last executing test programs: 8m44.408165314s ago: executing program 4 (id=1522): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8m40.54373834s ago: executing program 4 (id=1550): openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a", 0x5c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffea5, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 8m40.460350752s ago: executing program 4 (id=1551): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x1fe, 0x10, 0x1, 0x80400250}, &(0x7f00000003c0), &(0x7f0000000380)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) 8m40.308917335s ago: executing program 4 (id=1552): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="3734470000000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x1000, '\x00', 0x0, r4, 0x1, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000400000004000000ffffffff00000000", @ANYRES32=r5], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000f00000850000001b000000b700000000fa001595e405badf4fa04c0d81bf5d75c7729ca3f4d68ca56c8742be683ba650f47a4ec21c3b7b57e7aefee4f4df04cb5227048a3b812db5f994f864f0f119a6bc5be17784520128698d2dd4f022515ef5dbe772a9124294fd0fbf58bc8de080b39699080a30c302e6cb893c79761e11546f6c72cfe43898e008c46bb10648f7339eb9723a6eff562f08fb0aa39dfb370467432960357781486d0c8c8ca69658814f725ef96fced779b37397ef6d1239e38bddeeb5fb7c90f210df5360b4accb74caf0b578ee9d174713b3b63414f37f5aa4f5bd875d04d29e2180"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r9], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m39.926836802s ago: executing program 4 (id=1560): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x5031, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r3 = creat(&(0x7f0000000340)='./file0\x00', 0xae) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r3, &(0x7f0000000600)="001a0000000000", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], 0x0, 0x0, 0x2, 0x0, r4}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x86) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC=r5], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ustat(0x3, 0x0) 8m35.075084668s ago: executing program 4 (id=1617): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x6) r4 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1, 0x7, 0xe3, 0x1, 0xbb, 0x1}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x5, 0x7f, 0x4924924924925e5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 8m34.924144141s ago: executing program 32 (id=1617): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x6) r4 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1, 0x7, 0xe3, 0x1, 0xbb, 0x1}, 0x1c) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x5, 0x7f, 0x4924924924925e5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 28.95062091s ago: executing program 3 (id=7197): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = io_uring_setup(0xec4, &(0x7f0000000000)={0x0, 0xa844, 0x800, 0x1, 0x6b}) r2 = syz_io_uring_setup(0x7075, &(0x7f0000000080)={0x0, 0x78e4, 0x80, 0x1, 0x157, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x4d5) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = dup3(r3, r2, 0x80000) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x3, 0x10, '\x00', 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000240)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr/sockcreate\x00') (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000440)={0x1, 0x200, 0x9, 0x4, 0x0, 0xfffffffa}) (async) ioctl$SG_BLKTRACESTART(r6, 0x1274, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x14) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_open_dev$sg(&(0x7f0000000480), 0x3, 0x111080) (rerun: 64) fstatfs(r9, &(0x7f00000004c0)=""/235) (async) ioctl$TIOCGETD(r6, 0x5424, &(0x7f00000005c0)) syz_clone(0x40000, &(0x7f0000000600)="e464235fbbedcb849192059e6faa7433596b5496cd2f93c2810696d423fd9c635b9920ff2fdc9c56d171a448778a32e9d1f87e1e38984b04bc5412", 0x3b, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="18c683c6ef836fdc5354d2237f983900a2f66afa59fb8de0299fe32922f1e7c7f0268afe88910d292abb60fb1b583f3f0789b0a781595a46283a76496a56b75b329fc43a63f0d38bb5530da1c9eafa09355d0d67b1e1b8bf9f5ef90bdbef325ca7f66fb20db9dae676185a80e716b6d4e97df29a878ea3f2795db3d7ccfde4dcb0214f4fce1f079531bd4144a44a0fd6025809900f9fdf83c7c9f0f9abe13814e55899a0cfc491f483034b0d2e9cb7d6aa9cd06e5a6bc49a10ad2f1e4e276893de2f54c3149ba34afa496f5717b8bd5c0c6deba7d41c3959fd4476c026210084b909cedfdfca20e675559d34") (async) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f00000007c0)) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) (async, rerun: 64) getgid() r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r10, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x40440) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'bond0\x00', 0x0}) sendmmsg(r7, &(0x7f0000002100)=[{{&(0x7f00000009c0)=@ll={0x11, 0x0, r11, 0x1, 0x80, 0x6, @remote}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)="155ca63112d24c4eb95723dc05cebd9d2f27d21af2fa51d8fc1b6babeb05ad81eed6a519641d1db90b293b1ec16ac862283114ad70e9ca028459f69346540140cf783990450031e882fdc3c03e3116dccf6541c459e2a5ae", 0x58}, {&(0x7f0000000ac0)="1d8069a66aac7bd4161b2b3ded07992bfe1ce414cda8920f22c00e4fb281c6bf008a181cbe043cca153f6bbae43f1b631ba644120704d97af2da2d3926765efc85b62f84c188002b4b6e09a7b0b75c24fe38933b501ef0c8a3a2173add5093eb5560a19ef0066e9737f82396f496d39d8f1e355e6cb3eeef3f3cdf26964deecdaeddaacb1c572c3d259c3a38887a5d4e01b81063defdd0c45da4154f6a2645dd81d0ae220c515a2385e57a49b78c9d9203e461afd66fcb3190ae056c", 0xbc}], 0x2, &(0x7f0000000bc0)=[{0x98, 0x104, 0x9, "3b414a20f804b09c682c4a52cbfdada7726ead2d58eaad03e7b16474446045f9050a899ac7154d7a97916130dd864fe32d156e8c544697d46e6d50650337f91ff3aea6ba49436eb767efc0be2369d7e08406d3120a41f3284393a43beea917c92c8eed2f7ca1ac3456284d39001f2d40513c2263d53c12955eafd02acca654f9a07f"}], 0x98}}, {{&(0x7f0000000c80)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x7, 0x0, "14e2f3ad871601e0073d58afae06fdd4cf9e5a2abd398f164feab611b2fa5b8ad5c4065e6d25cf25410f1a89961aa6fe7d719d286a557452069bf69fc2a9dd", 0xd}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)="36bc5e85a77e600ec4f9005a62ff7d1eecb91b6c8e11798160cad4e24468b45f7d3f210cf344b58f2bb33a4b3b5d611b17138c3b234f4f90b0dd4c4654e254a886ea778d83b761b6796427e377239da32c0b7f8dd551eb1a4587a3d5b5ee59bd1471ae94c8", 0x65}, {&(0x7f0000000d80)="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", 0xfe}], 0x2, &(0x7f0000000ec0)=[{0x50, 0x101, 0x2, "ac4270f6aaabcf18cae9494666f8803a2db1fb5c923c905988d6edcc83eb8845a2001ddd88b0107aebf86c6bbe17da8fd68a2d5e5c82ff771c4f11f9"}, {0xa8, 0x108, 0x8000, "6c01ab66968cc552e3040436947fdbb58be0ce25c9d2f2b9cca76127907012660345fb5b5d52958359347067290551eda853a5e5a717e92ef6b0ba00e3f223664969f6991035b0059c50f2fea6f145e08bffcc4463e5d3e5892c57c4d268cb47f7e906d8ce4aca9f431c1340e5fc6dea5c3e12c7eedae4649b1d6dba0d22dfb86b734060aa5adc033b6f42ee113533092d87c3b3cdd2e7"}, {0x1010, 0x0, 0xffff, "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"}, {0x58, 0x110, 0x81, "f2b08f3fa64da32b68dafd0cf05aaff1cbb2ec657b45f89f51620721589eaca055917ed0f26d9a9a084f6329623e91de0099f9884110117993096d2cef7612a6b5e4c6"}, {0xc8, 0xff, 0xef1, "b3371b106a7923d59ff8c35b600e870b278605edb5bc64bdb5a3225357b9652dfb65af6ebbe64e6c115aa1577373c4aa20de19ec47ec54afce71733aeb12bcad378be571137b27691ee67b0904f7ec864f239912b7fdde19b3b50a221ebe84a6990272843376f38b378136d88b77c0578a177183db0ca2d70b9860aba512feb2ae1247e8db90c570ba337519fc7d2a9358ff418d330a0c1be8b23dce9325e3766faf7c268b180610a84d343cd45fe055c16b67b8a5616943"}], 0x1228}}], 0x2, 0x11) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000021c0), r8) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000002200)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f0000002380)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x64, r12, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x64}}, 0x10) 28.93042615s ago: executing program 3 (id=7198): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000000000000000000001a98c02d00000000000000"], 0x50) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) dup(r1) r3 = open(0x0, 0x80ff, 0x88) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x5c, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_subtree(r3, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000a39000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x21, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xbc9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x2) creat(0x0, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0xfff, 0x1, 0x2, 0x7}, {0x6, 0x80, 0x25, 0x2}]}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, r6) r8 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r7) keyctl$read(0xb, r8, &(0x7f0000000380)=""/57, 0x39) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 28.677151375s ago: executing program 3 (id=7205): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 28.570211887s ago: executing program 3 (id=7208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x80000000000000, &(0x7f0000000080)=0x1) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 28.523137468s ago: executing program 3 (id=7209): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) close_range(r1, r2, 0x2000000) 23.890863019s ago: executing program 3 (id=7266): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) 23.86924505s ago: executing program 33 (id=7266): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) 3.458287242s ago: executing program 1 (id=7559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="1628429d354368356b454c1d7f1056177ccb32adb963775e45f58986366f7f72112fd8a74c1181c9440bb140050c6c15dae486ae391bb360fa92f1c5f3372ef8e31c99e0446de5eb11b5fd8e42d6650a5d3a08927c1e27f3e427dab9523fa14645a8221de19770a3316cb13950495d20edf63fd109", 0x75}], 0x1, 0xb, 0xfffffffe, 0xa0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100f394d864942fadf93554850000c1e971860000010000e3c3d179000051a8800c0001800800010003000000"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, 0x0, 0x4000010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000a8ca8e9d7326050300000000002020207b1af8ff00000000bfa1000000810d2000000007010000f8ffffffb724000008000000b50a000000000000850000000600000095000000000000000000"], &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='nmi_handler\x00', r6, 0x0, 0x1}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYRES32=r8, @ANYRES8=r3, @ANYRES32=r7, @ANYRESHEX=0x0, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRES8=r9, @ANYRESHEX=r1, @ANYRES16=r1], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c011) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, 0x0, 0x20004001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRESDEC=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x3, 0x9) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000100), 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendfile(r11, r12, 0x0, 0x7fffffffffffffff) 2.733036226s ago: executing program 5 (id=7588): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04471563c7f818c9b916fb2800"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x31, 0x0, "e29a54b8cc1e517db09929774be74f2f6d3dae32469fd6afef74d24d10442c14ea9df6d7c857bd3c85e3049cd7d9e51731dc229fd21c8966ccce7d3a0d8ccf463175433e42cbae873cbbd09358df61de"}, 0xd8) syz_usb_connect(0x2, 0xffffffffffffff2c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r2 = socket(0x2b, 0x1, 0x1) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 2.53692975s ago: executing program 1 (id=7591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 2.513587781s ago: executing program 1 (id=7593): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x1000000000800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000c6d225a6ff2bbd700000000000000000007b356b8c131a1d2a3ea6b585d80a623236b634f65ec083b836049de1ac59b9f5b198cb53d655b075dd7991", @ANYRES32=0x0, @ANYBLOB="00000000223803001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800460000240000000000919078000000000000000044045e0000014e20000c907801000000"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffc}, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x66e8c0, 0x42) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 2.144602998s ago: executing program 5 (id=7605): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = eventfd2(0x76, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x4000, 0x8, 0x397d, 0x80000000, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x23, 0x1e, [@dev={0xac, 0x14, 0x14, 0x1b}, @broadcast, @local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x24}, @loopback, @broadcast]}, @generic={0x94, 0xe, "6bc07363ebb212091da17df0"}, @generic={0x83, 0x5, "ddd986"}, @timestamp_addr={0x44, 0xc, 0x95, 0x1, 0x3, [{@remote, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xad, 0x3, 0x2, [{@multicast1, 0x3}, {@loopback}, {@local, 0x4}, {@remote, 0x800}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x7e3af3e0}]}]}}}}}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x8c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x10) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 2.02682971s ago: executing program 5 (id=7610): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000102030000000000000000000a000006040001800600074000020000d557113b58368a3fdb800bddf498281bce7d1c0ebc49ff868e144c59cbab8c0af8d30000000000000000843c8f308e8e1777f1cb3b512923d504280ca76e804ce816c24b8722cbd42d56e746fcebd1d4f6dbdd1b4ccbd9d862c7a6a5d3935b85ecb70826fb924e93eb727911ab3102f7696fda16a7c49c07ab96fc3fcbd724ad807ef60a8d3ab01843e30af673e4a565e9896b8c409ad7d323f2734d79a2a98002cb2c11945a7bdf8f2fd826b22d955809f0d7f6b4060501860274d2"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2e, "9668561e47598c975004ee9a5cd50881faa7b0ac27cb16f046fb8f2a008c6c972f7d271c112c9004917ecf2b9922"}, &(0x7f0000000040)=0x36) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000fddbdf897393cf3925030000002400068005000200000000000600010002000000050002000300000005000200050000003800018008000300ac1e010105000200020000000600860a060005004e22000014000400fe807f7304ae705d742cba75cd0fada374f85d6c0e7700"/129], 0x70}, 0x1, 0x0, 0x0, 0x50000}, 0x4000090) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xa7}, &(0x7f00000000c0)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000280)=@abs={0x1, 0x30, 0x4e5c}, 0x6e, 0x0}}], 0x2, 0x40008004) 1.870987523s ago: executing program 2 (id=7613): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x87) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 1.666295487s ago: executing program 1 (id=7614): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000180)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141000, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) 1.434193502s ago: executing program 6 (id=7615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.410678822s ago: executing program 6 (id=7616): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04471563c7f818c9b916fb2800"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x31, 0x0, "e29a54b8cc1e517db09929774be74f2f6d3dae32469fd6afef74d24d10442c14ea9df6d7c857bd3c85e3049cd7d9e51731dc229fd21c8966ccce7d3a0d8ccf463175433e42cbae873cbbd09358df61de"}, 0xd8) syz_usb_connect(0x2, 0xffffffffffffff2c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r2 = socket(0x2b, 0x1, 0x1) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 1.166541137s ago: executing program 5 (id=7618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000140)=0x28) ptrace$poke(0x15, 0x0, 0x0, 0xfffffffffffffffe) 1.125268208s ago: executing program 0 (id=7619): r0 = memfd_secret(0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x70, 0x8181) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.035226599s ago: executing program 2 (id=7620): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() r2 = eventfd2(0x0, 0x0) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r2, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @enum={0xf, 0x6, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0xd, 0x4}, {0xe, 0x4}, {0x7, 0xffffffff}, {0x5, 0x314}, {0xd, 0x45dbf5de}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000003c0), 0x7b, 0x0, 0x1, 0x7f}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/173, 0xad, 0x0, &(0x7f0000000540)=""/14, 0xe}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) unshare(0x62000000) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41080000000029c0184ecbbf75f62c01ce6407e71fc9d50f484d8c9597aaed77affcc19041e9c993ba37d74c7ad7d3e44cea3e78906b6dafe01d4100d06a8cd5d9b315742b5bcf8c6b2d27492eaacc8854c2b9860f3530c3e14d03526e819b68ed9799dede87ca1b0a667a8592dafd467b86285fd2869f7e6957777972b7b2c344e39fa7305a51ed701df8677c5f5218d0a7a7887db0d2b2a0ce1a9575023482452ac53abd5c96f46458359807c712d045685437bdded96bd4677feb54fc3a6a8afadbacd525242a8ee9a8eab7ad3655c8621cf87835aea5e0f5401aeacabcf8406195c30d1ac92e23df3ddb"], 0x1, 0x11a5, &(0x7f0000002440)="$eJzs209rI2UcB/Bfa7Wa2lj/VduLD3rRy2B78CBeirQgDShtI7SCMKWphsQkZHJIxEPPnnwd4tGboL6BvgtvRRC99OQs2+y2290u7C60OfTzueQL3yfw/BgYeIaZk09++q51WGSH+SCmp6ZiuheRTlOkmI77juKDPz7+78ft3b3NtVptfSuljbWdlY9SStV3fv/qh1/e/XMw9+Wv1d9m43jh65N/Vv86XjxeOvl/59tmkZpF6nQHKU/73e4g32830kGzaGUpfdFu5EUjNTtFo3+pP2x3e71RyjsH85Vev1EUKe+MUqsxSoNuGvRHKf8mb3ZSlmVpvhJcpfqE6+o/n5ZlGVGWz8cLUZZl+VJUYi5ejvmoxiuxEK/Ga/F6vBFvxmK8FW/H0tmqa94+AAAAAAAAAAAAAAAAAAAA3DK+/wcAAAAAAAAAAAAAAAAAAIDJ297d21yr1da3Unox4u+jYX1YH/+O+43PausfpjMLF//6dzisP3fer4z7dLmfjcq9fvXKfibef2/c3+0+/bz2UL8cB9c/PgAAANwKWTp35fk+yx7Xj9MDzwceOd8vz9zYGDyjYvR9K2+3G31BEITzMOk7Ezfh4qJPeicAAAAAAAAAAAA8jZt4nXDSMwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCHHTgWAAAAABDmb51GxwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FUAAAD//7AMeDg=") socket$kcm(0x29, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.02869899s ago: executing program 0 (id=7621): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 954.796561ms ago: executing program 5 (id=7622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 919.956392ms ago: executing program 0 (id=7623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 844.943273ms ago: executing program 5 (id=7624): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x1000000000800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000c6d225a6ff2bbd700000000000000000007b356b8c131a1d2a3ea6b585d80a623236b634f65ec083b836049de1ac59b9f5b198cb53d655b075dd7991", @ANYRES32=0x0, @ANYBLOB="00000000223803001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800460000240000000000919078000000000000000044045e0000014e20000c907801000000"], 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffff7fffffc}, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x66e8c0, 0x42) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 743.262525ms ago: executing program 6 (id=7625): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000080)=0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000640)={0x2, 0xe93, 0x1, 'queue0\x00', 0x7}) capget(&(0x7f0000000800)={0x19980330, 0xffffffffffffffff}, &(0x7f00000008c0)={0x5, 0xffff0fc9, 0x1, 0x9, 0x3, 0x3}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000400)=""/245) write$cgroup_int(r0, 0x0, 0x2) 714.726346ms ago: executing program 0 (id=7626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 648.291367ms ago: executing program 6 (id=7627): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, 0x0, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) 635.330767ms ago: executing program 0 (id=7628): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 578.861548ms ago: executing program 0 (id=7629): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000102030000000000000000000a000006040001800600074000020000d557113b58368a3fdb800bddf498281bce7d1c0ebc49ff868e144c59cbab8c0af8d30000000000000000843c8f308e8e1777f1cb3b512923d504280ca76e804ce816c24b8722cbd42d56e746fcebd1d4f6dbdd1b4ccbd9d862c7a6a5d3935b85ecb70826fb924e93eb727911ab3102f7696fda16a7c49c07ab96fc3fcbd724ad807ef60a8d3ab01843e30af673e4a565e9896b8c409ad7d323f2734d79a2a98002cb2c11945a7bdf8f2fd826b22d955809f0d7f6b4060501860274d2"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2e, "9668561e47598c975004ee9a5cd50881faa7b0ac27cb16f046fb8f2a008c6c972f7d271c112c9004917ecf2b9922"}, &(0x7f0000000040)=0x36) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000fddbdf897393cf3925030000002400068005000200000000000600010002000000050002000300000005000200050000003800018008000300ac1e010105000200020000000600860a060005004e22000014000400fe807f7304ae705d742cba75cd0fada374f85d6c0e7700"/129], 0x70}, 0x1, 0x0, 0x0, 0x50000}, 0x4000090) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xa7}, &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000280)=@abs={0x1, 0x30, 0x4e5c}, 0x6e, 0x0}}], 0x2, 0x40008004) 533.972749ms ago: executing program 6 (id=7630): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000400)={0x7, 0x0, 0x1000001}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x1f6, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a820008100400086dd67c172f501b83aff00000000000000000000ffffac1414aafe8000000000000000000000000000aa040090780000ffbf6554d03a04008801fe880000000000000000000000000001200100000000000000000000000000003a000000000000000c2f000000000000c910fe8000000000000000000000000000aac204000000040730000000020affff7f05000002000000000000000000000000bc910000000000002a00000000000000000000000000000000b9d57918428e2233d2cca400adffd73f37046be142f92e38e5c78b0baf8c1162087e305fd718f76f49cce0c69a86334360d4d14b752ba68f3e31b97b0dd485dd27ec3aa4743b71fc466d88c0a9580500000000000000a61573e72dfb571af48286605c3ad28d33960414b3cd5c58c49d8b42251b775d5c43ee98c1ca5e4dbd9b7ccb685ccedfcdaaf991bde5cefd57ab11b14d1031f4dcf3e68cff29a2df73f71c951c28e0ae89efcd551498caeb9493f4f639ad68e65e1f95730a0569e3682b910728000000010881040008000000000000000104000000000000070000000000000003000000000000000740000000010e0f04000800000000000000018000000000000000000000000000000200000000000000080000000000000000fcffffffffffffff01000000000000"], 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x0, 0xfffffffd}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000140)=@isdn={0x22, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x281c, 0x600c, 0x0, 0x0, 0xfffffffffffffff0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000380)={'veth1_to_bridge\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r9, r9) setpgid(0x0, r9) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="920a050000000000480012800e0001006970366772657461700000003400028014000700ff02000000000000000000000000000114000600fe"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) 422.761712ms ago: executing program 6 (id=7631): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000102030000000000000000000a000006040001800600074000020000d557113b58368a3fdb800bddf498281bce7d1c0ebc49ff868e144c59cbab8c0af8d30000000000000000843c8f308e8e1777f1cb3b512923d504280ca76e804ce816c24b8722cbd42d56e746fcebd1d4f6dbdd1b4ccbd9d862c7a6a5d3935b85ecb70826fb924e93eb727911ab3102f7696fda16a7c49c07ab96fc3fcbd724ad807ef60a8d3ab01843e30af673e4a565e9896b8c409ad7d323f2734d79a2a98002cb2c11945a7bdf8f2fd826b22d955809f0d7f6b4060501860274d2"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x2e, "9668561e47598c975004ee9a5cd50881faa7b0ac27cb16f046fb8f2a008c6c972f7d271c112c9004917ecf2b9922"}, &(0x7f0000000040)=0x36) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000fddbdf897393cf3925030000002400068005000200000000000600010002000000050002000300000005000200050000003800018008000300ac1e010105000200020000000600860a060005004e22000014000400fe807f7304ae705d742cba75cd0fada374f85d6c0e7700"/129], 0x70}, 0x1, 0x0, 0x0, 0x50000}, 0x4000090) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r3, 0xa7}, &(0x7f00000000c0)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x4}, 0x18) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 147.146037ms ago: executing program 2 (id=7632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000a39000/0x2000)=nil) 127.097127ms ago: executing program 2 (id=7633): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000a39000/0x2000)=nil) 104.395067ms ago: executing program 2 (id=7634): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 84.087158ms ago: executing program 2 (id=7635): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, 0x0, 0x6) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x1, 0x7, 0xe3, 0x1, 0xbb, 0x1}, 0x1c) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000000c0)={0x9, 0x1, 0x5, 0x7f, 0x4924924924925e5}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21.600139ms ago: executing program 1 (id=7636): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x21}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}}, 0x8000) 0s ago: executing program 1 (id=7637): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04471563c7f818c9b916fb2800"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x31, 0x0, "e29a54b8cc1e517db09929774be74f2f6d3dae32469fd6afef74d24d10442c14ea9df6d7c857bd3c85e3049cd7d9e51731dc229fd21c8966ccce7d3a0d8ccf463175433e42cbae873cbbd09358df61de"}, 0xd8) syz_usb_connect(0x2, 0xffffffffffffff2c, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r2 = socket(0x2b, 0x1, 0x1) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x24000001) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) kernel console output (not intermixed with test programs): 00000000fd [ 641.919269][T14409] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 641.919285][T14409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 641.919304][T14409] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 641.919320][T14409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.919336][T14409] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 641.919360][T14409] [ 642.053066][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6364'. [ 642.053404][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6364'. [ 642.571862][T14428] lo speed is unknown, defaulting to 1000 [ 643.257850][T14456] loop0: detected capacity change from 0 to 164 [ 643.310918][T14456] rock: directory entry would overflow storage [ 643.317157][T14456] rock: sig=0x66, size=4, remaining=3 [ 643.351903][T14456] rock: directory entry would overflow storage [ 643.358128][T14456] rock: sig=0x66, size=4, remaining=3 [ 643.364645][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 643.364658][ T29] audit: type=1400 audit(1757116610.780:14206): avc: denied { mount } for pid=14455 comm="syz.0.6372" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 643.372617][ T5280] usb usb4-port1: attempt power cycle [ 643.416075][T14456] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 643.545795][ T29] audit: type=1400 audit(1757116610.980:14207): avc: denied { read } for pid=14455 comm="syz.0.6372" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 643.795518][T14462] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6373'. [ 643.850378][T14464] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 643.850378][T14464] program syz.3.6374 not setting count and/or reply_len properly [ 643.905929][T14414] Set syz1 is full, maxelem 65536 reached [ 644.006196][ T29] audit: type=1400 audit(1757116611.440:14208): avc: denied { unmount } for pid=12122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 644.052200][T14478] 9pnet_fd: Insufficient options for proto=fd [ 644.100601][T14480] sg_write: data in/out 768/3 bytes for SCSI command 0x0-- guessing data in; [ 644.100601][T14480] program syz.0.6380 not setting count and/or reply_len properly [ 644.230549][T14489] wireguard0: entered promiscuous mode [ 644.236055][T14489] wireguard0: entered allmulticast mode [ 644.355368][T14506] FAULT_INJECTION: forcing a failure. [ 644.355368][T14506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.368487][T14506] CPU: 1 UID: 0 PID: 14506 Comm: syz.3.6388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 644.368548][T14506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.368564][T14506] Call Trace: [ 644.368572][T14506] [ 644.368581][T14506] __dump_stack+0x1d/0x30 [ 644.368637][T14506] dump_stack_lvl+0xe8/0x140 [ 644.368660][T14506] dump_stack+0x15/0x1b [ 644.368677][T14506] should_fail_ex+0x265/0x280 [ 644.368702][T14506] should_fail+0xb/0x20 [ 644.368722][T14506] should_fail_usercopy+0x1a/0x20 [ 644.368749][T14506] _copy_from_user+0x1c/0xb0 [ 644.368822][T14506] ___sys_sendmsg+0xc1/0x1d0 [ 644.368865][T14506] __x64_sys_sendmsg+0xd4/0x160 [ 644.368897][T14506] x64_sys_call+0x191e/0x2ff0 [ 644.368998][T14506] do_syscall_64+0xd2/0x200 [ 644.369030][T14506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 644.369055][T14506] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 644.369122][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.369150][T14506] RIP: 0033:0x7f1bc0b0ebe9 [ 644.369169][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.369263][T14506] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.369283][T14506] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 644.369296][T14506] RDX: 0000000020010814 RSI: 00002000000002c0 RDI: 0000000000000005 [ 644.369308][T14506] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 644.369320][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.369333][T14506] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 644.369354][T14506] [ 644.557940][T14508] loop0: detected capacity change from 0 to 512 [ 644.565746][T14508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.572428][T14508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 644.620495][T14508] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 644.632131][T14512] __nla_validate_parse: 1 callbacks suppressed [ 644.632147][T14512] netlink: 340 bytes leftover after parsing attributes in process `syz.5.6390'. [ 644.632465][T14508] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 644.639560][T14512] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6390'. [ 644.648664][T14508] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 644.675039][ T29] audit: type=1326 audit(1757116612.110:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14513 comm="syz.3.6389" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bc0b0ebe9 code=0x0 [ 644.699578][T14508] EXT4-fs (loop0): 1 truncate cleaned up [ 644.705668][T14508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.732063][ T29] audit: type=1400 audit(1757116612.170:14210): avc: denied { execute } for pid=14517 comm="syz.2.6391" path="/63/cpu.stat" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 644.773625][T14508] IPv6: Can't replace route, no match found [ 644.875241][T14531] lo speed is unknown, defaulting to 1000 [ 645.213419][T12122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.269805][T14569] FAULT_INJECTION: forcing a failure. [ 645.269805][T14569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.283072][T14569] CPU: 1 UID: 0 PID: 14569 Comm: syz.0.6400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 645.283106][T14569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.283119][T14569] Call Trace: [ 645.283125][T14569] [ 645.283132][T14569] __dump_stack+0x1d/0x30 [ 645.283156][T14569] dump_stack_lvl+0xe8/0x140 [ 645.283178][T14569] dump_stack+0x15/0x1b [ 645.283255][T14569] should_fail_ex+0x265/0x280 [ 645.283280][T14569] should_fail+0xb/0x20 [ 645.283312][T14569] should_fail_usercopy+0x1a/0x20 [ 645.283472][T14569] _copy_from_iter+0xd2/0xe80 [ 645.283499][T14569] ? __build_skb_around+0x1a0/0x200 [ 645.283521][T14569] ? __alloc_skb+0x223/0x320 [ 645.283552][T14569] netlink_sendmsg+0x471/0x6b0 [ 645.283662][T14569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.283722][T14569] __sock_sendmsg+0x145/0x180 [ 645.283826][T14569] ____sys_sendmsg+0x31e/0x4e0 [ 645.283887][T14569] ___sys_sendmsg+0x17b/0x1d0 [ 645.283926][T14569] __x64_sys_sendmsg+0xd4/0x160 [ 645.283955][T14569] x64_sys_call+0x191e/0x2ff0 [ 645.283976][T14569] do_syscall_64+0xd2/0x200 [ 645.284033][T14569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.284084][T14569] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 645.284120][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.284161][T14569] RIP: 0033:0x7fcf7384ebe9 [ 645.284179][T14569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.284197][T14569] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.284215][T14569] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 645.284228][T14569] RDX: 0000000004008054 RSI: 0000200000000280 RDI: 0000000000000006 [ 645.284239][T14569] RBP: 00007fcf722af090 R08: 0000000000000000 R09: 0000000000000000 [ 645.284323][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.284338][T14569] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 645.284356][T14569] [ 645.371221][T14571] lo speed is unknown, defaulting to 1000 [ 645.630533][ T29] audit: type=1326 audit(1757116613.070:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.5.