last executing test programs: 3m13.07088776s ago: executing program 1 (id=697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000003c0)={0x6, &(0x7f0000000280)=[{0x2, 0xa8, 0x6, 0x2}, {0x400, 0x3, 0x0, 0x8001}, {0xffff, 0x0, 0x4, 0x800}, {0x6, 0x2, 0x8, 0x6}, {0x7, 0xa5, 0x4, 0x1}, {0x1, 0x5, 0x0, 0x40}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24004016}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 3m12.945465217s ago: executing program 1 (id=698): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) fcntl$setlease(r0, 0x400, 0x0) utime(&(0x7f0000000300)='./file0\x00', 0x0) 3m12.893696529s ago: executing program 1 (id=699): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000100}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250b000000800001801400020070696d367265673000000000000000001400020076657468315f746f5f62617461647600140002006c6f0000000000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f627269646765001400020076657468305f746f5f7465616d0000007400018008000100", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746fc18fbf17bc8b8b3f1400020076657468315fd0e072745f776966690014000200697036746e6c000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="28000180080003000000000008000300020000001400020067726574617030000000000000000000"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x8440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x1a, r4, 0x1, 0x2, 0x6, @remote}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, 0x0, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000001040)="$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") 3m12.771133476s ago: executing program 1 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x50, 0x10000, 0x0, 0x5, 0x8, 0x20205, 0x1, 0x0, 0x8023, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x6, &(0x7f0000000b00)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xd0, &(0x7f0000000e80)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x7, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000009c0)='dns_resolver\x00', &(0x7f0000000a00)={'syz', 0x2}, 0x0, 0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000172207862f8d8d83bc01"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m12.569080896s ago: executing program 1 (id=701): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3e1, 0x0) (fail_nth: 3) getpid() 3m12.058069663s ago: executing program 1 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x21000, 0x0, 0x4b, 0x0, 0x0, 0xfffffffffffffffc) 3m12.057813343s ago: executing program 32 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x21000, 0x0, 0x4b, 0x0, 0x0, 0xfffffffffffffffc) 28.502380237s ago: executing program 4 (id=4840): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1008) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 28.349737915s ago: executing program 4 (id=4850): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@oldalloc}]}, 0xff, 0x58d, &(0x7f0000000240)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 28.244173731s ago: executing program 4 (id=4854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB], 0x90}, 0x1, 0x7}, 0x0) 28.106012158s ago: executing program 4 (id=4856): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/51, 0x33}], 0x1, &(0x7f00000001c0)=""/28, 0x1c}, 0x20001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r4 = dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100000c0300"/28], 0x50) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 27.228648684s ago: executing program 4 (id=4880): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x400, @multicast2}}}, 0x88) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 27.082104492s ago: executing program 4 (id=4884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) (fail_nth: 5) 27.051453044s ago: executing program 33 (id=4884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) (fail_nth: 5) 4.118359723s ago: executing program 2 (id=5403): r0 = socket(0x10, 0x3, 0xfffffffd) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffff9}, 0x10) write(r0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x3416, 0x8000, 0x2000002, 0x4, 0x0, r1}, &(0x7f0000000180), 0x0) io_uring_enter(r2, 0x2deb, 0x9566, 0x0, 0x0, 0x0) signalfd4(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="000000009500"/24], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() setrlimit(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x8000) socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f00000003c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) 2.830203638s ago: executing program 2 (id=5422): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.154351057s ago: executing program 6 (id=5431): pipe2(0x0, 0x800) r0 = socket(0x10, 0x803, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @mcast1, 0x6}, {0xa, 0x4e20, 0x2, @mcast1, 0x4}, 0xffffffffffffffff, 0x6}}, 0x48) timer_create(0x3, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x5, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) timer_gettime(0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x437, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x51}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x8, &(0x7f0000000300)=[{0x7f, 0x80, 0x8}, {0x0, 0x80, 0x7f, 0x10001}, {0x40, 0x6, 0x6, 0x2}, {0xf, 0x5, 0xc}, {0x4, 0x1, 0x0, 0x1ff}, {0xff8, 0x5, 0x0, 0x4}, {0x8000, 0xcf, 0x1, 0x7}, {0x0, 0xa, 0x6, 0xfffffff8}]}) r5 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) syz_clone(0x0, &(0x7f0000000200)="e553ac480089c15efed6a4d990987f411bc32b951322c395a9797b0d19739537cb5d8ae3", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b07383f7577f080c765e74b4") mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101801, 0x18f) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000000c0)=""/14, &(0x7f0000000040)=0xe) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x82) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1.971339235s ago: executing program 6 (id=5434): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000050000000200000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000009f49ea00003992a500d83d457320a75f7d6a195eb49e33ae2a8491a55eb9424ff7d3ae9b6c1c61fbf13042f83b4a12ea1720fdda58ccf5091b23421af70e354b9bd8d901025c904ba8ea3737c7585f7ffae517a7bdaa5c5a9479f2faffeedc487f9b075999911fb65dfb25d226b45ae0f60959a00be40fcbdecc0e64e428799e48180a2a4ffeac66"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001600)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x10) r8 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 1.86391787s