [ 774.493437][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 774.506489][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12836'. [ 774.557794][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12836'. [ 774.604290][T11998] netlink: 'syz.2.12837': attribute type 13 has an invalid length. [ 774.678269][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.685544][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.736157][T11998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.795868][T11998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.865521][T13075] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.880194][T13075] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.896573][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 775.013423][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 775.410720][T13075] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.422466][T13075] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.714491][T12033] wg1 speed is unknown, defaulting to 1000 [ 776.006654][T12035] tipc: Enabling of bearer rejected, already enabled [ 776.427807][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 776.427826][ T29] audit: type=1326 audit(1767665876.291:69566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.515794][ T29] audit: type=1326 audit(1767665876.331:69567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.539728][ T29] audit: type=1326 audit(1767665876.331:69568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.563457][ T29] audit: type=1326 audit(1767665876.331:69569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.587242][ T29] audit: type=1326 audit(1767665876.331:69570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.610929][ T29] audit: type=1326 audit(1767665876.331:69571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.635404][ T29] audit: type=1326 audit(1767665876.331:69572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.659232][ T29] audit: type=1326 audit(1767665876.331:69573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.682998][ T29] audit: type=1326 audit(1767665876.331:69574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 776.706603][ T29] audit: type=1326 audit(1767665876.331:69575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12057 comm="syz.5.12856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 777.500589][T12095] wg1 speed is unknown, defaulting to 1000 [ 777.673413][ T53] net_ratelimit: 21 callbacks suppressed [ 777.673434][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 777.793254][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 777.904412][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 777.919696][T12117] pim6reg: entered allmulticast mode [ 777.931376][T12119] __nla_validate_parse: 12 callbacks suppressed [ 777.931391][T12119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12878'. [ 777.934813][T12117] pim6reg: left allmulticast mode [ 778.004577][T12125] can0: slcan on ttyS3. [ 778.043625][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 778.118946][T12124] wg1 speed is unknown, defaulting to 1000 [ 778.144427][T12131] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 778.193231][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 778.223455][T12123] can0 (unregistered): slcan off ttyS3. [ 778.236819][T12129] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12879'. [ 778.272569][T12140] syzkaller0: entered promiscuous mode [ 778.278140][T12140] syzkaller0: entered allmulticast mode [ 778.303257][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 778.423206][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 778.452184][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12887'. [ 778.461399][T12145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12887'. [ 778.533360][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 778.643240][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 778.684095][T12163] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 778.709016][T12168] 9pnet_fd: p9_fd_create_tcp (12168): problem connecting socket to 127.0.0.1 [ 778.718158][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 778.753629][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 778.762916][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12897'. [ 778.781129][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12897'. [ 778.792066][T13118] Bluetooth: hci0: Frame reassembly failed (-84) [ 778.915277][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12901'. [ 778.924358][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12901'. [ 779.052139][T13082] Bluetooth: hci1: Frame reassembly failed (-84) [ 779.324110][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12912'. [ 779.342553][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12912'. [ 779.670621][T12219] netlink: 'syz.5.12918': attribute type 1 has an invalid length. [ 779.887212][T12223] syzkaller0: entered promiscuous mode [ 779.892800][T12223] syzkaller0: entered allmulticast mode [ 780.095732][T12229] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 780.423729][T12252] ALSA: seq fatal error: cannot create timer (-19) [ 780.793290][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 780.870721][T12287] can0: slcan on ttyS3. [ 780.973427][T12286] can0 (unregistered): slcan off ttyS3. [ 781.003977][T12293] wg1 speed is unknown, defaulting to 1000 [ 781.121945][T10033] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 781.217355][T12296] ALSA: seq fatal error: cannot create timer (-19) [ 781.358876][T12305] ALSA: seq fatal error: cannot create timer (-19) [ 781.523355][T12309] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 781.578716][ T29] kauditd_printk_skb: 2953 callbacks suppressed [ 781.578756][ T29] audit: type=1326 audit(1767665881.441:72529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.623603][ T29] audit: type=1326 audit(1767665881.441:72530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.647451][ T29] audit: type=1326 audit(1767665881.441:72531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.671263][ T29] audit: type=1326 audit(1767665881.441:72532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.694992][ T29] audit: type=1326 audit(1767665881.441:72533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.718753][ T29] audit: type=1326 audit(1767665881.441:72534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.742512][ T29] audit: type=1326 audit(1767665881.441:72535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.767075][ T29] audit: type=1326 audit(1767665881.441:72536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.791168][ T29] audit: type=1326 audit(1767665881.441:72537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.815029][ T29] audit: type=1326 audit(1767665881.441:72538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12315 comm="syz.1.12950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 781.973952][T12321] tipc: Enabling of bearer rejected, already enabled [ 782.063240][T10033] Bluetooth: hci0: sending frame failed (-49) [ 782.069410][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 782.243887][T12338] wg1 speed is unknown, defaulting to 1000 [ 782.308814][T12355] syzkaller0: entered promiscuous mode [ 782.314431][T12355] syzkaller0: entered allmulticast mode [ 782.713242][T13067] net_ratelimit: 33 callbacks suppressed [ 782.713264][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 782.827794][T12364] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 782.838260][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 782.943287][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 783.063277][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 783.153542][T12375] ALSA: seq fatal error: cannot create timer (-19) [ 783.173331][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 783.283272][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 783.393328][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 783.503370][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 783.613329][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 783.723295][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 784.040618][T12397] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 784.129931][T12401] wg1 speed is unknown, defaulting to 1000 [ 784.183605][T12400] __nla_validate_parse: 12 callbacks suppressed [ 784.183625][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12978'. [ 784.269111][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12978'. [ 784.281571][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12979'. [ 784.312407][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12979'. [ 784.611540][T12386] 9pnet_fd: p9_fd_create_tcp (12386): problem connecting socket to 127.0.0.1 [ 785.009159][T12416] wg1 speed is unknown, defaulting to 1000 [ 785.044490][T12421] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 785.263456][T12428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12985'. [ 785.456200][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12985'. [ 785.692366][T12438] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12988'. [ 785.994085][T12436] wg1 speed is unknown, defaulting to 1000 [ 786.253587][T12451] ALSA: seq fatal error: cannot create timer (-19) [ 786.300960][T12449] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12989'. [ 