last executing test programs: 3.072428128s ago: executing program 0 (id=4696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x9450) 2.958347169s ago: executing program 0 (id=4697): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 2.093252381s ago: executing program 0 (id=4709): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000400), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x14, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x37, 0x19, "8c8681fe956912bfeb142c33a2c43a4c51352f9faad74e369552e7b681cfe5af4dc2ad42e52ead00b1840610e2617d44b7c846"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0x9, &(0x7f00000002c0)=""/1, &(0x7f0000000300)=0x1) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) 1.989359871s ago: executing program 3 (id=4711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000040006"], 0xd0}}, 0x0) 1.932124196s ago: executing program 0 (id=4712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x200bcae, 0x8, 0x0, 0x351, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000f00)={0x0, 0x6}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000f80)={0x5, 0x200, 0x80000000, 0x5d59, 0x0}, &(0x7f0000000fc0)=0x10) sendmmsg$inet_sctp(r5, &(0x7f0000001200)=[{&(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000380)="62f70b6ea69101f594fb61378a7ced97bfc136e84f97e3aa45d13553a4e0c150541bffb954aee6e3dd5cf03cec452f3d3a65544da8dedb04abd654f2cdd0e944dc5d3041a90b77423491eac0b61f8b071671ac984c769e7ab52f96d6a44e5259ccb0f0e14ab75492f0ee4ec300b5af4011b2391dce1a2f8f77f85bd17a9de3ba8d24d55ecf9ef39049167dd09723109485016d24eb8055b19a9a298e5c45fa5fce9082453f41436d4e43905633140615c80f89440f702992ea113af44c79bb5913a6748f1dec20080f280cae50f3d46ba977bf", 0xd3}, {&(0x7f0000000480)="dfde658b89e5260202766fae88c892db83f57837d8678c521171af384c3b1a302710566af603e029873b097a51414eccf6348ad0629fc7e73de5971f6357d806b9dca01599bddb25adb2715da77205308824ef5d502e58d44ea3f7cfa999ad689693a33c8bda2fe48b0339", 0x6b}, {&(0x7f0000000680)="f0407654641e9eeb72d1b0b343f01533878f89e8dd4249a6648ed35eff4a27cbb27eab8fe0e6ce974f4ca3e2d02bfc5b57a6effb9ab997cf32c8a333bf71aa840c196e443b0386c87d9d7405b67e537c2878f4b7bab0daa9e428ee759514fabaa1131824", 0x64}, {&(0x7f0000000700)="2f8c6ba18b958674437dd5207d89ece9a607ad97ff32c0bed0f4d87ba0619175f8bfce8971583a29876c4913801441d0f297a99a4224db40ea982205352684808bec19a2d038a59510bd4d8cdf06285a71feaf09436477c2a58acd2aa3fe6710405e9b25efcf2192e44098679da5a6f7423d04db76d5821f1a854b2ce10edf79b04fa45b56ba4f8b213774f4d1966ecc0c79e23401ce05fef074885140233e0ed753c4f28685bb82ad", 0xa9}, {&(0x7f00000007c0)="91d34d4be88f79a513ab4f5ebbc489851ee33f79d3235226931f363277639529f061163a7377119df7fecfe450093d89cd578bf683156205dd9814bf5263e81e1a1a90f5539866e25163e6c0fd879fba2849a47191c96f3004e642ac4630408dce536f674e7ddec4", 0x68}, {&(0x7f0000000980)="68befad167116cd7afe95bb6eda9b16bdd8dea2368f398bc63f096a28917962e99f9255fda5c9792126716a83e1f4392ff2c6beed3a0d05012ddd1e6797061bbead45100badb23977f8d8505c4d153edbcd116b35f14b4395b5dba1af5389644b0afd160a176c5b1544736126f85ed95bac386642a926d98c49fb2521aca0442181dfdbb6a6c", 0x86}], 0x6, &(0x7f0000000500), 0x0, 0x20004805}, {&(0x7f00000005c0)=@in6={0xa, 0x4e24, 0x7eb5bf78, @empty, 0x7}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a40)="0497f1c7a838a7ecba184eb2459247c5b495c6a86991b99fd02c09e2662568a1653f92ca79af93d93c8338b97b6825481a26417819478c1088986a924bd6209dcd2f4e0e0d5ec5dbd06eb52206b79a21c0949938e1bf64eacd02cb04a7e2b2ffeaad1a5befe9a75967a4f71f84e08d0ba83f95eaaac1711a17940c723cf690041dd4333e4ca03f8412ac317a7f9f4872710ef7d5fe68a9727e44c80c3e863b1d04f69212beb0aa9154c0a529311b2c438c4d73bfcc1df9e4e1b6b895a4ecf1d05493602e7f53e58b9a5117ed24b1b95522", 0xd1}, {&(0x7f0000000b40)="52d56a8a9b719563dfd50869ceb75bfcc0cce74b3e9710bc5b9f8a25cacf1e94bc3d6ae12e879959792a16ab4235bf52292c82ee5f7405ac2d4cf95427bfe77ce8e0ac9cbd50871abebe757cc7839bc598dd1a0be0f46b18b9baea5a28ebfa1578145dfb6b10d183a10ae1ca5cc575a033ded1112f6bd7e4666f284630ed65818571f4eecc3185ef957ec83818be647d88", 0x91}, {&(0x7f0000000c00)="82c2daae52d1c6738234ec721d476f5c0b2656e732612c4260387e030566c0080416e0857ce1cd52661b99c8fd7d0ce0ad955f93f8391083ea1c78f6993d29c6b5626fa0a9d41285ed7d0819c8beb55a227c0cb8f17cd3407848cafdbb9530ef98265f5aeb41b92c6aa129caf59732c6840e5a6ea4d62566be0814f165dacd3b22a518ced67f465ff3d06c1915ba7f5d6014cf438d9e0b57f439eda1af3c863030ca7a16af91ac80cc0cca4ce09e131e2c010099e69c1608c6bf5d731e49c860019edcdfb978b2b38b0eac06b995e9572ac3f7e6f1a63feece47be96", 0xdc}, {&(0x7f0000000d00)="078fd41cd7f55c373762e8d4395f402cde21b50eba2d5dae061ae4ca82dd437dcddf66cd0f418bcd1bc106f3e6f05eaaf76f4d3b8a412c0e49ac3baf5597666195", 0x41}, {&(0x7f0000000d80)="9e7442e9c4adf3845423a233f05713243e4a58b13b07882251631e3ea179e5761ef8e206124feec45aa99927d7e110515848023cb67c0c02e9a7d367f4f00d", 0x3f}, {&(0x7f0000000dc0)="0c93684dea85c18dc0b20423d67200996f54655de420c813680941bd590cc21816556a2ecb469a2c82", 0x29}], 0x6, &(0x7f00000010c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xd0, 0x2, 0x1, 0x5, 0x0, 0x1000, 0x64de}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xa}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1ff8, 0xd, 0x8, 0x61fc9106, 0x3, 0x4, 0x1, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xc22, 0x203, 0x1, 0x400, 0x800, 0x4, 0x6, r12}}, @init={0x18, 0x84, 0x0, {0x4, 0x3, 0x5e4, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x4, 0x401, 0xfffffffb}}, @init={0x18, 0x84, 0x0, {0x10, 0x8, 0x9, 0x1}}], 0x128, 0xb2a4a59310ef62d2}], 0x2, 0x5) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003000)=ANY=[@ANYBLOB="a0100000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf256500000008000300", @ANYRES32, @ANYBLOB="0c009900f108000007000000100003800c00008008000300ff000000080002000100000008"], 0x10a0}}, 0x4004880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r2, 0x25, 0x8}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.927731757s ago: executing program 3 (id=4714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="180000077e7eaf50d15bfa0000000000181a0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2], &(0x7f0000000580)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r10 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r12, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.869878582s ago: executing program 2 (id=4715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b70000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32=r1, @ANYRES64=r3, @ANYRES64, @ANYRES32=r4, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) signalfd4(r4, &(0x7f0000000200)={[0x9]}, 0x8, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800b0001006d616373656300000c0002800500030009"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.592349968s ago: executing program 2 (id=4716): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x20000000) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.400130707s ago: executing program 2 (id=4718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r2, 0xee01, r3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="f5e067b95173"}) readv(r4, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 918.595413ms ago: executing program 1 (id=4723): get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0), 0x46, 0x58b, &(0x7f0000000280)="$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") get_mempolicy(0x0, 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x3) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0), 0x46, 0x58b, &(0x7f0000000280)="$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") (async) 894.746345ms ago: executing program 3 (id=4724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800800050000000000040006"], 0xd0}}, 0x0) 823.541342ms ago: executing program 1 (id=4725): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_notify(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b1153", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}}) 791.166365ms ago: executing program 1 (id=4727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fchown(r2, 0xee01, r3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="f5e067b95173"}) readv(r4, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 770.190417ms ago: executing program 3 (id=4728): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$uac1(0x0, 0x7a, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mm_page_free_batched\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x0, 0x8, 0xfffffffffffffff8, 0x8}, @exit, @generic={0x7, 0x4, 0x4, 0x1000, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 746.321349ms ago: executing program 4 (id=4729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007"], 0x40}, 0x20000000) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 593.984304ms ago: executing program 4 (id=4730): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r2, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000001840)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0xb, 0xa, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x47b22c1deb5934ad, 0x3, 0x0, 0x3}, @ldst={0x0, 0x3, 0x3, 0x8, 0x7, 0xffffffffffffffe8, 0xffffffffffffffff}]}, &(0x7f0000001680)='syzkaller\x00', 0x3ff, 0x2, &(0x7f00000016c0)=""/2, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2e, r1, 0x8, &(0x7f0000001700)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001740)={0x2, 0xb, 0x101, 0x5}, 0x10, r3, r2, 0x0, &(0x7f0000001a80)=[r1, r1], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x81) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x130, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xae}, @NL80211_ATTR_IE={0xfa, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0xb3, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0x10, 0x2, 0xe, 0x4}}, @measure_req={0x26, 0x46, {0x1, 0x9, 0xf, "518795c742de1165fb601d854a494b174ef4d4df0d38573623577ac4279d4c4054d0639267ecf88b99215cd0918aa0b291301daacfdb82dd292083806c725dbe8a3611"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x9, 0x2f, 0xe8}}, @ht={0x2d, 0x1a, {0x2, 0x2, 0x0, 0x0, {0x1, 0x5, 0x0, 0x199, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x800}}, @random={0x7, 0x73, "6794f40856ff5c691a18a7d548197f5b3d1aec1fec178be6c9916919ab35acdca67c22bbca3f6235101ad8d8e42af1da3770b3ef03c0656c5e9898e06ceecb9fcdfd8607c1cca5fa6a59e7dba47c44639aad15aff1b2de6433cbfa757284ba20de881e12d3c5e403e4c388d22f782eb476d274"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40800}, 0x20000800) pwritev(r5, &(0x7f0000000140)=[{&(0x7f00000011c0)="a3e8f96e69ed3ed123305eb732c5972d9b95c01f00e3331d489d641c231ec9ee55e6025d1cb3782d3d4d085f638bec17915a2198ce02d1ca9f5bab2b3053b7d0c1d450d030cba982cf7d0fda321801f6d6d4501bbd8881c283fca22869a9a6b4b5d993e85694784139fb30512b660b40c01b25f939229e896e00", 0x7a}, {&(0x7f0000001240)="9081c3b828cbf377b9b9d5e599492e37137b1eb19117eb36054ccd2d7ed6bf6b8d1abb14a39f99e50f87a798cc6c170b41036ff4d5edb6fec69b98133736a8a9b905653a2bff08c725fcd363352f25e035d171bbb80f2d63decc14a924364dfc8603a2b310b50a1fe0776dd2c537ec448ef07fb8614ef6a4307f6a7d409947978c4872bfeb3526e3f4c70b4bc547ae05ceb014e48f73f52ae2e4578fdef099ec33f46320e604eb3fb24dc76dbd7e2c99f37e9005259cfd4cfdf0cb9ecbad76", 0xbf}, {&(0x7f0000001300)="0262d60e571cccf2230243692f9db39f69f56a98f1f1712e573610101879385fcb5c664a6518f905566fc3ea1a8d48cd7078670aead41217825b3204610b7407c63a38c387cfe7f2d4717e9f87cb0d684c32b03ba7b33cbbb8017ed2f2fa16e4cac9259cdf6ac87b6ac6082764061c0ceff6921429d9bf85b0bba607ab40cb44", 0x80}], 0x3, 0x100, 0x1) close(r0) r9 = getpgrp(0x0) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x80, 0x8, 0x9, 0x0, 0x9, 0x1000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1dd}, 0x28d, 0x100, 0x3, 0x6, 0x400, 0x1ff, 0x10, 0x0, 0xa, 0x0, 0xad}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xa, 0x1, 0x8, 0x0, 0x0, 0x9, 0x800, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0xcc}, 0x900, 0x101, 0x7fff, 0x4, 0x400, 0xc5, 0x6, 0x0, 0xff, 0x0, 0x10}, r9, 0x8, r10, 0x13) 528.6819ms ago: executing program 4 (id=4731): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a3100004000140004801000018007"], 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 385.831294ms ago: executing program 4 (id=4732): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000080), &(0x7f00000019c0)) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000600)=""/166, 0xa6}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/224, 0xe0}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x8, 0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="d90000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='fsi_master_break\x00', r3, 0x0, 0xfff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0900000002000000040000000c00000000000000", @ANYRES32=r2, @ANYBLOB="0017d138f2d2d25839fdf2780000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010026bd7000d6dbdf250900020073797a3100000010080041007278650014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 381.006004ms ago: executing program 0 (id=4733): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x100000}, 0x10}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffbfffffffffd}, 0x18) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x120, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x2, r2}], {0x4, 0x6}, [{0x8, 0x1, r3}], {0x10, 0x4}, {0x20, 0x4}}, 0x34, 0x0) iopl(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r1], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r6, 0x12, 0x1, 0xfffff800, &(0x7f0000000900)=[0x0], 0x1, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffff}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x61], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getxattr(0x0, &(0x7f0000000100)=@known='user.incfs.id\x00', 0x0, 0x0) 336.598488ms ago: executing program 0 (id=4734): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2c008051}, 0x4050) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x400) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 335.479008ms ago: executing program 1 (id=4735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0)=[{}], 0x1, 0x9450) 335.181558ms ago: executing program 4 (id=4736): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 301.426041ms ago: executing program 2 (id=4737): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) 226.532788ms ago: executing program 1 (id=4738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r8 = dup(r7) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r11, @ANYRES32=r0, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="0b000000e3ff000071baa7325f64850633efcf874580a96f8ed4643c8c074e3eafa47124e3b643bdbbe66efd1f68a7f1e33041935b2750e015aa5c20077c3c8040087e8bd1a7bd14739a8f17d673ceba510618f916042207be5bd1846e872b4b42bda03b89641444eb4de21214b9b6a6eb8ac1efaddc81479d3cc9e02108b7c344e60000009c16abc1e258c0f82b7dee67b3dabca7beb554986310d2a88e66e742f8c5741ace59fae972030831bc11a42e63f7ba8e7cdd3d013a50d51c", @ANYRES32=r8, @ANYBLOB, @ANYRES32, @ANYRES16=r6, @ANYRES64=r12], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYRES32, @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7fc27d6e0b1e6d9328216f4a596658437813cc75d4f85af6e5b58539145a2189869c7c7440f0088e570849035fadf1629d5d7eeb56a9317b29f5d47868b", @ANYRES64=r12], 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x141, 0x3, 0xc, 0x13}, {0x3, 0x0, 0x8001, 0x200, 0x2, 0x7}, 0xffffff80, 0x947, 0xe03}}, @TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x25, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x608cccb7, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xffffeffa, 0x6, 0x6, 0xaf8, 0x4, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xa, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0x3, 0x5, 0x1, 0x18001, 0x6a9, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x202, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x1, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x20008, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0x100, 0x9a0, 0x0, 0xb, 0x2, 0x9, 0x6, 0x3ff, 0x5, 0x1, 0xf682, 0x40, 0x637, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x7, 0x2, 0x0, 0x0, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x6, 0x6, 0x6, 0x7, 0x4, 0xc, 0x42, 0x3, 0x5f, 0x5fa, 0x10001]}]}}]}, 0x45c}}, 0x8000) getxattr(0x0, &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 198.424241ms ago: executing program 4 (id=4739): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000340)={0x0, 0xffff5729}, &(0x7f00000003c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) fchdir(r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES64=r1, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYRES64=r3], 0x0, 0xd006, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003580)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}], 0x18}}], 0x1, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000680)="c8fa4b7835defd741f9a5e8f0bd841d93e4447a93d806752a78c48d37ba1a3d1eab2a0d0600785c8f7fe374422a5fe34628967bcb28e0ed06524da0670fa4eed8cd4e14d5d14a9480bf8355494015b98e85e876da42e24f1a209b82a9596905ee424894aea4cff5e4c7f1d1d9b6849638050cf9d0318d94a0b68f779b69f2032c01232b5f7016863d7cafc29fe0463d012b4400656cc540195f40b4f5b8da4887ded80d895f68bec0611482e6c990c8ff2dcbad7d474459c0e66cf4040924e6f6ece7ba98a187552da12a2e36ee19dfe269ee432f44ce2f709c463fddbcf34176064d1ae4296def64efa495b8c3ff244506e", 0xf2}, {&(0x7f00000001c0)="807b0c86068fed91be0ab31a56312b9421ac0b118736a7588f4b81", 0x1b}, {&(0x7f0000000580)="b7024737cfbc1ec31fa7e1e86ed3403fe80424fdab1bd2957e290eb2950377bbebd20f20a92fa8c266ef8146713f20c5e78fe944de1a356463a654d1c1342d7ddc5334109bf64ddd4b80babe6af111d003782bfe1ba868e51c29cc5a25921e37fa3f4696b4d98d539f51c483c4d70b09a5d62bfc5d612987f19ed40c2e66e5e0", 0x80}, {&(0x7f0000000240)="69cedc6f9f78c3d50c260c08a8d5e0c8af13caa0066e56e3508cfee747a3db0b69a6caf2", 0x24}], 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="3c000000000000000000000007000000862a0000000301119741994f97ef42e989bcb8cc2b99de0606d29e31f5060d39d9c353986b27125964eb00000000000054000000000000000000000007000000880ce3523eccd4030682a2d04434b731ac14143300000401640101020000050dac14143800000000ac14140b000000066401010100000009ffffffff0000000201010000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="640102000000000000001a65"], 