ago: executing program 2 (id=5436): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x8) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x10001, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xe000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.796364103s ago: executing program 2 (id=5439): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@oldalloc}]}, 0xff, 0x58d, &(0x7f0000000240)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.722515866s ago: executing program 2 (id=5443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x78, 0x65, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff1}, {0x14, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x6, 0x40, 0xd, 0x5}, {0xf, 0x40, 0x9}, {0x80, 0x8, 0x92, 0x8}, {0x0, 0x7e, 0x20, 0x1}, {0x6, 0xff, 0x1e, 0x4}, {0xd3f9, 0x38, 0x7, 0x3}]}}, @TCA_BPF_ACT={0x4}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10}, 0x18) 1.658097229s ago: executing program 6 (id=5444): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000100}, 0x0, 0xffffffffffff7fff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf250b000000800001801400020070696d367265673000000000000000001400020076657468315f746f5f62617461647600140002006c6f0000000000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f627269646765001400020076657468305f746f5f7465616d0000007400018008000100", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746fc18fbf17bc8b8b3f1400020076657468315fd0e072745f776966690014000200697036746e6c000000140002006d6163766c616e30000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400018008000300010000001400020073797a5f74756e0000000000000000000800030001000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="28000180080003000000000008000300020000001400020067726574617030000000000000000000"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x8440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab968508", 0xd, 0x0, &(0x7f0000000200)={0x11, 0x1a, r3, 0x1, 0x2, 0x6, @remote}, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.618673171s ago: executing program 0 (id=5445): pipe2(0x0, 0x800) r0 = socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @mcast1, 0x6}, {0xa, 0x4e20, 0x2, @mcast1, 0x4}, r1, 0x6}}, 0x48) timer_create(0x3, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x5, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) timer_gettime(0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x437, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x51}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x8, &(0x7f0000000300)=[{0x7f, 0x80, 0x8}, {0x0, 0x80, 0x7f, 0x10001}, {0x40, 0x6, 0x6, 0x2}, {0xf, 0x5, 0xc}, {0x4, 0x1, 0x0, 0x1ff}, {0xff8, 0x5, 0x0, 0x4}, {0x8000, 0xcf, 0x1, 0x7}, {0x0, 0xa, 0x6, 0xfffffff8}]}) r5 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) syz_clone(0x0, &(0x7f0000000200)="e553ac480089c15efed6a4d990987f411bc32b951322c395a9797b0d19739537cb5d8ae3", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b07383f7577f080c765e74b4") mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101801, 0x18f) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000000c0)=""/14, &(0x7f0000000040)=0xe) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x82) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 1.562717083s ago: executing program 6 (id=5446): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) 1.551270283s ago: executing program 5 (id=5447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.472429447s ago: executing program 0 (id=5448): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x6, 0x15, 0x8, 0x6, 0x8, 0x31}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000200)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xffffffffffffff0b}, 0x18) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f0000000300)=""/18, 0x2c, 0x12, 0x0, 0x3, 0x10000, @value=r1}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x8, 0x7, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20, 0x7800, 0xfffffff7, 0x4}}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x80000001, 0x5, 0x2, 0xf03, r4, 0x1000000, '\x00', r7, r6, 0x3, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000000000000002000000400004803c0001800a000100696e6e65720000002c0002800800024000000084080003400000006961746500000004000280140000001100010000000000000000000a00000a"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028005000100"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x8, 0x5, 0x49d, 0xff41}) r12 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r12, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x9, @loopback, 0xd}}, 0x24) 1.421480689s ago: executing program 6 (id=5449): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x3, &(0x7f0000003080)=0x0) getcwd(0x0, 0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000280)=[{}], 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0x7]}, &(0x7f00000000c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) clock_getres(0x4, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x3, 0x35, 0x9, 0xd}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @loopback, 0xff000000, 0xff000000, 'veth0\x00', 'ipvlan0\x00', {0xff}, {}, 0xff, 0x2, 0x2}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_vlan\x00', {0x0, 0x7f, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x23}, @empty, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8000}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r1, 0x0, 0x0, 0x5, 0x0, 0x0, r7}]) 837.714674ms ago: executing program 0 (id=5451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) socket$packet(0x11, 0xa, 0x300) (async, rerun: 32) socket$packet(0x11, 0xa, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r4, 0x0) (async) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1fffffd, {0x0, 0x0, 0x0, r9, {0x7}, {0xd}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) 807.979465ms ago: executing program 3 (id=5452): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x3, 0x15459f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 767.654717ms ago: executing program 0 (id=5453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x10000000, 0xe, 0x0, &(0x7f0000000940)="178d048604bf0bfb19d5b0a634da", 0x0, 0xffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 767.338557ms ago: executing program 3 (id=5454): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1028490, &(0x7f0000000140)={[{@noquota}, {@grpquota}, {@barrier}]}, 0x1, 0x4eb, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') 766.944687ms ago: executing program 2 (id=5455): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000680), 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_open_dev$usbfs(0x0, 0x205, 0x8401) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x693, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (fail_nth: 1) 713.974559ms ago: executing program 0 (id=5456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000007800)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10100, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x3940, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) get_robust_list(0x0, 0x0, 0x0) 713.207569ms ago: executing program 3 (id=5457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000000)={[{@nogrpid}, {@oldalloc}]}, 0xff, 0x58d, &(0x7f0000000240)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket(0x28, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 593.912805ms ago: executing program 5 (id=5458): pipe2(0x0, 0x800) r0 = socket(0x10, 0x803, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @mcast1, 0x6}, {0xa, 0x4e20, 0x2, @mcast1, 0x4}, r1, 0x6}}, 0x48) timer_create(0x3, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x5, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) timer_gettime(0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x437, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0xc4a48b7f26bf141b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x51}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000340)={0x8, &(0x7f0000000300)=[{0x7f, 0x80, 0x8}, {0x0, 0x80, 0x7f, 0x10001}, {0x40, 0x6, 0x6, 0x2}, {0xf, 0x5, 0xc}, {0x4, 0x1, 0x0, 0x1ff}, {0xff8, 0x5, 0x0, 0x4}, {0x8000, 0xcf, 0x1, 0x7}, {0x0, 0xa, 0x6, 0xfffffff8}]}) r5 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x24}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r6 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) syz_clone(0x0, &(0x7f0000000200)="e553ac480089c15efed6a4d990987f411bc32b951322c395a9797b0d19739537cb5d8ae3", 0x24, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="b07383f7577f080c765e74b4") mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.pending_reads\x00', 0x101801, 0x18f) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f00000000c0)=""/14, &(0x7f0000000040)=0xe) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r5, 0x0, 0x82) fchdir(r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 295.931257ms ago: executing program 5 (id=5459): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70010dfdc7ff2bbc2d31ddda63c0000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@deltfilter={0x94c, 0x2d, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xfff3}, {0xa, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0x10}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x8f4, 0x2, [@TCA_FLOW_ACT={0x8f0, 0x9, 0x0, 0x1, [@m_skbmod={0xb4, 0xe, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="9919e301a17a"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xba, 0x7, 0x6, 0x300, 0x8}, 0x10}}]}, {0x47, 0x6, "7ef2587d89ed4488cbdab72923393e0926972c6b67d4163010ba4b9ad143cbf30d63bca7671454a8aeca8dd59c97829beb7f63aa5c82adbe74a030e217c20e43ccdf9f"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x114, 0xe, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0xffffffffffffffff, 0x0, 0x40000}, 0x7f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x2, 0x401, 0x2}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc, 0xa, 0xffffffffffffffff}, 0x2b6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x0, 0xffffffffffffffff, 0x80000000, 0x5}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x6, 0xffffffffffffffff, 0x4, 0x9}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xfff, 0x6, 0xb146, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x2, 0xfffffffd}, 0x4cf}}]}, {0x1e, 0x6, "b9491b9fb48a98f579d6e9ea238ad7932ff1278d72c39f621210"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x70, 0x1d, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x5, 0xfff, 0x10001}, 0x48}}]}, {0x25, 0x6, "3663e9df39884416af7693d3871a55782f6d9a20c54733ce48dced1b7a800d09ab"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x174, 0xc, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x10000000, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x675, 0x10000000, 0x7fffffff, 0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x42f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x31eec21b, 0x80000001, 0x0, 0x5, 0x54}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x8, 0x8, 0x80000001}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xb6, 0x6, "0d1ddadc513a25f63295915c4e2c97072a845d012da36bd7b4039c020787f7755eabf5aa39533df8d0a4ac090a6e75996bc3a77f97cdd2a83565fc2243521a5e0963ad69f3f66372128065f8878f52b69adcd61bd60319e6c469d27bfc86d8e4fcde4f219b840af3082b2d28b2b00403b2bebce7939367181cd09f4e40d3d68f14804368793c6ba3b7bc4c8957b7aca99414e5d055e7da3b40ea585478e8350a0303b0f0a85170745d18298ca936de4f9652"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x15c, 0xa, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x100}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x392, 0xfffffffe, 0x1, 0x9, 0x80000000}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x6, 0x5, 0x84, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x1, 0x10000000, 0xff, 0x5}}]}, {0xc6, 0x6, "f6f8cc0faaa82fca49703c9b4b4cb40d45bf977606e6eea7e3401b30e34719a973aa60c23c0744499683dcffe193be301bc6fd5a26c70f610ecf647cdb5fda585d00693a73047ee4118c35c42f0dd5e9bad305a3363be9c55fcae669d5719524dd46aeecdd5be84c1bfbe7d8cba6580c33270bbe7413a86c03ff45df3fd9257b707757ec18a24534f59f169b29f06dd2c2c345f24830eeedb95c45c4f8dc776cd689f4dc4ab0cd7f283ef68385a7c5ab0978872a461a68493d485c1cc024f7ae51f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x194, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ff}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3ff, 0x4, 0x10000000, 0x6, 0x2}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xf77, 0x6, 0x3, 0x80000000}, 0xb}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "5cde9cc24d8ff6b3f0901aa534af8f4ff0e776f85b73fbe14d8994ebd57c3bb083f7957104c72f0395adb72b054a87f0d669dac5273aab7afc4b339fdd62adb53855f4a1f97fc0d32be103a427764780490eb2c95927d070858beda082eb6f68cdf8a9bceca9a17717cd8aceb88fb1e5c78cb9e12536a32ae6edceb00c505372f668bb77db93cf16d0562bba4465173a64c1dbf9b84000668c00a90bbfc7bc9b86f5a13ad34f19e03dbc0a6605b5bffec6d551f5e4dec1c86c100d8b4d74d458483cb9f16b0399940dcebd5bb3f9b0ff6cdf9868f009abbeae5bdc6ba9e00ce48bcc888b43304ea87d376ff154142f446f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x12c, 