786.522172][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12999'. [ 786.539354][T12467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12999'. [ 786.593880][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 786.593897][ T29] audit: type=1326 audit(1767665886.461:72848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.3.12999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6807f749 code=0x7ffc0000 [ 786.624101][ T29] audit: type=1326 audit(1767665886.461:72849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.3.12999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f6807f749 code=0x7ffc0000 [ 786.647950][ T29] audit: type=1326 audit(1767665886.461:72850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.3.12999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6807f749 code=0x7ffc0000 [ 786.720040][T12469] wg1 speed is unknown, defaulting to 1000 [ 786.923464][ T29] audit: type=1326 audit(1767665886.791:72851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.3.12999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0f6807f749 code=0x7ffc0000 [ 787.065265][ T29] audit: type=1326 audit(1767665886.861:72852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.5.12991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7fc00000 [ 787.240791][ T29] audit: type=1326 audit(1767665887.101:72853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.13004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 787.266701][ T29] audit: type=1326 audit(1767665887.131:72854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.13004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 787.290559][ T29] audit: type=1326 audit(1767665887.131:72855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.13004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 787.314420][ T29] audit: type=1326 audit(1767665887.131:72857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.13004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 787.338173][ T29] audit: type=1326 audit(1767665887.131:72856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.13004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 787.367691][T12482] can0: slcan on ttyS3. [ 787.485705][T12486] syzkaller0: entered promiscuous mode [ 787.491262][T12486] syzkaller0: entered allmulticast mode [ 787.496971][T12481] can0 (unregistered): slcan off ttyS3. [ 787.542217][T12487] wg1 speed is unknown, defaulting to 1000 [ 787.840073][T12497] wg1 speed is unknown, defaulting to 1000 [ 787.847365][ T53] net_ratelimit: 24 callbacks suppressed [ 787.847382][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 788.083162][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 788.213266][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 788.320531][T12522] 9pnet_fd: p9_fd_create_tcp (12522): problem connecting socket to 127.0.0.1 [ 788.329567][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 788.443215][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 788.547217][T12536] tipc: Enabling of bearer rejected, already enabled [ 788.574513][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 788.683182][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 788.740207][T12565] FAULT_INJECTION: forcing a failure. [ 788.740207][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 788.753220][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.5.13034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 788.753258][T12565] Tainted: [W]=WARN [ 788.753267][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.753283][T12565] Call Trace: [ 788.753291][T12565] [ 788.753346][T12565] __dump_stack+0x1d/0x30 [ 788.753375][T12565] dump_stack_lvl+0x95/0xd0 [ 788.753401][T12565] dump_stack+0x15/0x1b [ 788.753491][T12565] should_fail_ex+0x265/0x280 [ 788.753518][T12565] should_failslab+0x8c/0xb0 [ 788.753569][T12565] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 788.753597][T12565] ? __alloc_skb+0x2ff/0x4b0 [ 788.753626][T12565] __alloc_skb+0x2ff/0x4b0 [ 788.753668][T12565] ? __alloc_skb+0x228/0x4b0 [ 788.753696][T12565] netlink_alloc_large_skb+0xbf/0xf0 [ 788.753729][T12565] netlink_sendmsg+0x3cf/0x6b0 [ 788.753836][T12565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 788.753876][T12565] __sock_sendmsg+0x145/0x180 [ 788.753900][T12565] ____sys_sendmsg+0x31e/0x4a0 [ 788.753938][T12565] ___sys_sendmsg+0x17b/0x1d0 [ 788.754026][T12565] __x64_sys_sendmsg+0xd4/0x160 [ 788.754065][T12565] x64_sys_call+0x17ba/0x3000 [ 788.754097][T12565] do_syscall_64+0xca/0x2b0 [ 788.754205][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.754230][T12565] RIP: 0033:0x7fd8b5b6f749 [ 788.754249][T12565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.754273][T12565] RSP: 002b:00007fd8b45d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.754297][T12565] RAX: ffffffffffffffda RBX: 00007fd8b5dc5fa0 RCX: 00007fd8b5b6f749 [ 788.754319][T12565] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 788.754397][T12565] RBP: 00007fd8b45d7090 R08: 0000000000000000 R09: 0000000000000000 [ 788.754413][T12565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.754496][T12565] R13: 00007fd8b5dc6038 R14: 00007fd8b5dc5fa0 R15: 00007ffec7fe6ef8 [ 788.754519][T12565] [ 788.796242][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 789.055325][T12578] FAULT_INJECTION: forcing a failure. [ 789.055325][T12578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.068597][T12578] CPU: 1 UID: 0 PID: 12578 Comm: syz.2.13039 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 789.068627][T12578] Tainted: [W]=WARN [ 789.068645][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 789.068657][T12578] Call Trace: [ 789.068662][T12578] [ 789.068669][T12578] __dump_stack+0x1d/0x30 [ 789.068724][T12578] dump_stack_lvl+0x95/0xd0 [ 789.068744][T12578] dump_stack+0x15/0x1b [ 789.068763][T12578] should_fail_ex+0x265/0x280 [ 789.068785][T12578] should_fail+0xb/0x20 [ 789.068873][T12578] should_fail_usercopy+0x1a/0x20 [ 789.068922][T12578] _copy_from_user+0x1c/0xb0 [ 789.068946][T12578] ___sys_sendmsg+0xc1/0x1d0 [ 789.068984][T12578] __x64_sys_sendmsg+0xd4/0x160 [ 789.069021][T12578] x64_sys_call+0x17ba/0x3000 [ 789.069118][T12578] do_syscall_64+0xca/0x2b0 [ 789.069250][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.069270][T12578] RIP: 0033:0x7f6d3accf749 [ 789.069283][T12578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.069299][T12578] RSP: 002b:00007f6d39737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.069316][T12578] RAX: ffffffffffffffda RBX: 00007f6d3af25fa0 RCX: 00007f6d3accf749 [ 789.069327][T12578] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 789.069343][T12578] RBP: 00007f6d39737090 R08: 0000000000000000 R09: 0000000000000000 [ 789.069354][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.069365][T12578] R13: 00007f6d3af26038 R14: 00007f6d3af25fa0 R15: 00007ffe14de1ae8 [ 789.069383][T12578] [ 789.240001][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 789.361655][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 789.486294][T12588] wg1 speed is unknown, defaulting to 1000 [ 790.179484][T12591] wg1 speed is unknown, defaulting to 1000 [ 790.361753][ T3549] page_pool_release_retry() stalled pool shutdown: id 126, 1 inflight 60 sec [ 790.511770][T12606] can0: slcan on ttyS3. [ 790.606401][T12609] pim6reg: entered allmulticast mode [ 790.615346][T12609] pim6reg: left allmulticast mode [ 790.662151][T12610] __nla_validate_parse: 7 callbacks suppressed [ 790.662174][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13049'. [ 790.677591][T12610] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13049'. [ 790.703552][T12605] can0 (unregistered): slcan off ttyS3. [ 790.822755][T12615] tipc: Enabling of bearer rejected, already enabled [ 790.908517][T12633] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 790.995724][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13063'. [ 791.013119][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13063'. [ 791.026213][T12643] ALSA: seq fatal error: cannot create timer (-19) [ 791.354434][ T3519] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec [ 791.416777][T12662] wg1 speed is unknown, defaulting to 1000 [ 791.605485][T12666] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 791.614677][ T29] kauditd_printk_skb: 696 callbacks suppressed [ 791.614728][ T29] audit: type=1326 audit(1767665891.471:73554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d3acc65e7 code=0x7ffc0000 [ 791.767302][T12677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13073'. [ 791.827486][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13073'. [ 791.858574][ T29] audit: type=1326 audit(1767665891.721:73555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 791.930142][ T29] audit: type=1326 audit(1767665891.721:73556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 791.954048][ T29] audit: type=1326 audit(1767665891.721:73557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 791.977848][ T29] audit: type=1326 audit(1767665891.751:73558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.001634][ T29] audit: type=1326 audit(1767665891.751:73559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.025687][ T29] audit: type=1326 audit(1767665891.751:73560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.049629][ T29] audit: type=1326 