0x1c8}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0000000f01010000ff7f0000cc00000000190000dba2755edca7eccfadbf0a094ac9f88b6a17d8cd9d944b3f997901cfa1c00ca70d6bdf3838887e309f70816884ba2faf2cc213043f432185a403576406d26b89469f4fdc790fd43b859cf9c5b9b6226cda2ab92c44aa6e701d652d8eb6", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, r9, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000500000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000070a050000000000000000000a00400109000100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffd3df25020000000900010073797a300000000014000200"], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 154.095146ms ago: executing program 1 (id=4740): r0 = syz_clone3(0x0, 0x0) lstat(0x0, 0x0) syz_clone3(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f00000000c0), 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000040)=0xa, 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/146, 0x92, 0x2021, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100100000000000000011000000440005"], 0x58}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) fstat(r9, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r10}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r11}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") stat(&(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004140)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x1c8, 0x15, 0x8, 0x70bd25, 0x25dfdbfc, "", [@nested={0x1b8, 0x3a, 0x0, 0x1, [@nested={0x4, 0x93}, @generic="c926dfef9fcd3cb62a942a10aadfb654bcc150cd927e3e094bd2dc509ef068332d5742d259f16c4bca52c38b1f4d0c83c7e73b863eb386ee21288009264c8cffef9ae45e5e4ad9fbb342a5626a7c312efa73224266d609d1306c18b85b0a71c6c09f2491afba9c43122e4213a63642cfb603c2686cc43f1588534ab83a4b5b26106ec3c9098065ad506b2df4d3c7b8ffcf39e662a3850cb22dd2774c80f1568c569b5aee4033bd3ee039a50b4f1070a427ebd8242ba263989a8f947b237a1ad750a9164b04324f4e2eee4b98d80b43746d242b7c234428c92b88a0490d24eec416c8505cd36b72bfcc5e1e19eb", @generic="6e7eadbe338206bb1e5e85dca3b400d9ce948fdb35164b3e955fa16374978069895a5cffc974672eccef130ee4d6d4e754e2270bec161a46dff769372ea8e8b984e5195af2fe03548acbd8d82eb6d3d292faff2efc9bd28fb2b5dbb165e2705b7ec8561e30087c2a9396a6093fbd81", @nested={0x4, 0x24}, @generic="f5c94f2d4dcb90e887f4cb574e21fae9566287ec834d36df0abc81d163843fd7801228fdd734ea1fa9e76cc59a9ab8dd7ae650423bb9e1b2e0ef19f15f96d7d37baec23677416d7a", @typed={0x8, 0x29, 0x0, 0x0, @fd=r1}]}]}, 0x1c8}, {&(0x7f0000002ac0)={0x1200, 0x19, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x4, 0xed}, @typed={0x84, 0x44, 0x0, 0x0, @binary="5f3015e07b83412f846240d8a2fe384b6cd67fc10b581b55b87b9a4c6fb28f552fdb16b0b71bc225ed70d3b8b1a3193f44915f959c89a0fca90acbe2cac79bfe1d584f976f64ce4c2bf67eeeaf8af92b371bd4f11017409544ae07d930c299ad4f50d03a825eb8f5ec6dbea6bfbda750e8f6123ee3a78d3727bf353078bf065f"}, @nested={0x3c, 0x140, 0x0, 0x1, [@typed={0x4, 0xf0, 0x0, 0x0, @binary}, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x14e}, @nested={0x4, 0x10a}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x72}]}, @generic="4ce4b5664ba437c0c2bf455047b2de65eb13f3b659a3c19bdd13c205591987abfaed43cf0b6cfe2190d0d53dcc54a76cd1e7fbdb6836795bc586adcf6a22a4208808c9c93bbb4b6861734f84d5e397e569163afe4151ed26633255755eede573671cc99741e9e18609d2c7bd151c2202cf31b19d4c35669cdf37f5a285a0f276ac90ed9d38d2250d44d0ba5995df5d8169549b8b96d3cb8b26bddd66200bb27a4d41061527e1f634086af900073aecf2a4c051be1d1e67112442d8ff1849f16f5dd34c7fe1c0b3406c41275538022c8c3efbeeadf3d01b67c2990c6134ff1c06cd759067c61cc381029512e9699bb2580e83fe896afffdc5ea38608ee796f8c5545610a09052a78a68eadbc94d330db66df6cc222ce53fef9e3ca69593826cbf18cc020da7b93a986f58c2843cd15bf425fb6fdd866518ba58d5dfbc63d4dbbc750884d36dbf54e7d60573c3d1aeee23279ee8400b28b652ade2811b0097499e27f29d65735c3daa5c12f1140ec9b4167955ed908a136a41b71fb34341574ba665100a549b8580d3725ef800fba1f6abf146dd5c50c82754e85b81717457044bf13c0c4c2eaf12101d85527af0c0075c841923d1dcc2df148c57026864d68717e823ae0048164a9f2df834e91759df351e64ad7c417a6d02913c7caab3f0f718f9fca1ad6b9a20045dd4d7f009c23643c503a60827cc7c44c17eb8347b69416e5642d544184d6d6ccc5755ab505a58f9812282f5a26bdc78563f5a88d6a8698b7a8853f63454ea57d9a9b101081824fdaa9cdd5e3e5173dae10994106b04f757fee30e20b85166fab95fcff367f24a271194c773f6b850beaf7655cf9c9cfd3b07dd0533e543e97912f333c8cedffc35b21ba8f70934f71bbe1f184b2e9575af04bc25f8fd8834fa118c5c7f97e9c41d8e60eb728b15e1465a202e63229fc17eb4bb1018189b3088c837e056550c3d6e612b3a4e9d1cd5754372fbb167d6346e784db065babe49e9e65415188486d957489ac1fb36afb22ad6229bb9890acf8bc60c02e64e6787b2d34b9611891172616c94873880362547c13b3bf8fbbb3c8485cc19cdea1e0184aebb7fc06f685ce62ea700f263805e92afa4576ef441cab5cdcda263b555ab49b97d95938b0234a886683546c64fbcadf0e60be600251ef2733a04a37b02d37670f4f3feab1d5d06dbfd6c781fb61750321aedb6895fb79f7e223557c69e42b9a88b40a203a9526a31d3ff3218253387b6b888c64b3b9f1501b5284fb043cd667480a4541c898a9aaa7499ab5e15438dcff149bf5472a63a2512345931e0fcb74ccee3001110c3e91d9cfc1b41cfeede6b4953e0ee9eab6460ff91adaadac732883487097a1cedadc465de3b7824ff00089997566fd02d3e6752ef5d80b7822589cf22975b7fb5c1d2a36852ae76bc700d54bd0a688d5c649d79e0b6e7934642cd13b62cb80217c09da99df590ca328ddcb023e397f67f440adda74909ad1f8b8ae38e6ec8d477e81a7a4ae3de23583c8536284884831b2da52816a0e0e7531a82c7d614a93768e4f619432b70f74695f529286f67ed8cb349b14185c58c23e3a788c53e10e15939c10017d7c2a21698f80313174b6c35ccf284ca3387037c0c3167b991df6f3949b1de1467a0241eae6f0990105914e1897eb99452fdc40ffced9fe4b0b29e9ab7cfed852b11829eac2ea19d7f9c0f4ccac723cfe25f2a4800d29e1122c0ead35e7f08f79be2a2f58551a180b59fefcbf16ae95edbc4ad1f108d64182e4034edbb9f53c57b7262fddc46b83245361dfe6a7de2bb81eddfff84a8edab1217a5fcbe90d7c77dd3bd098ab5c9c51e03ed71900e4e0e58b4d9b318e2f1c8a76a704ec7dfccd8def8bcd7f5ad269d177898603df51c61994b65d52b871c47b15af6e487c22d6097d7062e1455bdbfd2d0e6bbeeb00fe72e49717cf55074ea97d7c4d4bb5a4aa4a405241ed287fff6ba7fdb9727076363cd2c6eebd0168e969f1a8015bc3528cb908243b06cf33d4ebab6fe61ac84b5828f69739a8fa363073c2db61abc86eb31b30814144116db566d106a3e18d904454bc9543b47376e44a028ef797e9ec656e80792b2feb95a655d5e5fffd514a758a8deaf086905f5f59d3f298a76650395bcf0073bef01d6246da1e66e13cdd4acf65b6f1949aa2ab84456f9071c067afefd50dbbe6acdfbce99b1c3095cbe228572589aef91be3cd23f3af09a36f5ed89877cb3dabcb27948387898aeb51acf2959957ae160c5d0bdf8972e5932e05d6f101007d5e2804527af3fb65a8101a2e3482a1e49fc280bea78d4e8a759974d0577f87bff58a67358818e5608de980293ad5224afa9b6166ebf8ef6c3b2a2524741f084aa71063ed71b2235aebae44cc9ac77d65d3234c952f7f11fe257c5c8e0f287af098fb8ccd26f29ba6a646ec870f7402cf7bcc9db19674f69a3ff19f1dc07eee0ed344a4b868f0d5ebc6c0368faddec849fe36672ec45cc97a9b1b4280ef8ccfc5e787296064fb120b3092ff95692800004288ee587d60b3c9e3e015300be79f91b48eb48a95453a2c4ce40d65c5d2799db9009df1e8e8485218965b5bd67144d1f41323ff2722f06e1042054c94e349cc46721caa8896d66534e09df4a9cbc93572818f815f4169698d7159cdf5cef0f8b7ed02c573e553b75eb59c820b70533a8ffc5ed29ed654678b5a7a5a5b950ac94e14a6f1bc3f1dc1ee8aa71e08b692a1a5dd0532ee657ee34b8cf03eb92a7c5b0328d4df0311106bc70e745e3a0b3a6eab3f0f39b22ddac0e9367adf62a6403a55904a264a933fd75c5ae126d751b5ffe7fbbc0959842e791aa637cbe0875dab004c2e1eaa00f221af195cef97c209cf19220b42da3432e442d6637b8786c678c01db7ad23306ccdd39f561ad5fa694411a03e553974149557742469fc912b54053b72fe8d244cd20639496be64f0d99794eb6e3c7dee845a3531bd5d9b161cb7243628dc319bb97c4608b510ba556f8bc63e45384a6fdb7a2122b5d6a50bd5dd0152d13c6ced1db39f5114992f38ae79597a9fc508015f98330dde3b7851f4c5663c982c64dd007c6ea3312d226d2b68465b93a8935ba09238b7d4cb76064b8bdf2d8d4cc515b12114163e13fb9a7da83077b5fd30e86c88be13cb8d0ebefca212beda6c700b8406a5e16c24eea6635c4bcc5c23f3003cdc0ec741c0bf9aca09b595297f248f069933fcabbeaf8d204cb74399fc0dd5beddff3d5e7a70527ecf255b72ac1ec326860af5472a3f2775f744ceaee9fbee70304b016558ee8b9d510bf61c4ca301e4496e691e4e8daaffea8b9e3dbef630003a23cb8e73aae88fbdfe07d7b3091597350f5e40b62a9875952abb3c788d524fc3ac405f4790ba5a981aacc51c44870e197b7422734f9f261ec84afb26900eb2ebf375ae72c1c8143e8339982e4a8d23e8fde8ca464fc67135f8a52e0a5b6abf059dc26c7f62be31928911041c15faaeee9b17017087095d73a4d74382625cad8836b1f69b030b26fb795ccff3536b5d57e1863382934166fc67ffe8c8d2b7843aad4b8725759a3a45a7bbe81f15cf1e248780a8cd29e9b428d908c310d612c3bf6936e83d66743d52da0533cb0e13922ec54421ff2d163d31c019f7958acbd1b9edb7ec728e43cdcffbe732571df96435df5e6edb734d8a1c0dcb8cb58e8a928fadeb2727c3675a04ad6c89ddce194af1cff2c50b9447da21deb3357af73759c59c4616b82392247670a58d707e5a2f88b80deebeed25fc759b00ff5d5d8ddc865cc113ec8605df79d5f733ce6a5d2f1580893412629b60a92af175161ccee8591abb46665d6c7e966c218260a615e7060d52d226d5d14af8d1cf494f8cf174cf1151eda77b5de65fc57514af707f0f4dda4a4b25d3b1857f751822d8f5b2049065c0c2abd48807cd38ff2c4da6d234f2dede78a993a00381a03a637b7ab56256dc5b4b1ed474759455675489268733d8d6a749e4d8e31d6eca8f0263b37a9c504190d22fbd2ab94ff09a8568a10fd1769a59dcda18f1a0199b570b255759d572fd201e2e763e563fb1374ab0459524c58c58a9d6b5e4b31147476996b28cf74a2f2e6c365e1217ff7d515f533d1dbe64bae47056e0998969441f8f895fee8b7b8a1e65dc498b77076cb84ca25f42d74bef7b0fa19686ef6b1812b629ff6a9752e10ffcdffbf1585eb101a57e2bb304f7b75a7171ffd201a951a9990fb2f5d893476c9963e02f6a65a496eb8dd69a0aef4434c53d46a17bafa9c19ba4be226b02c288bc0deee7f008b80e466c65199b02792f07117245be0073670988b765d7d1b44a5eda68c5338c93a557797629a3fd6ddecbd32832e8196b99e9b7e5d4106a8acc424cf0fedf96ca9a8355cf10d27dd7751365712426204fd963571f25497fc1217f5175533647d4837720f5757e5cf2a5ee48182a663047754721c309548dfc75960f4bf2378d167a1277aa44bbbc8e502d9a4d9b44d71875e6ea1f0ed7ac1ba756fe9aad6885507776ac82c3246ad9f8fad929d4a884d2f86edb2df2d1843617a3d308f18a9cd7a1ef85434a5c6745a61b9026d5133712e67c9cb68579a13ece1295042349724ede1a176ae27d90a1352b8789dca50665a4f4491bb32067b157204b42261b50a7dc900501ed38eb8bf69b1ea84e901afa2e24623b4e73b5bdc095647df0db2a21f5c7af9d9f6ce523877133acb3bd045cdcf4e36aeaf8b44f5b8546300e91ae8e80495936f521eab5d6f116fe757e54afed727808d3a1373e9921e7ed78f25f207c26092a5417275e3acb12f178d5d78138fff1d558cc5ab83ec4c2bd8dbebc979cfe6ea9f7e22a3546596ef36961011d19dec5f24694fd4c617febc506eb34729edd87f9f1857106f7816ff03ac604dd5c9dce055835218bf827701780135abb1da9b37051b85edde0ed58b7bc03d1e44137a1123a948b95b2dd79a33dd59088713abab975e93485ae25f22e8d8d8e91dd677906f55d07ae0711751300e411beb247538bf3fe10e3c1f8b7d2329133625e068f70994019fb88d5961001ad411c9fad501640452a102f3295377f992cd4ba057aa57633b351bdeb51631618619b476acb7e74d93ce81498cbe8abbe3b6f2a24087ba2f7e37271e3e0fdee7e3763f55ad892a3d61a6745aa932dab7865c62904de6f0125cc72bc1434d72505687cd9b1751b79563a398311ecf4a5a62a558053e442b9616cf678924a6cd2002c9ca06faed6c5c46c725fc6f010ec263b0dd5f6fdac437146938549f7c227819b88547c934483b528c779403f9a7db05bcf033f6dbcc5dfb4d373ef394bee4a1a4cf6b8e2e6cdf622dbc34c2a15e714ed066f5b59c8902105dbdcadbfa09713de050889ea3c2a603700a8e03b49bb84b7092c8d74465d783527869501a85ccf69d452e349d9cc0086c01619fc6c2438bf28983b64d590e184f922c536b980f1e80aefd16f5c2207d4e87c45742e081c7e068f91857e9fdc8b940960daf203fc6518002f25f6b48e83da0d908b2f8e09786588589626055993dbfdaa288308d69a5b8dd9a27edbe64954e3f0c1e79529614470bc1b60132ea595beca41fb865335aa9fd98ad963a31642e88e91bfeb27af190e19778177fc02059347b469024b46b734de2051c46bcf805f983b7097fe03d4884652eb10de6d668b3cfdcd593947f8cd71e8649eef14fa2de1e3a2acf067332abbaa287bca43835baf1230011c878ce3f7554b4d0227fd5d4b9df9679bf03aa3d68f42724ceb30", @generic="bb5d1540d5b3e0fec6febc551515df4cbeab2eb3aa0cf4f5846e5896389d90bc3a41b5c0316252f5d9bec467321e15f4c4460f83c57268d865b92ab6dcfaf258751319db304de31d797dafbf4c8cc0320c83365fc41e8fa0bf36cd890bafa4a18ddcd0251713d86fd66c3069c30d92e1a71d35ab5460087e19b18f38073f3554d700f7c4a9af3b3b903a5016b92d8ab2edb9c2c35fcea7552dd047168826c88c7f3d228aa473e6ab1b57916447af267460e2681170bc134e227690dd8b9593706076007adc85fe61cb414a17f1777731a374838fc84cb2b3a1c60be68c8d774eb5a2d98c08a3d9916fece73ca34a4cbffe573d295c82e0", @nested={0x2c, 0xb6, 0x0, 0x1, [@generic="44b7361a13f89a13657068b3756cb9e54314219dc4a5b38fc9054e2a3b08c67aa963eeda", @nested={0x4, 0x13d}]}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x1200}, {&(0x7f0000001780)={0x310, 0x33, 0x200, 0x70bd26, 0x25dfdbfd, "", [@typed={0x4, 0x133}, @nested={0x84, 0x125, 0x0, 0x1, [@nested={0x4, 0x115}, @typed={0x8, 0xb0, 0x0, 0x0, @uid}, @generic="128459c12c38730c8a75bac5d69f044899cadd67e541f10eb28ab2e516065618c07c95d0fb80b5207fd938d69dcbc8a27a0d360fb4d0860fb0219a9ca4803ccb50832b9711e6b1428f5dd5e0a4eb0ec13b230f273b8b171b320f7e651223ee467b9def04b68af1cd11de61d6c3261d442551606c"]}, @generic="14007c437c82c3b0c006e7b6eb1d6c98fc9f6bcd2d20b0c55cbd011ae7afd3003dd53ef66e7d03454a785ab7f578ae21418071f3bfce24c6d916f2ebb9667699f5be463834ee5fc2581ed593b53dff06d49dce0d78740b208e4cd8bc722fae", @generic="8c98c9a2fffa48ba597aa193f00a61baef3723021a9c3385c7f736ffb852a6a9d0de48b8be18c2df1248ea3d41bdafb60de4f0e9f748ccfacf76c04091272e2e91c4264737b58fa48234d20e10698aae12c4a411cf4ec47b07cbb4a59a4e3008c293785597b3a35760c7b8840523c0186f6ec9911ac0030867026217fd52c81ac0022b16207407ef5607", @generic="e1b2643e2b11eba62ae8a3942d29fb5adf1516884b3e415875b12e3099b07491b7bad6948124c63966d6e03220cd70b1ac6c30aa58596cddbddb80d8872796076bd580e12e5171becefc10fa320b850944ade089a8ada554afdade2e0881f2de68bb22e8d7ba3619ae0cce66459da68220663886ca47fdbe7e1636399ab9a6462d2c6b4c3a21b7f11161368fb57db7edcd03553f91deb3b705aba94244c6d4e9ba46287294a735afbc33cf2fa7411dd134d2e1dc0d35af84e69838232b02618c67b8dc6d", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1d}}, @typed={0x8, 0x12f, 0x0, 0x0, @uid}, @nested={0x18, 0x5c, 0x0, 0x1, [@nested={0x4, 0x145}, @typed={0xc, 0x137, 0x0, 0x0, @u64=0x20}, @typed={0x4, 0x102}]}, @generic="2c545f56d14c744a64b1a5c0fc625dce868c101cb91a9490ece5160befa35aa585d1e8a3d075cc0faed3b29aec001d636a1b7006a7ecd2f7b41b99cc28c0ee51f269376565597de6dab5f38452620a3f7fc0d106b4eaf7c31a3b1750204a8ca684036a62bab824fc3c8abb310250ba14677ed106ee852e2cd82f4d7448ff60037a911b9e94fbab3c6dde788c60a68207f807da0863e4"]}, 0x310}, {&(0x7f00000053c0)={0x1234, 0x23, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x20, 0x6c, 0x0, 0x1, [@typed={0xc, 0xe, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2f}}, @typed={0x8, 0x143, 0x0, 0x0, @u32=0x5}]}, @generic="547049a616ed8aa5280161641add9cb604d5414e018b67618adf586a35523fbfe64a6c0bae3ca1de8dca3e7f96ee3edfa90eccaf1d64e641a47703da9db689ff9bd50bed40e0db6d809be7865eb2581cf371cf7876748a3ad4921f70041d90c1bc1a917ca963a808cb975453312e9c041b96afc3a49b162f959904a86d619f5801af8cf5aabfbcb419decf68e80186452ade5260f3fc3c3cd941c2e5b0fc79dbb67eaf3ff9158819c7355a125e0db038e584", @nested={0xde, 0xb8, 0x0, 0x1, [@generic="57f1dc75b22e6cbcedb32c64f4a9fe37d3cc0fe103dddf347ffa6b20cf05fe76f8e1a581cc", @generic="9b43bccd2444f4b1b49ab5a70442d25cd7c964a7b50f7f3b24c7ace771ef186da28bf6167e09c89b69cdee3d7267043f7d0e5f66c6be98c3766bf85a94b00bcae7215ce50c552d155afbfe9a8d553be325e1f82cf838bbeb7a6965fc51de493d168f19c0033aa0301a1b396907997d4db9e60cfc8e0966aa5ff7fcd5b45db799300c748074f245eda4f42d0f27d759c407", @typed={0x8, 0x10, 0x0, 0x0, @uid}, @typed={0x8, 0x9e, 0x0, 0x0, @u32=0x32}, @typed={0x14, 0xdb, 0x0, 0x0, @ipv6=@remote}]}, @generic="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", @typed={0xc, 0x11, 0x0, 0x0, @u64=0x5}, @generic="06436b4fc8f481c279b24452d82a6ae63ac8d8f5e99bb97c00bcbe8720377b3ccfccafdebe6c91d70f6b68f838274f156834f892d71e1028fcceac20b7a6d7869c97d3a5ffe57671e940bf6026bf59784d35ed0dd827a96a41ef5b6dcee38b6103f5d3f9"]}, 0x1234}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="0000000024000000000000000100800001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES16=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES64=r7, @ANYBLOB="2000000000000000010000008e37cc288ea8977c01000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x8084}, 0x20008080) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 90.952812ms ago: executing program 2 (id=4741): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x6c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000300)=0xaee, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2a3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 29.577758ms ago: executing program 3 (id=4742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf01000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000010060000000600000003000000230a0400", @ANYRES32=r1, @ANYRES64=r3, @ANYRES64, @ANYRES32=r4, @ANYBLOB="00000000041300000100000000000000000000000007000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) signalfd4(r4, &(0x7f0000000200)={[0x9]}, 0x8, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000106fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="30200200090000001c0012800b0001006d616373656300000c0002800500030009"], 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 28.763527ms ago: executing program 3 (id=4743): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x200bcae, 0x8, 0x0, 0x351, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000f00)={0x0, 0x6}, &(0x7f0000000f40)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000f80)={0x5, 0x200, 0x80000000, 0x5d59, 0x0}, &(0x7f0000000fc0)=0x10) sendmmsg$inet_sctp(r5, &(0x7f0000001200)=[{&(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000380)="62f70b6ea69101f594fb61378a7ced97bfc136e84f97e3aa45d13553a4e0c150541bffb954aee6e3dd5cf03cec452f3d3a65544da8dedb04abd654f2cdd0e944dc5d3041a90b77423491eac0b61f8b071671ac984c769e7ab52f96d6a44e5259ccb0f0e14ab75492f0ee4ec300b5af4011b2391dce1a2f8f77f85bd17a9de3ba8d24d55ecf9ef39049167dd09723109485016d24eb8055b19a9a298e5c45fa5fce9082453f41436d4e43905633140615c80f89440f702992ea113af44c79bb5913a6748f1dec20080f280cae50f3d46ba977bf", 0xd3}, {&(0x7f0000000480)="dfde658b89e5260202766fae88c892db83f57837d8678c521171af384c3b1a302710566af603e029873b097a51414eccf6348ad0629fc7e73de5971f6357d806b9dca01599bddb25adb2715da77205308824ef5d502e58d44ea3f7cfa999ad689693a33c8bda2fe48b0339", 0x6b}, {&(0x7f0000000680)="f0407654641e9eeb72d1b0b343f01533878f89e8dd4249a6648ed35eff4a27cbb27eab8fe0e6ce974f4ca3e2d02bfc5b57a6effb9ab997cf32c8a333bf71aa840c196e443b0386c87d9d7405b67e537c2878f4b7bab0daa9e428ee759514fabaa1131824", 0x64}, {&(0x7f0000000700)="2f8c6ba18b958674437dd5207d89ece9a607ad97ff32c0bed0f4d87ba0619175f8bfce8971583a29876c4913801441d0f297a99a4224db40ea982205352684808bec19a2d038a59510bd4d8cdf06285a71feaf09436477c2a58acd2aa3fe6710405e9b25efcf2192e44098679da5a6f7423d04db76d5821f1a854b2ce10edf79b04fa45b56ba4f8b213774f4d1966ecc0c79e23401ce05fef074885140233e0ed753c4f28685bb82ad", 