0xd, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xffff, 0x9, 0x30, 0x3161}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x5, 0x1, 0x60, 0x9}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x6, 0xfa, 0x2, 0x1000}, {0x2, 0x0, 0x4, 0x8000000}, {0x2, 0x4, 0x7, 0xa28f}, {0x10, 0xff, 0x10, 0x2}, {0x7f, 0x2, 0x0, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x99, 0x6, "2dd618061d493de468730cb8b9ef45ff928c09258352f5ac93d01b5e810b0f90ada2a0dae5f5ddebb11109ad8c19c6555a2c190d5c55e6243d3b8e8583afdb8721a3e079bf5589dc6a6cf2d7718550d41ab5a58101e806f09ea0d8012af3afe86992af4889baab7453b94bf30a6514cf1ef88eb8b52860c390c661df5b5c2e4aba62ce2f5e3efa9d997658ec4733cf1719ce6ddb78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x124, 0x0, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x0, 0x7, 0xffff}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3a}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x9a, 0x6, "dc1c14a2429ae783b00d26ca0dc8357f8c2d453944320ab8f2cb83ec5d4a221167ad9c417feebdc0c56ec9d5c67061b7c7d6bdcd3c8f1387122fce3225241aad30bbb67854cddbeecb98fbbbeaed9ee8d3fd74b412169108fbe3737ca141ee133058cf250df091b9bad50766f389acf5cbd6e7e3064f3ff9994042d9adbcad974593b293329b0a4823de7bb63c2f1b1a14f7767e60d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x94c}}, 0x0) io_uring_enter(r7, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='rseq_ip_fixup\x00', r9}, 0x18) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r10], 0x80}}, 0x20000000) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 289.971968ms ago: executing program 3 (id=5460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x8514, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x4, 0x0, 0x8, 0x20007, 0xb, 0x0, 0x9, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0_to_bridge\x00', 0x0}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0, 0x71, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000810000000000000008000000553be0ffffffffff18000000ffffffff0000000000000100b7080000000000007b8af8ff00000000b7080000bb0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181b0000", @ANYRES32=r5, @ANYBLOB="0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000184000000800000000000000000000008520000004000000b7080000000000007b8af8ff00000000b7080000000020007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000000000000a5000000950000000000000000004000"], &(0x7f00000008c0)='GPL\x00', 0x9, 0x92, &(0x7f00000009c0)=""/146, 0x41000, 0x40, '\x00', r6, @sk_lookup, r7, 0x8, &(0x7f0000000a80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x9, 0x8, 0x10000}, 0x10, r8, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000e40)=[{0x2, 0x1, 0x0, 0x8}, {0x1, 0x4, 0x1, 0x3}, {0x0, 0x4, 0x10, 0x2}, {0x1, 0x5, 0x3}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000fc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="564730c8a1fb3fdc924308504abff039d52fb0dc290ee4ce47caaf7341ea88fc4d68621f3cfdfed3293084838164c583c37a1e11faca7cf951ef19156cec7b5b3d1936880f7168e6b81126542f4c571861c7ae6543a34574a584a47519cdf8eae85c942fb943372b034d2eb78464a26abb9f998e22c9589e9a32a962b72305fccda7f0e2fa5375ad7d861430608cc44ad81657175fa2df411160771d88fddf341d95", @ANYRES64=r7], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x17, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000c447feffffffffff1800000007000000000000000e000000851000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510000007000000d34d7b23a72e92f564f0a7153cd494baef81ce5311f555ad627b381d2f54a138def27065da331ca37d6e99c4f35bc841f3f9a8b5cbd0ba0e6c0594607084868600c1c47cd421b8694daf2cdfd85fc6c6e45180a0536efe98fdb53a2ef85ddeb2d61a209b78edeac6526b5b35c44ca654bc6b7337c2b4f9b5c6257e"], &(0x7f00000001c0)='syzkaller\x00', 0x27, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xc, 0x2, 0x75dbbb24}, 0x10, r8, r10, 0x6, 0x0, &(0x7f0000000280)=[{0x0, 0x4, 0xb, 0xc}, {0x0, 0x4, 0x5, 0x5}, {0x1, 0x2, 0xf, 0x9}, {0x0, 0x2, 0x4, 0x50c451f422cd6e19}, {0x2, 0x5, 0x3, 0xc}, {0x1, 0x3, 0xa, 0x5}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x1b, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x5, 0x4, 0x0, 0x2, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x6, 0x7, 0x22da8c13cdbde6f2, 0x40, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x2, 0x0, 0x1, 0x30, 0x10}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0xffffffff, 0xf3, &(0x7f0000000880)=""/243, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x0, 0xc, 0x101}, 0x10, r8, r3, 0x6, &(0x7f0000000a40)=[r4], &(0x7f0000000a80)=[{0x1, 0x2, 0xc, 0x5}, {0x1, 0x2, 0xc, 0x8}, {0x5, 0x5, 0x4, 0x6}, {0x2, 0x1, 0xc, 0x7}, {0x2, 0x5, 0x7}, {0x2, 0x4, 0xa, 0x1}], 0x10, 0x1}, 0x94) r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000f40)=ANY=[@ANYRES8=r9, @ANYRESOCT=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) write$selinux_create(r11, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) r13 = socket(0x10, 0x3, 0x0) socket(0x6, 0x3, 0x3a) write(r13, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 253.19123ms ago: executing program 6 (id=5461): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x640100ff, @multicast1}, {0xfffd, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2002, 0x3, "1204000000f2aa1d1e0d494f6c4903de8a08e2328997b8ac46b04400", "a04027fa124125c63a5b0e4412c6ab5c", {"4186dbba08364dba146d6e8dda52d97b", "ff027abe261f352c54d03f15919eb36c"}}}}}}}, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/45, 0x2d}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000b80), 0x1, 0x8000) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000bc0)=""/211) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xa7c, 0x7fffffff, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 252.351ms ago: executing program 5 (id=5462): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x400, @multicast2}}}, 0x88) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000300003040005060004fffe0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280080012000900000008001e0000000000b8ff11000600000008000b00", @ANYRES16=r2, @ANYRESHEX=r3], 0x54}, 0x1, 0x2000000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x41, 0x79a2, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x700, 0x40, 0x1, 0xc8a}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000008000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x228000, 0x1000, 0x0, 0x4}, 0x20) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x154, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_ACT={0x11c, 0x2, [@m_sample={0xf4, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x55, r5}) 