audit(1767665891.751:73561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.073551][ T29] audit: type=1326 audit(1767665891.751:73562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.097442][ T29] audit: type=1326 audit(1767665891.751:73564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.0.13074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 792.124557][T13075] bridge_slave_1: left allmulticast mode [ 792.130286][T13075] bridge_slave_1: left promiscuous mode [ 792.136049][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.189260][T13075] bridge_slave_0: left allmulticast mode [ 792.195005][T13075] bridge_slave_0: left promiscuous mode [ 792.200780][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.889297][T12700] tipc: Enabling of bearer rejected, already enabled [ 792.905638][T12703] pim6reg: entered allmulticast mode [ 792.911329][T12704] pim6reg: left allmulticast mode [ 792.941807][T13075] hsr_slave_0: left promiscuous mode [ 792.948886][T13075] hsr_slave_1: left promiscuous mode [ 792.954747][T13075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.962162][T13075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.982085][T13075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.989799][T13075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.021800][T12717] IPv6: Can't replace route, no match found [ 793.046684][T12720] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 793.062343][T13075] veth1_macvtap: left promiscuous mode [ 793.069319][T13075] veth0_macvtap: left promiscuous mode [ 793.077425][T13075] veth1_vlan: left promiscuous mode [ 793.086325][T13075] veth0_vlan: left promiscuous mode [ 793.188923][T13075] team0 (unregistering): Port device team_slave_1 removed [ 793.198883][T13075] team0 (unregistering): Port device team_slave_0 removed [ 793.253187][T13063] net_ratelimit: 15 callbacks suppressed [ 793.253207][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 793.280654][T12736] tipc: Enabling of bearer rejected, already enabled [ 793.320798][T12745] syzkaller0: entered promiscuous mode [ 793.326384][T12745] syzkaller0: entered allmulticast mode [ 793.373540][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 793.440321][T12754] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13098'. [ 793.483362][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 793.520179][T12759] pim6reg: entered allmulticast mode [ 793.526847][T12759] pim6reg: left allmulticast mode [ 793.593311][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 793.677208][T12780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13111'. [ 793.719587][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13111'. [ 793.730048][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 793.843201][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 793.865393][T12790] ALSA: seq fatal error: cannot create timer (-19) [ 793.953198][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 794.063330][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 794.081904][T12804] ALSA: seq fatal error: cannot create timer (-19) [ 794.097663][T12807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13121'. [ 794.173252][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 794.267440][T12819] ALSA: seq fatal error: cannot create timer (-19) [ 794.283178][T13067] bond0: (slave bridge8): failed to get link speed/duplex [ 794.444159][T12828] tipc: Enabling of bearer rejected, already enabled [ 794.553533][ T23] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 60 sec [ 795.271174][T12855] wg1 speed is unknown, defaulting to 1000 [ 795.410215][T12859] ALSA: seq fatal error: cannot create timer (-19) [ 795.651214][T12878] ALSA: seq fatal error: cannot create timer (-19) [ 795.676516][T12881] __nla_validate_parse: 5 callbacks suppressed [ 795.676538][T12881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13146'. [ 795.705741][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13146'. [ 795.810876][T12890] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 795.908365][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13153'. [ 795.948501][T12906] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 795.964338][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13153'. [ 796.135873][T12918] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13159'. [ 796.204686][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13158'. [ 796.213744][T12916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13158'. [ 796.341190][T12924] wg1 speed is unknown, defaulting to 1000 [ 796.743461][ T29] kauditd_printk_skb: 731 callbacks suppressed [ 796.743479][ T29] audit: type=1326 audit(1767665896.611:74295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.792612][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13164'. [ 796.801702][T12935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13164'. [ 796.811060][ T29] audit: type=1326 audit(1767665896.611:74296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.834844][ T29] audit: type=1326 audit(1767665896.611:74297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.838653][T12939] netlink: 72 bytes leftover after parsing attributes in process `syz.5.13166'. [ 796.858707][ T29] audit: type=1326 audit(1767665896.611:74298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.891511][ T29] audit: type=1326 audit(1767665896.611:74299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.915285][ T29] audit: type=1326 audit(1767665896.611:74300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.939017][ T29] audit: type=1326 audit(1767665896.611:74301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.962666][ T29] audit: type=1326 audit(1767665896.611:74302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 796.986355][ T29] audit: type=1326 audit(1767665896.611:74303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 797.010063][ T29] audit: type=1326 audit(1767665896.611:74304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12936 comm="syz.5.13165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7ffc0000 [ 797.034671][T12941] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 797.653009][T12970] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 797.918411][T12952] 9pnet_fd: p9_fd_create_tcp (12952): problem connecting socket to 127.0.0.1 [ 797.967513][T12977] tipc: Enabling of bearer rejected, already enabled [ 798.139089][T12992] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 798.283195][T13101] net_ratelimit: 32 callbacks suppressed [ 798.283272][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 798.403194][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 798.587290][T13015] wg1 speed is unknown, defaulting to 1000 [ 798.707383][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 798.824936][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 798.943381][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 799.053238][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 799.072745][T13023] syzkaller0: entered promiscuous mode [ 799.078355][T13023] syzkaller0: entered allmulticast mode [ 799.164508][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 799.255327][T13029] pim6reg: entered allmulticast mode [ 799.261503][T13027] ALSA: seq fatal error: cannot create timer (-19) [ 799.273181][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 799.383387][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 799.493332][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 799.625936][T13047] tipc: Enabling of bearer rejected, already enabled [ 799.900825][T13060] pim6reg: entered allmulticast mode [ 799.935958][T13061] ALSA: seq fatal error: cannot create timer (-19) [ 799.961031][T13065] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 800.486835][T13094] wg1 speed is unknown, defaulting to 1000 [ 800.751512][T13099] __nla_validate_parse: 6 callbacks suppressed [ 800.751529][T13099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13216'. [ 800.828000][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13216'. [ 800.845024][T13103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13217'. [ 800.900342][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13217'. [ 801.162149][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13225'. [ 801.229603][T13132] ALSA: seq fatal error: cannot create timer (-19) [ 801.248362][T13140] FAULT_INJECTION: forcing a failure. [ 801.248362][T13140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.261655][T13140] CPU: 1 UID: 0 PID: 13140 Comm: syz.2.13229 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 801.261698][T13140] Tainted: [W]=WARN [ 801.261705][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 801.261720][T13140] Call Trace: [ 801.261762][T13140] [ 801.261772][T13140] __dump_stack+0x1d/0x30 [ 801.261804][T13140] dump_stack_lvl+0x95/0xd0 [ 801.261828][T13140] dump_stack+0x15/0x1b [ 801.261863][T13140] should_fail_ex+0x265/0x280 [ 801.261896][T13140] should_fail+0xb/0x20 [ 801.261919][T13140] should_fail_usercopy+0x1a/0x20 [ 801.261951][T13140] _copy_from_user+0x1c/0xb0 [ 801.262117][T13140] ___sys_sendmsg+0xc1/0x1d0 [ 801.262173][T13140] __x64_sys_sendmsg+0xd4/0x160 [ 801.262215][T13140] x64_sys_call+0x17ba/0x3000 [ 801.262359][T13140] do_syscall_64+0xca/0x2b0 [ 801.262401][T13140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.262472][T13140] RIP: 0033:0x7f6d3accf749 [ 801.262492][T13140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.262536][T13140] RSP: 002b:00007f6d39737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.262560][T13140] RAX: ffffffffffffffda RBX: 00007f6d3af25fa0 RCX: 00007f6d3accf749 [ 801.262648][T13140] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 801.262662][T13140] RBP: 00007f6d39737090 R08: 0000000000000000 R09: 0000000000000000 [ 801.262722][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.262789][T13140] R13: 00007f6d3af26038 R14: 00007f6d3af25fa0 R15: 00007ffe14de1ae8 [ 801.262816][T13140] [ 801.469151][T13136] tipc: Enabling of bearer rejected, already enabled [ 801.881903][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 801.881955][ T29] audit: type=1326 audit(1767665901.741:74639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13119 comm="syz.5.