0xa9}, {&(0x7f00000007c0)="91d34d4be88f79a513ab4f5ebbc489851ee33f79d3235226931f363277639529f061163a7377119df7fecfe450093d89cd578bf683156205dd9814bf5263e81e1a1a90f5539866e25163e6c0fd879fba2849a47191c96f3004e642ac4630408dce536f674e7ddec4", 0x68}, {&(0x7f0000000980)="68befad167116cd7afe95bb6eda9b16bdd8dea2368f398bc63f096a28917962e99f9255fda5c9792126716a83e1f4392ff2c6beed3a0d05012ddd1e6797061bbead45100badb23977f8d8505c4d153edbcd116b35f14b4395b5dba1af5389644b0afd160a176c5b1544736126f85ed95bac386642a926d98c49fb2521aca0442181dfdbb6a6c", 0x86}], 0x6, &(0x7f0000000500), 0x0, 0x20004805}, {&(0x7f00000005c0)=@in6={0xa, 0x4e24, 0x7eb5bf78, @empty, 0x7}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000a40)="0497f1c7a838a7ecba184eb2459247c5b495c6a86991b99fd02c09e2662568a1653f92ca79af93d93c8338b97b6825481a26417819478c1088986a924bd6209dcd2f4e0e0d5ec5dbd06eb52206b79a21c0949938e1bf64eacd02cb04a7e2b2ffeaad1a5befe9a75967a4f71f84e08d0ba83f95eaaac1711a17940c723cf690041dd4333e4ca03f8412ac317a7f9f4872710ef7d5fe68a9727e44c80c3e863b1d04f69212beb0aa9154c0a529311b2c438c4d73bfcc1df9e4e1b6b895a4ecf1d05493602e7f53e58b9a5117ed24b1b95522", 0xd1}, {&(0x7f0000000b40)="52d56a8a9b719563dfd50869ceb75bfcc0cce74b3e9710bc5b9f8a25cacf1e94bc3d6ae12e879959792a16ab4235bf52292c82ee5f7405ac2d4cf95427bfe77ce8e0ac9cbd50871abebe757cc7839bc598dd1a0be0f46b18b9baea5a28ebfa1578145dfb6b10d183a10ae1ca5cc575a033ded1112f6bd7e4666f284630ed65818571f4eecc3185ef957ec83818be647d88", 0x91}, {&(0x7f0000000c00)="82c2daae52d1c6738234ec721d476f5c0b2656e732612c4260387e030566c0080416e0857ce1cd52661b99c8fd7d0ce0ad955f93f8391083ea1c78f6993d29c6b5626fa0a9d41285ed7d0819c8beb55a227c0cb8f17cd3407848cafdbb9530ef98265f5aeb41b92c6aa129caf59732c6840e5a6ea4d62566be0814f165dacd3b22a518ced67f465ff3d06c1915ba7f5d6014cf438d9e0b57f439eda1af3c863030ca7a16af91ac80cc0cca4ce09e131e2c010099e69c1608c6bf5d731e49c860019edcdfb978b2b38b0eac06b995e9572ac3f7e6f1a63feece47be96", 0xdc}, {&(0x7f0000000d00)="078fd41cd7f55c373762e8d4395f402cde21b50eba2d5dae061ae4ca82dd437dcddf66cd0f418bcd1bc106f3e6f05eaaf76f4d3b8a412c0e49ac3baf5597666195", 0x41}, {&(0x7f0000000d80)="9e7442e9c4adf3845423a233f05713243e4a58b13b07882251631e3ea179e5761ef8e206124feec45aa99927d7e110515848023cb67c0c02e9a7d367f4f00d", 0x3f}, {&(0x7f0000000dc0)="0c93684dea85c18dc0b20423d67200996f54655de420c813680941bd590cc21816556a2ecb469a2c82", 0x29}], 0x6, &(0x7f00000010c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xd0, 0x2, 0x1, 0x5, 0x0, 0x1000, 0x64de}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xa}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x1ff8, 0xd, 0x8, 0x61fc9106, 0x3, 0x4, 0x1, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xc22, 0x203, 0x1, 0x400, 0x800, 0x4, 0x6, r12}}, @init={0x18, 0x84, 0x0, {0x4, 0x3, 0x5e4, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x4, 0x401, 0xfffffffb}}, @init={0x18, 0x84, 0x0, {0x10, 0x8, 0x9, 0x1}}], 0x128, 0xb2a4a59310ef62d2}], 0x2, 0x5) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003000)=ANY=[@ANYBLOB="a0100000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fedbdf256500000008000300", @ANYRES32, @ANYBLOB="0c009900f108000007000000100003800c00008008000300ff000000080002000100000008"], 0x10a0}}, 0x4004880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r2, 0x25, 0x8}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 2 (id=4744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000300)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000440)}}, {{0x0, 0x0, &(0x7f0000000840)}}], 0x2, 0x4000001) r1 = dup(r0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 271.411597][T21051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.448268][T21064] bridge2: entered promiscuous mode [ 271.462524][T21064] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 271.476860][T21116] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.542650][T21051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.564017][T21116] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.608927][T21136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21136 comm=syz.3.3817 [ 271.635872][ T7261] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.647258][T21136] netlink: 'syz.3.3817': attribute type 64 has an invalid length. [ 271.656100][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3817'. [ 271.668139][ T7261] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.683831][T21116] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.696505][ T7249] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.716031][ T43] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.808864][T21159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3820'. [ 271.858018][T21164] siw: device registration error -23 [ 271.874262][T21164] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 271.930140][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 271.958149][T21172] loop1: detected capacity change from 0 to 512 [ 271.987340][T21170] FAULT_INJECTION: forcing a failure. [ 271.987340][T21170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.000514][T21170] CPU: 1 UID: 0 PID: 21170 Comm: syz.3.3824 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.000554][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.000566][T21170] Call Trace: [ 272.000572][T21170] [ 272.000581][T21170] __dump_stack+0x1d/0x30 [ 272.000610][T21170] dump_stack_lvl+0x95/0xd0 [ 272.000638][T21170] dump_stack+0x15/0x1b [ 272.000687][T21170] should_fail_ex+0x265/0x280 [ 272.000760][T21170] should_fail+0xb/0x20 [ 272.000860][T21170] should_fail_usercopy+0x1a/0x20 [ 272.000888][T21170] _copy_from_user+0x1c/0xb0 [ 272.000914][T21170] ___sys_sendmsg+0xc1/0x1d0 [ 272.001065][T21170] __x64_sys_sendmsg+0xd4/0x160 [ 272.001101][T21170] x64_sys_call+0x17ba/0x3000 [ 272.001128][T21170] do_syscall_64+0xca/0x2b0 [ 272.001162][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.001189][T21170] RIP: 0033:0x7f647e8af749 [ 272.001207][T21170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.001230][T21170] RSP: 002b:00007f647d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.001254][T21170] RAX: ffffffffffffffda RBX: 00007f647eb05fa0 RCX: 00007f647e8af749 [ 272.001270][T21170] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000007 [ 272.001313][T21170] RBP: 00007f647d317090 R08: 0000000000000000 R09: 0000000000000000 [ 272.001325][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.001337][T21170] R13: 00007f647eb06038 R14: 00007f647eb05fa0 R15: 00007fff99039248 [ 272.001357][T21170] [ 272.003255][T21172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.205326][T21172] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.223834][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.237463][T21172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.246828][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.277138][T21184] FAULT_INJECTION: forcing a failure. [ 272.277138][T21184] name failslab, interval 1, probability 0, space 0, times 0 [ 272.289937][T21184] CPU: 0 UID: 0 PID: 21184 Comm: syz.2.3828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.289965][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.290057][T21184] Call Trace: [ 272.290065][T21184] [ 272.290073][T21184] __dump_stack+0x1d/0x30 [ 272.290098][T21184] dump_stack_lvl+0x95/0xd0 [ 272.290117][T21184] dump_stack+0x15/0x1b [ 272.290139][T21184] should_fail_ex+0x265/0x280 [ 272.290252][T21184] should_failslab+0x8c/0xb0 [ 272.290272][T21184] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 272.290303][T21184] ? __d_alloc+0x37/0x340 [ 272.290359][T21184] __d_alloc+0x37/0x340 [ 272.290415][T21184] d_alloc_parallel+0x54/0xcd0 [ 272.290444][T21184] ? bpf_probe_read_user+0x4a/0x70 [ 272.290517][T21184] ? __rcu_read_unlock+0x34/0x70 [ 272.290539][T21184] ? lockref_get_not_dead+0x120/0x1c0 [ 272.290570][T21184] ? __rcu_read_unlock+0x4f/0x70 [ 272.290591][T21184] __lookup_slow+0x8c/0x250 [ 272.290640][T21184] lookup_slow+0x3c/0x60 [ 272.290667][T21184] link_path_walk+0x946/0xe30 [ 272.290697][T21184] path_openat+0x1c0/0x23b0 [ 272.290772][T21184] ? _parse_integer_limit+0x170/0x190 [ 272.290810][T21184] do_filp_open+0x109/0x230 [ 272.290847][T21184] ? __pfx_kfree_link+0x10/0x10 [ 272.290951][T21184] do_sys_openat2+0xa6/0x150 [ 272.290984][T21184] __x64_sys_openat+0xf2/0x120 [ 272.291009][T21184] x64_sys_call+0x2b07/0x3000 [ 272.291091][T21184] do_syscall_64+0xca/0x2b0 [ 272.291129][T21184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.291188][T21184] RIP: 0033:0x7f8a3d3fdf90 [ 272.291206][T21184] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 272.291227][T21184] RSP: 002b:00007f8a3be66f70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 272.291246][T21184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a3d3fdf90 [ 272.291259][T21184] RDX: 0000000000000000 RSI: 00007f8a3d48407e RDI: 00000000ffffff9c [ 272.291270][T21184] RBP: 00007f8a3d48407e R08: 0000000000000000 R09: 0000000000000000 [ 272.291333][T21184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 272.291348][T21184] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 272.291368][T21184] [ 272.330166][T21182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3826'. [ 272.410485][T21172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.539045][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.552656][T21172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.572656][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.596769][T21172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.608979][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.629500][T21172] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.678710][T21172] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.3825: corrupted xattr block 6: invalid header [ 272.694039][T21199] netlink: 'syz.2.3832': attribute type 5 has an invalid length. [ 272.726727][T18822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.766355][T21214] netlink: 'syz.3.3835': attribute type 4 has an invalid length. [ 272.843845][T21224] loop1: detected capacity change from 0 to 764 [ 272.912691][T21236] lo speed is unknown, defaulting to 1000 [ 272.926705][T21239] lo speed is unknown, defaulting to 1000 [ 272.950283][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3841'. [ 273.525521][T21313] FAULT_INJECTION: forcing a failure. [ 273.525521][T21313] name failslab, interval 1, probability 0, space 0, times 0 [ 273.538667][T21313] CPU: 0 UID: 0 PID: 21313 Comm: syz.3.3851 Not tainted syzkaller #0 PREEMPT(voluntary) [ 273.538699][T21313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.538712][T21313] Call Trace: [ 273.538719][T21313] [ 273.538728][T21313] __dump_stack+0x1d/0x30 [ 273.538769][T21313] dump_stack_lvl+0x95/0xd0 [ 273.538818][T21313] dump_stack+0x15/0x1b [ 273.538841][T21313] should_fail_ex+0x265/0x280 [ 273.538928][T21313] should_failslab+0x8c/0xb0 [ 273.538948][T21313] kmem_cache_alloc_noprof+0x69/0x4b0 [ 273.538969][T21313] ? skb_clone+0x151/0x1f0 [ 273.538998][T21313] skb_clone+0x151/0x1f0 [ 273.539081][T21313] __netlink_deliver_tap+0x2c9/0x500 [ 273.539121][T21313] netlink_unicast+0x66b/0x690 [ 273.539154][T21313] netlink_sendmsg+0x58b/0x6b0 [ 273.539213][T21313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.539281][T21313] __sock_sendmsg+0x145/0x180 [ 273.539305][T21313] ____sys_sendmsg+0x31e/0x4a0 [ 273.539405][T21313] ___sys_sendmsg+0x17b/0x1d0 [ 273.539442][T21313] __x64_sys_sendmsg+0xd4/0x160 [ 273.539477][T21313] x64_sys_call+0x17ba/0x3000 [ 273.539512][T21313] do_syscall_64+0xca/0x2b0 [ 273.539550][T21313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.539641][T21313] RIP: 0033:0x7f647e8af749 [ 273.539659][T21313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.539719][T21313] RSP: 002b:00007f647d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.539739][T21313] RAX: ffffffffffffffda RBX: 00007f647eb05fa0 RCX: 00007f647e8af749 [ 273.539751][T21313] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 273.539763][T21313] RBP: 00007f647d317090 R08: 0000000000000000 R09: 0000000000000000 [ 273.539777][T21313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.539791][T21313] R13: 00007f647eb06038 R14: 00007f647eb05fa0 R15: 00007fff99039248 [ 273.539827][T21313] [ 273.839383][T21326] atomic_op ffff88810a492d28 conn xmit_atomic 0000000000000000 [ 273.887201][T21338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.910114][T21337] siw: device registration error -23 [ 273.917164][T21338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.927707][T21337] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 273.979530][T21338] hub 6-0:1.0: USB hub found [ 273.985280][T21338] hub 6-0:1.0: 8 ports detected [ 274.161430][T21384] hsr_slave_0: left promiscuous mode [ 274.174136][T21384] hsr_slave_1: left promiscuous mode [ 274.233677][T21378] macvtap1: entered promiscuous mode [ 274.239176][T21378] macvtap1: entered allmulticast mode [ 274.250120][T21378] dummy0: entered promiscuous mode [ 274.260899][T21378] dummy0: entered allmulticast mode [ 274.275612][T21378] team0: Device macvtap1 failed to register rx_handler [ 274.288116][T21378] dummy0: left allmulticast mode [ 274.298397][T21378] dummy0: left promiscuous mode [ 274.422351][T21397] siw: device registration error -23 [ 274.428713][T21397] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 274.602052][T21417] siw: device registration error -23 [ 274.618997][T21419] SELinux: Context › is not valid (left unmapped). [ 274.722344][ T7249] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.742633][ T7249] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.766671][ T7249] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.791473][ T7249] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.891203][T21439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.898757][T21439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.906980][T21439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.914439][T21439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.052613][T21444] siw: device registration error -23 [ 275.059455][T21444] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 275.153238][T21456] bond6: entered promiscuous mode [ 275.158697][T21456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.385519][T21491] netlink: 'syz.3.3889': attribute type 3 has an invalid length. [ 275.401821][T21491] bridge4: entered promiscuous mode [ 275.408120][T21491] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 275.440002][T21498] FAULT_INJECTION: forcing a failure. [ 275.440002][T21498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.453248][T21498] CPU: 1 UID: 0 PID: 21498 Comm: syz.2.3891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 275.453287][T21498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.453301][T21498] Call Trace: [ 275.453310][T21498] [ 275.453319][T21498] __dump_stack+0x1d/0x30 [ 275.453348][T21498] dump_stack_lvl+0x95/0xd0 [ 275.453449][T21498] dump_stack+0x15/0x1b [ 275.453479][T21498] should_fail_ex+0x265/0x280 [ 275.453501][T21498] should_fail+0xb/0x20 [ 275.453558][T21498] should_fail_usercopy+0x1a/0x20 [ 275.453584][T21498] _copy_from_iter+0xcf/0xe70 [ 275.453607][T21498] ? __alloc_skb+0x396/0x4b0 [ 275.453628][T21498] ? __alloc_skb+0x228/0x4b0 [ 275.453656][T21498] netlink_sendmsg+0x471/0x6b0 [ 275.453718][T21498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.453746][T21498] __sock_sendmsg+0x145/0x180 [ 275.453817][T21498] ____sys_sendmsg+0x31e/0x4a0 [ 275.453852][T21498] ___sys_sendmsg+0x17b/0x1d0 [ 275.453958][T21498] __x64_sys_sendmsg+0xd4/0x160 [ 275.453994][T21498] x64_sys_call+0x17ba/0x3000 [ 275.454087][T21498] do_syscall_64+0xca/0x2b0 [ 275.454158][T21498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.454184][T21498] RIP: 0033:0x7f8a3d3ff749 [ 275.454280][T21498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.454300][T21498] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.454323][T21498] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 275.454339][T21498] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 275.454351][T21498] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 275.454363][T21498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.454394][T21498] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 275.454410][T21498] [ 275.791555][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 275.791575][ T29] audit: type=1326 audit(1766318555.544:12436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.861091][ T29] audit: type=1326 audit(1766318555.574:12437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.884853][ T29] audit: type=1326 audit(1766318555.574:12438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.908507][ T29] audit: type=1326 audit(1766318555.574:12439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.932399][ T29] audit: type=1326 audit(1766318555.574:12440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.956218][ T29] audit: type=1326 audit(1766318555.574:12441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 275.980275][ T29] audit: type=1326 audit(1766318555.574:12442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 276.004390][ T29] audit: type=1326 audit(1766318555.574:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 276.028044][ T29] audit: type=1326 audit(1766318555.594:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 276.051796][ T29] audit: type=1326 audit(1766318555.594:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21503 comm="syz.1.