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 645.654190][ T29] audit: type=1326 audit(1757116613.070:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.5.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 645.657226][T14578] lo speed is unknown, defaulting to 1000 [ 645.690020][ T29] audit: type=1326 audit(1757116613.120:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.5.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 645.768414][ T29] audit: type=1326 audit(1757116613.180:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.5.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 645.792180][ T29] audit: type=1326 audit(1757116613.180:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.5.6404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 645.877126][T14606] lo speed is unknown, defaulting to 1000 [ 645.973670][ T5280] usb usb4-port1: unable to enumerate USB device [ 646.047848][T14624] bridge_slave_0: left allmulticast mode [ 646.053608][T14624] bridge_slave_0: left promiscuous mode [ 646.059360][T14624] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.087269][T14624] bridge_slave_1: left allmulticast mode [ 646.093063][T14624] bridge_slave_1: left promiscuous mode [ 646.098881][T14624] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.115710][T14624] bond0: (slave bond_slave_0): Releasing backup interface [ 646.132498][T14624] bond0: (slave bond_slave_1): Releasing backup interface [ 646.180000][T14624] team0: Port device team_slave_0 removed [ 646.192821][T14624] team0: Port device team_slave_1 removed [ 646.201068][T14624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.208483][T14624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.223468][T14624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.231046][T14624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.623700][T14670] netlink: 340 bytes leftover after parsing attributes in process `syz.5.6408'. [ 646.680653][T14670] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6408'. [ 646.828794][T14684] IPv6: Can't replace route, no match found [ 647.320043][T14686] lo speed is unknown, defaulting to 1000 [ 647.335326][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6409'. [ 647.487385][T14730] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6422'. [ 647.493914][T14725] lo speed is unknown, defaulting to 1000 [ 647.499439][T14730] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6422'. [ 647.552037][T14733] bridge_slave_0: left allmulticast mode [ 647.557846][T14733] bridge_slave_0: left promiscuous mode [ 647.563609][T14733] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.639938][T14733] bridge_slave_1: left allmulticast mode [ 647.645741][T14733] bridge_slave_1: left promiscuous mode [ 647.651450][T14733] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.674047][T14733] bond0: (slave bond_slave_0): Releasing backup interface [ 647.690139][T14733] bond0: (slave bond_slave_1): Releasing backup interface [ 647.710014][T14733] team0: Port device team_slave_0 removed [ 647.719455][T14733] team0: Port device team_slave_1 removed [ 647.726679][T14733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.734208][T14733] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.750309][T14733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.757756][T14733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.799109][T14744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6425'. [ 648.495986][T14799] sg_write: data in/out 768/3 bytes for SCSI command 0x0-- guessing data in; [ 648.495986][T14799] program syz.3.6435 not setting count and/or reply_len properly [ 648.615412][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 648.615430][ T29] audit: type=1326 audit(1757116616.051:14256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 648.645187][ T29] audit: type=1326 audit(1757116616.051:14257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 648.685091][T14742] lo speed is unknown, defaulting to 1000 [ 648.923960][ T29] audit: type=1326 audit(1757116616.171:14258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bc0b0d550 code=0x7ffc0000 [ 648.947772][ T29] audit: type=1326 audit(1757116616.171:14259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1bc0b10417 code=0x7ffc0000 [ 648.971404][ T29] audit: type=1326 audit(1757116616.171:14260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 648.995054][ T29] audit: type=1326 audit(1757116616.171:14261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1bc0b10417 code=0x7ffc0000 [ 649.018720][ T29] audit: type=1326 audit(1757116616.171:14262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1bc0b0d84a code=0x7ffc0000 [ 649.042215][ T29] audit: type=1326 audit(1757116616.171:14263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 649.065888][ T29] audit: type=1326 audit(1757116616.171:14264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 649.089541][ T29] audit: type=1326 audit(1757116616.171:14265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.3.6437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 649.408002][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6447'. [ 649.569099][T14866] lo speed is unknown, defaulting to 1000 [ 649.648590][T14895] lo speed is unknown, defaulting to 1000 [ 649.928653][T14924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 649.928653][T14924] program syz.3.6453 not setting count and/or reply_len properly [ 650.304145][T14965] 9pnet_fd: Insufficient options for proto=fd [ 650.480906][T14987] sg_write: data in/out 768/3 bytes for SCSI command 0x0-- guessing data in; [ 650.480906][T14987] program syz.0.6470 not setting count and/or reply_len properly [ 650.567779][T14997] cgroup: Need name or subsystem set [ 650.593932][T14997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6474'. [ 650.652245][T14997] lo speed is unknown, defaulting to 1000 [ 650.962015][T15067] sg_write: data in/out 768/3 bytes for SCSI command 0x0-- guessing data in; [ 650.962015][T15067] program syz.1.6486 not setting count and/or reply_len properly [ 651.320779][T15106] netlink: 340 bytes leftover after parsing attributes in process `syz.3.6497'. [ 651.335441][T15106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6497'. [ 651.355944][T15073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6489'. [ 651.520871][T15122] lo speed is unknown, defaulting to 1000 [ 651.608176][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6503'. [ 651.686518][T15157] loop0: detected capacity change from 0 to 128 [ 651.692295][T15162] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6510'. [ 651.706912][T15162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6510'. [ 652.158091][T15193] loop0: detected capacity change from 0 to 32768 [ 652.182643][T15193] loop0: p1 p3 < > [ 652.205855][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6515'. [ 652.372042][T15228] netlink: 340 bytes leftover after parsing attributes in process `syz.5.6523'. [ 652.387477][T15215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6521'. [ 652.542389][T15242] 9pnet_fd: Insufficient options for proto=fd [ 652.637182][T15249] ipvlan8: entered promiscuous mode [ 652.753659][T15265] sg_write: data in/out 768/3 bytes for SCSI command 0x0-- guessing data in; [ 652.753659][T15265] program syz.1.6534 not setting count and/or reply_len properly [ 653.037525][T15287] 9pnet_fd: Insufficient options for proto=fd [ 653.199643][T15297] lo speed is unknown, defaulting to 1000 [ 653.618872][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 653.618928][ T29] audit: type=1326 audit(653.600:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 653.753716][T15310] ipvlan3: entered promiscuous mode [ 653.948629][ T29] audit: type=1326 audit(653.630:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 653.971738][ T29] audit: type=1326 audit(653.630:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 653.994873][ T29] audit: type=1326 audit(653.640:14607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 654.017827][ T29] audit: type=1326 audit(653.640:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 654.040834][ T29] audit: type=1326 audit(653.640:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15305 comm="syz.2.6546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 654.314980][T15362] 9pnet_fd: Insufficient options for proto=fd [ 654.611140][ T29] audit: type=1326 audit(654.060:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 654.634242][ T29] audit: type=1326 audit(654.060:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.1.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 654.657377][ T29] audit: type=1326 audit(654.410:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 654.680535][ T29] audit: type=1326 audit(654.410:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15371 comm="syz.5.6556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 654.752194][T15414] netlink: 'syz.3.6565': attribute type 1 has an invalid length. [ 654.771429][T15414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 654.789086][T15414] bond1 (unregistering): Released all slaves [ 654.843535][T15484] lo speed is unknown, defaulting to 1000 [ 655.325388][T15559] loop0: detected capacity change from 0 to 512 [ 655.333134][T15559] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 655.350408][T15562] lo speed is unknown, defaulting to 1000 [ 655.414196][T15591] tipc: Enabling of bearer rejected, failed to enable media [ 655.425973][T15581] lo speed is unknown, defaulting to 1000 [ 655.512843][T15622] netlink: 'syz.2.6589': attribute type 7 has an invalid length. [ 655.685821][T15653] tipc: Started in network mode [ 655.690832][T15653] tipc: Node identity ae3f38645058, cluster identity 4711 [ 655.698017][T15653] tipc: Enabled bearer , priority 0 [ 655.705381][T15653] syzkaller0: entered promiscuous mode [ 655.710904][T15653] syzkaller0: entered allmulticast mode [ 655.739176][T15653] tipc: Resetting bearer [ 655.746068][T15652] tipc: Resetting bearer [ 655.754054][T15652] tipc: Disabling bearer [ 655.764775][T15660] FAULT_INJECTION: forcing a failure. [ 655.764775][T15660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.778120][T15660] CPU: 0 UID: 0 PID: 15660 Comm: syz.3.6599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 655.778228][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.778240][T15660] Call Trace: [ 655.778246][T15660] [ 655.778253][T15660] __dump_stack+0x1d/0x30 [ 655.778352][T15660] dump_stack_lvl+0xe8/0x140 [ 655.778378][T15660] dump_stack+0x15/0x1b [ 655.778404][T15660] should_fail_ex+0x265/0x280 [ 655.778434][T15660] should_fail+0xb/0x20 [ 655.778454][T15660] should_fail_usercopy+0x1a/0x20 [ 655.778481][T15660] _copy_from_user+0x1c/0xb0 [ 655.778533][T15660] __sys_bpf+0x178/0x7b0 [ 655.778633][T15660] __x64_sys_bpf+0x41/0x50 [ 655.778735][T15660] x64_sys_call+0x2aea/0x2ff0 [ 655.778756][T15660] do_syscall_64+0xd2/0x200 [ 655.778786][T15660] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 655.778811][T15660] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 655.779034][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.779061][T15660] RIP: 0033:0x7f1bc0b0ebe9 [ 655.779080][T15660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.779102][T15660] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.779119][T15660] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 655.779130][T15660] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 655.779141][T15660] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 655.779152][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.779190][T15660] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 655.779208][T15660] [ 656.017649][T15665] lo speed is unknown, defaulting to 1000 [ 657.262358][T15735] lo speed is unknown, defaulting to 1000 [ 657.298011][T15741] __nla_validate_parse: 7 callbacks suppressed [ 657.298024][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6614'. [ 657.833128][T15762] ipvlan4: entered promiscuous mode [ 657.840503][T15768] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 657.840503][T15768] program syz.5.6617 not setting count and/or reply_len properly [ 657.937689][T15779] netlink: 340 bytes leftover after parsing attributes in process `syz.5.6621'. [ 657.959744][T15779] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6621'. [ 658.250546][T15804] lo speed is unknown, defaulting to 1000 [ 658.647817][T15857] netlink: 340 bytes leftover after parsing attributes in process `syz.0.6635'. [ 658.685717][T15857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6635'. [ 658.787921][ T3413] hid_parser_main: 10 callbacks suppressed [ 658.787938][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x1 [ 658.801767][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.809615][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.817421][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.825276][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.833124][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.840906][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x4 [ 658.848659][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.856481][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 658.864283][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: unknown main item tag 0x0 [ 659.186937][T15923] lo speed is unknown, defaulting to 1000 [ 659.211352][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6639'. [ 659.228838][ T3413] hid-generic 0000:FFFFFFFC:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 659.457531][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 659.457548][ T29] audit: type=1326 audit(659.431:14762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44af415ba7 code=0x7ffc0000 [ 659.590678][ T29] audit: type=1326 audit(659.481:14763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44af3badb9 code=0x7ffc0000 [ 659.613841][ T29] audit: type=1326 audit(659.481:14764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44af415ba7 code=0x7ffc0000 [ 659.636782][ T29] audit: type=1326 audit(659.481:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44af3badb9 code=0x7ffc0000 [ 659.659928][ T29] audit: type=1326 audit(659.481:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.683221][ T29] audit: type=1326 audit(659.481:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.706255][ T29] audit: type=1326 audit(659.531:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.729280][ T29] audit: type=1326 