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b5b6f749 code=0x7fc00000 [ 802.219744][T13167] wg1 speed is unknown, defaulting to 1000 [ 802.418901][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13237'. [ 802.427969][T13171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13237'. [ 802.465832][ T29] audit: type=1326 audit(1767665902.311:74640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.489850][ T29] audit: type=1326 audit(1767665902.321:74641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.513607][ T29] audit: type=1326 audit(1767665902.321:74642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.537290][ T29] audit: type=1326 audit(1767665902.321:74643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.561067][ T29] audit: type=1326 audit(1767665902.321:74644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.584780][ T29] audit: type=1326 audit(1767665902.321:74645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.608635][ T29] audit: type=1326 audit(1767665902.321:74646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.632404][ T29] audit: type=1326 audit(1767665902.321:74647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.656122][ T29] audit: type=1326 audit(1767665902.321:74648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13158 comm="syz.1.13234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 802.746177][T13178] FAULT_INJECTION: forcing a failure. [ 802.746177][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 802.759009][T13178] CPU: 0 UID: 0 PID: 13178 Comm: syz.2.13240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 802.759064][T13178] Tainted: [W]=WARN [ 802.759073][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 802.759123][T13178] Call Trace: [ 802.759130][T13178] [ 802.759139][T13178] __dump_stack+0x1d/0x30 [ 802.759168][T13178] dump_stack_lvl+0x95/0xd0 [ 802.759196][T13178] dump_stack+0x15/0x1b [ 802.759295][T13178] should_fail_ex+0x265/0x280 [ 802.759318][T13178] should_failslab+0x8c/0xb0 [ 802.759339][T13178] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 802.759362][T13178] ? __alloc_skb+0x2ff/0x4b0 [ 802.759392][T13178] __alloc_skb+0x2ff/0x4b0 [ 802.759495][T13178] ? __alloc_skb+0x228/0x4b0 [ 802.759518][T13178] netlink_alloc_large_skb+0xbf/0xf0 [ 802.759547][T13178] netlink_sendmsg+0x3cf/0x6b0 [ 802.759599][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.759668][T13178] __sock_sendmsg+0x145/0x180 [ 802.759686][T13178] ____sys_sendmsg+0x31e/0x4a0 [ 802.759724][T13178] ___sys_sendmsg+0x17b/0x1d0 [ 802.759771][T13178] __x64_sys_sendmsg+0xd4/0x160 [ 802.759878][T13178] x64_sys_call+0x17ba/0x3000 [ 802.759975][T13178] do_syscall_64+0xca/0x2b0 [ 802.760017][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.760078][T13178] RIP: 0033:0x7f6d3accf749 [ 802.760163][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.760185][T13178] RSP: 002b:00007f6d39737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.760209][T13178] RAX: ffffffffffffffda RBX: 00007f6d3af25fa0 RCX: 00007f6d3accf749 [ 802.760224][T13178] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 802.760240][T13178] RBP: 00007f6d39737090 R08: 0000000000000000 R09: 0000000000000000 [ 802.760286][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.760298][T13178] R13: 00007f6d3af26038 R14: 00007f6d3af25fa0 R15: 00007ffe14de1ae8 [ 802.760320][T13178] [ 803.015750][T13175] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 803.178014][T13205] ALSA: seq fatal error: cannot create timer (-19) [ 803.293176][T10875] net_ratelimit: 27 callbacks suppressed [ 803.293196][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 803.413247][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 803.523253][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 803.633359][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 803.743204][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 803.853837][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 803.963349][T13118] bond0: (slave bridge8): failed to get link speed/duplex [ 804.002729][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13260'. [ 804.028971][T13232] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13261'. [ 804.187759][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13260'. [ 804.217368][T13234] wg1 speed is unknown, defaulting to 1000 [ 804.301310][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 804.414834][T13075] bond0: (slave bridge8): failed to get link speed/duplex [ 804.445825][T13248] FAULT_INJECTION: forcing a failure. [ 804.445825][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 804.459030][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.0.13262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 804.459204][T13248] Tainted: [W]=WARN [ 804.459212][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.459225][T13248] Call Trace: [ 804.459232][T13248] [ 804.459248][T13248] __dump_stack+0x1d/0x30 [ 804.459279][T13248] dump_stack_lvl+0x95/0xd0 [ 804.459301][T13248] dump_stack+0x15/0x1b [ 804.459350][T13248] should_fail_ex+0x265/0x280 [ 804.459380][T13248] should_fail+0xb/0x20 [ 804.459400][T13248] should_fail_usercopy+0x1a/0x20 [ 804.459480][T13248] _copy_to_user+0x20/0xa0 [ 804.459516][T13248] simple_read_from_buffer+0xb5/0x130 [ 804.459541][T13248] proc_fail_nth_read+0x10e/0x150 [ 804.459574][T13248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 804.459659][T13248] vfs_read+0x1a8/0x770 [ 804.459675][T13248] ? __fget_files+0x184/0x1c0 [ 804.459796][T13248] ? __rcu_read_unlock+0x4f/0x70 [ 804.459816][T13248] ? __fget_files+0x184/0x1c0 [ 804.459839][T13248] ? mutex_lock+0x58/0x90 [ 804.459870][T13248] ksys_read+0xda/0x1a0 [ 804.459893][T13248] __x64_sys_read+0x40/0x50 [ 804.459953][T13248] x64_sys_call+0x2889/0x3000 [ 804.460000][T13248] do_syscall_64+0xca/0x2b0 [ 804.460046][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.460073][T13248] RIP: 0033:0x7f1a458fe15c [ 804.460093][T13248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 804.460171][T13248] RSP: 002b:00007f1a4433e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 804.460197][T13248] RAX: ffffffffffffffda RBX: 00007f1a45b56090 RCX: 00007f1a458fe15c [ 804.460212][T13248] RDX: 000000000000000f RSI: 00007f1a4433e0a0 RDI: 0000000000000006 [ 804.460224][T13248] RBP: 00007f1a4433e090 R08: 0000000000000000 R09: 0000000000000000 [ 804.460239][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.460297][T13248] R13: 00007f1a45b56128 R14: 00007f1a45b56090 R15: 00007ffedee64a28 [ 804.460320][T13248] [ 804.664484][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 804.769602][T13249] tipc: Enabling of bearer rejected, already enabled [ 805.321232][T13357] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 805.935483][T13409] wg1 speed is unknown, defaulting to 1000 [ 806.376039][T13415] wg1 speed is unknown, defaulting to 1000 [ 806.600447][T13431] syz.1.13284: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 806.615116][T13431] CPU: 0 UID: 0 PID: 13431 Comm: syz.1.13284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 806.615215][T13431] Tainted: [W]=WARN [ 806.615225][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.615242][T13431] Call Trace: [ 806.615252][T13431] [ 806.615262][T13431] __dump_stack+0x1d/0x30 [ 806.615302][T13431] dump_stack_lvl+0x95/0xd0 [ 806.615357][T13431] dump_stack+0x15/0x1b [ 806.615378][T13431] warn_alloc+0x12b/0x1a0 [ 806.615415][T13431] __vmalloc_node_range_noprof+0xa0/0x1310 [ 806.615448][T13431] ? __futex_wait+0x1fa/0x260 [ 806.615541][T13431] ? perf_trace_run_bpf_submit+0xac/0x110 [ 806.615574][T13431] ? xskq_create+0x36/0xe0 [ 806.615769][T13431] ? perf_trace_kmalloc+0xe1/0x110 [ 806.615815][T13431] vmalloc_user_noprof+0x7d/0xb0 [ 806.615848][T13431] ? xskq_create+0x80/0xe0 [ 806.615965][T13431] xskq_create+0x80/0xe0 [ 806.616001][T13431] xsk_init_queue+0x95/0xf0 [ 806.616042][T13431] xsk_setsockopt+0x3f5/0x640 [ 806.616082][T13431] ? __pfx_xsk_setsockopt+0x10/0x10 [ 806.616122][T13431] __sys_setsockopt+0x184/0x200 [ 806.616159][T13431] __x64_sys_setsockopt+0x64/0x80 [ 806.616192][T13431] x64_sys_call+0x21d5/0x3000 [ 806.616264][T13431] do_syscall_64+0xca/0x2b0 [ 806.616320][T13431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.616349][T13431] RIP: 0033:0x7f803c61f749 [ 806.616370][T13431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.616405][T13431] RSP: 002b:00007f803b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 