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 276.227089][T21515] siw: device registration error -23 [ 276.242706][T21515] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 276.327459][T21521] __nla_validate_parse: 33 callbacks suppressed [ 276.327479][T21521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3899'. [ 276.523470][T21527] siw: device registration error -23 [ 276.618490][T21505] syz.2.3892 (21505) used greatest stack depth: 7352 bytes left [ 276.867360][T21540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 276.935514][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'. [ 276.955094][T21558] bond1: entered promiscuous mode [ 276.960508][T21558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.015348][T21598] siw: device registration error -23 [ 277.031975][T21598] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 277.298810][T21612] netlink: 'syz.1.3906': attribute type 3 has an invalid length. [ 277.306894][T21612] netlink: 4184 bytes leftover after parsing attributes in process `syz.1.3906'. [ 277.336913][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 277.355268][T21612] bridge1: entered promiscuous mode [ 277.364911][T21612] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 277.382773][T21639] bond7: entered promiscuous mode [ 277.389866][T21639] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.521887][T21683] siw: device registration error -23 [ 277.600585][T21689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3920'. [ 277.630575][T21690] siw: device registration error -23 [ 277.639942][T21690] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 277.883016][T21702] macvtap1: entered promiscuous mode [ 277.888457][T21702] macvtap1: entered allmulticast mode [ 277.918950][T21702] dummy0: entered promiscuous mode [ 277.937923][T21702] dummy0: entered allmulticast mode [ 277.961042][T21702] team0: Device macvtap1 failed to register rx_handler [ 277.983375][T21702] dummy0: left allmulticast mode [ 277.999393][T21702] dummy0: left promiscuous mode [ 278.199727][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 278.210241][T21723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3931'. [ 278.453887][T21739] lo speed is unknown, defaulting to 1000 [ 278.773073][T21771] siw: device registration error -23 [ 278.809614][T21771] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 279.162112][T21793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'. [ 279.206231][T21793] bond6: entered promiscuous mode [ 279.218321][T21793] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.253572][T21794] macvtap1: entered promiscuous mode [ 279.259013][T21794] macvtap1: entered allmulticast mode [ 279.294147][T21794] dummy0: entered promiscuous mode [ 279.312514][T21794] dummy0: entered allmulticast mode [ 279.329489][T21794] team0: Device macvtap1 failed to register rx_handler [ 279.357440][T21794] dummy0: left allmulticast mode [ 279.373671][T21794] dummy0: left promiscuous mode [ 279.533326][T21837] lo speed is unknown, defaulting to 1000 [ 279.813711][T21867] netlink: 'syz.1.3948': attribute type 29 has an invalid length. [ 279.945696][T21877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3951'. [ 280.259667][T21913] netlink: 'syz.0.3962': attribute type 29 has an invalid length. [ 280.290128][T21914] lo speed is unknown, defaulting to 1000 [ 280.427313][T21919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 280.586536][ T3640] IPVS: starting estimator thread 0... [ 280.690451][T21927] IPVS: using max 2496 ests per chain, 124800 per kthread [ 280.863952][T21954] bond7: entered promiscuous mode [ 280.953084][T21954] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.004542][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 281.004559][ T29] audit: type=1326 audit(1766318560.754:12635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.218876][ T29] audit: type=1326 audit(1766318560.794:12636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.242583][ T29] audit: type=1326 audit(1766318560.794:12637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.266905][ T29] audit: type=1326 audit(1766318560.794:12638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.291118][ T29] audit: type=1326 audit(1766318560.794:12639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.314703][ T29] audit: type=1326 audit(1766318560.794:12640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.338489][ T29] audit: type=1326 audit(1766318560.794:12641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.362251][ T29] audit: type=1326 audit(1766318560.794:12642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.386533][ T29] audit: type=1326 audit(1766318560.794:12643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.411247][ T29] audit: type=1326 audit(1766318560.794:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21993 comm="syz.0.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 281.582049][T21997] macvtap1: entered promiscuous mode [ 281.587453][T21997] macvtap1: entered allmulticast mode [ 281.610476][T21997] dummy0: entered promiscuous mode [ 281.622306][T21997] dummy0: entered allmulticast mode [ 281.639904][T21997] team0: Device macvtap1 failed to register rx_handler [ 281.680009][T21997] dummy0: left allmulticast mode [ 281.693574][T21997] dummy0: left promiscuous mode [ 281.757651][T22026] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 281.765596][T22026] __nla_validate_parse: 2 callbacks suppressed [ 281.765613][T22026] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3978'. [ 281.853866][T22039] siw: device registration error -23 [ 281.862801][T22039] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 281.990265][T22058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3987'. [ 282.028785][T22066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3988'. [ 282.058647][T22066] bond2: entered promiscuous mode [ 282.064605][T22066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.140097][T22114] siw: device registration error -23 [ 282.162722][T22114] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 282.174844][T22125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3989'. [ 282.225772][T22129] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3993'. [ 282.385497][T22149] FAULT_INJECTION: forcing a failure. [ 282.385497][T22149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.399322][T22149] CPU: 1 UID: 0 PID: 22149 Comm: syz.2.3997 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.399351][T22149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.399364][T22149] Call Trace: [ 282.399373][T22149] [ 282.399382][T22149] __dump_stack+0x1d/0x30 [ 282.399407][T22149] dump_stack_lvl+0x95/0xd0 [ 282.399460][T22149] dump_stack+0x15/0x1b [ 282.399481][T22149] should_fail_ex+0x265/0x280 [ 282.399508][T22149] should_fail+0xb/0x20 [ 282.399531][T22149] should_fail_usercopy+0x1a/0x20 [ 282.399619][T22149] _copy_from_iter+0xcf/0xe70 [ 282.399648][T22149] ? __alloc_skb+0x396/0x4b0 [ 282.399675][T22149] ? __alloc_skb+0x228/0x4b0 [ 282.399703][T22149] netlink_sendmsg+0x471/0x6b0 [ 282.399795][T22149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.399902][T22149] __sock_sendmsg+0x145/0x180 [ 282.399925][T22149] ____sys_sendmsg+0x31e/0x4a0 [ 282.400028][T22149] ___sys_sendmsg+0x17b/0x1d0 [ 282.400068][T22149] __x64_sys_sendmsg+0xd4/0x160 [ 282.400141][T22149] x64_sys_call+0x17ba/0x3000 [ 282.400163][T22149] do_syscall_64+0xca/0x2b0 [ 282.400197][T22149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.400258][T22149] RIP: 0033:0x7f8a3d3ff749 [ 282.400275][T22149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.400296][T22149] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.400316][T22149] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 282.400329][T22149] RDX: 0000000020000010 RSI: 0000200000000080 RDI: 0000000000000007 [ 282.400344][T22149] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 282.400358][T22149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.400389][T22149] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 282.400410][T22149] [ 282.433342][T22150] macvtap1: entered promiscuous mode [ 282.594770][T22150] macvtap1: entered allmulticast mode [ 282.610981][T22150] dummy0: entered promiscuous mode [ 282.616154][T22150] dummy0: entered allmulticast mode [ 282.627642][T22150] team0: Device macvtap1 failed to register rx_handler [ 282.635357][T22150] dummy0: left allmulticast mode [ 282.641339][T22150] dummy0: left promiscuous mode [ 283.034795][T22207] netlink: 'syz.2.4009': attribute type 5 has an invalid length. [ 283.056227][T22210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4005'. [ 283.179992][T22228] siw: device registration error -23 [ 283.188217][T22228] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 283.288628][T22247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4015'. [ 283.369688][T22257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4020'. [ 283.389832][T22257] bond3: entered promiscuous mode [ 283.392893][T22259] xt_HMARK: proto mask must be zero with L3 mode [ 283.395415][T22257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.661974][T22297] netlink: 'syz.0.4020': attribute type 3 has an invalid length. [ 283.669867][T22297] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.4020'. [ 283.707731][T22297] bridge1: entered promiscuous mode [ 283.720605][T22297] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 283.784310][T22313] siw: device registration error -23 [ 283.791148][T22313] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 283.821261][T22315] netlink: 'syz.2.4027': attribute type 5 has an invalid length. [ 284.194551][T22342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4029'. [ 284.231495][T22341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.252401][T22341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.317075][T22341] hub 6-0:1.0: USB hub found [ 284.342320][T22341] hub 6-0:1.0: 8 ports detected [ 284.406652][T22377] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 284.417859][T22375] IPVS: stopping backup sync thread 22377 ... [ 284.418187][T22372] siw: device registration error -23 [ 284.433177][T22372] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 284.443211][T22375] tmpfs: Bad value for 'size' [ 284.652710][T22418] bond4: entered promiscuous mode [ 284.662144][T22418] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.948241][T22421] macvtap1: entered promiscuous mode [ 284.954396][T22421] macvtap1: entered allmulticast mode [ 284.964801][T22421] dummy0: entered promiscuous mode [ 284.970885][T22421] dummy0: entered allmulticast mode [ 284.984504][T22421] team0: Device macvtap1 failed to register rx_handler [ 285.007163][T22421] dummy0: left allmulticast mode [ 285.023341][T22421] dummy0: left promiscuous mode [ 285.151711][T22513] netlink: 'syz.0.4047': attribute type 3 has an invalid length. [ 285.210194][T22472] bridge2: entered promiscuous mode [ 285.251174][T22472] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 285.376083][T22547] FAULT_INJECTION: forcing a failure. [ 285.376083][T22547] name failslab, interval 1, probability 0, space 0, times 0 [ 285.389020][T22547] CPU: 0 UID: 0 PID: 22547 Comm: syz.2.4064 Not tainted syzkaller #0 PREEMPT(voluntary) [ 285.389049][T22547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.389093][T22547] Call Trace: [ 285.389100][T22547] [ 285.389108][T22547] __dump_stack+0x1d/0x30 [ 285.389134][T22547] dump_stack_lvl+0x95/0xd0 [ 285.389159][T22547] dump_stack+0x15/0x1b [ 285.389179][T22547] should_fail_ex+0x265/0x280 [ 285.389229][T22547] should_failslab+0x8c/0xb0 [ 285.389250][T22547] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 285.389276][T22547] ? __alloc_skb+0x2ff/0x4b0 [ 285.389330][T22547] __alloc_skb+0x2ff/0x4b0 [ 285.389424][T22547] ? __alloc_skb+0x228/0x4b0 [ 285.389449][T22547] netlink_ack+0xfd/0x500 [ 285.389485][T22547] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 285.389527][T22547] netlink_rcv_skb+0x192/0x220 [ 285.389553][T22547] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 285.389589][T22547] sock_diag_rcv+0x1c/0x30 [ 285.389653][T22547] netlink_unicast+0x5c0/0x690 [ 285.389683][T22547] netlink_sendmsg+0x58b/0x6b0 [ 285.389714][T22547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.389742][T22547] __sock_sendmsg+0x145/0x180 [ 285.389844][T22547] ____sys_sendmsg+0x31e/0x4a0 [ 285.389921][T22547] ___sys_sendmsg+0x17b/0x1d0 [ 285.389967][T22547] __x64_sys_sendmsg+0xd4/0x160 [ 285.390001][T22547] x64_sys_call+0x17ba/0x3000 [ 285.390074][T22547] do_syscall_64+0xca/0x2b0 [ 285.390172][T22547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.390192][T22547] RIP: 0033:0x7f8a3d3ff749 [ 285.390209][T22547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.390289][T22547] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.390315][T22547] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 285.390331][T22547] RDX: 0000000004044804 RSI: 0000200000000100 RDI: 0000000000000004 [ 285.390345][T22547] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 285.390358][T22547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.390372][T22547] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 285.390393][T22547] [ 285.692225][T22540] macvtap1: entered promiscuous mode [ 285.698104][T22540] macvtap1: entered allmulticast mode [ 285.704370][T22540] dummy0: entered promiscuous mode [ 285.709765][T22540] dummy0: entered allmulticast mode [ 285.717705][T22540] team0: Device macvtap1 failed to register rx_handler [ 285.725302][T22540] dummy0: left allmulticast mode [ 285.733146][T22540] dummy0: left promiscuous mode [ 285.787115][T22579] netlink: 'syz.3.4075': attribute type 16 has an invalid length. [ 285.912583][T22604] bond8: entered promiscuous mode [ 285.924480][T22604] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.171270][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 286.171328][ T29] audit: type=1326 audit(1766318565.924:13079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.201805][ T29] audit: type=1326 audit(1766318565.924:13080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.263218][T22667] netlink: 'syz.2.4086': attribute type 16 has an invalid length. [ 286.300878][ T29] audit: type=1326 audit(1766318565.924:13081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.325173][ T29] audit: type=1326 audit(1766318565.924:13082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.349021][ T29] audit: type=1326 audit(1766318565.924:13083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.374048][ T29] audit: type=1326 audit(1766318565.924:13084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.398020][ T29] audit: type=1326 audit(1766318565.924:13085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.422661][ T29] audit: type=1326 audit(1766318565.924:13086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.446569][ T29] audit: type=1326 audit(1766318565.924:13087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.471065][ T29] audit: type=1326 audit(1766318565.924:13088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22661 comm="syz.2.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 286.500528][T22654] bridge5: entered promiscuous mode [ 286.525164][T22654] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 286.569509][T22681] FAULT_INJECTION: forcing a failure. [ 286.569509][T22681] name failslab, interval 1, probability 0, space 0, times 0 [ 286.582339][T22681] CPU: 1 UID: 0 PID: 22681 Comm: syz.2.4088 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.582366][T22681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.582443][T22681] Call Trace: [ 286.582452][T22681] [ 286.582461][T22681] __dump_stack+0x1d/0x30 [ 286.582490][T22681] dump_stack_lvl+0x95/0xd0 [ 286.582526][T22681] dump_stack+0x15/0x1b [ 286.582548][T22681] should_fail_ex+0x265/0x280 [ 286.582574][T22681] should_failslab+0x8c/0xb0 [ 286.582599][T22681] kmem_cache_alloc_noprof+0x69/0x4b0 [ 286.582619][T22681] ? skb_clone+0x151/0x1f0 [ 286.582658][T22681] skb_clone+0x151/0x1f0 [ 286.582683][T22681] __netlink_deliver_tap+0x2c9/0x500 [ 286.582731][T22681] netlink_unicast+0x66b/0x690 [ 286.582762][T22681] netlink_sendmsg+0x58b/0x6b0 [ 286.582821][T22681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.582849][T22681] __sock_sendmsg+0x145/0x180 [ 286.582867][T22681] ____sys_sendmsg+0x31e/0x4a0 [ 286.582934][T22681] ___sys_sendmsg+0x17b/0x1d0 [ 286.582977][T22681] __x64_sys_sendmsg+0xd4/0x160 [ 286.583048][T22681] x64_sys_call+0x17ba/0x3000 [ 286.583070][T22681] do_syscall_64+0xca/0x2b0 [ 286.583099][T22681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.583187][T22681] RIP: 0033:0x7f8a3d3ff749 [ 286.583251][T22681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.583271][T22681] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.583373][T22681] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 286.583387][T22681] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 286.583455][T22681] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 286.583469][T22681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.583482][T22681] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 286.583503][T22681] [ 286.963327][T22694] __nla_validate_parse: 16 callbacks suppressed [ 286.963345][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4090'. [ 287.086966][T22706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.104551][T22706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.165925][T22706] hub 6-0:1.0: USB hub found [ 287.176525][T22706] hub 6-0:1.0: 8 ports detected [ 287.191188][T22717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4095'. [ 287.291106][T22726] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4097'. [ 287.310736][T22726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4097'. [ 287.431729][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4101'. [ 287.444220][T22734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4099'. [ 287.458279][T22723] macvtap1: entered promiscuous mode [ 287.463716][T22723] macvtap1: entered allmulticast mode [ 287.469540][T22723] dummy0: entered promiscuous mode [ 287.474936][T22723] dummy0: entered allmulticast mode [ 287.481356][T22723] team0: Device macvtap1 failed to register rx_handler [ 287.488991][T22723] dummy0: left allmulticast mode [ 287.494715][T22723] dummy0: left promiscuous mode [ 287.531761][T22736] bond9: entered promiscuous mode [ 287.546299][T22736] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.720163][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4103'. [ 287.782769][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4104'. [ 287.883791][T22736] netlink: 'syz.3.4101': attribute type 3 has an invalid length. [ 287.892475][T22736] netlink: 4184 bytes leftover after parsing attributes in process `syz.3.4101'. [ 287.951962][T22736] bridge6: entered