audit(659.531:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.752319][ T29] audit: type=1326 audit(659.531:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.775398][ T29] audit: type=1326 audit(659.531:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.1.6641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 659.817613][T15968] IPv6: Can't replace route, no match found [ 659.874927][T15977] IPv6: Can't replace route, no match found [ 659.892035][T15978] IPv6: Can't replace route, no match found [ 660.537673][T16001] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 660.537673][T16001] program syz.3.6652 not setting count and/or reply_len properly [ 660.656013][T16004] lo speed is unknown, defaulting to 1000 [ 661.205953][T16036] lo speed is unknown, defaulting to 1000 [ 661.598815][T16075] IPv6: Can't replace route, no match found [ 661.772637][T16083] netlink: 'syz.3.6664': attribute type 1 has an invalid length. [ 661.823510][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6664'. [ 661.850851][T16083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 661.884004][T16108] bond1 (unregistering): Released all slaves [ 662.159601][T16168] lo speed is unknown, defaulting to 1000 [ 663.216788][T16235] IPv6: Can't replace route, no match found [ 664.017658][T16279] lo speed is unknown, defaulting to 1000 [ 664.532883][T16323] lo speed is unknown, defaulting to 1000 [ 664.652708][T16350] loop0: detected capacity change from 0 to 128 [ 664.730150][T16350] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=16350 comm=syz.0.6704 [ 664.805504][T15903] kworker/u8:51: attempt to access beyond end of device [ 664.805504][T15903] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 664.895687][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6705'. [ 664.898251][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 664.898269][ T29] audit: type=1326 audit(664.871:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 664.933814][ T29] audit: type=1326 audit(664.871:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 664.956910][ T29] audit: type=1326 audit(664.871:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 664.979961][ T29] audit: type=1326 audit(664.871:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.002933][ T29] audit: type=1326 audit(664.871:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.026037][ T29] audit: type=1326 audit(664.871:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.048919][ T29] audit: type=1326 audit(664.871:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.071884][ T29] audit: type=1326 audit(664.871:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.094920][ T29] audit: type=1326 audit(664.871:15075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.118001][ T29] audit: type=1326 audit(664.871:15076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16361 comm="syz.0.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 665.349798][T16397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6717'. [ 665.387257][T16399] lo speed is unknown, defaulting to 1000 [ 665.515158][T16447] FAULT_INJECTION: forcing a failure. [ 665.515158][T16447] name failslab, interval 1, probability 0, space 0, times 0 [ 665.527856][T16447] CPU: 1 UID: 0 PID: 16447 Comm: syz.5.6725 Not tainted syzkaller #0 PREEMPT(voluntary) [ 665.527938][T16447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.527958][T16447] Call Trace: [ 665.527978][T16447] [ 665.527987][T16447] __dump_stack+0x1d/0x30 [ 665.528011][T16447] dump_stack_lvl+0xe8/0x140 [ 665.528034][T16447] dump_stack+0x15/0x1b [ 665.528082][T16447] should_fail_ex+0x265/0x280 [ 665.528105][T16447] should_failslab+0x8c/0xb0 [ 665.528180][T16447] kmem_cache_alloc_noprof+0x50/0x310 [ 665.528213][T16447] ? alloc_empty_file+0x76/0x200 [ 665.528259][T16447] ? save_fpregs_to_fpstate+0x100/0x160 [ 665.528298][T16447] alloc_empty_file+0x76/0x200 [ 665.528334][T16447] path_openat+0x68/0x2170 [ 665.528357][T16447] ? __schedule+0x6b9/0xb30 [ 665.528443][T16447] ? should_fail_ex+0xdb/0x280 [ 665.528486][T16447] ? should_failslab+0x8c/0xb0 [ 665.528516][T16447] ? kmem_cache_alloc_noprof+0x186/0x310 [ 665.528554][T16447] ? getname_kernel+0x3c/0x1f0 [ 665.528640][T16447] do_file_open_root+0x1d0/0x3f0 [ 665.528669][T16447] file_open_root+0xfd/0x130 [ 665.528711][T16447] do_handle_open+0x626/0x6b0 [ 665.528759][T16447] __x64_sys_open_by_handle_at+0x44/0x50 [ 665.528794][T16447] x64_sys_call+0x279b/0x2ff0 [ 665.528821][T16447] do_syscall_64+0xd2/0x200 [ 665.528855][T16447] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 665.528945][T16447] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 665.528981][T16447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.529033][T16447] RIP: 0033:0x7ffb446febe9 [ 665.529124][T16447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.529199][T16447] RSP: 002b:00007ffb43167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 665.529217][T16447] RAX: ffffffffffffffda RBX: 00007ffb44935fa0 RCX: 00007ffb446febe9 [ 665.529232][T16447] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 665.529247][T16447] RBP: 00007ffb43167090 R08: 0000000000000000 R09: 0000000000000000 [ 665.529282][T16447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.529297][T16447] R13: 00007ffb44936038 R14: 00007ffb44935fa0 R15: 00007fff92ab66c8 [ 665.529321][T16447] [ 665.801953][T16454] FAULT_INJECTION: forcing a failure. [ 665.801953][T16454] name failslab, interval 1, probability 0, space 0, times 0 [ 665.814662][T16454] CPU: 0 UID: 0 PID: 16454 Comm: syz.0.6727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 665.814702][T16454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.814717][T16454] Call Trace: [ 665.814725][T16454] [ 665.814751][T16454] __dump_stack+0x1d/0x30 [ 665.814836][T16454] dump_stack_lvl+0xe8/0x140 [ 665.814856][T16454] dump_stack+0x15/0x1b [ 665.814917][T16454] should_fail_ex+0x265/0x280 [ 665.814941][T16454] should_failslab+0x8c/0xb0 [ 665.814967][T16454] __kmalloc_noprof+0xa5/0x3e0 [ 665.814995][T16454] ? alloc_pipe_info+0x1c9/0x350 [ 665.815064][T16454] alloc_pipe_info+0x1c9/0x350 [ 665.815089][T16454] splice_direct_to_actor+0x592/0x680 [ 665.815158][T16454] ? kstrtouint_from_user+0x9f/0xf0 [ 665.815290][T16454] ? __pfx_direct_splice_actor+0x10/0x10 [ 665.815311][T16454] ? __rcu_read_unlock+0x4f/0x70 [ 665.815333][T16454] ? get_pid_task+0x96/0xd0 [ 665.815353][T16454] ? avc_policy_seqno+0x15/0x30 [ 665.815379][T16454] ? selinux_file_permission+0x1e4/0x320 [ 665.815402][T16454] do_splice_direct+0xda/0x150 [ 665.815423][T16454] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 665.815450][T16454] do_sendfile+0x380/0x650 [ 665.815565][T16454] __x64_sys_sendfile64+0x105/0x150 [ 665.815596][T16454] x64_sys_call+0x2bb0/0x2ff0 [ 665.815617][T16454] do_syscall_64+0xd2/0x200 [ 665.815680][T16454] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 665.815750][T16454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 665.815846][T16454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.815868][T16454] RIP: 0033:0x7fcf7384ebe9 [ 665.815884][T16454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.815914][T16454] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 665.816003][T16454] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 665.816015][T16454] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 665.816027][T16454] RBP: 00007fcf722af090 R08: 0000000000000000 R09: 0000000000000000 [ 665.816038][T16454] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 665.816121][T16454] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 665.816141][T16454] [ 666.048903][T16457] lo speed is unknown, defaulting to 1000 [ 666.217333][T16498] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 666.217333][T16498] program syz.3.6733 not setting count and/or reply_len properly [ 666.524387][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6738'. [ 666.817379][T16542] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 666.817379][T16542] program syz.1.6747 not setting count and/or reply_len properly [ 666.818986][T16538] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6746'. [ 666.849059][T16538] netlink: 'syz.5.6746': attribute type 2 has an invalid length. [ 666.856944][T16538] netlink: 'syz.5.6746': attribute type 2 has an invalid length. [ 666.864848][T16538] netlink: 'syz.5.6746': attribute type 2 has an invalid length. [ 666.872640][T16538] netlink: 'syz.5.6746': attribute type 2 has an invalid length. [ 666.880431][T16538] netlink: 'syz.5.6746': attribute type 1 has an invalid length. [ 666.888211][T16538] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6746'. [ 666.901535][T16538] netlink: 'syz.5.6746': attribute type 10 has an invalid length. [ 666.909457][T16538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6746'. [ 666.919373][T16538] batman_adv: batadv0: Adding interface: veth1_vlan [ 666.926018][T16538] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.954134][T16538] batman_adv: batadv0: Interface activated: veth1_vlan [ 667.177948][T16555] lo speed is unknown, defaulting to 1000 [ 667.479505][T16588] lo speed is unknown, defaulting to 1000 [ 667.680151][T16613] FAULT_INJECTION: forcing a failure. [ 667.680151][T16613] name failslab, interval 1, probability 0, space 0, times 0 [ 667.692977][T16613] CPU: 0 UID: 0 PID: 16613 Comm: syz.3.6754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 667.693005][T16613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 667.693089][T16613] Call Trace: [ 667.693096][T16613] [ 667.693104][T16613] __dump_stack+0x1d/0x30 [ 667.693129][T16613] dump_stack_lvl+0xe8/0x140 [ 667.693155][T16613] dump_stack+0x15/0x1b [ 667.693177][T16613] should_fail_ex+0x265/0x280 [ 667.693264][T16613] should_failslab+0x8c/0xb0 [ 667.693297][T16613] __kmalloc_noprof+0xa5/0x3e0 [ 667.693390][T16613] ? copy_splice_read+0xc2/0x660 [ 667.693417][T16613] copy_splice_read+0xc2/0x660 [ 667.693479][T16613] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 667.693564][T16613] splice_direct_to_actor+0x290/0x680 [ 667.693593][T16613] ? __pfx_direct_splice_actor+0x10/0x10 [ 667.693698][T16613] do_splice_direct+0xda/0x150 [ 667.693717][T16613] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 667.693816][T16613] do_sendfile+0x380/0x650 [ 667.693854][T16613] __x64_sys_sendfile64+0x105/0x150 [ 667.693883][T16613] x64_sys_call+0x2bb0/0x2ff0 [ 667.693910][T16613] do_syscall_64+0xd2/0x200 [ 667.694022][T16613] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 667.694054][T16613] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 667.694215][T16613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.694243][T16613] RIP: 0033:0x7f1bc0b0ebe9 [ 667.694263][T16613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.694350][T16613] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 667.694372][T16613] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 667.694388][T16613] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 667.694405][T16613] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 667.694421][T16613] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 667.694435][T16613] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 667.694478][T16613] [ 668.121963][T16620] ipvlan9: entered promiscuous mode [ 668.223530][T16631] FAULT_INJECTION: forcing a failure. [ 668.223530][T16631] name failslab, interval 1, probability 0, space 0, times 0 [ 668.236431][T16631] CPU: 0 UID: 0 PID: 16631 Comm: syz.3.6761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 668.236461][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 668.236476][T16631] Call Trace: [ 668.236486][T16631] [ 668.236496][T16631] __dump_stack+0x1d/0x30 [ 668.236591][T16631] dump_stack_lvl+0xe8/0x140 [ 668.236692][T16631] dump_stack+0x15/0x1b [ 668.236714][T16631] should_fail_ex+0x265/0x280 [ 668.236746][T16631] should_failslab+0x8c/0xb0 [ 668.236777][T16631] kmem_cache_alloc_noprof+0x50/0x310 [ 668.236928][T16631] ? security_inode_alloc+0x37/0x100 [ 668.236961][T16631] security_inode_alloc+0x37/0x100 [ 668.237033][T16631] inode_init_always_gfp+0x4b7/0x500 [ 668.237066][T16631] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 668.237102][T16631] alloc_inode+0x58/0x170 [ 668.237175][T16631] new_inode+0x1d/0xe0 [ 668.237200][T16631] hugetlbfs_get_inode+0x7b/0x370 [ 668.237225][T16631] hugetlb_file_setup+0x192/0x3d0 [ 668.237295][T16631] ksys_mmap_pgoff+0x157/0x310 [ 668.237316][T16631] x64_sys_call+0x14a3/0x2ff0 [ 668.237354][T16631] do_syscall_64+0xd2/0x200 [ 668.237435][T16631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 668.237466][T16631] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 668.237549][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.237577][T16631] RIP: 0033:0x7f1bc0b0ebe9 [ 668.237598][T16631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.237691][T16631] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 668.237717][T16631] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 668.237731][T16631] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 668.237746][T16631] RBP: 00007f1bbf56f090 R08: ffffffffffffffff R09: 0000000000000000 [ 668.237841][T16631] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 668.237855][T16631] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 668.237877][T16631] [ 668.574616][T16638] batadv_slave_1: entered promiscuous mode [ 668.581678][T16637] batadv_slave_1: left promiscuous mode [ 668.789117][T16660] lo speed is unknown, defaulting to 1000 [ 668.808879][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6763'. [ 668.852536][T16680] ipvlan10: entered promiscuous mode [ 669.166432][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6784'. [ 669.372867][T16763] FAULT_INJECTION: forcing a failure. [ 669.372867][T16763] name failslab, interval 1, probability 0, space 0, times 0 [ 669.385733][T16763] CPU: 0 UID: 0 PID: 16763 Comm: syz.5.6792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 669.385766][T16763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.385850][T16763] Call Trace: [ 669.385858][T16763] [ 669.385867][T16763] __dump_stack+0x1d/0x30 [ 669.385890][T16763] dump_stack_lvl+0xe8/0x140 [ 669.385916][T16763] dump_stack+0x15/0x1b [ 669.385995][T16763] should_fail_ex+0x265/0x280 [ 669.386027][T16763] should_failslab+0x8c/0xb0 [ 669.386051][T16763] kmem_cache_alloc_noprof+0x50/0x310 [ 669.386082][T16763] ? alloc_empty_file+0x76/0x200 [ 669.386161][T16763] alloc_empty_file+0x76/0x200 [ 669.386200][T16763] path_openat+0x68/0x2170 [ 669.386224][T16763] ? unwind_next_frame+0xada/0xc80 [ 669.386258][T16763] ? do_syscall_64+0xd2/0x200 [ 669.386348][T16763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.386370][T16763] ? __kernel_text_address+0xd/0x40 [ 669.386431][T16763] ? unwind_get_return_address+0x16/0x40 [ 669.386459][T16763] ? perf_callchain_kernel+0x30b/0x330 [ 669.386498][T16763] ? should_fail_ex+0xdb/0x280 [ 669.386530][T16763] ? kmem_cache_alloc_noprof+0x28f/0x310 [ 669.386619][T16763] ? getname_kernel+0x3c/0x1f0 [ 669.386654][T16763] do_file_open_root+0x1d0/0x3f0 [ 669.386694][T16763] file_open_root+0xfd/0x130 [ 669.386728][T16763] do_handle_open+0x626/0x6b0 [ 669.386802][T16763] __x64_sys_open_by_handle_at+0x44/0x50 [ 669.386855][T16763] x64_sys_call+0x279b/0x2ff0 [ 669.386893][T16763] do_syscall_64+0xd2/0x200 [ 669.386932][T16763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 669.387043][T16763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 669.387081][T16763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.387104][T16763] RIP: 0033:0x7ffb446febe9 [ 669.387124][T16763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.387147][T16763] RSP: 002b:00007ffb43167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 669.387167][T16763] RAX: ffffffffffffffda RBX: 00007ffb44935fa0 RCX: 00007ffb446febe9 [ 669.387239][T16763] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 669.387293][T16763] RBP: 00007ffb43167090 R08: 0000000000000000 R09: 0000000000000000 [ 669.387308][T16763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.387338][T16763] R13: 00007ffb44936038 R14: 00007ffb44935fa0 R15: 00007fff92ab66c8 [ 669.387358][T16763] [ 669.687607][T16770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6795'. [ 669.718476][T16775] IPv6: Can't replace route, no match found [ 669.748235][T16777] netlink: 'syz.2.6798': attribute type 1 has an invalid length. [ 669.777551][T16777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 669.791819][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6798'. [ 669.906494][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 669.906511][ T29] audit: type=1326 audit(669.881:15545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 669.910625][T16767] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6793'. [ 669.912893][ T29] audit: type=1326 audit(669.881:15546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 669.967638][ T29] audit: type=1326 audit(669.891:15547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 669.990575][ T29] audit: type=1326 audit(669.891:15548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.013522][ T29] audit: type=1326 audit(669.891:15549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.036479][ T29] audit: type=1326 audit(669.891:15550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.059485][ T29] audit: type=1326 audit(669.891:15551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.082498][ T29] audit: type=1326 audit(669.891:15552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.105579][ T29] audit: type=1326 audit(669.891:15553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.128733][ T29] audit: type=1326 audit(669.941:15554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16766 comm="syz.5.