806.616431][T13431] RAX: ffffffffffffffda RBX: 00007f803c875fa0 RCX: 00007f803c61f749 [ 806.616448][T13431] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 806.616485][T13431] RBP: 00007f803c6a3f91 R08: 0000000000000004 R09: 0000000000000000 [ 806.616502][T13431] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.616519][T13431] R13: 00007f803c876038 R14: 00007f803c875fa0 R15: 00007ffe6755aa48 [ 806.616545][T13431] [ 806.616555][T13431] Mem-Info: [ 806.711990][T13435] __nla_validate_parse: 2 callbacks suppressed [ 806.712082][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13285'. [ 806.714702][T13431] active_anon:32573 inactive_anon:0 isolated_anon:0 [ 806.714702][T13431] active_file:20887 inactive_file:2937 isolated_file:0 [ 806.714702][T13431] unevictable:0 dirty:367 writeback:0 [ 806.714702][T13431] slab_reclaimable:4094 slab_unreclaimable:88896 [ 806.714702][T13431] mapped:34693 shmem:18202 pagetables:1499 [ 806.714702][T13431] sec_pagetables:0 bounce:0 [ 806.714702][T13431] kernel_misc_reclaimable:0 [ 806.714702][T13431] free:1787574 free_pcp:1637 free_cma:0 [ 806.714789][T13431] Node 0 active_anon:130292kB inactive_anon:0kB active_file:83548kB inactive_file:11748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138772kB dirty:1468kB writeback:0kB shmem:72808kB kernel_stack:4640kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 806.714848][T13431] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.768374][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13285'. [ 806.771203][T13431] lowmem_reserve[]: 0 2880 7859 7859 [ 806.958372][T13431] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 806.989895][T13431] lowmem_reserve[]: 0 0 4978 4978 [ 806.995069][T13431] Node 0 Normal free:4180516kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:130408kB inactive_anon:0kB active_file:83548kB inactive_file:11748kB unevictable:0kB writepending:1468kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:3444kB local_pcp:1980kB free_cma:0kB [ 807.028239][T13431] lowmem_reserve[]: 0 0 0 0 [ 807.032829][T13431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 807.045757][T13431] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 807.062076][T13431] Node 0 Normal: 5628*4kB (UME) 3695*8kB (UME) 1778*16kB (UME) 1073*32kB (UME) 599*64kB (UME) 419*128kB (UME) 344*256kB (UME) 273*512kB (UME) 230*1024kB (UM) 68*2048kB (UME) 823*4096kB (UM) = 4180456kB [ 807.082174][T13431] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 807.091714][T13431] 41935 total pagecache pages [ 807.096427][T13431] 0 pages in swap cache [ 807.100601][T13431] Free swap = 124996kB [ 807.104800][T13431] Total swap = 124996kB [ 807.108995][T13431] 2097051 pages RAM [ 807.112824][T13431] 0 pages HighMem/MovableOnly [ 807.117732][T13431] 81272 pages reserved [ 807.142815][T13436] tipc: Enabling of bearer rejected, already enabled [ 807.204821][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13288'. [ 807.231078][T13445] FAULT_INJECTION: forcing a failure. [ 807.231078][T13445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.244258][T13445] CPU: 0 UID: 0 PID: 13445 Comm: syz.2.13288 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 807.244299][T13445] Tainted: [W]=WARN [ 807.244308][T13445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.244324][T13445] Call Trace: [ 807.244333][T13445] [ 807.244343][T13445] __dump_stack+0x1d/0x30 [ 807.244373][T13445] dump_stack_lvl+0x95/0xd0 [ 807.244484][T13445] dump_stack+0x15/0x1b [ 807.244510][T13445] should_fail_ex+0x265/0x280 [ 807.244539][T13445] should_fail+0xb/0x20 [ 807.244561][T13445] should_fail_usercopy+0x1a/0x20 [ 807.244612][T13445] _copy_from_user+0x1c/0xb0 [ 807.244646][T13445] ___sys_sendmsg+0xc1/0x1d0 [ 807.244735][T13445] __x64_sys_sendmsg+0xd4/0x160 [ 807.244774][T13445] x64_sys_call+0x17ba/0x3000 [ 807.244818][T13445] do_syscall_64+0xca/0x2b0 [ 807.244861][T13445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.244889][T13445] RIP: 0033:0x7f6d3accf749 [ 807.244909][T13445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.244931][T13445] RSP: 002b:00007f6d39737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 807.244958][T13445] RAX: ffffffffffffffda RBX: 00007f6d3af25fa0 RCX: 00007f6d3accf749 [ 807.244987][T13445] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 807.245003][T13445] RBP: 00007f6d39737090 R08: 0000000000000000 R09: 0000000000000000 [ 807.245034][T13445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.245049][T13445] R13: 00007f6d3af26038 R14: 00007f6d3af25fa0 R15: 00007ffe14de1ae8 [ 807.245074][T13445] [ 807.424110][T13448] ALSA: seq fatal error: cannot create timer (-19) [ 807.461626][T13452] ALSA: seq fatal error: cannot create timer (-19) [ 807.556298][T13461] FAULT_INJECTION: forcing a failure. [ 807.556298][T13461] name failslab, interval 1, probability 0, space 0, times 0 [ 807.569105][T13461] CPU: 0 UID: 0 PID: 13461 Comm: syz.5.13293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 807.569220][T13461] Tainted: [W]=WARN [ 807.569230][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.569245][T13461] Call Trace: [ 807.569259][T13461] [ 807.569267][T13461] __dump_stack+0x1d/0x30 [ 807.569365][T13461] dump_stack_lvl+0x95/0xd0 [ 807.569392][T13461] dump_stack+0x15/0x1b [ 807.569418][T13461] should_fail_ex+0x265/0x280 [ 807.569444][T13461] should_failslab+0x8c/0xb0 [ 807.569472][T13461] __kmalloc_cache_noprof+0x65/0x4c0 [ 807.569506][T13461] ? ftrace_profile_set_filter+0x96/0x1b0 [ 807.569620][T13461] ftrace_profile_set_filter+0x96/0x1b0 [ 807.569686][T13461] perf_ioctl+0x7b3/0x12e0 [ 807.569722][T13461] ? ioctl_has_perm+0x287/0x2a0 [ 807.569799][T13461] ? do_vfs_ioctl+0x866/0xe10 [ 807.569880][T13461] ? selinux_file_ioctl+0x308/0x3a0 [ 807.569916][T13461] ? __fget_files+0x184/0x1c0 [ 807.569946][T13461] ? __pfx_perf_ioctl+0x10/0x10 [ 807.569976][T13461] __se_sys_ioctl+0xce/0x140 [ 807.570047][T13461] __x64_sys_ioctl+0x43/0x50 [ 807.570089][T13461] x64_sys_call+0x14b0/0x3000 [ 807.570117][T13461] do_syscall_64+0xca/0x2b0 [ 807.570150][T13461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.570172][T13461] RIP: 0033:0x7fd8b5b6f749 [ 807.570225][T13461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.570294][T13461] RSP: 002b:00007fd8b45d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.570313][T13461] RAX: ffffffffffffffda RBX: 00007fd8b5dc5fa0 RCX: 00007fd8b5b6f749 [ 807.570325][T13461] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000005 [ 807.570337][T13461] RBP: 00007fd8b45d7090 R08: 0000000000000000 R09: 0000000000000000 [ 807.570353][T13461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.570370][T13461] R13: 00007fd8b5dc6038 R14: 00007fd8b5dc5fa0 R15: 00007ffec7fe6ef8 [ 807.570411][T13461] [ 808.005481][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 808.005496][ T29] audit: type=1326 audit(1767665907.871:74698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.0.13286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7fc00000 [ 808.051647][ T29] audit: type=1326 audit(1767665907.911:74699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.1.13287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 808.075441][ T29] audit: type=1326 audit(1767665907.911:74700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.1.13287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 808.099160][ T29] audit: type=1326 audit(1767665907.911:74701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.1.13287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 808.122862][ T29] audit: type=1326 audit(1767665907.911:74702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.1.13287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 808.144327][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13297'. [ 808.146632][ T29] audit: type=1326 audit(1767665907.911:74703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13442 comm="syz.1.13287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 808.179373][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13297'. [ 808.211875][T13473] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 808.265486][ T29] audit: type=1326 audit(1767665908.131:74704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13477 comm="syz.1.13299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 808.289337][ T29] audit: type=1326 audit(1767665908.131:74705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13477 comm="syz.1.13299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 808.313087][ T29] audit: type=1326 audit(1767665908.131:74706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13477 comm="syz.1.13299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 808.336935][ T29] audit: type=1326 audit(1767665908.131:74707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13477 comm="syz.1.13299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803c61f749 code=0x7ffc0000 [ 808.371707][T13459] 9pnet_fd: p9_fd_create_tcp (13459): problem connecting socket to 127.0.0.1 [ 808.416232][T13486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13302'. [ 808.423635][T13063] net_ratelimit: 26 callbacks suppressed [ 808.423693][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 808.480301][T13489] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 808.543194][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 