promiscuous mode [ 287.978287][T22736] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 287.982641][T22809] FAULT_INJECTION: forcing a failure. [ 287.982641][T22809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.000392][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.2.4109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.000430][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.000444][T22809] Call Trace: [ 288.000451][T22809] [ 288.000460][T22809] __dump_stack+0x1d/0x30 [ 288.000554][T22809] dump_stack_lvl+0x95/0xd0 [ 288.000577][T22809] dump_stack+0x15/0x1b [ 288.000600][T22809] should_fail_ex+0x265/0x280 [ 288.000624][T22809] should_fail+0xb/0x20 [ 288.000642][T22809] should_fail_usercopy+0x1a/0x20 [ 288.000747][T22809] _copy_from_user+0x1c/0xb0 [ 288.000776][T22809] get_sg_io_hdr+0x82/0x360 [ 288.000804][T22809] ? path_openat+0x1e82/0x23b0 [ 288.000885][T22809] sg_new_write+0xc3/0x890 [ 288.000915][T22809] ? do_vfs_ioctl+0x866/0xe10 [ 288.000997][T22809] sg_ioctl+0xb81/0x1360 [ 288.001041][T22809] ? __pfx_sg_ioctl+0x10/0x10 [ 288.001058][T22809] __se_sys_ioctl+0xce/0x140 [ 288.001158][T22809] __x64_sys_ioctl+0x43/0x50 [ 288.001189][T22809] x64_sys_call+0x14b0/0x3000 [ 288.001216][T22809] do_syscall_64+0xca/0x2b0 [ 288.001284][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.001308][T22809] RIP: 0033:0x7f8a3d3ff749 [ 288.001327][T22809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.001347][T22809] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.001367][T22809] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 288.001418][T22809] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000003 [ 288.001433][T22809] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 288.001447][T22809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.001474][T22809] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 288.001491][T22809] [ 288.282011][T22811] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4110'. [ 288.451727][T22826] loop0: detected capacity change from 0 to 512 [ 288.469203][T22826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.513143][T22826] EXT4-fs (loop0): too many log groups per flexible block group [ 288.528849][T22826] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 288.546109][T22826] EXT4-fs (loop0): mount failed [ 288.713770][T22851] siw: device registration error -23 [ 288.813744][T22861] bond4: entered promiscuous mode [ 288.843644][T22861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.317472][T22910] netlink: 'syz.4.4127': attribute type 3 has an invalid length. [ 289.371955][T22901] bridge5: entered promiscuous mode [ 289.390419][T22901] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 289.731083][T22923] siw: device registration error -23 [ 290.030807][T22946] lo speed is unknown, defaulting to 1000 [ 290.820942][T22993] bond8: entered promiscuous mode [ 290.847859][T22993] 8021q: adding VLAN 0 to HW filter on device bond8 [ 290.990181][T23038] siw: device registration error -23 [ 291.661624][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 291.661722][ T29] audit: type=1326 audit(1766318571.414:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.781036][ T29] audit: type=1326 audit(1766318571.444:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.800649][T23041] netlink: 'syz.2.4148': attribute type 3 has an invalid length. [ 291.805386][ T29] audit: type=1326 audit(1766318571.444:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.837554][ T29] audit: type=1326 audit(1766318571.444:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.861846][ T29] audit: type=1326 audit(1766318571.444:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.883331][T23073] bridge3: entered promiscuous mode [ 291.885734][ T29] audit: type=1326 audit(1766318571.444:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.915354][ T29] audit: type=1326 audit(1766318571.444:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.930424][T23073] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 291.940021][ T29] audit: type=1326 audit(1766318571.444:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.972530][ T29] audit: type=1326 audit(1766318571.444:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 291.996162][ T29] audit: type=1326 audit(1766318571.444:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23070 comm="syz.4.4153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc88a80f749 code=0x7ffc0000 [ 292.280524][T23094] macvtap1: entered promiscuous mode [ 292.286091][T23094] macvtap1: entered allmulticast mode [ 292.320521][T23094] dummy0: entered promiscuous mode [ 292.331446][T23094] dummy0: entered allmulticast mode [ 292.347866][T23094] team0: Device macvtap1 failed to register rx_handler [ 292.366668][T23094] dummy0: left allmulticast mode [ 292.374192][T23102] __nla_validate_parse: 21 callbacks suppressed [ 292.374210][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4160'. [ 292.380522][T23094] dummy0: left promiscuous mode [ 292.390585][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4151'. [ 292.445955][T23107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4161'. [ 292.521258][T23112] all: renamed from team_slave_0 (while UP) [ 292.757313][T23126] FAULT_INJECTION: forcing a failure. [ 292.757313][T23126] name failslab, interval 1, probability 0, space 0, times 0 [ 292.770089][T23126] CPU: 0 UID: 0 PID: 23126 Comm: syz.0.4168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.770120][T23126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.770135][T23126] Call Trace: [ 292.770141][T23126] [ 292.770150][T23126] __dump_stack+0x1d/0x30 [ 292.770177][T23126] dump_stack_lvl+0x95/0xd0 [ 292.770199][T23126] dump_stack+0x15/0x1b [ 292.770217][T23126] should_fail_ex+0x265/0x280 [ 292.770239][T23126] should_failslab+0x8c/0xb0 [ 292.770265][T23126] kmem_cache_alloc_noprof+0x69/0x4b0 [ 292.770323][T23126] ? getname_flags+0x80/0x3b0 [ 292.770349][T23126] getname_flags+0x80/0x3b0 [ 292.770437][T23126] do_sys_openat2+0x60/0x150 [ 292.770465][T23126] __x64_sys_openat+0xf2/0x120 [ 292.770526][T23126] x64_sys_call+0x2b07/0x3000 [ 292.770553][T23126] do_syscall_64+0xca/0x2b0 [ 292.770649][T23126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.770674][T23126] RIP: 0033:0x7f372076df90 [ 292.770701][T23126] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 292.770721][T23126] RSP: 002b:00007f371f1d6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 292.770773][T23126] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f372076df90 [ 292.770788][T23126] RDX: 0000000000000000 RSI: 00007f37207f407e RDI: 00000000ffffff9c [ 292.770806][T23126] RBP: 00007f37207f407e R08: 0000000000000000 R09: 0000000000000000 [ 292.770819][T23126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 292.770832][T23126] R13: 00007f37209c6038 R14: 00007f37209c5fa0 R15: 00007ffde24c3cc8 [ 292.770852][T23126] [ 292.937606][T23124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4166'. [ 293.027755][T23129] lo speed is unknown, defaulting to 1000 [ 293.047394][T23135] netlink: 8744 bytes leftover after parsing attributes in process `syz.0.4169'. [ 293.276165][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4179'. [ 293.347848][T23173] macvtap1: entered promiscuous mode [ 293.353375][T23173] macvtap1: entered allmulticast mode [ 293.359531][T23173] dummy0: entered promiscuous mode [ 293.369458][T23173] dummy0: entered allmulticast mode [ 293.392499][T23173] team0: Device macvtap1 failed to register rx_handler [ 293.412331][T23173] dummy0: left allmulticast mode [ 293.422685][T23173] dummy0: left promiscuous mode [ 293.434493][T23184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4180'. [ 293.458091][T23175] macvtap1: entered promiscuous mode [ 293.463550][T23175] macvtap1: entered allmulticast mode [ 293.471380][T23175] dummy0: entered promiscuous mode [ 293.477043][T23175] dummy0: entered allmulticast mode [ 293.491749][T23175] team0: Device macvtap1 failed to register rx_handler [ 293.503820][T23175] dummy0: left allmulticast mode [ 293.509740][T23175] dummy0: left promiscuous mode [ 293.551383][T23209] FAULT_INJECTION: forcing a failure. [ 293.551383][T23209] name failslab, interval 1, probability 0, space 0, times 0 [ 293.564397][T23209] CPU: 1 UID: 0 PID: 23209 Comm: syz.2.4186 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.564429][T23209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.564441][T23209] Call Trace: [ 293.564448][T23209] [ 293.564528][T23209] __dump_stack+0x1d/0x30 [ 293.564556][T23209] dump_stack_lvl+0x95/0xd0 [ 293.564580][T23209] dump_stack+0x15/0x1b [ 293.564601][T23209] should_fail_ex+0x265/0x280 [ 293.564627][T23209] should_failslab+0x8c/0xb0 [ 293.564680][T23209] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 293.564711][T23209] ? __alloc_skb+0x2ff/0x4b0 [ 293.564739][T23209] __alloc_skb+0x2ff/0x4b0 [ 293.564764][T23209] tcp_stream_alloc_skb+0x2d/0x1d0 [ 293.564795][T23209] tcp_sendmsg_locked+0xcbf/0x2c00 [ 293.564830][T23209] ? lockref_put_return+0xf7/0x130 [ 293.564854][T23209] ? __rcu_read_unlock+0x4f/0x70 [ 293.564880][T23209] ? __pfx_tcp_sendmsg+0x10/0x10 [ 293.564993][T23209] tcp_sendmsg+0x2f/0x50 [ 293.565023][T23209] inet6_sendmsg+0x76/0xd0 [ 293.565055][T23209] __sock_sendmsg+0x8b/0x180 [ 293.565090][T23209] sock_write_iter+0x1a7/0x1f0 [ 293.565120][T23209] ? __pfx_sock_write_iter+0x10/0x10 [ 293.565149][T23209] vfs_write+0x52a/0x960 [ 293.565173][T23209] ksys_write+0xda/0x1a0 [ 293.565197][T23209] __x64_sys_write+0x40/0x50 [ 293.565288][T23209] x64_sys_call+0x2847/0x3000 [ 293.565371][T23209] do_syscall_64+0xca/0x2b0 [ 293.565401][T23209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.565473][T23209] RIP: 0033:0x7f8a3d3ff749 [ 293.565489][T23209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.565506][T23209] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 293.565528][T23209] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 293.565543][T23209] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000003 [ 293.565558][T23209] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 293.565596][T23209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.565608][T23209] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 293.565697][T23209] [ 293.865027][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 293.923317][T23225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4190'. [ 294.136887][T23243] netlink: 'syz.2.4194': attribute type 5 has an invalid length. [ 294.556341][T23270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.565691][T23270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.659520][T23270] hub 6-0:1.0: USB hub found [ 294.667495][T23270] hub 6-0:1.0: 8 ports detected [ 294.829059][T23288] macvtap1: entered promiscuous mode [ 294.834847][T23288] macvtap1: entered allmulticast mode [ 294.845345][T23288] dummy0: entered promiscuous mode [ 294.868494][T23288] dummy0: entered allmulticast mode [ 294.879652][T23288] team0: Device macvtap1 failed to register rx_handler [ 294.888139][T23288] dummy0: left allmulticast mode [ 294.908274][T23288] dummy0: left promiscuous mode [ 294.927204][T23298] netlink: 'syz.3.4205': attribute type 5 has an invalid length. [ 294.935576][T23304] siw: device registration error -23 [ 294.968201][T23296] macvtap1: entered promiscuous mode [ 294.973656][T23296] macvtap1: entered allmulticast mode [ 294.979489][T23296] dummy0: entered promiscuous mode [ 294.994980][T23296] dummy0: entered allmulticast mode [ 295.097883][T23316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4209'. [ 295.099072][T23296] team0: Device macvtap1 failed to register rx_handler [ 295.117306][T23296] dummy0: left allmulticast mode [ 295.122541][T23296] dummy0: left promiscuous mode [ 295.246650][T23331] netlink: 'syz.2.4213': attribute type 5 has an invalid length. [ 295.408370][T23347] netlink: 'syz.3.4218': attribute type 5 has an invalid length. [ 295.751796][T23360] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 296.131478][T23373] all: renamed from team_slave_0 (while UP) [ 296.137542][T23373] FAULT_INJECTION: forcing a failure. [ 296.137542][T23373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.150753][T23373] CPU: 1 UID: 0 PID: 23373 Comm: syz.2.4227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.150769][T23373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.150775][T23373] Call Trace: [ 296.150780][T23373] [ 296.150786][T23373] __dump_stack+0x1d/0x30 [ 296.150800][T23373] dump_stack_lvl+0x95/0xd0 [ 296.150863][T23373] dump_stack+0x15/0x1b [ 296.150873][T23373] should_fail_ex+0x265/0x280 [ 296.150885][T23373] should_fail+0xb/0x20 [ 296.150913][T23373] should_fail_usercopy+0x1a/0x20 [ 296.150926][T23373] copy_to_user_nofault+0x7f/0x120 [ 296.150940][T23373] bpf_probe_write_user+0x83/0xc0 [ 296.150970][T23373] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 296.150980][T23373] bpf_trace_run4+0x117/0x1e0 [ 296.151043][T23373] __traceiter_sched_switch+0x3f/0x60 [ 296.151055][T23373] __schedule+0xb0f/0xcd0 [ 296.151070][T23373] __cond_resched+0x31/0x60 [ 296.151141][T23373] __kmalloc_node_track_caller_noprof+0xaf/0x5b0 [ 296.151155][T23373] ? device_rename+0x82/0x180 [ 296.151170][T23373] kstrdup+0x3e/0xd0 [ 296.151195][T23373] device_rename+0x82/0x180 [ 296.151209][T23373] netif_change_name+0x1d7/0x720 [ 296.151228][T23373] ? nla_strscpy+0xec/0x120 [ 296.151240][T23373] do_setlink+0x710/0x2780 [ 296.151263][T23373] ? selinux_capable+0x31/0x40 [ 296.151297][T23373] ? security_capable+0x83/0x90 [ 296.151399][T23373] ? ns_capable+0x7d/0xb0 [ 296.151414][T23373] ? netlink_ns_capable+0x86/0xa0 [ 296.151428][T23373] rtnl_newlink+0xea4/0x1360 [ 296.151473][T23373] ? __rb_reserve_next+0x43e/0x6f0 [ 296.151485][T23373] ? avc_has_perm_noaudit+0x8e/0x130 [ 296.151573][T23373] ? avc_has_perm_noaudit+0x8e/0x130 [ 296.151583][T23373] ? __tsan_memcpy+0x3b4/0x3c0 [ 296.151597][T23373] ? __rcu_read_unlock+0x4f/0x70 [ 296.151652][T23373] ? avc_has_perm_noaudit+0xab/0x130 [ 296.151663][T23373] ? cred_has_capability+0x210/0x280 [ 296.151746][T23373] ? selinux_capable+0x31/0x40 [ 296.151757][T23373] ? security_capable+0x83/0x90 [ 296.151773][T23373] ? ns_capable+0x7d/0xb0 [ 296.151786][T23373] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.151818][T23373] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 296.151831][T23373] netlink_rcv_skb+0x123/0x220 [ 296.151845][T23373] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.151858][T23373] rtnetlink_rcv+0x1c/0x30 [ 296.151912][T23373] netlink_unicast+0x5c0/0x690 [ 296.151927][T23373] netlink_sendmsg+0x58b/0x6b0 [ 296.152010][T23373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.152026][T23373] __sock_sendmsg+0x145/0x180 [ 296.152036][T23373] ____sys_sendmsg+0x31e/0x4a0 [ 296.152098][T23373] ___sys_sendmsg+0x17b/0x1d0 [ 296.152120][T23373] __x64_sys_sendmsg+0xd4/0x160 [ 296.152213][T23373] x64_sys_call+0x17ba/0x3000 [ 296.152225][T23373] do_syscall_64+0xca/0x2b0 [ 296.152317][T23373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.152385][T23373] RIP: 0033:0x7f8a3d3ff749 [ 296.152416][T23373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.152426][T23373] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.152438][T23373] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 296.152445][T23373] RDX: 00000000000080c4 RSI: 0000200000000080 RDI: 0000000000000005 [ 296.152451][T23373] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 296.152458][T23373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.152464][T23373] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 296.152543][T23373] [ 296.499892][T23374] siw: device registration error -23 [ 296.537328][T23377] bond5: entered promiscuous mode [ 296.542950][T23377] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.746305][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 296.746323][ T29] audit: type=1326 audit(1766318576.494:14059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.808685][ T29] audit: type=1326 audit(1766318576.524:14060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.832603][ T29] audit: type=1326 audit(1766318576.524:14061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.856249][ T29] audit: type=1326 audit(1766318576.524:14062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.858842][T23429] netlink: 'syz.4.4228': attribute type 3 has an invalid length. [ 296.879987][ T29] audit: type=1326 audit(1766318576.524:14063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.880026][ T29] audit: type=1326 audit(1766318576.524:14064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.935636][ T29] audit: type=1326 audit(1766318576.524:14065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.948457][T23439] bridge6: entered promiscuous mode [ 296.959361][ T29] audit: type=1326 audit(1766318576.524:14066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 296.988142][ T29] audit: type=1326 audit(1766318576.524:14067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 297.011999][ T29] audit: type=1326 audit(1766318576.524:14068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 297.042887][T23439] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 297.112282][T23456] loop0: detected capacity change from 0 to 512 [ 297.133585][T23456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.194673][T23456] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.209916][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.234106][T23456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 297.264204][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.313887][T23456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 297.324051][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.338167][T23456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 297.366597][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.398253][T23456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 297.451035][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.492372][T23456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 297.534410][T23500] __nla_validate_parse: 6 callbacks suppressed [ 297.534489][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4255'. [ 