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 670.188333][T16828] FAULT_INJECTION: forcing a failure. [ 670.188333][T16828] name failslab, interval 1, probability 0, space 0, times 0 [ 670.201166][T16828] CPU: 0 UID: 0 PID: 16828 Comm: syz.3.6804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 670.201197][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.201214][T16828] Call Trace: [ 670.201224][T16828] [ 670.201235][T16828] __dump_stack+0x1d/0x30 [ 670.201270][T16828] dump_stack_lvl+0xe8/0x140 [ 670.201330][T16828] dump_stack+0x15/0x1b [ 670.201353][T16828] should_fail_ex+0x265/0x280 [ 670.201384][T16828] should_failslab+0x8c/0xb0 [ 670.201417][T16828] kmem_cache_alloc_noprof+0x50/0x310 [ 670.201511][T16828] ? skb_clone+0x151/0x1f0 [ 670.201548][T16828] skb_clone+0x151/0x1f0 [ 670.201581][T16828] pfkey_sendmsg+0x2cc/0x900 [ 670.201633][T16828] ? avc_has_perm+0xf7/0x180 [ 670.201676][T16828] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 670.201734][T16828] __sock_sendmsg+0x145/0x180 [ 670.201776][T16828] ____sys_sendmsg+0x31e/0x4e0 [ 670.201816][T16828] ___sys_sendmsg+0x17b/0x1d0 [ 670.201925][T16828] __x64_sys_sendmsg+0xd4/0x160 [ 670.201965][T16828] x64_sys_call+0x191e/0x2ff0 [ 670.201995][T16828] do_syscall_64+0xd2/0x200 [ 670.202035][T16828] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 670.202112][T16828] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 670.202146][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.202171][T16828] RIP: 0033:0x7f1bc0b0ebe9 [ 670.202243][T16828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.202268][T16828] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.202290][T16828] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 670.202307][T16828] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 670.202322][T16828] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 670.202335][T16828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.202346][T16828] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 670.202368][T16828] [ 670.435143][T16830] lo speed is unknown, defaulting to 1000 [ 670.476154][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6805'. [ 670.552798][T16852] SELinux: failed to load policy [ 670.728376][T16876] Falling back ldisc for ttyS3. [ 670.738225][T16887] lo speed is unknown, defaulting to 1000 [ 670.875394][T16892] netlink: 'syz.2.6816': attribute type 58 has an invalid length. [ 670.883363][T16892] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6816'. [ 670.893952][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6818'. [ 670.927566][T16924] bridge_slave_1: left allmulticast mode [ 670.933422][T16924] bridge_slave_1: left promiscuous mode [ 670.939134][T16924] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.946275][T16916] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16916 comm=syz.3.6818 [ 670.946542][T16917] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16917 comm=syz.3.6818 [ 670.972600][T16924] bridge_slave_0: left allmulticast mode [ 670.978374][T16924] bridge_slave_0: left promiscuous mode [ 670.984115][T16924] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.036397][T16938] IPv6: Can't replace route, no match found [ 671.316809][T16973] IPv6: Can't replace route, no match found [ 671.691336][T17000] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 671.729576][T17012] random: crng reseeded on system resumption [ 672.156921][T17041] FAULT_INJECTION: forcing a failure. [ 672.156921][T17041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.170108][T17041] CPU: 0 UID: 0 PID: 17041 Comm: syz.0.6850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 672.170144][T17041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.170159][T17041] Call Trace: [ 672.170166][T17041] [ 672.170174][T17041] __dump_stack+0x1d/0x30 [ 672.170199][T17041] dump_stack_lvl+0xe8/0x140 [ 672.170273][T17041] dump_stack+0x15/0x1b [ 672.170290][T17041] should_fail_ex+0x265/0x280 [ 672.170318][T17041] should_fail+0xb/0x20 [ 672.170339][T17041] should_fail_usercopy+0x1a/0x20 [ 672.170364][T17041] _copy_from_iter+0xd2/0xe80 [ 672.170427][T17041] ? __build_skb_around+0x1a0/0x200 [ 672.170450][T17041] ? __alloc_skb+0x223/0x320 [ 672.170474][T17041] netlink_sendmsg+0x471/0x6b0 [ 672.170503][T17041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.170562][T17041] __sock_sendmsg+0x145/0x180 [ 672.170657][T17041] sock_write_iter+0x165/0x1b0 [ 672.170769][T17041] do_iter_readv_writev+0x49c/0x540 [ 672.170799][T17041] vfs_writev+0x2df/0x8b0 [ 672.170851][T17041] do_writev+0xe7/0x210 [ 672.170882][T17041] __x64_sys_writev+0x45/0x50 [ 672.170908][T17041] x64_sys_call+0x1e9a/0x2ff0 [ 672.170930][T17041] do_syscall_64+0xd2/0x200 [ 672.171034][T17041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 672.171059][T17041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 672.171088][T17041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.171138][T17041] RIP: 0033:0x7fcf7384ebe9 [ 672.171153][T17041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.171172][T17041] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 672.171191][T17041] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 672.171206][T17041] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 672.171223][T17041] RBP: 00007fcf722af090 R08: 0000000000000000 R09: 0000000000000000 [ 672.171236][T17041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.171248][T17041] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 672.171268][T17041] [ 672.431276][T17046] netlink: 'syz.1.6852': attribute type 10 has an invalid length. [ 672.431300][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6852'. [ 672.549576][T17055] ipvlan5: entered promiscuous mode [ 672.596179][T17061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6856'. [ 672.759147][T17081] netlink: 'syz.2.6862': attribute type 1 has an invalid length. [ 672.780698][T17081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 672.792416][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6862'. [ 672.942195][T17116] lo speed is unknown, defaulting to 1000 [ 675.565218][T17152] lo speed is unknown, defaulting to 1000 [ 675.664577][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 675.664595][ T29] audit: type=1326 audit(675.641:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17148 comm="syz.0.6868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 675.886293][T17184] FAULT_INJECTION: forcing a failure. [ 675.886293][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 675.899088][T17184] CPU: 1 UID: 0 PID: 17184 Comm: syz.1.6871 Not tainted syzkaller #0 PREEMPT(voluntary) [ 675.899162][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.899208][T17184] Call Trace: [ 675.899214][T17184] [ 675.899221][T17184] __dump_stack+0x1d/0x30 [ 675.899243][T17184] dump_stack_lvl+0xe8/0x140 [ 675.899262][T17184] dump_stack+0x15/0x1b [ 675.899277][T17184] should_fail_ex+0x265/0x280 [ 675.899308][T17184] ? alloc_pipe_info+0xae/0x350 [ 675.899336][T17184] should_failslab+0x8c/0xb0 [ 675.899368][T17184] __kmalloc_cache_noprof+0x4c/0x320 [ 675.899410][T17184] alloc_pipe_info+0xae/0x350 [ 675.899513][T17184] splice_direct_to_actor+0x592/0x680 [ 675.899539][T17184] ? __pfx_direct_splice_actor+0x10/0x10 [ 675.899565][T17184] ? selinux_file_permission+0x2f0/0x320 [ 675.899663][T17184] do_splice_direct+0xda/0x150 [ 675.899689][T17184] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 675.899723][T17184] do_sendfile+0x380/0x650 [ 675.899831][T17184] __x64_sys_sendfile64+0x105/0x150 [ 675.899869][T17184] x64_sys_call+0x2bb0/0x2ff0 [ 675.899895][T17184] do_syscall_64+0xd2/0x200 [ 675.900061][T17184] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 675.900112][T17184] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 675.900140][T17184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.900166][T17184] RIP: 0033:0x7f44af41ebe9 [ 675.900182][T17184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.900217][T17184] RSP: 002b:00007f44ade87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 675.900235][T17184] RAX: ffffffffffffffda RBX: 00007f44af655fa0 RCX: 00007f44af41ebe9 [ 675.900248][T17184] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 675.900264][T17184] RBP: 00007f44ade87090 R08: 0000000000000000 R09: 0000000000000000 [ 675.900280][T17184] R10: 000000007ffff088 R11: 0000000000000246 R12: 0000000000000001 [ 675.900367][T17184] R13: 00007f44af656038 R14: 00007f44af655fa0 R15: 00007ffeb99351d8 [ 675.900388][T17184] [ 676.136099][ T29] audit: type=1326 audit(676.111:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.1.6872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x0 [ 676.724269][ T29] audit: type=1326 audit(676.702:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17201 comm="syz.2.6875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe14f28ebe9 code=0x0 [ 676.877743][T17206] lo speed is unknown, defaulting to 1000 [ 676.899937][T17212] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 676.899937][T17212] program syz.3.6878 not setting count and/or reply_len properly [ 677.037178][T17242] IPv6: Can't replace route, no match found [ 677.152511][T17254] lo speed is unknown, defaulting to 1000 [ 677.918332][T17294] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 677.918332][T17294] program syz.3.6891 not setting count and/or reply_len properly [ 678.024413][ T29] audit: type=1400 audit(678.002:15810): avc: denied { listen } for pid=17297 comm="syz.3.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 678.045886][ T29] audit: type=1400 audit(678.022:15811): avc: denied { read } for pid=17297 comm="syz.3.6893" lport=53281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 678.185248][ T29] audit: type=1326 audit(678.162:15812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 678.208361][ T29] audit: type=1326 audit(678.162:15813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 678.231328][ T29] audit: type=1326 audit(678.162:15814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 678.288782][ T29] audit: type=1326 audit(678.232:15815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 678.311861][ T29] audit: type=1326 audit(678.232:15816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17308 comm="syz.1.6897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44af41ebe9 code=0x7ffc0000 [ 678.561669][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6904'. [ 678.983825][T17358] lo speed is unknown, defaulting to 1000 [ 679.295176][T17386] SELinux: Context Ü is not valid (left unmapped). [ 679.409815][T17389] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 679.409815][T17389] program syz.1.6914 not setting count and/or reply_len properly [ 680.439392][T17437] FAULT_INJECTION: forcing a failure. [ 680.439392][T17437] name failslab, interval 1, probability 0, space 0, times 0 [ 680.452195][T17437] CPU: 0 UID: 0 PID: 17437 Comm: syz.1.6925 Not tainted syzkaller #0 PREEMPT(voluntary) [ 680.452228][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 680.452244][T17437] Call Trace: [ 680.452253][T17437] [ 680.452263][T17437] __dump_stack+0x1d/0x30 [ 680.452367][T17437] dump_stack_lvl+0xe8/0x140 [ 680.452393][T17437] dump_stack+0x15/0x1b [ 680.452440][T17437] should_fail_ex+0x265/0x280 [ 680.452470][T17437] should_failslab+0x8c/0xb0 [ 680.452502][T17437] __kmalloc_noprof+0xa5/0x3e0 [ 680.452616][T17437] ? security_inode_init_security+0xc5/0x330 [ 680.452649][T17437] ? current_umask+0x2f/0x40 [ 680.452679][T17437] security_inode_init_security+0xc5/0x330 [ 680.452732][T17437] ? __pfx_shmem_initxattrs+0x10/0x10 [ 680.452767][T17437] shmem_mknod+0xad/0x180 [ 680.452811][T17437] shmem_mkdir+0x33/0x70 [ 680.452842][T17437] vfs_mkdir+0x213/0x340 [ 680.452951][T17437] do_mkdirat+0x132/0x3f0 [ 680.452972][T17437] __x64_sys_mkdirat+0x4c/0x60 [ 680.452991][T17437] x64_sys_call+0x2b7/0x2ff0 [ 680.453017][T17437] do_syscall_64+0xd2/0x200 [ 680.453051][T17437] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 680.453106][T17437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 680.453188][T17437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.453209][T17437] RIP: 0033:0x7f44af41d457 [ 680.453223][T17437] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.453242][T17437] RSP: 002b:00007f44ade86e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 680.453266][T17437] RAX: ffffffffffffffda RBX: 00007f44ade86ef0 RCX: 00007f44af41d457 [ 680.453292][T17437] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c [ 680.453308][T17437] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000 [ 680.453323][T17437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 680.453364][T17437] R13: 00007f44ade86eb0 R14: 0000000000000000 R15: 0000000000000000 [ 680.453388][T17437] [ 680.670317][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 680.670360][ T29] audit: type=1326 audit(680.642:15928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17426 comm="syz.3.6923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1bc0b0ebe9 code=0x7ffc0000 [ 680.719051][T17446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6927'. [ 680.922846][ T29] audit: type=1326 audit(680.902:15929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17450 comm="syz.5.6931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 680.925073][ T29] audit: type=1326 audit(680.902:15930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17450 comm="syz.5.6931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 681.021727][T17470] IPv6: Can't replace route, no match found [ 681.217907][T17488] ipvlan6: entered promiscuous mode [ 681.482888][T17499] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6949'. [ 681.482976][T17499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6949'. [ 