127.605355ms ago: executing program 5 (id=5463): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x58}}, 0x0) 108.730235ms ago: executing program 3 (id=5464): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000000, 0xfec6, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fdatasync(r6) 12.14977ms ago: executing program 0 (id=5465): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x3, 0x15459f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000380), 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 11.258459ms ago: executing program 3 (id=5466): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x100000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20080006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20010010) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r1 = socket(0x10, 0x3, 0x9) unshare(0x22020600) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xfffffffffffffeb5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x10001, @rand_addr=' \x01\x00', 0x400}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@rthdr={{0x18, 0x29, 0x39, {0x4, 0x0, 0x1, 0x8}}}], 0x18}}], 0x1, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xb4d}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xac}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x40014) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x4000000) 0s ago: executing program 5 (id=5467): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), 0x0, 0xc6, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mkdir(0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000080)=@delnexthop={0x18, 0x69, 0x1, 0x0, 0x1}, 0x18}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000034fbffffff000000000200010000ee40000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000001000080088"], 0x100}, 0x1, 0x7}, 0x14) kernel console output (not intermixed with test programs): e/Google Compute Engine, BIOS Google 10/25/2025 [ 217.920849][T15236] Call Trace: [ 217.920857][T15236] [ 217.920865][T15236] __dump_stack+0x1d/0x30 [ 217.920945][T15236] dump_stack_lvl+0xe8/0x140 [ 217.921018][T15236] dump_stack+0x15/0x1b [ 217.921036][T15236] should_fail_ex+0x265/0x280 [ 217.921057][T15236] should_failslab+0x8c/0xb0 [ 217.921080][T15236] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 217.921106][T15236] ? kstrdup_const+0x3e/0x50 [ 217.921139][T15236] ? __xa_alloc+0x291/0x300 [ 217.921156][T15236] kstrdup+0x3e/0xd0 [ 217.921266][T15236] kstrdup_const+0x3e/0x50 [ 217.921296][T15236] alloc_vfsmnt+0xe7/0x300 [ 217.921358][T15236] clone_mnt+0x30/0x5d0 [ 217.921389][T15236] copy_tree+0x2cd/0x8c0 [ 217.921462][T15236] copy_mnt_ns+0x136/0x6a0 [ 217.921479][T15236] ? kmem_cache_alloc_noprof+0x2c5/0x4b0 [ 217.921499][T15236] ? create_new_namespaces+0x3c/0x400 [ 217.921600][T15236] create_new_namespaces+0x83/0x400 [ 217.921625][T15236] unshare_nsproxy_namespaces+0xe8/0x120 [ 217.921655][T15236] ksys_unshare+0x3d0/0x6d0 [ 217.921794][T15236] ? ksys_write+0x15f/0x1a0 [ 217.921815][T15236] __x64_sys_unshare+0x1f/0x30 [ 217.921839][T15236] x64_sys_call+0x2ae6/0x3000 [ 217.921877][T15236] do_syscall_64+0xd8/0x2a0 [ 217.921913][T15236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.921936][T15236] RIP: 0033:0x7fa05ae5f749 [ 217.921999][T15236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.922045][T15236] RSP: 002b:00007fa0598c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 217.922105][T15236] RAX: ffffffffffffffda RBX: 00007fa05b0b5fa0 RCX: 00007fa05ae5f749 [ 217.922117][T15236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 217.922129][T15236] RBP: 00007fa0598c7090 R08: 0000000000000000 R09: 0000000000000000 [ 217.922140][T15236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.922160][T15236] R13: 00007fa05b0b6038 R14: 00007fa05b0b5fa0 R15: 00007ffc13799558 [ 217.922180][T15236] [ 218.217401][T15249] loop5: detected capacity change from 0 to 512 [ 218.226818][T15249] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.317731][T15260] program syz.5.4463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.442038][T15273] FAULT_INJECTION: forcing a failure. [ 218.442038][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 218.454810][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.2.4472 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.454847][T15273] Tainted: [W]=WARN [ 218.454855][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.454884][T15273] Call Trace: [ 218.454892][T15273] [ 218.454901][T15273] __dump_stack+0x1d/0x30 [ 218.454928][T15273] dump_stack_lvl+0xe8/0x140 [ 218.455062][T15273] dump_stack+0x15/0x1b [ 218.455080][T15273] should_fail_ex+0x265/0x280 [ 218.455101][T15273] should_failslab+0x8c/0xb0 [ 218.455125][T15273] __kmalloc_cache_noprof+0x65/0x4c0 [ 218.455151][T15273] ? p9_client_create+0x59/0xb90 [ 218.455241][T15273] p9_client_create+0x59/0xb90 [ 218.455333][T15273] ? should_failslab+0x8c/0xb0 [ 218.455351][T15273] ? __kmalloc_node_track_caller_noprof+0x3a6/0x5b0 [ 218.455383][T15273] ? v9fs_session_init+0x78/0xde0 [ 218.455422][T15273] v9fs_session_init+0xf7/0xde0 [ 218.455456][T15273] ? avc_has_perm_noaudit+0xab/0x130 [ 218.455514][T15273] ? should_fail_ex+0xdb/0x280 [ 218.455550][T15273] ? should_failslab+0x8c/0xb0 [ 218.455573][T15273] ? __kmalloc_cache_noprof+0x252/0x4c0 [ 218.455598][T15273] ? v9fs_mount+0x51/0x5c0 [ 218.455620][T15273] v9fs_mount+0x67/0x5c0 [ 218.455676][T15273] ? selinux_capable+0x31/0x40 [ 218.455745][T15273] ? __pfx_v9fs_mount+0x10/0x10 [ 218.455774][T15273] legacy_get_tree+0x78/0xd0 [ 218.455799][T15273] vfs_get_tree+0x57/0x1d0 [ 218.455818][T15273] do_new_mount+0x24d/0x6a0 [ 218.455886][T15273] ? security_capable+0x83/0x90 [ 218.455915][T15273] path_mount+0x4ab/0xb80 [ 218.455931][T15273] ? user_path_at+0xbf/0x130 [ 218.456016][T15273] __se_sys_mount+0x28c/0x2e0 [ 218.456037][T15273] ? fput+0x8f/0xc0 [ 218.456108][T15273] __x64_sys_mount+0x67/0x80 [ 218.456164][T15273] x64_sys_call+0x2cca/0x3000 [ 218.456187][T15273] do_syscall_64+0xd8/0x2a0 [ 218.456224][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.456288][T15273] RIP: 0033:0x7f41dce0f749 [ 218.456304][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.456325][T15273] RSP: 002b:00007f41db877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 218.456424][T15273] RAX: ffffffffffffffda RBX: 00007f41dd065fa0 RCX: 00007f41dce0f749 [ 218.456437][T15273] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 218.456449][T15273] RBP: 00007f41db877090 R08: 00002000000005c0 R09: 0000000000000000 [ 218.456461][T15273] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000002 [ 218.456473][T15273] R13: 00007f41dd066038 R14: 00007f41dd065fa0 R15: 00007ffc8c094d28 [ 218.456547][T15273] [ 218.721455][T15275] FAULT_INJECTION: forcing a failure. [ 218.721455][T15275] name failslab, interval 1, probability 0, space 0, times 0 [ 218.734280][T15275] CPU: 0 UID: 0 PID: 15275 Comm: syz.5.4469 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.734359][T15275] Tainted: [W]=WARN [ 218.734366][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 218.734378][T15275] Call Trace: [ 218.734385][T15275] [ 218.734399][T15275] __dump_stack+0x1d/0x30 [ 218.734466][T15275] dump_stack_lvl+0xe8/0x140 [ 218.734486][T15275] dump_stack+0x15/0x1b [ 218.734562][T15275] should_fail_ex+0x265/0x280 [ 218.734583][T15275] should_failslab+0x8c/0xb0 [ 218.734602][T15275] __kmalloc_cache_noprof+0x65/0x4c0 [ 218.734626][T15275] ? p9_client_create+0x59/0xb90 [ 218.734654][T15275] p9_client_create+0x59/0xb90 [ 218.734677][T15275] ? should_failslab+0x8c/0xb0 [ 218.734699][T15275] ? __kmalloc_node_track_caller_noprof+0x3a6/0x5b0 [ 218.734725][T15275] ? v9fs_session_init+0x78/0xde0 [ 218.734757][T15275] v9fs_session_init+0xf7/0xde0 [ 218.734790][T15275] ? avc_has_perm_noaudit+0xab/0x130 [ 218.734890][T15275] ? should_fail_ex+0xdb/0x280 [ 218.734927][T15275] ? should_failslab+0x8c/0xb0 [ 218.735050][T15275] ? __kmalloc_cache_noprof+0x252/0x4c0 [ 218.735096][T15275] ? v9fs_mount+0x51/0x5c0 [ 218.735188][T15275] v9fs_mount+0x67/0x5c0 [ 218.735209][T15275] ? selinux_capable+0x31/0x40 [ 218.735252][T15275] ? __pfx_v9fs_mount+0x10/0x10 [ 218.735274][T15275] legacy_get_tree+0x78/0xd0 [ 218.735297][T15275] vfs_get_tree+0x57/0x1d0 [ 218.735316][T15275] do_new_mount+0x24d/0x6a0 [ 218.735415][T15275] ? security_capable+0x83/0x90 [ 218.735475][T15275] path_mount+0x4ab/0xb80 [ 218.735494][T15275] ? user_path_at+0xbf/0x130 [ 218.735596][T15275] __se_sys_mount+0x28c/0x2e0 [ 218.735657][T15275] ? fput+0x8f/0xc0 [ 218.735757][T15275] __x64_sys_mount+0x67/0x80 [ 218.735776][T15275] x64_sys_call+0x2cca/0x3000 [ 218.735800][T15275] do_syscall_64+0xd8/0x2a0 [ 218.735843][T15275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.735866][T15275] RIP: 0033:0x7fa05ae5f749 [ 218.735881][T15275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.735897][T15275] RSP: 002b:00007fa0598a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 218.735915][T15275] RAX: ffffffffffffffda RBX: 00007fa05b0b6090 RCX: 00007fa05ae5f749 [ 218.735929][T15275] RDX: 00002000000002c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 218.735943][T15275] RBP: 00007fa0598a6090 R08: 0000200000000440 R09: 0000000000000000 [ 218.735991][T15275] R10: 0000000000010044 R11: 0000000000000246 R12: 0000000000000002 [ 218.736003][T15275] R13: 00007fa05b0b6128 R14: 00007fa05b0b6090 R15: 00007ffc13799558 [ 218.736019][T15275] [ 218.736365][T15276] __nla_validate_parse: 33 callbacks suppressed [ 218.736379][T15276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4470'. [ 219.012401][T15276] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4470'. [ 219.055079][T15282] netlink: 'syz.2.4474': attribute type 4 has an invalid length. [ 219.062967][T15282] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4474'. [ 219.072665][T15282] netlink: 'syz.2.4474': attribute type 4 has an invalid length. [ 219.080449][T15282] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4474'. [ 219.233369][T15290] lo speed is unknown, defaulting to 1000 [ 219.282900][T15294] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4480'. [ 219.297474][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4479'. [ 219.317264][T15292] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4479'. [ 219.326449][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4479'. [ 219.388779][T15305] FAULT_INJECTION: forcing a failure. [ 219.388779][T15305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.390261][T15303] bpf: Bad value for 'gid' [ 219.401972][T15305] CPU: 0 UID: 0 PID: 15305 Comm: syz.5.4484 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.402058][T15305] Tainted: [W]=WARN [ 219.402064][T15305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.402076][T15305] Call Trace: [ 219.402084][T15305] [ 219.402094][T15305] __dump_stack+0x1d/0x30 [ 219.402160][T15305] dump_stack_lvl+0xe8/0x140 [ 219.402182][T15305] dump_stack+0x15/0x1b [ 219.402218][T15305] should_fail_ex+0x265/0x280 [ 219.402242][T15305] should_fail+0xb/0x20 [ 219.402299][T15305] should_fail_usercopy+0x1a/0x20 [ 219.402325][T15305] _copy_to_iter+0x387/0xe70 [ 219.402359][T15305] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 219.402397][T15305] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 219.402428][T15305] __skb_datagram_iter+0xc6/0x690 [ 219.402458][T15305] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 219.402554][T15305] skb_copy_datagram_iter+0x3d/0x110 [ 219.402641][T15305] netlink_recvmsg+0x1a8/0x550 [ 219.402725][T15305] ? __pfx_netlink_recvmsg+0x10/0x10 [ 219.402815][T15305] sock_recvmsg+0x139/0x170 [ 219.402835][T15305] ____sys_recvmsg+0xf5/0x280 [ 219.402871][T15305] ___sys_recvmsg+0x11f/0x370 [ 219.402909][T15305] do_recvmmsg+0x1ef/0x540 [ 219.403006][T15305] ? get_timespec64+0xc9/0x100 [ 219.403031][T15305] __x64_sys_recvmmsg+0xfb/0x170 [ 219.403063][T15305] x64_sys_call+0x2b75/0x3000 [ 219.403093][T15305] do_syscall_64+0xd8/0x2a0 [ 219.403128][T15305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.403163][T15305] RIP: 0033:0x7fa05ae5f749 [ 219.403180][T15305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.403199][T15305] RSP: 002b:00007fa0598c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 219.403237][T15305] RAX: ffffffffffffffda RBX: 00007fa05b0b5fa0 RCX: 00007fa05ae5f749 [ 219.403251][T15305] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005 [ 219.403321][T15305] RBP: 00007fa0598c7090 R08: 0000200000003700 R09: 0000000000000000 [ 219.403334][T15305] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 219.403348][T15305] R13: 00007fa05b0b6038 R14: 00007fa05b0b5fa0 R15: 00007ffc13799558 [ 219.403372][T15305] [ 219.710229][T15318] program syz.3.4489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.725446][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4490'. [ 219.734493][T15322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4490'. [ 219.769556][T15321] hsr_slave_0: left promiscuous mode [ 219.775473][T15321] hsr_slave_1: left promiscuous mode [ 219.899925][T15335] lo speed is