297.550865][T23456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.4242: corrupted xattr block 6: invalid header [ 297.577238][T23500] loop1: detected capacity change from 0 to 512 [ 297.592324][T23500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.613482][T23500] EXT4-fs (loop1): too many log groups per flexible block group [ 297.630734][T23500] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 297.638359][T23500] EXT4-fs (loop1): mount failed [ 297.673815][T16380] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.741077][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4257'. [ 297.767546][T23523] loop0: detected capacity change from 0 to 512 [ 297.784986][T23523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.846584][T23523] EXT4-fs (loop0): too many log groups per flexible block group [ 297.865431][T23523] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 297.878304][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4259'. [ 297.915166][T23523] EXT4-fs (loop0): mount failed [ 297.968683][T23545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4264'. [ 297.996957][T23546] macvtap1: entered promiscuous mode [ 298.002392][T23546] macvtap1: entered allmulticast mode [ 298.011718][T23546] dummy0: entered promiscuous mode [ 298.032788][T23546] dummy0: entered allmulticast mode [ 298.055734][T23546] team0: Device macvtap1 failed to register rx_handler [ 298.074625][T23546] dummy0: left allmulticast mode [ 298.084324][T23546] dummy0: left promiscuous mode [ 298.119205][T23554] loop1: detected capacity change from 0 to 512 [ 298.159939][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4268'. [ 298.175613][T23554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.188457][T23554] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.202659][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.216130][T23554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 298.252759][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.304902][T23554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 298.315728][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.341038][T23554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 298.349476][T23564] bond9: entered promiscuous mode [ 298.366195][T23564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.373142][T23607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 298.429041][T23564] netlink: 'syz.2.4268': attribute type 3 has an invalid length. [ 298.436868][T23564] netlink: 4184 bytes leftover after parsing attributes in process `syz.2.4268'. [ 298.454283][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.487155][T23554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 298.499785][T23552] 9p: Bad value for 'rfdno' [ 298.506072][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.514393][T23564] bridge4: entered promiscuous mode [ 298.519867][T23554] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 298.535300][T23554] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4267: corrupted xattr block 6: invalid header [ 298.563305][T23564] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 298.583899][T18822] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.613345][T23623] loop1: detected capacity change from 0 to 256 [ 298.684677][T23639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.694679][T23639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.788155][T23647] FAULT_INJECTION: forcing a failure. [ 298.788155][T23647] name failslab, interval 1, probability 0, space 0, times 0 [ 298.801558][T23647] CPU: 1 UID: 0 PID: 23647 Comm: syz.3.4278 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.801589][T23647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.801609][T23647] Call Trace: [ 298.801616][T23647] [ 298.801624][T23647] __dump_stack+0x1d/0x30 [ 298.801647][T23647] dump_stack_lvl+0x95/0xd0 [ 298.801666][T23647] dump_stack+0x15/0x1b [ 298.801728][T23647] should_fail_ex+0x265/0x280 [ 298.801750][T23647] should_failslab+0x8c/0xb0 [ 298.801770][T23647] kmem_cache_alloc_noprof+0x69/0x4b0 [ 298.801792][T23647] ? audit_log_start+0x342/0x720 [ 298.801877][T23647] audit_log_start+0x342/0x720 [ 298.801899][T23647] ? kstrtouint+0x76/0xc0 [ 298.801976][T23647] audit_seccomp+0x48/0x100 [ 298.802020][T23647] ? __seccomp_filter+0x832/0x1260 [ 298.802044][T23647] __seccomp_filter+0x843/0x1260 [ 298.802121][T23647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 298.802150][T23647] ? vfs_write+0x7e8/0x960 [ 298.802171][T23647] ? __rcu_read_unlock+0x4f/0x70 [ 298.802198][T23647] ? __fget_files+0x184/0x1c0 [ 298.802286][T23647] __secure_computing+0x82/0x150 [ 298.802317][T23647] syscall_trace_enter+0xcf/0x1e0 [ 298.802343][T23647] do_syscall_64+0xa4/0x2b0 [ 298.802420][T23647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.802445][T23647] RIP: 0033:0x7f647e8af749 [ 298.802461][T23647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.802478][T23647] RSP: 002b:00007f647d317038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 298.802498][T23647] RAX: ffffffffffffffda RBX: 00007f647eb05fa0 RCX: 00007f647e8af749 [ 298.802511][T23647] RDX: 0000000000002000 RSI: 0000000000009000 RDI: 0000200000f18000 [ 298.802523][T23647] RBP: 00007f647d317090 R08: 0000200000ba5000 R09: 0000000000000000 [ 298.802534][T23647] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 298.802588][T23647] R13: 00007f647eb06038 R14: 00007f647eb05fa0 R15: 00007fff99039248 [ 298.802609][T23647] [ 299.039136][T23651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4277'. [ 299.233227][T23672] siw: device registration error -23 [ 299.237495][T23675] pim6reg: entered allmulticast mode [ 299.275633][T23672] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 299.587854][T23702] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4295'. [ 299.597617][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4295'. [ 299.900750][T23715] netlink: 'syz.4.4302': attribute type 5 has an invalid length. [ 299.933431][T23667] syz.1.4283 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 299.944938][T23667] CPU: 0 UID: 0 PID: 23667 Comm: syz.1.4283 Not tainted syzkaller #0 PREEMPT(voluntary) [ 299.944964][T23667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.945038][T23667] Call Trace: [ 299.945045][T23667] [ 299.945055][T23667] __dump_stack+0x1d/0x30 [ 299.945079][T23667] dump_stack_lvl+0x95/0xd0 [ 299.945100][T23667] dump_stack+0x15/0x1b [ 299.945205][T23667] dump_header+0x81/0x240 [ 299.945224][T23667] oom_kill_process+0x295/0x350 [ 299.945300][T23667] out_of_memory+0x97b/0xb80 [ 299.945394][T23667] try_charge_memcg+0x610/0xa10 [ 299.945422][T23667] charge_memcg+0x51/0xc0 [ 299.945452][T23667] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 299.945481][T23667] __read_swap_cache_async+0x17b/0x2d0 [ 299.945518][T23667] swap_cluster_readahead+0x262/0x3c0 [ 299.945573][T23667] swapin_readahead+0xde/0x820 [ 299.945605][T23667] ? __rcu_read_unlock+0x4f/0x70 [ 299.945627][T23667] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 299.945648][T23667] ? __list_add_valid_or_report+0x38/0xe0 [ 299.945724][T23667] ? __rcu_read_unlock+0x4f/0x70 [ 299.945807][T23667] ? swap_cache_get_folio+0x277/0x280 [ 299.945867][T23667] do_swap_page+0x2b4/0x21e0 [ 299.945895][T23667] ? _raw_spin_unlock+0x26/0x50 [ 299.945979][T23667] ? __schedule+0x85f/0xcd0 [ 299.946077][T23667] ? __pfx_default_wake_function+0x10/0x10 [ 299.946182][T23667] handle_mm_fault+0x9d8/0x2c60 [ 299.946228][T23667] do_user_addr_fault+0x630/0x1080 [ 299.946330][T23667] exc_page_fault+0x62/0xa0 [ 299.946359][T23667] asm_exc_page_fault+0x26/0x30 [ 299.946378][T23667] RIP: 0033:0x7f70407c59ec [ 299.946443][T23667] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 299.946493][T23667] RSP: 002b:00007ffd3a4a8ec0 EFLAGS: 00010206 [ 299.946511][T23667] RAX: 0000000000000000 RBX: 00007f7040b45fa0 RCX: 0000000000000000 [ 299.946523][T23667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555580b3a808 [ 299.946534][T23667] RBP: 00007f7040b47da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 299.946574][T23667] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000493b8 [ 299.946588][T23667] R13: 00007f7040b46090 R14: ffffffffffffffff R15: 00007ffd3a4a8fd0 [ 299.946609][T23667] [ 299.946616][T23667] memory: usage 307200kB, limit 307200kB, failcnt 374 [ 300.178705][T23667] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 300.186834][T23667] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 300.194250][T23667] Memory cgroup stats for /syz1: [ 300.205048][T23667] cache 0 [ 300.213043][T23667] rss 4096 [ 300.216081][T23667] shmem 0 [ 300.219023][T23667] mapped_file 0 [ 300.222570][T23667] dirty 0 [ 300.225525][T23667] writeback 8192 [ 300.229081][T23667] workingset_refault_anon 34 [ 300.233766][T23667] workingset_refault_file 490 [ 300.238459][T23667] swap 344064 [ 300.241801][T23667] swapcached 12288 [ 300.245623][T23667] pgpgin 244603 [ 300.249137][T23667] pgpgout 244600 [ 300.252772][T23667] pgfault 309187 [ 300.256321][T23667] pgmajfault 26 [ 300.259790][T23667] inactive_anon 12288 [ 300.263848][T23667] active_anon 0 [ 300.267326][T23667] inactive_file 0 [ 300.271069][T23667] active_file 0 [ 300.274548][T23667] unevictable 0 [ 300.278074][T23667] hierarchical_memory_limit 314572800 [ 300.283504][T23667] hierarchical_memsw_limit 9223372036854771712 [ 300.289780][T23667] total_cache 0 [ 300.293429][T23667] total_rss 4096 [ 300.296993][T23667] total_shmem 0 [ 300.300638][T23667] total_mapped_file 0 [ 300.304634][T23667] total_dirty 0 [ 300.308187][T23667] total_writeback 8192 [ 300.312283][T23667] total_workingset_refault_anon 34 [ 300.317635][T23667] total_workingset_refault_file 490 [ 300.322889][T23667] total_swap 344064 [ 300.326711][T23667] total_swapcached 12288 [ 300.331008][T23667] total_pgpgin 244603 [ 300.335093][T23667] total_pgpgout 244600 [ 300.339223][T23667] total_pgfault 309187 [ 300.343458][T23667] total_pgmajfault 26 [ 300.347479][T23667] total_inactive_anon 12288 [ 300.352199][T23667] total_active_anon 0 [ 300.356226][T23667] total_inactive_file 0 [ 300.360451][T23667] total_active_file 0 [ 300.364525][T23667] total_unevictable 0 [ 300.368595][T23667] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4283,pid=23667,uid=0 [ 300.383477][T23667] Memory cgroup out of memory: Killed process 23667 (syz.1.4283) total-vm:96016kB, anon-rss:1264kB, file-rss:22704kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 300.562786][T23741] siw: device registration error -23 [ 300.652437][T23748] lo speed is unknown, defaulting to 1000 [ 302.191036][ T29] kauditd_printk_skb: 1018 callbacks suppressed [ 302.191052][ T29] audit: type=1326 audit(1766318581.944:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.332901][T23865] IPVS: dh: FWM 3 0x00000003 - no destination available [ 302.340037][ C1] IPVS: dh: FWM 3 0x00000003 - no destination available [ 302.380896][ T29] audit: type=1326 audit(1766318581.974:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.405657][ T29] audit: type=1326 audit(1766318581.974:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.429800][ T29] audit: type=1326 audit(1766318581.974:15088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.454142][ T29] audit: type=1326 audit(1766318581.974:15089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.477919][ T29] audit: type=1326 audit(1766318581.984:15090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.501783][ T29] audit: type=1326 audit(1766318581.984:15091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.526374][ T29] audit: type=1326 audit(1766318581.984:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.550237][ T29] audit: type=1326 audit(1766318581.984:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23851 comm="syz.1.4324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70408ef749 code=0x7ffc0000 [ 302.574688][ T29] audit: type=1400 audit(1766318582.074:15094): avc: denied { write } for pid=23863 comm="syz.4.4326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 302.596407][ T3713] IPVS: starting estimator thread 0... [ 302.690400][T23874] IPVS: using max 2736 ests per chain, 136800 per kthread [ 302.753752][T23888] __nla_validate_parse: 6 callbacks suppressed [ 302.753789][T23888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4330'. [ 302.809368][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4338'. [ 302.848161][T23902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4336'. [ 302.971237][T23913] siw: device registration error -23 [ 303.090056][T23939] FAULT_INJECTION: forcing a failure. [ 303.090056][T23939] name failslab, interval 1, probability 0, space 0, times 0 [ 303.102927][T23939] CPU: 1 UID: 0 PID: 23939 Comm: syz.3.4349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 303.103014][T23939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.103026][T23939] Call Trace: [ 303.103032][T23939] [ 303.103039][T23939] __dump_stack+0x1d/0x30 [ 303.103112][T23939] dump_stack_lvl+0x95/0xd0 [ 303.103132][T23939] dump_stack+0x15/0x1b [ 303.103151][T23939] should_fail_ex+0x265/0x280 [ 303.103229][T23939] should_failslab+0x8c/0xb0 [ 303.103250][T23939] __kmalloc_cache_noprof+0x65/0x4c0 [ 303.103277][T23939] ? genl_start+0x117/0x390 [ 303.103304][T23939] genl_start+0x117/0x390 [ 303.103330][T23939] __netlink_dump_start+0x334/0x520 [ 303.103409][T23939] genl_family_rcv_msg_dumpit+0x115/0x180 [ 303.103430][T23939] ? __pfx_genl_start+0x10/0x10 [ 303.103453][T23939] ? __pfx_genl_dumpit+0x10/0x10 [ 303.103477][T23939] ? __pfx_genl_done+0x10/0x10 [ 303.103538][T23939] genl_rcv_msg+0x3f0/0x460 [ 303.103559][T23939] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 303.103646][T23939] netlink_rcv_skb+0x123/0x220 [ 303.103684][T23939] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.103788][T23939] genl_rcv+0x28/0x40 [ 303.103808][T23939] netlink_unicast+0x5c0/0x690 [ 303.103844][T23939] netlink_sendmsg+0x58b/0x6b0 [ 303.103872][T23939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.104008][T23939] __sock_sendmsg+0x145/0x180 [ 303.104028][T23939] ____sys_sendmsg+0x31e/0x4a0 [ 303.104078][T23939] ___sys_sendmsg+0x17b/0x1d0 [ 303.104197][T23939] __x64_sys_sendmsg+0xd4/0x160 [ 303.104233][T23939] x64_sys_call+0x17ba/0x3000 [ 303.104289][T23939] do_syscall_64+0xca/0x2b0 [ 303.104319][T23939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.104415][T23939] RIP: 0033:0x7f647e8af749 [ 303.104430][T23939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.104447][T23939] RSP: 002b:00007f647d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.104467][T23939] RAX: ffffffffffffffda RBX: 00007f647eb05fa0 RCX: 00007f647e8af749 [ 303.104492][T23939] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 303.104504][T23939] RBP: 00007f647d317090 R08: 0000000000000000 R09: 0000000000000000 [ 303.104552][T23939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.104564][T23939] R13: 00007f647eb06038 R14: 00007f647eb05fa0 R15: 00007fff99039248 [ 303.104581][T23939] [ 303.154145][T23940] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4344'. [ 303.270983][T23946] loop0: detected capacity change from 0 to 512 [ 303.396484][T23946] EXT4-fs: dax option not supported [ 303.509473][T23979] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6168 sclass=netlink_xfrm_socket pid=23979 comm=GPL [ 303.528128][T23979] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 303.595490][T23985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4346'. [ 303.610867][T23992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4354'. [ 303.644363][T23996] lo speed is unknown, defaulting to 1000 [ 303.723839][T24009] loop0: detected capacity change from 0 to 164 [ 303.758113][T24009] iso9660: Unknown parameter 'net/anycast6' [ 303.814986][T24009] siw: device registration error -23 [ 303.856825][T24048] siw: device registration error -23 [ 303.901580][T24053] netlink: 'syz.0.4363': attribute type 5 has an invalid length. [ 303.914019][T24053] loop0: detected capacity change from 0 to 512 [ 303.920957][T24053] EXT4-fs: dax option not supported [ 304.085380][T24067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4364'. [ 304.321690][T24097] siw: device registration error -23 [ 304.419011][T24111] netlink: 'syz.4.4378': attribute type 5 has an invalid length. [ 304.442056][T24112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4375'. [ 304.621275][T24116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4379'. [ 304.971160][T24143] lo speed is unknown, defaulting to 1000 [ 305.762416][T24233] macvtap1: entered promiscuous mode [ 305.767772][T24233] macvtap1: entered allmulticast mode [ 305.783372][T24239] netlink: 'syz.0.4407': attribute type 2 has an invalid length. [ 305.808046][T24233] dummy0: entered promiscuous mode [ 305.825024][T24233] dummy0: entered allmulticast mode [ 305.837337][T24233] team0: Device macvtap1 failed to register rx_handler [ 305.851153][T24233] dummy0: left allmulticast mode [ 305.887036][T24233] dummy0: left promiscuous mode [ 305.892564][T24253] FAULT_INJECTION: forcing a failure. [ 305.892564][T24253] name failslab, interval 1, probability 0, space 0, times 0 [ 305.905348][T24253] CPU: 0 UID: 0 PID: 24253 Comm: syz.2.4413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.905378][T24253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.905391][T24253] Call Trace: [ 305.905399][T24253] [ 305.905408][T24253] __dump_stack+0x1d/0x30 [ 305.905475][T24253] dump_stack_lvl+0x95/0xd0 [ 305.905498][T24253] dump_stack+0x15/0x1b [ 305.905518][T24253] should_fail_ex+0x265/0x280 [ 305.905544][T24253] should_failslab+0x8c/0xb0 [ 305.905644][T24253] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 305.905673][T24253] ? sidtab_sid2str_get+0xa0/0x130 [ 305.905739][T24253] ? skb_put+0xa9/0xf0 [ 305.905764][T24253] kmemdup_noprof+0x2b/0x70 [ 305.905785][T24253] sidtab_sid2str_get+0xa0/0x130 [ 305.905814][T24253] security_sid_to_context_core+0x1eb/0x2e0 [ 305.905886][T24253] security_sid_to_context+0x27/0x40 [ 305.905913][T24253] avc_audit_post_callback+0x9d/0x520 [ 305.905994][T24253] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 305.906031][T24253] common_lsm_audit+0x1bb/0x230 [ 305.906059][T24253] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 305.906097][T24253] slow_avc_audit+0x104/0x140 [ 305.906128][T24253] avc_has_perm+0x13a/0x180 [ 305.906148][T24253] sel_write_load+0xf7/0x380 [ 305.906166][T24253] ? __pfx_sel_write_load+0x10/0x10 [ 305.906248][T24253] vfs_write+0x269/0x960 [ 305.906270][T24253] ? __rcu_read_unlock+0x4f/0x70 [ 305.906293][T24253] ? __fget_files+0x184/0x1c0 [ 305.906318][T24253] ? mutex_lock+0x58/0x90 [ 305.906347][T24253] ksys_write+0xda/0x1a0 [ 305.906366][T24253] __x64_sys_write+0x40/0x50 [ 305.906387][T24253] x64_sys_call+0x2847/0x3000 [ 305.906468][T24253] do_syscall_64+0xca/0x2b0 [ 305.906500][T24253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.906524][T24253] RIP: 0033:0x7f8a3d3ff749 [ 305.906542][T24253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.906622][T24253] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.906645][T24253] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 305.906659][T24253] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000004 [ 305.906677][T24253] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 305.906690][T24253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.906704][T24253] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 305.906723][T24253] [ 306.161941][T24253] SELinux: failed to load policy [ 306.486434][T24290] lo speed is unknown, defaulting to 1000 [ 307.185300][T24313] lo speed is unknown, defaulting to 1000 [ 307.453105][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 307.453124][ T29] audit: type=1400 audit(1766318587.204:15310): avc: denied { create } for pid=24337 comm="syz.4.