681.563564][ T29] audit: type=1400 audit(681.542:15931): avc: denied { relabelfrom } for pid=17500 comm="syz.2.6950" name="" dev="pipefs" ino=95079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 681.597656][ T29] audit: type=1326 audit(681.542:15932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 681.620749][ T29] audit: type=1326 audit(681.542:15933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 681.643865][ T29] audit: type=1326 audit(681.542:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 681.666751][ T29] audit: type=1326 audit(681.542:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 681.689764][ T29] audit: type=1326 audit(681.542:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 681.712792][ T29] audit: type=1326 audit(681.542:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe14f28d550 code=0x7ffc0000 [ 681.742345][T17505] IPv6: Can't replace route, no match found [ 681.848684][T17528] ipvlan11: entered promiscuous mode [ 681.883992][T17534] netlink: 340 bytes leftover after parsing attributes in process `syz.2.6960'. [ 681.897627][T17534] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6960'. [ 681.999215][T17543] netlink: 'syz.3.6964': attribute type 1 has an invalid length. [ 682.041738][T17543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.594869][T17587] IPv6: Can't replace route, no match found [ 682.639157][T17589] lo speed is unknown, defaulting to 1000 [ 682.670703][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6968'. [ 682.702661][T17616] bond0: (slave bond_slave_0): Releasing backup interface [ 682.712562][T17616] bond0: (slave bond_slave_1): Releasing backup interface [ 682.721727][T17616] team0: Port device team_slave_0 removed [ 682.731655][T17616] team0: Port device team_slave_1 removed [ 682.732816][T17616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.745139][T17616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.753905][T17616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.753924][T17616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.820483][T17636] netlink: 340 bytes leftover after parsing attributes in process `syz.0.6973'. [ 682.830411][T17636] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6973'. [ 682.851841][T17638] ipvlan6: entered promiscuous mode [ 682.972906][T17654] netlink: 'syz.2.6980': attribute type 1 has an invalid length. [ 682.991728][T17657] IPv6: Can't replace route, no match found [ 683.003124][T17654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.238965][T17696] lo speed is unknown, defaulting to 1000 [ 684.031780][T17741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6987'. [ 684.056784][T17745] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6988'. [ 684.056836][T17745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6988'. [ 684.835557][T17775] ipvlan7: entered promiscuous mode [ 685.048790][T17789] netlink: 340 bytes leftover after parsing attributes in process `syz.0.7002'. [ 685.048836][T17789] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7002'. [ 685.177004][T17794] IPv6: Can't replace route, no match found [ 685.213711][T17807] FAULT_INJECTION: forcing a failure. [ 685.213711][T17807] name failslab, interval 1, probability 0, space 0, times 0 [ 685.213771][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.0.7010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 685.213804][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.213819][T17807] Call Trace: [ 685.213826][T17807] [ 685.213835][T17807] __dump_stack+0x1d/0x30 [ 685.213867][T17807] dump_stack_lvl+0xe8/0x140 [ 685.213931][T17807] dump_stack+0x15/0x1b [ 685.213952][T17807] should_fail_ex+0x265/0x280 [ 685.213984][T17807] should_failslab+0x8c/0xb0 [ 685.214016][T17807] kmem_cache_alloc_noprof+0x50/0x310 [ 685.214118][T17807] ? alloc_vfsmnt+0x2d/0x300 [ 685.214154][T17807] alloc_vfsmnt+0x2d/0x300 [ 685.214193][T17807] vfs_create_mount+0x3b/0x240 [ 685.214298][T17807] __se_sys_fsmount+0x2d9/0x580 [ 685.214331][T17807] __x64_sys_fsmount+0x43/0x50 [ 685.214362][T17807] x64_sys_call+0x2ab3/0x2ff0 [ 685.214397][T17807] do_syscall_64+0xd2/0x200 [ 685.214433][T17807] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 685.214511][T17807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 685.214652][T17807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.214682][T17807] RIP: 0033:0x7fcf7384ebe9 [ 685.214709][T17807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.214769][T17807] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 685.214792][T17807] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 685.214808][T17807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 685.214824][T17807] RBP: 00007fcf722af090 R08: 0000000000000000 R09: 0000000000000000 [ 685.214839][T17807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.214853][T17807] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 685.214872][T17807] [ 685.221817][T17802] lo speed is unknown, defaulting to 1000 [ 686.003373][T17847] netlink: 340 bytes leftover after parsing attributes in process `syz.1.7014'. [ 686.014055][T17847] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7014'. [ 686.067936][T17854] ipvlan8: entered promiscuous mode [ 686.510053][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 686.510067][ T29] audit: type=1326 audit(686.492:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.548613][ T29] audit: type=1326 audit(686.492:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.571832][ T29] audit: type=1326 audit(686.492:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.594942][ T29] audit: type=1326 audit(686.492:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.618009][ T29] audit: type=1326 audit(686.492:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.640908][ T29] audit: type=1326 audit(686.492:16154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.663926][ T29] audit: type=1326 audit(686.492:16155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.686995][ T29] audit: type=1326 audit(686.492:16156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.709988][ T29] audit: type=1326 audit(686.492:16157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.733108][ T29] audit: type=1326 audit(686.492:16158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17891 comm="syz.0.7028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf7384ebe9 code=0x7ffc0000 [ 686.837989][T17908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 687.075167][T17933] netlink: 'syz.1.7040': attribute type 30 has an invalid length. [ 687.183199][T17942] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7040'. [ 687.205479][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7040'. [ 687.229953][T17933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17933 comm=syz.1.7040 [ 687.313996][T17933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17933 comm=syz.1.7040 [ 687.398245][T17948] FAULT_INJECTION: forcing a failure. [ 687.398245][T17948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.411358][T17948] CPU: 1 UID: 0 PID: 17948 Comm: syz.1.7042 Not tainted syzkaller #0 PREEMPT(voluntary) [ 687.411450][T17948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 687.411471][T17948] Call Trace: [ 687.411480][T17948] [ 687.411489][T17948] __dump_stack+0x1d/0x30 [ 687.411515][T17948] dump_stack_lvl+0xe8/0x140 [ 687.411539][T17948] dump_stack+0x15/0x1b [ 687.411557][T17948] should_fail_ex+0x265/0x280 [ 687.411579][T17948] should_fail+0xb/0x20 [ 687.411619][T17948] should_fail_usercopy+0x1a/0x20 [ 687.411687][T17948] _copy_from_user+0x1c/0xb0 [ 687.411801][T17948] memdup_user+0x5e/0xd0 [ 687.411825][T17948] strndup_user+0x68/0xb0 [ 687.411857][T17948] __se_sys_mount+0x4d/0x2e0 [ 687.411886][T17948] ? fput+0x8f/0xc0 [ 687.411972][T17948] ? ksys_write+0x192/0x1a0 [ 687.412036][T17948] __x64_sys_mount+0x67/0x80 [ 687.412057][T17948] x64_sys_call+0x2b4d/0x2ff0 [ 687.412095][T17948] do_syscall_64+0xd2/0x200 [ 687.412136][T17948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 687.412167][T17948] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 687.412197][T17948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.412239][T17948] RIP: 0033:0x7f44af41ebe9 [ 687.412258][T17948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.412282][T17948] RSP: 002b:00007f44ade87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 687.412306][T17948] RAX: ffffffffffffffda RBX: 00007f44af655fa0 RCX: 00007f44af41ebe9 [ 687.412320][T17948] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000000000000000 [ 687.412331][T17948] RBP: 00007f44ade87090 R08: 0000200000000640 R09: 0000000000000000 [ 687.412342][T17948] R10: 0000000002800004 R11: 0000000000000246 R12: 0000000000000001 [ 687.412398][T17948] R13: 00007f44af656038 R14: 00007f44af655fa0 R15: 00007ffeb99351d8 [ 687.412416][T17948] [ 687.911610][ T3413] IPVS: starting estimator thread 0... [ 687.925872][T17969] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.968105][T17970] lo speed is unknown, defaulting to 1000 [ 688.026967][T17971] IPVS: using max 2448 ests per chain, 122400 per kthread [ 688.427677][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7055'. [ 688.638004][T18017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 688.994482][T18050] ipvlan9: entered promiscuous mode [ 689.221940][T18061] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 689.251350][T18061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 689.279580][T18061] __nla_validate_parse: 2 callbacks suppressed [ 689.279620][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7070'. [ 689.300668][T18061] bond4 (unregistering): Released all slaves [ 689.377027][T18138] IPv6: Can't replace route, no match found [ 689.435935][T18151] ipvlan12: entered promiscuous mode [ 689.601027][T18174] IPv6: Can't replace route, no match found [ 689.717520][T18185] netlink: 'syz.5.7093': attribute type 1 has an invalid length. [ 689.736509][T18185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.746459][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7093'. [ 689.756188][T18219] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 689.772187][T18185] bond1 (unregistering): Released all slaves [ 689.928593][T18263] lo speed is unknown, defaulting to 1000 [ 690.649323][T18317] lo speed is unknown, defaulting to 1000 [ 691.171823][T18351] lo speed is unknown, defaulting to 1000 [ 691.323361][T18355] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7112'. [ 691.515861][T18364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7116'. [ 691.562552][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 691.562646][ T29] audit: type=1326 audit(691.542:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.5.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 691.647685][ T29] audit: type=1326 audit(691.582:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.5.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 691.670777][ T29] audit: type=1326 audit(691.582:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.5.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 691.693823][ T29] audit: type=1326 audit(691.582:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18361 comm="syz.5.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 691.914997][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7118'. [ 691.944733][T18398] team0: Device macsec1 is already an upper device of the team interface [ 692.322724][ T29] audit: type=1326 audit(692.302:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18408 comm="syz.5.7121" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb446febe9 code=0x0 [ 692.855281][ T29] audit: type=1400 audit(692.832:16399): avc: denied { relabelto } for pid=18419 comm="syz.3.7124" name="cgroup.controllers" dev="tmpfs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 692.855397][ T29] audit: type=1400 audit(692.832:16400): avc: denied { associate } for pid=18419 comm="syz.3.7124" name="cgroup.controllers" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 692.856076][ T29] audit: type=1326 audit(692.832:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18422 comm="syz.2.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 692.856196][ T29] audit: type=1326 audit(692.832:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18422 comm="syz.2.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 692.856352][ T29] audit: type=1326 audit(692.832:16403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18422 comm="syz.2.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 692.966735][T18430] IPv6: Can't replace route, no match found [ 693.061648][T18440] lo speed is unknown, defaulting to 1000 [ 693.288847][T18480] IPv6: Can't replace route, no match found [ 693.426256][T18500] netlink: 'syz.1.7145': attribute type 1 has an invalid length. [ 693.445222][T18500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 693.455813][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7145'. [ 693.472971][T18500] bond1 (unregistering): Released all slaves [ 693.549410][T18581] IPv6: Can't replace route, no match found [ 693.599694][T18579] netlink: 'syz.3.7150': attribute type 58 has an invalid length. [ 693.607727][T18579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7150'. [ 693.773721][T18598] FAULT_INJECTION: forcing a failure. [ 693.773721][T18598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.773757][T18598] CPU: 1 UID: 0 PID: 18598 Comm: syz.3.7156 Not tainted syzkaller #0 PREEMPT(voluntary) [ 693.773868][T18598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 693.773882][T18598] Call Trace: [ 693.773887][T18598] [ 693.773894][T18598] __dump_stack+0x1d/0x30 [ 693.774029][T18598] dump_stack_lvl+0xe8/0x140 [ 693.774055][T18598] dump_stack+0x15/0x1b [ 693.774079][T18598] should_fail_ex+0x265/0x280 [ 693.774110][T18598] should_fail+0xb/0x20 [ 693.774194][T18598] should_fail_usercopy+0x1a/0x20 [ 693.774227][T18598] _copy_from_iter+0xd2/0xe80 [ 693.774260][T18598] ? __build_skb_around+0x1a0/0x200 [ 693.774287][T18598] ? __alloc_skb+0x223/0x320 [ 693.774317][T18598] netlink_sendmsg+0x471/0x6b0 [ 693.774367][T18598] ? __pfx_netlink_sendmsg+0x10/0x10 [ 693.774435][T18598] __sock_sendmsg+0x145/0x180 [ 693.774477][T18598] ____sys_sendmsg+0x31e/0x4e0 [ 693.774519][T18598] ___sys_sendmsg+0x17b/0x1d0 [ 693.774649][T18598] __x64_sys_sendmsg+0xd4/0x160 [ 693.774692][T18598] x64_sys_call+0x191e/0x2ff0 [ 693.774770][T18598] do_syscall_64+0xd2/0x200 [ 693.774812][T18598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 693.774846][T18598] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 693.774887][T18598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.774921][T18598] RIP: 0033:0x7f1bc0b0ebe9 [ 693.774942][T18598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.774969][T18598] RSP: 002b:00007f1bbf56f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.774995][T18598] RAX: ffffffffffffffda RBX: 00007f1bc0d45fa0 RCX: 00007f1bc0b0ebe9 [ 693.775013][T18598] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000003 [ 693.775031][T18598] RBP: 00007f1bbf56f090 R08: 0000000000000000 R09: 0000000000000000 [ 693.775092][T18598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.775109][T18598] R13: 00007f1bc0d46038 R14: 00007f1bc0d45fa0 R15: 00007ffc07545668 [ 693.775177][T18598] [ 694.195154][T18617] IPv6: Can't replace route, no match found [ 694.622141][T18659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7170'. [ 694.767808][T18670] binfmt_misc: register: failed to install interpreter file ./file2 [ 