808.653266][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 808.699806][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13309'. [ 808.708970][T13515] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13309'. [ 808.763330][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 808.873303][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 808.983441][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 809.093293][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 809.186121][T13532] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 809.203292][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 809.313287][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 809.378100][T13540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5120 sclass=netlink_route_socket pid=13540 comm=syz.2.13319 [ 809.411611][T13540] netlink: 'syz.2.13319': attribute type 10 has an invalid length. [ 809.423169][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 809.437075][T13540] batman_adv: batadv0: Removing interface: dummy0 [ 809.460143][T13540] team0: Port device dummy0 added [ 809.474321][T13544] FAULT_INJECTION: forcing a failure. [ 809.474321][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 809.487060][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.3.13321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 809.487095][T13544] Tainted: [W]=WARN [ 809.487102][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.487188][T13544] Call Trace: [ 809.487197][T13544] [ 809.487208][T13544] __dump_stack+0x1d/0x30 [ 809.487239][T13544] dump_stack_lvl+0x95/0xd0 [ 809.487267][T13544] dump_stack+0x15/0x1b [ 809.487293][T13544] should_fail_ex+0x265/0x280 [ 809.487323][T13544] should_failslab+0x8c/0xb0 [ 809.487376][T13544] kmem_cache_alloc_noprof+0x69/0x4b0 [ 809.487397][T13544] ? sctp_get_port_local+0x438/0xae0 [ 809.487508][T13544] sctp_get_port_local+0x438/0xae0 [ 809.487606][T13544] sctp_do_bind+0x398/0x4b0 [ 809.487641][T13544] sctp_connect_new_asoc+0x153/0x3a0 [ 809.487677][T13544] sctp_sendmsg+0xf10/0x18d0 [ 809.487732][T13544] ? selinux_socket_sendmsg+0x111/0x1b0 [ 809.487763][T13544] ? __pfx_sctp_sendmsg+0x10/0x10 [ 809.487849][T13544] inet_sendmsg+0xc5/0xd0 [ 809.487935][T13544] __sock_sendmsg+0x102/0x180 [ 809.487957][T13544] ____sys_sendmsg+0x345/0x4a0 [ 809.487996][T13544] ___sys_sendmsg+0x17b/0x1d0 [ 809.488059][T13544] __sys_sendmmsg+0x178/0x300 [ 809.488183][T13544] __x64_sys_sendmmsg+0x57/0x70 [ 809.488235][T13544] x64_sys_call+0x1e28/0x3000 [ 809.488266][T13544] do_syscall_64+0xca/0x2b0 [ 809.488309][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.488337][T13544] RIP: 0033:0x7f0f6807f749 [ 809.488391][T13544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.488410][T13544] RSP: 002b:00007f0f66ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 809.488435][T13544] RAX: ffffffffffffffda RBX: 00007f0f682d5fa0 RCX: 00007f0f6807f749 [ 809.488452][T13544] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000005 [ 809.488467][T13544] RBP: 00007f0f66ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 809.488524][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.488542][T13544] R13: 00007f0f682d6038 R14: 00007f0f682d5fa0 R15: 00007ffe554d63f8 [ 809.488568][T13544] [ 809.707391][T13521] 9pnet_fd: p9_fd_create_tcp (13521): problem connecting socket to 127.0.0.1 [ 809.735877][T13545] FAULT_INJECTION: forcing a failure. [ 809.735877][T13545] name failslab, interval 1, probability 0, space 0, times 0 [ 809.748662][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.0.13320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 809.748763][T13545] Tainted: [W]=WARN [ 809.748773][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 809.748789][T13545] Call Trace: [ 809.748797][T13545] [ 809.748806][T13545] __dump_stack+0x1d/0x30 [ 809.748837][T13545] dump_stack_lvl+0x95/0xd0 [ 809.748877][T13545] dump_stack+0x15/0x1b [ 809.748897][T13545] should_fail_ex+0x265/0x280 [ 809.748922][T13545] should_failslab+0x8c/0xb0 [ 809.748949][T13545] __kmalloc_noprof+0xb9/0x5a0 [ 809.748978][T13545] ? kobject_get_path+0x92/0x1c0 [ 809.749047][T13545] kobject_get_path+0x92/0x1c0 [ 809.749077][T13545] kobject_uevent_env+0x1da/0x570 [ 809.749113][T13545] kobject_uevent+0x1d/0x30 [ 809.749252][T13545] device_del+0x710/0x790 [ 809.749296][T13545] __del_gendisk+0x494/0x570 [ 809.749328][T13545] del_gendisk+0xac/0xf0 [ 809.749396][T13545] loop_remove+0x26/0x80 [ 809.749450][T13545] loop_control_ioctl+0x3b3/0x3f0 [ 809.749492][T13545] ? __pfx_loop_control_ioctl+0x10/0x10 [ 809.749565][T13545] __se_sys_ioctl+0xce/0x140 [ 809.749622][T13545] __x64_sys_ioctl+0x43/0x50 [ 809.749661][T13545] x64_sys_call+0x14b0/0x3000 [ 809.749694][T13545] do_syscall_64+0xca/0x2b0 [ 809.749774][T13545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.749802][T13545] RIP: 0033:0x7f1a458ff749 [ 809.749821][T13545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.749845][T13545] RSP: 002b:00007f1a4435f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.749870][T13545] RAX: ffffffffffffffda RBX: 00007f1a45b55fa0 RCX: 00007f1a458ff749 [ 809.749962][T13545] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 809.749979][T13545] RBP: 00007f1a4435f090 R08: 0000000000000000 R09: 0000000000000000 [ 809.749995][T13545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.750011][T13545] R13: 00007f1a45b56038 R14: 00007f1a45b55fa0 R15: 00007ffedee64a28 [ 809.750069][T13545] [ 810.022124][T13558] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 810.056095][T13562] FAULT_INJECTION: forcing a failure. [ 810.056095][T13562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.069557][T13562] CPU: 0 UID: 0 PID: 13562 Comm: syz.0.13329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 810.069604][T13562] Tainted: [W]=WARN [ 810.069611][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.069626][T13562] Call Trace: [ 810.069750][T13562] [ 810.069760][T13562] __dump_stack+0x1d/0x30 [ 810.069792][T13562] dump_stack_lvl+0x95/0xd0 [ 810.069820][T13562] dump_stack+0x15/0x1b [ 810.069845][T13562] should_fail_ex+0x265/0x280 [ 810.069882][T13562] should_fail_alloc_page+0xf2/0x100 [ 810.069906][T13562] __alloc_frozen_pages_noprof+0x109/0x360 [ 810.069946][T13562] alloc_pages_mpol+0xb3/0x260 [ 810.069985][T13562] ? anon_pipe_write+0x11/0xb30 [ 810.070045][T13562] alloc_pages_noprof+0x90/0x130 [ 810.070104][T13562] anon_pipe_write+0x6a1/0xb30 [ 810.070133][T13562] ? anon_pipe_write+0x11/0xb30 [ 810.070172][T13562] ? __pfx_anon_pipe_write+0x10/0x10 [ 810.070277][T13562] vfs_write+0x52a/0x960 [ 810.070304][T13562] ksys_write+0xda/0x1a0 [ 810.070330][T13562] __x64_sys_write+0x40/0x50 [ 810.070355][T13562] x64_sys_call+0x2847/0x3000 [ 810.070411][T13562] do_syscall_64+0xca/0x2b0 [ 810.070500][T13562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.070522][T13562] RIP: 0033:0x7f1a458ff749 [ 810.070538][T13562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.070560][T13562] RSP: 002b:00007f1a4435f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.070581][T13562] RAX: ffffffffffffffda RBX: 00007f1a45b55fa0 RCX: 00007f1a458ff749 [ 810.070671][T13562] RDX: 00000000fffffdef RSI: 0000200000000000 RDI: 0000000000000000 [ 810.070688][T13562] RBP: 00007f1a4435f090 R08: 0000000000000000 R09: 0000000000000000 [ 810.070704][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.070719][T13562] R13: 00007f1a45b56038 R14: 00007f1a45b55fa0 R15: 00007ffedee64a28 [ 810.070741][T13562] [ 810.392960][T13574] wg1 speed is unknown, defaulting to 1000 [ 810.777779][T13588] sd 0:0:1:0: device reset [ 810.928608][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13337'. [ 810.937833][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13337'. [ 810.954040][ T3484] hid_parser_main: 34 callbacks suppressed [ 810.954058][ T3484] hid-generic 0000:0008:0008.0021: unknown main item tag 0x0 [ 810.988251][ T3484] hid-generic 0000:0008:0008.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 811.855908][T13632] wg1 speed is unknown, defaulting to 1000 [ 812.598791][T13635] wg1 speed is unknown, defaulting to 1000 [ 812.723208][T13639] __nla_validate_parse: 5 callbacks suppressed [ 812.723228][T13639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13354'. [ 812.739456][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13354'. [ 813.699308][T13101] net_ratelimit: 17 callbacks suppressed [ 813.699328][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 813.777614][T13644] syzkaller0: entered promiscuous mode [ 813.783240][T13644] syzkaller0: entered allmulticast mode [ 813.813340][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 813.859780][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 813.859797][ T29] audit: type=1400 audit(1767665913.721:74947): avc: denied { bind } for pid=13650 comm="syz.5.13360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 813.933609][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 813.953263][ T29] audit: type=1326 audit(1767665913.811:74948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 813.977213][ T29] audit: type=1326 audit(1767665913.821:74949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.008511][ T29] audit: type=1326 audit(1767665913.871:74950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.032459][ T29] audit: type=1326 audit(1767665913.871:74951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.056491][ T29] audit: type=1326 audit(1767665913.871:74952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.080323][ T29] audit: type=1326 audit(1767665913.871:74953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.081621][T10875] bond0: (slave bridge8): failed to get link speed/duplex [ 814.104036][ T29] audit: type=1326 audit(1767665913.871:74954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.104072][ T29] audit: type=1326 audit(1767665913.871:74955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.158737][ T29] audit: type=1326 audit(1767665913.871:74956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13653 comm="syz.0.13362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7ffc0000 [ 814.200151][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13364'. [ 814.213289][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 814.234193][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13364'. [ 814.264131][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13368'. [ 814.264860][T13673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13367'. [ 814.289771][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13367'. [ 814.323179][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 814.354865][T13674] wg1 speed is unknown, defaulting to 1000 [ 814.543273][T13115] bond0: (slave bridge8): failed to get link speed/duplex [ 814.940983][T13683] wg1 speed is unknown, defaulting to 1000 [ 815.031931][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 815.088439][T13689] syzkaller0: entered promiscuous mode [ 815.094203][T13689] syzkaller0: entered allmulticast mode [ 815.153470][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 815.255352][T13672] wg1 speed is unknown, defaulting to 1000 [ 815.263467][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 815.375825][T13697] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 815.529283][T13711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13380'. [ 815.556370][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13380'. [ 815.631734][T13709] wg1 speed is unknown, defaulting to 1000 [ 815.717041][T13729] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 815.977167][T13747] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13392'. [ 816.184116][T13750] wg1 speed is unknown, defaulting to 1000 [ 816.621776][T13763] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 817.034507][T13796] wg1 speed is unknown, defaulting to 1000 [ 817.116818][T13800] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 817.423307][T13807] wg1 speed is unknown, defaulting to 1000 [ 817.962908][T13826] __nla_validate_parse: 4 callbacks suppressed [ 817.962928][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13421'. [ 818.084894][T13833] warn_alloc: 1 callbacks suppressed [ 818.084911][T13833] syz.2.13424: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 818.104966][T13833] CPU: 0 UID: 0 PID: 13833 Comm: syz.2.13424 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 818.105011][T13833] Tainted: [W]=WARN [ 818.105021][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 818.105080][T13833] Call Trace: [ 818.105087][T13833] [ 818.105098][T13833] __dump_stack+0x1d/0x30 [ 818.105130][T13833] dump_stack_lvl+0x95/0xd0 [ 818.105160][T13833] dump_stack+0x15/0x1b [ 818.105186][T13833] warn_alloc+0x12b/0x1a0 [ 818.105275][T13833] __vmalloc_node_range_noprof+0xa0/0x1310 [ 818.105311][T13833] ? __futex_wait+0x1fa/0x260 [ 818.105332][T13833] ? perf_trace_run_bpf_submit+0xac/0x110 [ 818.105369][T13833] ? xskq_create+0x36/0xe0 [ 818.105464][T13833] ? perf_trace_kmalloc+0xe1/0x110 [ 818.105508][T13833] vmalloc_user_noprof+0x7d/0xb0 [ 818.105536][T13833] ? xskq_create+0x80/0xe0 [ 818.105579][T13833] xskq_create+0x80/0xe0 [ 818.105649][T13833] xsk_init_queue+0x95/0xf0 [ 818.105738][T13833] xsk_setsockopt+0x3f5/0x640 [ 818.105799][T13833] ? __pfx_xsk_setsockopt+0x10/0x10 [ 818.105836][T13833] __sys_setsockopt+0x184/0x200 [ 818.105866][T13833] __x64_sys_setsockopt+0x64/0x80 [ 818.105915][T13833] x64_sys_call+0x21d5/0x3000 [ 818.105948][T13833] do_syscall_64+0xca/0x2b0 [ 818.105987][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.106086][T13833] RIP: 0033:0x7f6d3accf749 [ 818.106106][T13833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.106131][T13833] RSP: 002b:00007f6d39737038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 818.106183][T13833] RAX: ffffffffffffffda RBX: 00007f6d3af25fa0 RCX: 00007f6d3accf749 [ 818.106254][T13833] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 818.106271][T13833] RBP: 00007f6d3ad53f91 R08: 0000000000000004 R09: 0000000000000000 [ 818.106360][T13833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.106376][T13833] R13: 00007f6d3af26038 R14: 00007f6d3af25fa0 R15: 00007ffe14de1ae8 [ 818.106401][T13833] [ 818.106410][T13833] Mem-Info: [ 818.262403][T13839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13426'. [ 818.267192][T13833] active_anon:29728 inactive_anon:14 isolated_anon:0 [ 818.267192][T13833] active_file:21082 inactive_file:2941 isolated_file:0 [ 818.267192][T13833] unevictable:0 dirty:454 writeback:0 [ 818.267192][T13833] slab_reclaimable:4094 slab_unreclaimable:86083 [ 818.267192][T13833] mapped:30891 shmem:15367 pagetables:1644 [ 818.267192][T13833] sec_pagetables:0 bounce:0 [ 818.267192][T13833] kernel_misc_reclaimable:0 [ 818.267192][T13833] free:1782336 free_pcp:12170 free_cma:0 [ 818.315840][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13426'. [ 818.322607][T13833] Node 0 active_anon:118912kB inactive_anon:56kB active_file:84328kB inactive_file:11764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123564kB dirty:1816kB writeback:0kB shmem:61468kB kernel_stack:4624kB pagetables:6576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 818.322674][T13833] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 818.434087][T13833] lowmem_reserve[]: 0 2880 7859 7859 [ 818.439503][T13833] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 818.471016][T13833] lowmem_reserve[]: 0 0 4978 4978 [ 818.476112][T13833] Node 0 Normal free:4167996kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118912kB inactive_anon:56kB active_file:84328kB inactive_file:11764kB unevictable:0kB writepending:1816kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:45116kB local_pcp:9172kB free_cma:0kB [ 818.509371][T13833] lowmem_reserve[]: 0 0 0 0 [ 818.513978][T13833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 818.527074][T13833] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 818.543364][T13833] Node 0 Normal: 4708*4kB (UME) 2843*8kB (UME) 1234*16kB (UME) 959*32kB (UME) 531*64kB (UME) 420*128kB (UME) 355*256kB (UME) 282*512kB (UME) 241*1024kB (UM) 82*2048kB (UME) 815*4096kB (UM) = 4167976kB [ 818.563658][T13833] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 818.572975][T13833] 39336 total pagecache pages [ 818.577780][T13833] 0 pages in swap cache [ 818.582053][T13833] Free swap = 124996kB [ 818.586390][T13833] Total swap = 124996kB [ 818.590570][T13833] 2097051 pages RAM [ 818.594398][T13833] 0 pages HighMem/MovableOnly [ 818.599213][T13833] 81272 pages reserved [ 818.733521][T13101] net_ratelimit: 19 callbacks suppressed [ 818.733545][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 818.755112][T13854] ALSA: seq fatal error: cannot create timer (-19) [ 818.853198][T13637] bond0: (slave bridge8): failed to get link speed/duplex [ 818.914913][T13861] ALSA: seq fatal error: cannot create timer (-19) [ 818.963205][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 819.083250][T13637] bond0: (slave bridge8): failed to get link speed/duplex [ 819.193196][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 819.303214][T13063] bond0: (slave bridge8): failed to get link speed/duplex [ 819.413240][T13082] bond0: (slave bridge8): failed to get link speed/duplex [ 819.468951][ T29] kauditd_printk_skb: 894 callbacks suppressed [ 819.468970][ T29] audit: type=1326 audit(1767665919.331:75851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13844 comm="syz.0.13428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a458ff749 code=0x7fc00000 [ 819.508539][T13864] FAULT_INJECTION: forcing a failure. [ 819.508539][T13864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.521739][T13864] CPU: 0 UID: 0 PID: 13864 Comm: syz.0.13434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 819.521774][T13864] Tainted: [W]=WARN [ 819.521781][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.521827][T13864] Call Trace: [ 819.521834][T13864] [ 819.521842][T13864] __dump_stack+0x1d/0x30 [ 819.521869][T13864] dump_stack_lvl+0x95/0xd0 [ 819.521895][T13864] dump_stack+0x15/0x1b [ 819.521930][T13864] should_fail_ex+0x265/0x280 [ 819.521955][T13864] should_fail+0xb/0x20 [ 819.521975][T13864] should_fail_usercopy+0x1a/0x20 [ 819.522012][T13864] _copy_from_user+0x1c/0xb0 [ 819.522041][T13864] ___sys_sendmsg+0xc1/0x1d0 [ 819.522088][T13864] __x64_sys_sendmsg+0xd4/0x160 [ 819.522180][T13864] x64_sys_call+0x17ba/0x3000 [ 819.522216][T13864] do_syscall_64+0xca/0x2b0 [ 819.522254][T13864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.522332][T13864] RIP: 0033:0x7f1a458ff749 [ 819.522348][T13864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.522368][T13864] RSP: 002b:00007f1a4435f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.522389][T13864] RAX: ffffffffffffffda RBX: 00007f1a45b55fa0 RCX: 00007f1a458ff749 [ 819.522402][T13864] RDX: 0000000024044092 RSI: 0000200000000040 RDI: 0000000000000003 [ 819.522437][T13864] RBP: 00007f1a4435f090 R08: 0000000000000000 R09: 0000000000000000 [ 819.522451][T13864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.522464][T13864] R13: 00007f1a45b56038 R14: 00007f1a45b55fa0 R15: 00007ffedee64a28 [ 819.522489][T13864] [ 819.522631][T13851] 9pnet_fd: p9_fd_create_tcp (13851): problem connecting socket to 127.0.0.1 [ 819.529609][T13637] bond0: (slave bridge8): failed to get link speed/duplex [ 819.603038][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13434'. [ 819.703246][ T29] audit: type=1326 audit(1767665919.361:75852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.738314][ T29] audit: type=1326 audit(1767665919.361:75853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.743403][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 819.762275][ T29] audit: type=1326 audit(1767665919.361:75854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.793756][ T29] audit: type=1326 audit(1767665919.361:75855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.817654][ T29] audit: type=1326 audit(1767665919.361:75856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.842516][ T29] audit: type=1326 audit(1767665919.361:75857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.844056][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13438'. [ 819.866403][ T29] audit: type=1326 audit(1767665919.361:75858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.877452][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 819.899101][ T29] audit: type=1326 audit(1767665919.361:75859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.908488][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13434'. [ 819.930252][ T29] audit: type=1326 audit(1767665919.361:75860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.1.13429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803c61f749 code=0x7fc00000 [ 819.975059][T13880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13439'. [ 820.033284][T13884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13441'. [ 820.045642][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13439'. [ 820.062652][T13884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13441'. [ 820.078534][T13891] syzkaller0: entered promiscuous mode [ 820.084090][T13891] syzkaller0: entered allmulticast mode [ 820.157582][T13894] syzkaller0: entered promiscuous mode [ 820.163150][T13894] syzkaller0: entered allmulticast mode [ 820.198462][T13898] syzkaller0: entered promiscuous mode [ 820.204151][T13898] syzkaller0: entered allmulticast mode [ 820.391687][T13903] wg1 speed is unknown, defaulting to 1000 [ 820.558401][T13874] 9pnet_fd: p9_fd_create_tcp (13874): problem connecting socket to 127.0.0.1 [ 820.899526][T13932] syzkaller0: entered promiscuous mode [ 820.905181][T13932] syzkaller0: entered allmulticast mode [ 821.088542][T13940] wg1 speed is unknown, defaulting to 1000 [ 821.261678][T13913] 9pnet_fd: p9_fd_create_tcp (13913): problem connecting socket to 127.0.0.1 [ 821.533630][T13988] ALSA: seq fatal error: cannot create timer (-19) [ 821.601214][T13990] wg1 speed is unknown, defaulting to 1000 [ 821.733307][T13987] wg1 speed is unknown, defaulting to 1000 [ 822.217024][T14013] FAULT_INJECTION: forcing a failure. [ 822.217024][T14013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.230333][T14013] CPU: 1 UID: 0 PID: 14013 Comm: syz.1.13491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 822.230431][T14013] Tainted: [W]=WARN [ 822.230440][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.230457][T14013] Call Trace: [ 822.230457][T13977] ================================================================== [ 822.230465][T14013] [ 822.230474][T14013] __dump_stack+0x1d/0x30 [ 822.230498][T13977] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 822.230540][T13977] [ 822.230546][T13977] write to 0xffffffff868bc330 of 88 bytes by task 14013 on cpu 1: [ 822.230562][T14013] dump_stack_lvl+0x95/0xd0 [ 822.230564][T13977] prb_reserve+0x6e6/0xad0 [ 822.230593][T14013] dump_stack+0x15/0x1b [ 822.230600][T13977] vprintk_store+0x53c/0x830 [ 822.230635][T13977] vprintk_emit+0x15a/0x5c0 [ 822.230665][T13977] vprintk_default+0x26/0x30 [ 822.230620][T14013] should_fail_ex+0x265/0x280 [ 822.230696][T13977] vprintk+0x1d/0x30 [ 822.230722][T13977] _printk+0x79/0xa0 [ 822.230737][T13977] dump_stack_print_info+0xee/0x1b0 [ 822.230715][T14013] should_fail+0xb/0x20 [ 822.230759][T13977] __dump_stack+0x11/0x30 [ 822.230779][T14013] should_fail_usercopy+0x1a/0x20 [ 822.230784][T13977] dump_stack_lvl+0x95/0xd0 [ 822.230809][T13977] dump_stack+0x15/0x1b [ 822.230811][T14013] _copy_from_user+0x1c/0xb0 [ 822.230834][T13977] should_fail_ex+0x265/0x280 [ 822.230856][T13977] should_fail+0xb/0x20 [ 822.230860][T14013] ucma_write+0xd9/0x250 [ 822.230878][T13977] should_fail_usercopy+0x1a/0x20 [ 822.230896][T14013] ? __pfx_ucma_write+0x10/0x10 [ 822.230907][T13977] _copy_from_user+0x1c/0xb0 [ 822.230930][T14013] vfs_write+0x269/0x960 [ 822.230939][T13977] ucma_write+0xd9/0x250 [ 822.230954][T14013] ? __rcu_read_unlock+0x4f/0x70 [ 822.230968][T13977] vfs_write+0x269/0x960 [ 822.230981][T14013] ? __fget_files+0x184/0x1c0 [ 822.230993][T13977] ksys_write+0xda/0x1a0 [ 822.231017][T13977] __x64_sys_write+0x40/0x50 [ 822.231034][T13977] x64_sys_call+0x2847/0x3000 [ 822.231058][T13977] do_syscall_64+0xca/0x2b0 [ 822.231083][T14013] ksys_write+0xda/0x1a0 [ 822.231097][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.231110][T14013] __x64_sys_write+0x40/0x50 [ 822.231125][T13977] [ 822.231132][T13977] read to 0xffffffff868bc330 of 8 bytes by task 13977 on cpu 0: [ 822.231136][T14013] x64_sys_call+0x2847/0x3000 [ 822.231153][T13977] _prb_read_valid+0x383/0x920 [ 822.231170][T14013] do_syscall_64+0xca/0x2b0 [ 822.231189][T13977] prb_read_valid+0x3c/0x60 [ 822.231217][T13977] printk_get_next_message+0xc8/0x510 [ 822.231238][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.231262][T13977] console_flush_all+0x2c8/0x6c0 [ 822.231284][T13977] console_unlock+0x97/0x270 [ 822.231274][T14013] RIP: 0033:0x7f803c61f749 [ 822.231314][T13977] con_shutdown+0x4b/0x60 [ 822.231336][T13977] release_tty+0x85/0x4f0 [ 822.231352][T13977] tty_release_struct+0x96/0xb0 [ 822.231370][T13977] tty_release+0x856/0xb10 [ 822.231392][T14013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.231388][T13977] __fput+0x29b/0x650 [ 822.231416][T13977] ____fput+0x1c/0x30 [ 822.231441][T13977] task_work_run+0x131/0x1a0 [ 822.231473][T13977] exit_to_user_mode_loop+0x1fe/0x740 [ 822.231491][T14013] RSP: 002b:00007f803b087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 822.231495][T13977] do_syscall_64+0x1dd/0x2b0 [ 822.231516][T14013] RAX: ffffffffffffffda RBX: 00007f803c875fa0 RCX: 00007f803c61f749 [ 822.231535][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.231557][T13977] [ 822.231561][T13977] value changed: 0x000000000000268c -> 0x000000000000468c [ 822.231572][T13977] [ 822.231576][T13977] Reported by Kernel Concurrency Sanitizer on: [ 822.231589][T13977] CPU: 0 UID: 0 PID: 13977 Comm: syz.2.13479 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 822.231532][T14013] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 822.231612][T14013] RBP: 00007f803b087090 R08: 0000000000000000 R09: 0000000000000000 [ 822.231624][T13977] Tainted: [W]=WARN [ 822.231628][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.231633][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 822.231650][T13977] ================================================================== [ 822.231644][T14013] R13: 00007f803c876038 R14: 00007f803c875fa0 R15: 00007ffe6755aa48 [ 822.231703][T14013] [ 822.576452][T13993] 9pnet_fd: p9_fd_create_tcp (13993): problem connecting socket to 127.0.0.1 [ 823.773236][T13101] net_ratelimit: 28 callbacks suppressed [ 823.773258][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 823.903187][T13101] bond0: (slave bridge8): failed to get link speed/duplex [ 824.013197][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 824.123231][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 824.243196][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 824.353199][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 824.463188][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 824.583272][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 824.693206][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 824.803212][T13095] bond0: (slave bridge8): failed to get link speed/duplex [ 828.883222][T13100] net_ratelimit: 36 callbacks suppressed [ 828.883248][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.003307][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.114926][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.223231][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.333195][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.443398][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 829.553264][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.663221][T13100] bond0: (slave bridge8): failed to get link speed/duplex [ 829.773238][ T53] bond0: (slave bridge8): failed to get link speed/duplex [ 829.883209][ T53] bond0: (slave bridge8): failed to get link speed/duplex