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 308.524275][ T29] audit: type=1400 audit(1766318588.274:15311): avc: denied { name_bind } for pid=24349 comm="syz.1.4428" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 308.548027][T24351] __nla_validate_parse: 9 callbacks suppressed [ 308.548044][T24351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4429'. [ 308.604886][T24356] FAULT_INJECTION: forcing a failure. [ 308.604886][T24356] name failslab, interval 1, probability 0, space 0, times 0 [ 308.617726][T24356] CPU: 1 UID: 0 PID: 24356 Comm: syz.2.4431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 308.617819][T24356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.617859][T24356] Call Trace: [ 308.617866][T24356] [ 308.617901][T24356] __dump_stack+0x1d/0x30 [ 308.617930][T24356] dump_stack_lvl+0x95/0xd0 [ 308.617955][T24356] dump_stack+0x15/0x1b [ 308.617978][T24356] should_fail_ex+0x265/0x280 [ 308.618001][T24356] should_failslab+0x8c/0xb0 [ 308.618107][T24356] ? dev_load+0x61/0xc0 [ 308.618137][T24356] __kmalloc_cache_noprof+0x65/0x4c0 [ 308.618159][T24356] ? __request_module+0x1c4/0x3e0 [ 308.618202][T24356] ? dev_load+0x61/0xc0 [ 308.618226][T24356] __request_module+0x1c4/0x3e0 [ 308.618265][T24356] ? capable+0x7c/0xb0 [ 308.618299][T24356] ? security_capable+0x83/0x90 [ 308.618352][T24356] dev_load+0x61/0xc0 [ 308.618388][T24356] dev_ioctl+0x777/0x960 [ 308.618419][T24356] sock_ioctl+0x593/0x610 [ 308.618469][T24356] ? __pfx_sock_ioctl+0x10/0x10 [ 308.618503][T24356] __se_sys_ioctl+0xce/0x140 [ 308.618530][T24356] __x64_sys_ioctl+0x43/0x50 [ 308.618621][T24356] x64_sys_call+0x14b0/0x3000 [ 308.618645][T24356] do_syscall_64+0xca/0x2b0 [ 308.618709][T24356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.618807][T24356] RIP: 0033:0x7f8a3d3ff749 [ 308.618826][T24356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.618848][T24356] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.618894][T24356] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 308.618910][T24356] RDX: 0000200000000940 RSI: 00000000000089f3 RDI: 0000000000000003 [ 308.618923][T24356] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 308.618935][T24356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.618951][T24356] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 308.618967][T24356] [ 308.823014][T24355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4430'. [ 308.845630][T24355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4430'. [ 308.874093][ T29] audit: type=1326 audit(1766318588.614:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 308.898029][ T29] audit: type=1326 audit(1766318588.614:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 308.922568][ T29] audit: type=1326 audit(1766318588.614:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 308.946864][ T29] audit: type=1326 audit(1766318588.614:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 308.971285][ T29] audit: type=1326 audit(1766318588.614:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 308.995071][ T29] audit: type=1326 audit(1766318588.614:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 309.019284][ T29] audit: type=1326 audit(1766318588.624:15318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 309.043428][ T29] audit: type=1326 audit(1766318588.624:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24360 comm="syz.3.4432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 309.068785][T24371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4436'. [ 309.191917][T24384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4441'. [ 309.233685][T24394] siw: device registration error -23 [ 309.278593][T24399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4444'. [ 309.306074][T24399] hsr_slave_0: left promiscuous mode [ 309.315253][T24399] hsr_slave_1: left promiscuous mode [ 309.459212][T24422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4450'. [ 309.527196][T24425] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4453'. [ 309.661665][T24444] macvtap1: entered promiscuous mode [ 309.667144][T24444] macvtap1: entered allmulticast mode [ 309.686307][T24444] dummy0: entered promiscuous mode [ 309.691791][T24444] dummy0: entered allmulticast mode [ 309.698304][T24444] team0: Device macvtap1 failed to register rx_handler [ 309.713174][T24444] dummy0: left allmulticast mode [ 309.722972][T24444] dummy0: left promiscuous mode [ 309.747190][T24445] macvtap1: entered promiscuous mode [ 309.752588][T24445] macvtap1: entered allmulticast mode [ 309.758656][T24445] dummy0: entered promiscuous mode [ 309.764704][T24445] dummy0: entered allmulticast mode [ 309.774684][T24445] team0: Device macvtap1 failed to register rx_handler [ 309.788828][T24445] dummy0: left allmulticast mode [ 309.795797][T24445] dummy0: left promiscuous mode [ 310.120010][T24474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4462'. [ 310.131240][T24472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4465'. [ 310.282425][T24486] netlink: 'syz.1.4469': attribute type 5 has an invalid length. [ 310.367927][T24432] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 310.384645][T24491] FAULT_INJECTION: forcing a failure. [ 310.384645][T24491] name failslab, interval 1, probability 0, space 0, times 0 [ 310.397848][T24491] CPU: 1 UID: 0 PID: 24491 Comm: syz.2.4470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 310.397882][T24491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.397897][T24491] Call Trace: [ 310.397905][T24491] [ 310.397917][T24491] __dump_stack+0x1d/0x30 [ 310.397946][T24491] dump_stack_lvl+0x95/0xd0 [ 310.397998][T24491] dump_stack+0x15/0x1b [ 310.398025][T24491] should_fail_ex+0x265/0x280 [ 310.398054][T24491] should_failslab+0x8c/0xb0 [ 310.398080][T24491] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 310.398107][T24491] ? __alloc_skb+0x2ff/0x4b0 [ 310.398200][T24491] __alloc_skb+0x2ff/0x4b0 [ 310.398228][T24491] tcp_stream_alloc_skb+0x2d/0x1d0 [ 310.398318][T24491] tcp_sendmsg_locked+0xcbf/0x2c00 [ 310.398351][T24491] ? lockref_put_return+0xf7/0x130 [ 310.398400][T24491] ? __rcu_read_unlock+0x4f/0x70 [ 310.398435][T24491] ? __pfx_tcp_sendmsg+0x10/0x10 [ 310.398463][T24491] tcp_sendmsg+0x2f/0x50 [ 310.398495][T24491] inet6_sendmsg+0x76/0xd0 [ 310.398544][T24491] __sock_sendmsg+0x8b/0x180 [ 310.398565][T24491] sock_write_iter+0x1a7/0x1f0 [ 310.398605][T24491] ? __pfx_sock_write_iter+0x10/0x10 [ 310.398652][T24491] vfs_write+0x52a/0x960 [ 310.398679][T24491] ksys_write+0xda/0x1a0 [ 310.398702][T24491] __x64_sys_write+0x40/0x50 [ 310.398725][T24491] x64_sys_call+0x2847/0x3000 [ 310.398762][T24491] do_syscall_64+0xca/0x2b0 [ 310.398808][T24491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.398830][T24491] RIP: 0033:0x7f8a3d3ff749 [ 310.398906][T24491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.398926][T24491] RSP: 002b:00007f8a3be67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 310.399019][T24491] RAX: ffffffffffffffda RBX: 00007f8a3d655fa0 RCX: 00007f8a3d3ff749 [ 310.399031][T24491] RDX: 00000000fffffd9d RSI: 0000200000000200 RDI: 0000000000000003 [ 310.399045][T24491] RBP: 00007f8a3be67090 R08: 0000000000000000 R09: 0000000000000000 [ 310.399060][T24491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.399072][T24491] R13: 00007f8a3d656038 R14: 00007f8a3d655fa0 R15: 00007fffe65e8c18 [ 310.399089][T24491] [ 310.739921][T24502] macvtap1: entered promiscuous mode [ 310.745374][T24502] macvtap1: entered allmulticast mode [ 310.771230][T24502] dummy0: entered promiscuous mode [ 310.778223][T24502] dummy0: entered allmulticast mode [ 310.786209][T24502] team0: Device macvtap1 failed to register rx_handler [ 310.803430][T24502] dummy0: left allmulticast mode [ 310.808712][T24502] dummy0: left promiscuous mode [ 310.832037][T24516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.841148][T24516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.962409][T24533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.973239][T24533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.995615][T24533] hub 6-0:1.0: USB hub found [ 311.001337][T24533] hub 6-0:1.0: 8 ports detected [ 311.305238][T24559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.314196][T24559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.354589][T24559] hub 6-0:1.0: USB hub found [ 311.359489][T24559] hub 6-0:1.0: 8 ports detected [ 311.765272][T24613] lo speed is unknown, defaulting to 1000 [ 312.259067][T24654] FAULT_INJECTION: forcing a failure. [ 312.259067][T24654] name failslab, interval 1, probability 0, space 0, times 0 [ 312.271949][T24654] CPU: 0 UID: 0 PID: 24654 Comm: syz.1.4509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 312.272044][T24654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.272058][T24654] Call Trace: [ 312.272066][T24654] [ 312.272076][T24654] __dump_stack+0x1d/0x30 [ 312.272125][T24654] dump_stack_lvl+0x95/0xd0 [ 312.272161][T24654] dump_stack+0x15/0x1b [ 312.272184][T24654] should_fail_ex+0x265/0x280 [ 312.272205][T24654] should_failslab+0x8c/0xb0 [ 312.272252][T24654] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 312.272348][T24654] ? __alloc_skb+0x2ff/0x4b0 [ 312.272371][T24654] __alloc_skb+0x2ff/0x4b0 [ 312.272394][T24654] ? __alloc_skb+0x228/0x4b0 [ 312.272421][T24654] sock_wmalloc+0x7e/0xc0 [ 312.272476][T24654] unix_stream_connect+0x2d6/0xa00 [ 312.272562][T24654] ? selinux_netlbl_socket_connect+0x114/0x130 [ 312.272598][T24654] ? __pfx_unix_stream_connect+0x10/0x10 [ 312.272661][T24654] __sys_connect+0x1f2/0x2b0 [ 312.272706][T24654] __x64_sys_connect+0x3f/0x50 [ 312.272788][T24654] x64_sys_call+0x2e09/0x3000 [ 312.272816][T24654] do_syscall_64+0xca/0x2b0 [ 312.272855][T24654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.272877][T24654] RIP: 0033:0x7f70408ef749 [ 312.272925][T24654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.272947][T24654] RSP: 002b:00007f703f357038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 312.272972][T24654] RAX: ffffffffffffffda RBX: 00007f7040b45fa0 RCX: 00007f70408ef749 [ 312.272987][T24654] RDX: 000000000000006e RSI: 0000200000000380 RDI: 0000000000000003 [ 312.273002][T24654] RBP: 00007f703f357090 R08: 0000000000000000 R09: 0000000000000000 [ 312.273017][T24654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.273127][T24654] R13: 00007f7040b46038 R14: 00007f7040b45fa0 R15: 00007ffd3a4a8d58 [ 312.273144][T24654] [ 312.587571][T24652] lo speed is unknown, defaulting to 1000 [ 312.596484][T24661] FAULT_INJECTION: forcing a failure. [ 312.596484][T24661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.609619][T24661] CPU: 0 UID: 0 PID: 24661 Comm: syz.1.4510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 312.609651][T24661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.609665][T24661] Call Trace: [ 312.609672][T24661] [ 312.609682][T24661] __dump_stack+0x1d/0x30 [ 312.609776][T24661] dump_stack_lvl+0x95/0xd0 [ 312.609796][T24661] dump_stack+0x15/0x1b [ 312.609814][T24661] should_fail_ex+0x265/0x280 [ 312.609837][T24661] should_fail+0xb/0x20 [ 312.609860][T24661] should_fail_usercopy+0x1a/0x20 [ 312.609937][T24661] _copy_to_user+0x20/0xa0 [ 312.609968][T24661] simple_read_from_buffer+0xb5/0x130 [ 312.609994][T24661] proc_fail_nth_read+0x10e/0x150 [ 312.610026][T24661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.610066][T24661] vfs_read+0x1a8/0x770 [ 312.610086][T24661] ? __rcu_read_unlock+0x4f/0x70 [ 312.610110][T24661] ? __fget_files+0x184/0x1c0 [ 312.610137][T24661] ? mutex_lock+0x58/0x90 [ 312.610167][T24661] ksys_read+0xda/0x1a0 [ 312.610217][T24661] __x64_sys_read+0x40/0x50 [ 312.610251][T24661] x64_sys_call+0x2889/0x3000 [ 312.610282][T24661] do_syscall_64+0xca/0x2b0 [ 312.610311][T24661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.610375][T24661] RIP: 0033:0x7f70408ee15c [ 312.610394][T24661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.610455][T24661] RSP: 002b:00007f703f357030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.610480][T24661] RAX: ffffffffffffffda RBX: 00007f7040b45fa0 RCX: 00007f70408ee15c [ 312.610495][T24661] RDX: 000000000000000f RSI: 00007f703f3570a0 RDI: 0000000000000006 [ 312.610507][T24661] RBP: 00007f703f357090 R08: 0000000000000000 R09: 0000000000000000 [ 312.610520][T24661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.610538][T24661] R13: 00007f7040b46038 R14: 00007f7040b45fa0 R15: 00007ffd3a4a8d58 [ 312.610554][T24661] [ 312.932859][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 312.932876][ T29] audit: type=1326 audit(1766318592.684:15758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f372076f807 code=0x7ffc0000 [ 312.962861][ T29] audit: type=1326 audit(1766318592.684:15759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 312.986658][ T29] audit: type=1326 audit(1766318592.684:15760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 313.010652][ T29] audit: type=1326 audit(1766318592.684:15761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3720726bdd code=0x7ffc0000 [ 313.034379][ T29] audit: type=1326 audit(1766318592.684:15762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f37207a3e89 code=0x7ffc0000 [ 313.058120][ T29] audit: type=1326 audit(1766318592.684:15763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3720726c47 code=0x7ffc0000 [ 313.081844][ T29] audit: type=1326 audit(1766318592.684:15764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 313.105862][ T29] audit: type=1326 audit(1766318592.684:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f372076f749 code=0x7ffc0000 [ 313.222731][T24683] siw: device registration error -23 [ 313.283749][T24687] Cannot find add_set index 0 as target [ 313.300032][ T29] audit: type=1326 audit(1766318592.884:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3720726357 code=0x7ffc0000 [ 313.323805][ T29] audit: type=1326 audit(1766318592.884:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24647 comm="syz.0.4506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f37207263b6 code=0x7ffc0000 [ 313.558176][T24697] __nla_validate_parse: 8 callbacks suppressed [ 313.558192][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4518'. [ 313.635038][T24706] siw: device registration error -23 [ 313.641559][T24707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4519'. [ 313.813415][T24706] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 313.843089][T24717] macvtap1: entered promiscuous mode [ 313.848531][T24717] macvtap1: entered allmulticast mode [ 313.855544][T24717] dummy0: entered promiscuous mode [ 313.861040][T24717] dummy0: entered allmulticast mode [ 313.870011][T24717] team0: Device macvtap1 failed to register rx_handler [ 313.885564][T24717] dummy0: left allmulticast mode [ 313.912939][T24717] dummy0: left promiscuous mode [ 314.050058][T24733] lo speed is unknown, defaulting to 1000 [ 314.110584][T24734] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=24734 comm=syz.0.4527 [ 314.471108][T24771] FAULT_INJECTION: forcing a failure. [ 314.471108][T24771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.484877][T24771] CPU: 1 UID: 0 PID: 24771 Comm: syz.0.4531 Not tainted syzkaller #0 PREEMPT(voluntary) [ 314.484959][T24771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.484974][T24771] Call Trace: [ 314.484981][T24771] [ 314.484991][T24771] __dump_stack+0x1d/0x30 [ 314.485020][T24771] dump_stack_lvl+0x95/0xd0 [ 314.485101][T24771] dump_stack+0x15/0x1b [ 314.485124][T24771] should_fail_ex+0x265/0x280 [ 314.485151][T24771] should_fail+0xb/0x20 [ 314.485183][T24771] should_fail_usercopy+0x1a/0x20 [ 314.485226][T24771] _copy_to_user+0x20/0xa0 [ 314.485258][T24771] rng_dev_read+0x3ef/0x740 [ 314.485346][T24771] ? __pfx_rng_dev_read+0x10/0x10 [ 314.485372][T24771] vfs_readv+0x3fb/0x690 [ 314.485407][T24771] ? finish_task_switch+0x7a/0x2a0 [ 314.485444][T24771] __x64_sys_preadv+0xfd/0x1c0 [ 314.485554][T24771] x64_sys_call+0x2805/0x3000 [ 314.485582][T24771] do_syscall_64+0xca/0x2b0 [ 314.485678][T24771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.485702][T24771] RIP: 0033:0x7f372076f749 [ 314.485786][T24771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.485803][T24771] RSP: 002b:00007f371f1d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 314.485825][T24771] RAX: ffffffffffffffda RBX: 00007f37209c5fa0 RCX: 00007f372076f749 [ 314.485840][T24771] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 314.485878][T24771] RBP: 00007f371f1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 314.485952][T24771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.485963][T24771] R13: 