unknown, defaulting to 1000 [ 220.496234][T15360] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 220.766584][T15366] program syz.4.4508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.820342][T15376] program syz.2.4511 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.903729][T15384] netlink: 'syz.4.4512': attribute type 1 has an invalid length. [ 220.911584][T15384] netlink: 'syz.4.4512': attribute type 4 has an invalid length. [ 220.925673][T15384] netlink: 'syz.4.4512': attribute type 1 has an invalid length. [ 220.933593][T15384] netlink: 'syz.4.4512': attribute type 4 has an invalid length. [ 220.980437][T15390] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 221.099253][T15400] program syz.3.4523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.449732][T15413] netlink: 'syz.4.4528': attribute type 1 has an invalid length. [ 221.457608][T15413] netlink: 'syz.4.4528': attribute type 4 has an invalid length. [ 221.465642][T15413] netlink: 'syz.4.4528': attribute type 1 has an invalid length. [ 221.473411][T15413] netlink: 'syz.4.4528': attribute type 4 has an invalid length. [ 221.524170][T15419] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 221.612444][T15425] program syz.2.4534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.621946][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 221.621963][ T29] audit: type=1326 audit(1765044655.572:33927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.651825][ T29] audit: type=1326 audit(1765044655.572:33928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.675536][ T29] audit: type=1326 audit(1765044655.572:33929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.699087][ T29] audit: type=1326 audit(1765044655.572:33930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.722575][ T29] audit: type=1326 audit(1765044655.572:33931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.746105][ T29] audit: type=1326 audit(1765044655.572:33932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.769713][ T29] audit: type=1326 audit(1765044655.572:33933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.793610][ T29] audit: type=1326 audit(1765044655.572:33934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.817299][ T29] audit: type=1326 audit(1765044655.572:33935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.840841][ T29] audit: type=1326 audit(1765044655.572:33936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15424 comm="syz.2.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 221.986560][T15445] lo speed is unknown, defaulting to 1000 [ 222.127570][T15455] program syz.3.4546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.609421][T15476] lo speed is unknown, defaulting to 1000 [ 222.703589][T15479] lo speed is unknown, defaulting to 1000 [ 222.923060][T15487] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.028895][T15487] loop5: detected capacity change from 0 to 8192 [ 223.107221][T15497] loop5: detected capacity change from 0 to 1024 [ 223.115047][T15497] EXT4-fs: Ignoring removed oldalloc option [ 223.133025][T15497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.165016][T15503] lo speed is unknown, defaulting to 1000 [ 223.171695][T15497] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.4562: directory missing '..' [ 223.337625][T15519] program syz.4.4571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.621365][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.870844][T15546] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.878564][T15547] __nla_validate_parse: 44 callbacks suppressed [ 223.878578][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4583'. [ 223.882898][T15541] lo speed is unknown, defaulting to 1000 [ 223.885115][T15547] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4583'. [ 223.903827][T15544] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4582'. [ 223.908708][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4583'. [ 223.950774][T15550] program syz.3.4584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.966733][T15546] loop5: detected capacity change from 0 to 8192 [ 224.015996][T15555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4586'. [ 224.100427][T15557] program syz.4.4587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.113002][T15559] validate_nla: 12 callbacks suppressed [ 224.113017][T15559] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 224.126462][T15559] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 224.134235][T15559] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4589'. [ 224.147280][T15559] netlink: 'syz.3.4589': attribute type 1 has an invalid length. [ 224.155117][T15559] netlink: 'syz.3.4589': attribute type 4 has an invalid length. [ 224.162981][T15559] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4589'. [ 224.188322][T15565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.212851][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4588'. [ 224.233799][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4590'. [ 224.256618][T15565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.284801][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4596'. [ 224.342295][T15565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.409704][T15592] lo speed is unknown, defaulting to 1000 [ 224.450889][T15595] netlink: 'syz.4.4602': attribute type 1 has an invalid length. [ 224.458737][T15595] netlink: 'syz.4.4602': attribute type 4 has an invalid length. [ 224.467766][T15595] netlink: 'syz.4.4602': attribute type 1 has an invalid length. [ 224.475536][T15595] netlink: 'syz.4.4602': attribute type 4 has an invalid length. [ 224.485285][T15565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.661023][ T61] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.735245][ T61] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.825623][ T61] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.889643][ T61] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.051803][T15621] program syz.0.4612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.068830][T15623] sd 0:0:1:0: device reset [ 225.094765][T15627] program syz.0.4614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.111426][T15629] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 225.119273][T15629] netlink: 'syz.2.4616': attribute type 4 has an invalid length. [ 225.366125][T15649] program syz.3.4625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.456799][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.474317][T15656] program syz.4.4628 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.485090][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.662445][T15679] program syz.2.4638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.755292][T15689] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.991061][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.008561][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.070794][T15711] program syz.0.