694.879273][T18679] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.939414][T18679] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.008384][T18679] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.071576][T18679] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.127752][T15246] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.132367][T15246] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.162125][T15246] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.162232][T15246] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.730082][T18743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7194'. [ 695.740081][T18738] Invalid option length (1048441) for dns_resolver key [ 695.788719][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7200'. [ 695.827307][T18745] lo speed is unknown, defaulting to 1000 [ 695.953362][T18792] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7204'. [ 696.597882][T18837] IPv6: Can't replace route, no match found [ 696.618175][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 696.618192][ T29] audit: type=1326 audit(696.603:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.618552][ T29] audit: type=1326 audit(696.603:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.618736][ T29] audit: type=1326 audit(696.603:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.619101][ T29] audit: type=1326 audit(696.603:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.619218][ T29] audit: type=1326 audit(696.603:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.699801][T18839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7220'. [ 696.717844][ T29] audit: type=1326 audit(696.603:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.772738][ T29] audit: type=1326 audit(696.603:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.772776][ T29] audit: type=1326 audit(696.603:16673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.818871][ T29] audit: type=1326 audit(696.603:16674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.842092][ T29] audit: type=1326 audit(696.603:16675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18838 comm="syz.5.7220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 696.973298][T18849] netlink: 'syz.5.7222': attribute type 1 has an invalid length. [ 696.981016][T18849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 696.991107][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7222'. [ 697.002040][T18849] bond1 (unregistering): Released all slaves [ 697.069464][T18916] netlink: 'syz.0.7223': attribute type 1 has an invalid length. [ 697.084798][T18916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 697.097387][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7223'. [ 697.108392][T18916] bond1 (unregistering): Released all slaves [ 697.339301][T18985] lo speed is unknown, defaulting to 1000 [ 697.747860][T19011] FAULT_INJECTION: forcing a failure. [ 697.747860][T19011] name failslab, interval 1, probability 0, space 0, times 0 [ 697.760619][T19011] CPU: 1 UID: 0 PID: 19011 Comm: syz.5.7226 Not tainted syzkaller #0 PREEMPT(voluntary) [ 697.760653][T19011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.760669][T19011] Call Trace: [ 697.760678][T19011] [ 697.760757][T19011] __dump_stack+0x1d/0x30 [ 697.760781][T19011] dump_stack_lvl+0xe8/0x140 [ 697.760816][T19011] dump_stack+0x15/0x1b [ 697.760838][T19011] should_fail_ex+0x265/0x280 [ 697.760868][T19011] should_failslab+0x8c/0xb0 [ 697.760896][T19011] __kmalloc_noprof+0xa5/0x3e0 [ 697.760922][T19011] ? io_probe+0x37/0x1d0 [ 697.760952][T19011] io_probe+0x37/0x1d0 [ 697.760991][T19011] ? __se_sys_io_uring_register+0xd7c/0xeb0 [ 697.761032][T19011] __se_sys_io_uring_register+0xd87/0xeb0 [ 697.761126][T19011] ? fput+0x8f/0xc0 [ 697.761160][T19011] ? ksys_write+0x192/0x1a0 [ 697.761252][T19011] __x64_sys_io_uring_register+0x55/0x70 [ 697.761292][T19011] x64_sys_call+0x18a3/0x2ff0 [ 697.761320][T19011] do_syscall_64+0xd2/0x200 [ 697.761358][T19011] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 697.761504][T19011] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 697.761545][T19011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.761568][T19011] RIP: 0033:0x7ffb446febe9 [ 697.761587][T19011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.761610][T19011] RSP: 002b:00007ffb43146038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 697.761634][T19011] RAX: ffffffffffffffda RBX: 00007ffb44936090 RCX: 00007ffb446febe9 [ 697.761650][T19011] RDX: 0000200000000140 RSI: 0000000000000008 RDI: 0000000000000008 [ 697.761667][T19011] RBP: 00007ffb43146090 R08: 0000000000000000 R09: 0000000000000000 [ 697.761706][T19011] R10: 000000000000001f R11: 0000000000000246 R12: 0000000000000001 [ 697.761721][T19011] R13: 00007ffb44936128 R14: 00007ffb44936090 R15: 00007fff92ab66c8 [ 697.761757][T19011] [ 698.130934][T19024] netlink: 'syz.0.7232': attribute type 1 has an invalid length. [ 698.155005][T19024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.169245][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7232'. [ 698.180161][T19024] bond1 (unregistering): Released all slaves [ 698.992169][T19106] SELinux: policydb version 65545 does not match my version range 15-35 [ 699.000906][T19106] SELinux: failed to load policy [ 699.151823][T19120] netlink: 'syz.1.7246': attribute type 1 has an invalid length. [ 699.174027][T19120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 699.184978][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7246'. [ 699.209885][T19120] bond1 (unregistering): Released all slaves [ 699.326753][T19190] lo speed is unknown, defaulting to 1000 [ 700.053004][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7259'. [ 700.571174][T19256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7263'. [ 700.618040][T15930] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.717721][T15930] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.797782][T15930] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.912112][T15930] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.985432][T19267] lo speed is unknown, defaulting to 1000 [ 701.039192][T15930] bond0 (unregistering): Released all slaves [ 701.050277][T15930] bond1 (unregistering): Released all slaves [ 701.112715][T15930] tipc: Left network mode [ 701.120537][T19267] chnl_net:caif_netlink_parms(): no params data found [ 701.141019][T15930] hsr_slave_0: left promiscuous mode [ 701.151719][T15930] hsr_slave_1: left promiscuous mode [ 701.168162][T15930] veth1_macvtap: left promiscuous mode [ 701.173731][T15930] veth0_macvtap: left promiscuous mode [ 701.179452][T15930] veth1_vlan: left promiscuous mode [ 701.184743][T15930] veth0_vlan: left promiscuous mode [ 701.288160][ T3413] infiniband syz1: ib_query_port failed (-19) [ 701.323532][T19435] ipvlan10: entered promiscuous mode [ 701.342976][T19267] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.350160][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.358912][T19267] bridge_slave_0: entered allmulticast mode [ 701.365662][T19267] bridge_slave_0: entered promiscuous mode [ 701.374425][T19267] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.381597][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.389083][T19267] bridge_slave_1: entered allmulticast mode [ 701.395833][T19267] bridge_slave_1: entered promiscuous mode [ 701.422113][T19267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.433527][T19267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.463974][T19267] team0: Port device team_slave_0 added [ 701.470747][T19267] team0: Port device team_slave_1 added [ 701.496893][T19267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.504025][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.530023][T19267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.541722][T19267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.548720][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 701.574730][T19267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.606889][T19267] hsr_slave_0: entered promiscuous mode [ 701.612948][T19267] hsr_slave_1: entered promiscuous mode [ 701.717557][T19267] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 701.726563][T19267] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 701.735969][T19267] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 701.748075][T19267] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 701.785177][T19267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.799420][T19267] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.812883][T15930] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.820120][T15930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.829568][T15930] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.836684][T15930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.844953][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 701.844970][ T29] audit: type=1326 audit(701.823:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 701.844989][T19544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7279'. [ 701.883421][ T29] audit: type=1326 audit(701.823:16796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 701.906553][ T29] audit: type=1326 audit(701.823:16797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe14f22adb9 code=0x7ffc0000 [ 701.929645][ T29] audit: type=1326 audit(701.823:16798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 701.952634][ T29] audit: type=1326 audit(701.823:16799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 701.975697][ T29] audit: type=1326 audit(701.823:16800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 701.998740][ T29] audit: type=1326 audit(701.823:16801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 702.021737][ T29] audit: type=1326 audit(701.823:16802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 702.044724][ T29] audit: type=1326 audit(701.823:16803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 702.067643][ T29] audit: type=1326 audit(701.823:16804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19543 comm="syz.2.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f28ebe9 code=0x7ffc0000 [ 702.151277][T19267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.165803][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7285'. [ 702.174774][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7285'. [ 702.216259][T19663] ip6gretap1: entered allmulticast mode [ 702.280494][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7287'. [ 702.380809][T19267] veth0_vlan: entered promiscuous mode [ 702.404415][T19267] veth1_vlan: entered promiscuous mode [ 702.445810][T19267] veth0_macvtap: entered promiscuous mode [ 702.452673][T19694] netlink: 'syz.5.7290': attribute type 1 has an invalid length. [ 702.469383][T19694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.479034][T19267] veth1_macvtap: entered promiscuous mode [ 702.493673][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7290'. [ 702.501008][T19267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.517946][T19267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.528948][T19694] bond1 (unregistering): Released all slaves [ 702.551050][T15250] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.583410][T15250] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.595702][T15250] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.605250][T15250] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.615724][T19764] netlink: 'syz.5.7292': attribute type 1 has an invalid length. [ 702.644347][T19764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.662576][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7292'. [ 702.674968][T19764] bond1 (unregistering): Released all slaves [ 702.822045][T19849] netlink: 'syz.6.7298': attribute type 1 has an invalid length. [ 702.832009][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7298'. [ 702.891815][T19859] FAULT_INJECTION: forcing a failure. [ 702.891815][T19859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.905145][T19859] CPU: 0 UID: 0 PID: 19859 Comm: syz.1.7303 Not tainted syzkaller #0 PREEMPT(voluntary) [ 702.905177][T19859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.905193][T19859] Call Trace: [ 702.905201][T19859] [ 702.905210][T19859] __dump_stack+0x1d/0x30 [ 702.905232][T19859] dump_stack_lvl+0xe8/0x140 [ 702.905263][T19859] dump_stack+0x15/0x1b [ 702.905329][T19859] should_fail_ex+0x265/0x280 [ 702.905352][T19859] should_fail+0xb/0x20 [ 702.905390][T19859] should_fail_usercopy+0x1a/0x20 [ 702.905420][T19859] _copy_from_user+0x1c/0xb0 [ 702.905457][T19859] hidp_sock_ioctl+0x1af/0x460 [ 702.905618][T19859] sock_do_ioctl+0x73/0x220 [ 702.905656][T19859] sock_ioctl+0x41b/0x610 [ 702.905687][T19859] ? __pfx_sock_ioctl+0x10/0x10 [ 702.905730][T19859] __se_sys_ioctl+0xcb/0x140 [ 702.905753][T19859] __x64_sys_ioctl+0x43/0x50 [ 702.905774][T19859] x64_sys_call+0x1816/0x2ff0 [ 702.905800][T19859] do_syscall_64+0xd2/0x200 [ 702.905837][T19859] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 702.905888][T19859] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 702.905924][T19859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.905950][T19859] RIP: 0033:0x7f44af41ebe9 [ 702.905990][T19859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.906012][T19859] RSP: 002b:00007f44ade87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.906036][T19859] RAX: ffffffffffffffda RBX: 00007f44af655fa0 RCX: 00007f44af41ebe9 [ 702.906056][T19859] RDX: 0000200000000180 RSI: 00000000400448c8 RDI: 0000000000000004 [ 702.906068][T19859] RBP: 00007f44ade87090 R08: 0000000000000000 R09: 0000000000000000 [ 702.906079][T19859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.906096][T19859] R13: 00007f44af656038 R14: 00007f44af655fa0 R15: 00007ffeb99351d8 [ 702.906120][T19859] [ 703.103591][T19857] 9pnet: Could not find request transport: 0xffffffffffffffff [ 703.378263][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7304'. [ 703.402103][T19876] lo speed is unknown, defaulting to 1000 [ 703.646753][T19902] IPv6: Can't replace route, no match found [ 705.821050][T19924] __nla_validate_parse: 1 callbacks suppressed [ 705.821072][T19924] netlink: 196 bytes leftover after parsing attributes in process `syz.6.7317'. [ 706.037984][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7326'. [ 706.139918][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7324'. [ 706.166111][T19958] lo speed is unknown, defaulting to 1000 [ 708.678750][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 708.678764][ T29] audit: type=1326 audit(708.663:16834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.741567][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7339'. [ 708.751446][ T29] audit: type=1326 audit(708.693:16835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.774516][ T29] audit: type=1326 audit(708.693:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.797687][ T29] audit: type=1326 audit(708.693:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.820788][ T29] audit: type=1326 audit(708.693:16838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.843789][ T29] audit: type=1326 audit(708.693:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.866780][ T29] audit: type=1326 audit(708.693:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.889798][ T29] audit: type=1326 audit(708.693:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.913129][ T29] audit: type=1326 audit(708.693:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.936150][ T29] audit: type=1326 audit(708.693:16843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20002 comm="syz.5.7338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 708.991862][T20020] SELinux: policydb version 4376 does not match my version range 15-35 [ 709.001233][T20020] SELinux: failed to load policy [ 709.009665][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7343'. [ 