00007f37209c6038 R14: 00007f37209c5fa0 R15: 00007ffde24c3cc8 [ 314.485982][T24771] [ 314.489690][T24773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4532'. [ 314.721271][T24768] SELinux: failed to load policy [ 315.083583][T24784] siw: device registration error -23 [ 315.103578][T24773] bond10: entered promiscuous mode [ 315.109164][T24773] 8021q: adding VLAN 0 to HW filter on device bond10 [ 315.150608][T24786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4535'. [ 315.233443][T24784] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 315.872335][T24825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4538'. [ 316.001698][T24830] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4540'. [ 316.060635][T24830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4540'. [ 316.138326][T24832] siw: device registration error -23 [ 316.158298][T24832] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 316.266244][T24845] siw: device registration error -23 [ 316.426578][T24847] bridge5: entered promiscuous mode [ 316.437957][T24847] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 316.549680][T24854] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 316.577864][T24865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4550'. [ 316.644848][T24869] 9p: Bad value for 'source' [ 316.692364][T24877] syz.4.4554 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.807085][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4561'. [ 316.832855][T24896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4557'. [ 316.885566][T24900] SELinux: policydb version -245 does not match my version range 15-35 [ 316.896184][T24900] SELinux: failed to load policy [ 317.277841][T24955] macvtap1: entered promiscuous mode [ 317.283398][T24955] macvtap1: entered allmulticast mode [ 317.289109][T24955] dummy0: entered promiscuous mode [ 317.294365][T24955] dummy0: entered allmulticast mode [ 317.300870][T24955] team0: Device macvtap1 failed to register rx_handler [ 317.307922][T24955] dummy0: left allmulticast mode [ 317.313034][T24955] dummy0: left promiscuous mode [ 317.798039][T25011] bond5: entered promiscuous mode [ 317.804225][T25011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.832031][T25045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.839562][T25045] IPv6: NLM_F_CREATE should be set when creating new route [ 318.222273][T25062] FAULT_INJECTION: forcing a failure. [ 318.222273][T25062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.235504][T25062] CPU: 0 UID: 0 PID: 25062 Comm: syz.3.4616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 318.235610][T25062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.235621][T25062] Call Trace: [ 318.235630][T25062] [ 318.235639][T25062] __dump_stack+0x1d/0x30 [ 318.235668][T25062] dump_stack_lvl+0x95/0xd0 [ 318.235687][T25062] dump_stack+0x15/0x1b [ 318.235748][T25062] should_fail_ex+0x265/0x280 [ 318.235776][T25062] should_fail+0xb/0x20 [ 318.235796][T25062] should_fail_usercopy+0x1a/0x20 [ 318.235856][T25062] _copy_from_user+0x1c/0xb0 [ 318.235887][T25062] memdup_user+0x5e/0xd0 [ 318.235962][T25062] strndup_user+0x68/0xb0 [ 318.235984][T25062] perf_uprobe_init+0x48/0x150 [ 318.236007][T25062] perf_uprobe_event_init+0xc4/0x140 [ 318.236051][T25062] perf_try_init_event+0xd9/0x540 [ 318.236095][T25062] ? perf_event_alloc+0xb2f/0x18d0 [ 318.236129][T25062] perf_event_alloc+0xb3a/0x18d0 [ 318.236166][T25062] ? __fget_files+0x184/0x1c0 [ 318.236227][T25062] __se_sys_perf_event_open+0x490/0x1210 [ 318.236259][T25062] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 318.236319][T25062] __x64_sys_perf_event_open+0x67/0x80 [ 318.236425][T25062] x64_sys_call+0x78c/0x3000 [ 318.236454][T25062] do_syscall_64+0xca/0x2b0 [ 318.236500][T25062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.236525][T25062] RIP: 0033:0x7f647e8af749 [ 318.236547][T25062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.236563][T25062] RSP: 002b:00007f647d317038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 318.236671][T25062] RAX: ffffffffffffffda RBX: 00007f647eb05fa0 RCX: 00007f647e8af749 [ 318.236683][T25062] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: 0000200000000140 [ 318.236695][T25062] RBP: 00007f647d317090 R08: 0000000000000002 R09: 0000000000000000 [ 318.236707][T25062] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 318.236720][T25062] R13: 00007f647eb06038 R14: 00007f647eb05fa0 R15: 00007fff99039248 [ 318.236742][T25062] [ 318.480960][T25065] macvlan5: entered promiscuous mode [ 318.487022][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 318.487037][ T29] audit: type=1400 audit(1766318598.234:16388): avc: denied { setopt } for pid=25064 comm="syz.2.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.513105][ T29] audit: type=1400 audit(1766318598.234:16389): avc: denied { write } for pid=25064 comm="syz.2.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.539711][ T29] audit: type=1400 audit(1766318598.284:16390): avc: denied { read } for pid=25064 comm="syz.2.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.566269][T25069] __nla_validate_parse: 15 callbacks suppressed [ 318.566289][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4618'. [ 318.600615][T25050] netlink: 'syz.0.4611': attribute type 3 has an invalid length. [ 318.608617][T25050] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.4611'. [ 318.620249][T25072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 318.625444][T25068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4618'. [ 318.639616][T25068] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.647093][T25068] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.669149][ T29] audit: type=1400 audit(1766318598.374:16391): avc: denied { ioctl } for pid=25064 comm="syz.2.4618" path="socket:[59744]" dev="sockfs" ino=59744 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 318.727082][T25070] bridge3: entered promiscuous mode [ 318.737586][T25070] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 318.762334][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4623'. [ 318.772325][ T29] audit: type=1326 audit(1766318598.454:16392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.796209][ T29] audit: type=1326 audit(1766318598.454:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.819921][ T29] audit: type=1326 audit(1766318598.454:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.843511][ T29] audit: type=1326 audit(1766318598.454:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.867138][ T29] audit: type=1326 audit(1766318598.454:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.891056][ T29] audit: type=1326 audit(1766318598.454:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25075 comm="syz.3.4621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 318.972644][T25094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4628'. [ 319.088706][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4635'. [ 319.111228][T25115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4629'. [ 319.144835][T25113] bond2: entered promiscuous mode [ 319.150304][T25113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.223805][T25150] lo speed is unknown, defaulting to 1000 [ 319.583534][T25174] bridge3: entered promiscuous mode [ 319.601369][T25174] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 320.013109][T25185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4639'. [ 320.045921][T25189] siw: device registration error -23 [ 320.051554][T25191] siw: device registration error -23 [ 320.132480][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4644'. [ 320.155917][T25203] bond6: entered promiscuous mode [ 320.177849][T25203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.430759][T25248] ucma_write: process 640 (syz.1.4647) changed security contexts after opening file descriptor, this is not allowed. [ 320.458268][T25247] lo speed is unknown, defaulting to 1000 [ 320.577716][T25272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.612107][T25272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.713823][T25272] hub 6-0:1.0: USB hub found [ 320.728972][T25272] hub 6-0:1.0: 8 ports detected [ 321.017748][T25249] netlink: 'syz.0.4644': attribute type 3 has an invalid length. [ 321.069239][T25249] bridge4: entered promiscuous mode [ 321.089233][T25249] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 321.228613][T25314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.255315][T25314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.316242][T25314] hub 6-0:1.0: USB hub found [ 321.338782][T25314] hub 6-0:1.0: 8 ports detected [ 321.365706][T25335] siw: device registration error -23 [ 321.556063][T25348] lo speed is unknown, defaulting to 1000 [ 321.666940][T25383] netlink: 'syz.2.4677': attribute type 5 has an invalid length. [ 321.721383][T25386] bond3: entered promiscuous mode [ 321.734600][T25386] 8021q: adding VLAN 0 to HW filter on device bond3 [ 321.964788][T25429] block device autoloading is deprecated and will be removed. [ 322.466578][T25426] netlink: 'syz.1.4678': attribute type 3 has an invalid length. [ 322.558381][T25426] bridge4: entered promiscuous mode [ 322.567441][T25426] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 322.760099][T25490] xt_hashlimit: max too large, truncated to 1048576 [ 322.948477][T25494] bond4: entered promiscuous mode [ 322.963093][T25494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.565480][T25553] $Hÿ: renamed from bond0 (while UP) [ 323.574452][T25553] $Hÿ: entered promiscuous mode [ 323.579626][T25553] bond_slave_0: entered promiscuous mode [ 323.585738][T25553] bond_slave_1: entered promiscuous mode [ 323.622175][T25564] __nla_validate_parse: 20 callbacks suppressed [ 323.622191][T25564] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4711'. [ 323.633804][T25538] bridge5: entered promiscuous mode [ 323.638329][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4711'. [ 323.668425][T25538] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 323.735874][T25572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4712'. [ 323.755094][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 323.755110][ T29] audit: type=1326 audit(1766318603.434:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25569 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 323.801499][T25572] bond0: entered promiscuous mode [ 323.818846][ T29] audit: type=1326 audit(1766318603.534:16580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25569 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 323.820700][T25572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.891463][ T29] audit: type=1326 audit(1766318603.604:16581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25569 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 323.916066][ T29] audit: type=1326 audit(1766318603.604:16582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25569 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 323.939736][ T29] audit: type=1326 audit(1766318603.604:16583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25569 comm="syz.3.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647e8af749 code=0x7ffc0000 [ 323.963962][ T29] audit: type=1326 audit(1766318603.614:16584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.2.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 323.987962][ T29] audit: type=1326 audit(1766318603.614:16585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.2.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 324.012587][ T29] audit: type=1326 audit(1766318603.614:16586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.2.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 324.036423][ T29] audit: type=1326 audit(1766318603.614:16587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.2.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 324.060928][ T29] audit: type=1326 audit(1766318603.614:16588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25573 comm="syz.2.4715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3d3ff749 code=0x7ffc0000 [ 324.179225][T25621] siw: device registration error -23 [ 324.234586][T25625] SELinux: failed to load policy [ 324.327067][T25630] netlink: 'syz.4.4720': attribute type 5 has an invalid length. [ 324.364147][T25633] FAULT_INJECTION: forcing a failure. [ 324.364147][T25633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.378003][T25633] CPU: 1 UID: 0 PID: 25633 Comm: syz.1.4721 Not tainted syzkaller #0 PREEMPT(voluntary) [ 324.378051][T25633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.378066][T25633] Call Trace: [ 324.378074][T25633] [ 324.378120][T25633] __dump_stack+0x1d/0x30 [ 324.378176][T25633] dump_stack_lvl+0x95/0xd0 [ 324.378200][T25633] dump_stack+0x15/0x1b [ 324.378223][T25633] should_fail_ex+0x265/0x280 [ 324.378314][T25633] should_fail+0xb/0x20 [ 324.378348][T25633] should_fail_usercopy+0x1a/0x20 [ 324.378376][T25633] _copy_from_user+0x1c/0xb0 [ 324.378408][T25633] __sys_bpf+0x183/0x7c0 [ 324.378600][T25633] __x64_sys_bpf+0x41/0x50 [ 324.378636][T25633] x64_sys_call+0x28e1/0x3000 [ 324.378694][T25633] do_syscall_64+0xca/0x2b0 [ 324.378734][T25633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.378760][T25633] RIP: 0033:0x7f70408ef749 [ 324.378779][T25633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.378836][T25633] RSP: 002b:00007f703f357038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.378861][T25633] RAX: ffffffffffffffda RBX: 00007f7040b45fa0 RCX: 00007f70408ef749 [ 324.378886][T25633] RDX: 0000000000000010 RSI: 0000200000000580 RDI: 000000000000000f [ 324.378966][T25633] RBP: 00007f703f357090 R08: 0000000000000000 R09: 0000000000000000 [ 324.378981][T25633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.378995][T25633] R13: 00007f7040b46038 R14: 00007f7040b45fa0 R15: 00007ffd3a4a8d58 [ 324.379018][T25633] [ 324.758607][T25644] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4724'. [ 324.773590][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4724'. [ 324.814259][T25651] netlink: 'syz.0.4712': attribute type 3 has an invalid length. [ 324.822132][T25651] netlink: 4184 bytes leftover after parsing attributes in process `syz.0.4712'. [ 324.996792][T25669] rdma_op ffff88810a493180 conn xmit_rdma 0000000000000000 [ 325.147695][T25665] bridge5: entered promiscuous mode [ 325.153920][T25665] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 325.163119][T25674] netlink: 'syz.4.4731': attribute type 12 has an invalid length. [ 325.171212][T25674] netlink: 'syz.4.4731': attribute type 29 has an invalid length. [ 325.179033][T25674] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4731'. [ 325.188233][T25674] netlink: 'syz.4.4731': attribute type 1 has an invalid length. [ 325.196020][T25674] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4731'. [ 325.232019][T25682] rdma_rxe: rxe_newlink: failed to add bond0 [ 325.282424][T25693] macvtap1: entered promiscuous mode [ 325.287867][T25693] macvtap1: entered allmulticast mode [ 325.294403][T25693] dummy0: entered promiscuous mode [ 325.306989][T25693] dummy0: entered allmulticast mode [ 325.315127][T25693] team0: Device macvtap1 failed to register rx_handler [ 325.322954][T25693] dummy0: left allmulticast mode [ 325.333216][T25693] dummy0: left promiscuous mode [ 325.348411][T25697] macvtap1: entered promiscuous mode [ 325.350013][T25699] siw: device registration error -23 [ 325.353852][T25697] macvtap1: entered allmulticast mode [ 325.366902][T25697] dummy0: entered promiscuous mode [ 325.372424][T25697] dummy0: entered allmulticast mode [ 325.379079][T25697] team0: Device macvtap1 failed to register rx_handler [ 325.386509][T25697] dummy0: left allmulticast mode [ 325.392795][T25697] dummy0: left promiscuous mode [ 325.417370][T25699] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 325.460211][T25711] netlink: 'syz.1.4740': attribute type 5 has an invalid length. [ 325.606000][T25717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4739'. [ 325.616213][T25721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4743'. [ 325.629647][ T7251] ================================================================== [ 325.638028][ T7251] BUG: KCSAN: data-race in copy_process / free_pid [ 325.644718][ T7251] [ 325.647044][ T7251] read-write to 0xffffffff8685ffd8 of 4 bytes by task 25734 on cpu 0: [ 325.655277][ T7251] free_pid+0xb9/0x1d0 [ 325.659388][ T7251] free_pids+0x7a/0xb0 [ 325.663464][ T7251] release_task+0x9a7/0xb60 [ 325.667978][ T7251] do_exit+0xd4d/0x1590 [ 325.672138][ T7251] call_usermodehelper_exec_async+0x247/0x250 [ 325.678223][ T7251] ret_from_fork+0x149/0x290 [ 325.682821][ T7251] ret_from_fork_asm+0x1a/0x30 [ 325.687683][ T7251] [ 325.690011][ T7251] read to 0xffffffff8685ffd8 of 4 bytes by task 7251 on cpu 1: [ 325.697638][ T7251] copy_process+0x16d4/0x1ef0 [ 325.702411][ T7251] kernel_clone+0x16c/0x5c0 [ 325.707003][ T7251] user_mode_thread+0x7d/0xb0 [ 325.711683][ T7251] call_usermodehelper_exec_work+0x41/0x160 [ 325.717580][ T7251] process_scheduled_works+0x4ce/0x9d0 [ 325.723042][ T7251] worker_thread+0x582/0x770 [ 325.727635][ T7251] kthread+0x489/0x510 [ 325.731715][ T7251] ret_from_fork+0x149/0x290 [ 325.736308][ T7251] ret_from_fork_asm+0x1a/0x30 [ 325.741080][ T7251] [ 325.743405][ T7251] value changed: 0x8000019a -> 0x80000199 [ 325.749116][ T7251] [ 325.751442][ T7251] Reported by Kernel Concurrency Sanitizer on: [ 325.757592][ T7251] CPU: 1 UID: 0 PID: 7251 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(voluntary) [ 325.767566][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 325.777711][ T7251] Workqueue: events_unbound call_usermodehelper_exec_work [ 325.784918][ T7251] ================================================================== [ 325.807403][T25721] bond10: entered promiscuous mode [ 325.812890][T25721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.054737][T25759] netlink: 'syz.3.4743': attribute type 3 has an invalid length. [ 326.076561][T25759] bridge7: entered promiscuous mode [ 326.082689][T25759] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 331.170459][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!