709.094825][T20051] IPv6: Can't replace route, no match found [ 709.163605][T20054] batadv1: entered promiscuous mode [ 709.169113][T20062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20062 comm=syz.0.7348 [ 709.234615][T20062] tipc: Started in network mode [ 709.234648][T20062] tipc: Node identity ac14140f, cluster identity 4711 [ 709.234723][T20062] tipc: New replicast peer: 255.255.255.255 [ 709.234848][T20062] tipc: Enabled bearer , priority 10 [ 709.238945][T20018] tap0: tun_chr_ioctl cmd 1074025677 [ 709.239138][T20018] tap0: linktype set to 768 [ 709.239879][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7342'. [ 709.239911][T20018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7342'. [ 709.242168][T20018] ip6gretap2: entered allmulticast mode [ 709.244545][T20062] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7348'. [ 710.063434][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7355'. [ 710.358936][T20104] IPv6: Can't replace route, no match found [ 710.546295][T20101] hub 2-0:1.0: USB hub found [ 710.551425][T20101] hub 2-0:1.0: 8 ports detected [ 710.594443][T20121] sd 0:0:1:0: device reset [ 710.608983][T20126] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7367'. [ 710.638005][T20129] ipvlan2: entered promiscuous mode [ 710.855038][ T3412] tipc: Node number set to 2886997007 [ 710.880674][T20142] netlink: 416 bytes leftover after parsing attributes in process `syz.2.7371'. [ 711.068059][T20161] netlink: 'syz.0.7377': attribute type 1 has an invalid length. [ 711.090488][T20161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.112722][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7377'. [ 711.122417][T20161] bond1 (unregistering): Released all slaves [ 711.149158][T20191] lo speed is unknown, defaulting to 1000 [ 711.470308][T20270] netlink: 'syz.6.7384': attribute type 1 has an invalid length. [ 711.470482][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7384'. [ 711.614659][T20276] ipvlan13: entered promiscuous mode [ 711.712663][T20283] FAULT_INJECTION: forcing a failure. [ 711.712663][T20283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.725856][T20283] CPU: 0 UID: 0 PID: 20283 Comm: syz.0.7388 Not tainted syzkaller #0 PREEMPT(voluntary) [ 711.725947][T20283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.726044][T20283] Call Trace: [ 711.726054][T20283] [ 711.726064][T20283] __dump_stack+0x1d/0x30 [ 711.726090][T20283] dump_stack_lvl+0xe8/0x140 [ 711.726115][T20283] dump_stack+0x15/0x1b [ 711.726137][T20283] should_fail_ex+0x265/0x280 [ 711.726221][T20283] should_fail+0xb/0x20 [ 711.726249][T20283] should_fail_usercopy+0x1a/0x20 [ 711.726358][T20283] _copy_from_user+0x1c/0xb0 [ 711.726399][T20283] memdup_user+0x5e/0xd0 [ 711.726506][T20283] strndup_user+0x68/0xb0 [ 711.726541][T20283] __se_sys_mount+0x4d/0x2e0 [ 711.726630][T20283] ? fput+0x8f/0xc0 [ 711.726731][T20283] ? ksys_write+0x192/0x1a0 [ 711.726761][T20283] __x64_sys_mount+0x67/0x80 [ 711.726788][T20283] x64_sys_call+0x2b4d/0x2ff0 [ 711.726815][T20283] do_syscall_64+0xd2/0x200 [ 711.726857][T20283] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 711.726965][T20283] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 711.727032][T20283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.727055][T20283] RIP: 0033:0x7fcf7384ebe9 [ 711.727070][T20283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.727164][T20283] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 711.727184][T20283] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 711.727197][T20283] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000200000000100 [ 711.727227][T20283] RBP: 00007fcf722af090 R08: 0000200000000300 R09: 0000000000000000 [ 711.727246][T20283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.727314][T20283] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 711.727362][T20283] [ 711.961929][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7392'. [ 711.987231][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7394'. [ 712.228043][T20314] lo speed is unknown, defaulting to 1000 [ 712.944200][T20342] lo speed is unknown, defaulting to 1000 [ 713.112492][T20375] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 713.137444][T20378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7405'. [ 713.171224][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7406'. [ 713.221189][T20383] lo speed is unknown, defaulting to 1000 [ 713.963571][T20451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7417'. [ 714.037771][T20467] IPv6: Can't replace route, no match found [ 714.329113][T20483] lo speed is unknown, defaulting to 1000 [ 714.440474][T20488] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7418'. [ 714.455637][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 714.455667][ T29] audit: type=1326 audit(714.414:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.484881][ T29] audit: type=1326 audit(714.414:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.507894][ T29] audit: type=1326 audit(714.424:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.530792][ T29] audit: type=1326 audit(714.424:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.553746][ T29] audit: type=1326 audit(714.424:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.576818][ T29] audit: type=1326 audit(714.424:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.599704][ T29] audit: type=1326 audit(714.424:16963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.622710][ T29] audit: type=1326 audit(714.424:16964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.645694][ T29] audit: type=1326 audit(714.424:16965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 714.668701][ T29] audit: type=1326 audit(714.424:16966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20452 comm="syz.5.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 715.195994][T20534] IPv6: Can't replace route, no match found [ 715.567195][T20576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7440'. [ 715.696754][T20593] IPv6: Can't replace route, no match found [ 715.916173][T20622] lo speed is unknown, defaulting to 1000 [ 716.040938][T20650] lo speed is unknown, defaulting to 1000 [ 716.736695][T20687] IPv6: Can't replace route, no match found [ 717.214703][T20736] IPv6: Can't replace route, no match found [ 717.251335][T20738] __nla_validate_parse: 1 callbacks suppressed [ 717.251349][T20738] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7471'. [ 717.319338][T20741] netlink: 392 bytes leftover after parsing attributes in process `syz.6.7472'. [ 717.364911][T20743] ipvlan3: entered promiscuous mode [ 717.513957][T20763] SELinux: policydb version 4376 does not match my version range 15-35 [ 717.513988][T20763] SELinux: failed to load policy [ 717.573253][T20769] netlink: 'syz.6.7481': attribute type 1 has an invalid length. [ 717.609889][T20769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.623442][T20792] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 717.623712][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7481'. [ 717.775875][T20808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7483'. [ 717.877397][T20812] ipvlan4: entered promiscuous mode [ 718.052892][T20833] IPv6: Can't replace route, no match found [ 718.202672][T20839] netlink: 'syz.6.7494': attribute type 1 has an invalid length. [ 718.238328][T20839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 718.254478][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7494'. [ 718.277637][T20874] bond2 (unregistering): Released all slaves [ 718.420399][T20915] ipvlan14: entered promiscuous mode [ 718.441371][T20918] netlink: 'syz.1.7499': attribute type 3 has an invalid length. [ 718.452586][T20918] tap0: tun_chr_ioctl cmd 1074025677 [ 718.458973][T20918] tap0: linktype set to 768 [ 718.499981][T20929] IPv6: Can't replace route, no match found [ 718.506768][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7503'. [ 718.516236][T20931] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 718.538357][T20935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7504'. [ 718.564918][T20931] batman_adv: batadv0: Removing interface: veth1_vlan [ 718.645706][T20954] lo speed is unknown, defaulting to 1000 [ 718.796454][T20987] netlink: 'syz.2.7510': attribute type 1 has an invalid length. [ 718.815069][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7510'. [ 719.019766][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7515'. [ 719.092524][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7517'. [ 719.232875][T21028] lo speed is unknown, defaulting to 1000 [ 719.578650][T21080] netlink: 'syz.1.7528': attribute type 1 has an invalid length. [ 719.598586][T21080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 719.617508][T21080] bond1 (unregistering): Released all slaves [ 720.138759][T21153] hub 9-0:1.0: USB hub found [ 720.143570][T21153] hub 9-0:1.0: 8 ports detected [ 720.301449][T21167] netlink: 'syz.2.7537': attribute type 3 has an invalid length. [ 720.475280][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 720.475297][ T29] audit: type=1326 audit(720.464:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.512255][ T29] audit: type=1326 audit(720.464:17092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.535382][ T29] audit: type=1326 audit(720.464:17093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.558457][ T29] audit: type=1326 audit(720.464:17094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.581414][ T29] audit: type=1326 audit(720.464:17095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.604453][ T29] audit: type=1326 audit(720.464:17096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.627379][ T29] audit: type=1326 audit(720.464:17097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.650503][ T29] audit: type=1326 audit(720.464:17098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.673436][ T29] audit: type=1326 audit(720.464:17099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 720.696518][ T29] audit: type=1326 audit(720.464:17100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21177 comm="syz.5.7541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffb446febe9 code=0x7ffc0000 [ 721.057467][T21226] IPv6: Can't replace route, no match found [ 721.385670][T21272] IPv6: Can't replace route, no match found [ 721.958966][T21324] netlink: 'syz.0.7589': attribute type 1 has an invalid length. [ 721.981659][T21324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.006472][T21324] bond1 (unregistering): Released all slaves [ 722.117003][T21414] FAULT_INJECTION: forcing a failure. [ 722.117003][T21414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.121875][T21410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21410 comm=syz.2.7597 [ 722.130119][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.0.7598 Not tainted syzkaller #0 PREEMPT(voluntary) [ 722.130189][T21414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 722.130227][T21414] Call Trace: [ 722.130237][T21414] [ 722.130247][T21414] __dump_stack+0x1d/0x30 [ 722.130278][T21414] dump_stack_lvl+0xe8/0x140 [ 722.130308][T21414] dump_stack+0x15/0x1b [ 722.130359][T21414] should_fail_ex+0x265/0x280 [ 722.130393][T21414] should_fail+0xb/0x20 [ 722.130486][T21414] should_fail_usercopy+0x1a/0x20 [ 722.130579][T21414] _copy_from_iter+0xd2/0xe80 [ 722.130629][T21414] ? __build_skb_around+0x1a0/0x200 [ 722.130689][T21414] ? __alloc_skb+0x223/0x320 [ 722.130720][T21414] netlink_sendmsg+0x471/0x6b0 [ 722.130758][T21414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 722.130793][T21414] __sock_sendmsg+0x145/0x180 [ 722.130914][T21414] ____sys_sendmsg+0x31e/0x4e0 [ 722.130951][T21414] ___sys_sendmsg+0x17b/0x1d0 [ 722.131005][T21414] __x64_sys_sendmsg+0xd4/0x160 [ 722.131123][T21414] x64_sys_call+0x191e/0x2ff0 [ 722.131152][T21414] do_syscall_64+0xd2/0x200 [ 722.131233][T21414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 722.131267][T21414] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 722.131306][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.131336][T21414] RIP: 0033:0x7fcf7384ebe9 [ 722.131375][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 722.131444][T21414] RSP: 002b:00007fcf722af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.131504][T21414] RAX: ffffffffffffffda RBX: 00007fcf73a85fa0 RCX: 00007fcf7384ebe9 [ 722.131522][T21414] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 722.131539][T21414] RBP: 00007fcf722af090 R08: 0000000000000000 R09: 0000000000000000 [ 722.131557][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.131574][T21414] R13: 00007fcf73a86038 R14: 00007fcf73a85fa0 R15: 00007fff2fd4a138 [ 722.131592][T21414] [ 722.407497][T21426] __nla_validate_parse: 10 callbacks suppressed [ 722.407516][T21426] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7604'. [ 722.485241][T21435] netlink: 'syz.6.7607': attribute type 1 has an invalid length. [ 722.515829][T21435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.526368][T21435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7607'. [ 722.538533][T21435] bond2 (unregistering): Released all slaves [ 723.176643][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7616'. [ 723.468473][T21532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7619'. [ 723.814528][T21557] lo speed is unknown, defaulting to 1000 [ 724.079003][T21596] netlink: 'syz.6.7630': attribute type 3 has an invalid length. [ 724.095456][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7630'. [ 724.104420][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7630'. [ 724.122402][T21596] ip6gretap1: entered allmulticast mode [ 724.508019][T21613] lo speed is unknown, defaulting to 1000 [ 724.577034][T21641] netlink: 'syz.1.7637': attribute type 1 has an invalid length. [ 724.590112][T15864] ================================================================== [ 724.598222][T15864] BUG: KCSAN: data-race in alloc_pid / copy_process [ 724.604824][T15864] [ 724.607151][T15864] read-write to 0xffffffff8685fc48 of 4 bytes by task 15930 on cpu 0: [ 724.615303][T15864] alloc_pid+0x539/0x720 [ 724.619553][T15864] copy_process+0xe25/0x2000 [ 724.624173][T15864] kernel_clone+0x16c/0x5c0 [ 724.628692][T15864] user_mode_thread+0x7d/0xb0 [ 724.633382][T15864] call_usermodehelper_exec_work+0x41/0x160 [ 724.639299][T15864] process_scheduled_works+0x4ce/0x9d0 [ 724.644775][T15864] worker_thread+0x582/0x770 [ 724.649385][T15864] kthread+0x486/0x510 [ 724.653473][T15864] ret_from_fork+0xda/0x150 [ 724.657995][T15864] ret_from_fork_asm+0x1a/0x30 [ 724.662771][T15864] [ 724.665099][T15864] read to 0xffffffff8685fc48 of 4 bytes by task 15864 on cpu 1: [ 724.672728][T15864] copy_process+0x14a6/0x2000 [ 724.677417][T15864] kernel_clone+0x16c/0x5c0 [ 724.681937][T15864] user_mode_thread+0x7d/0xb0 [ 724.686631][T15864] call_usermodehelper_exec_work+0x41/0x160 [ 724.692551][T15864] process_scheduled_works+0x4ce/0x9d0 [ 724.698024][T15864] worker_thread+0x582/0x770 [ 724.702631][T15864] kthread+0x486/0x510 [ 724.706702][T15864] ret_from_fork+0xda/0x150 [ 724.711212][T15864] ret_from_fork_asm+0x1a/0x30 [ 724.715984][T15864] [ 724.718308][T15864] value changed: 0x8000014b -> 0x8000014c [ 724.724020][T15864] [ 724.726339][T15864] Reported by Kernel Concurrency Sanitizer on: [ 724.732489][T15864] CPU: 1 UID: 0 PID: 15864 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(voluntary) [ 724.742569][T15864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.752626][T15864] Workqueue: events_unbound call_usermodehelper_exec_work [ 724.759758][T15864] ================================================================== [ 724.771675][T21641] 8021q: adding VLAN 0 to HW filter on device bond1