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.129610][T15713] lo speed is unknown, defaulting to 1000 [ 226.221232][T15720] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 226.375214][T15728] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.429144][T15728] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.488767][T15728] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.548922][T15728] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.728376][ T29] kauditd_printk_skb: 1010 callbacks suppressed [ 226.728392][ T29] audit: type=1326 audit(1765044660.692:34947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.729960][T15736] program syz.4.4665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.734697][ T29] audit: type=1326 audit(1765044660.692:34948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.791659][ T29] audit: type=1326 audit(1765044660.692:34949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.815473][ T29] audit: type=1326 audit(1765044660.692:34950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.839096][ T29] audit: type=1326 audit(1765044660.692:34951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.862988][ T29] audit: type=1326 audit(1765044660.692:34952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.888126][ T29] audit: type=1326 audit(1765044660.692:34953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.912084][ T29] audit: type=1326 audit(1765044660.692:34954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.936838][ T29] audit: type=1326 audit(1765044660.692:34955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 226.960527][ T29] audit: type=1326 audit(1765044660.692:34956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz.4.4665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23f91f749 code=0x7ffc0000 [ 227.060846][T15752] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 227.267890][T15769] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.363557][T15774] loop5: detected capacity change from 0 to 512 [ 227.370528][T15774] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.383157][T15774] program syz.5.4678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.460856][T15780] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 227.500084][T15780] loop5: detected capacity change from 0 to 8192 [ 227.982427][T15821] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 228.051664][T15825] lo speed is unknown, defaulting to 1000 [ 228.178939][T15839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.197661][T15839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.376783][T15848] program syz.2.4709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.431475][T15851] lo speed is unknown, defaulting to 1000 [ 228.562593][ T1713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.582939][ T1713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.601802][ T1713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.620108][ T1713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.735656][T15865] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 228.920884][ T61] dvmrp6 (unregistering): left allmulticast mode [ 228.934519][ T61] bond1 (unregistering): (slave geneve2): Releasing active interface [ 228.990858][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.001053][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.010798][ T61] bond0 (unregistering): Released all slaves [ 229.022005][ T61] bond1 (unregistering): Released all slaves [ 229.031438][ T10] infiniband syb2: ib_query_port failed (-19) [ 229.031488][T15872] __nla_validate_parse: 56 callbacks suppressed [ 229.031501][T15872] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4716'. [ 229.068859][T15869] lo speed is unknown, defaulting to 1000 [ 229.162546][T15879] program syz.2.4720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.208790][T15885] validate_nla: 20 callbacks suppressed [ 229.208884][T15885] netlink: 'syz.0.4723': attribute type 1 has an invalid length. [ 229.222237][T15885] netlink: 'syz.0.4723': attribute type 4 has an invalid length. [ 229.229984][T15885] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4723'. [ 229.240048][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4721'. [ 229.249033][T15888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4721'. [ 229.258629][T15889] netlink: 'syz.0.4723': attribute type 1 has an invalid length. [ 229.266399][T15889] netlink: 'syz.0.4723': attribute type 4 has an invalid length. [ 229.274163][T15889] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4723'. [ 229.300076][ T61] veth1_macvtap: left promiscuous mode [ 229.305596][ T61] veth0_macvtap: left promiscuous mode [ 229.313731][ T61] veth1_vlan: left promiscuous mode [ 229.319275][ T61] veth0_vlan: left promiscuous mode [ 229.357844][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4725'. [ 229.369609][T15893] program syz.3.4726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.431241][ T61] team0 (unregistering): Port device team_slave_1 removed [ 229.442356][ T61] team0 (unregistering): Port device team_slave_0 removed [ 229.505692][ T10] lo speed is unknown, defaulting to 1000 [ 229.511649][ T10] syz2: Port: 1 Link DOWN [ 229.580760][T15905] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4730'. [ 229.631932][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 229.641978][T15911] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4733'. [ 229.651069][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4733'. [ 229.688185][T15917] program syz.3.4735 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.708032][ T61] IPVS: stop unused estimator thread 0... [ 229.829519][T15927] program syz.3.4740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.101533][T15947] program syz.2.4748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.271933][T15955] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 230.845781][T15993] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 231.216276][T16018] netlink: 'syz.3.4775': attribute type 1 has an invalid length. [ 231.224145][T16018] netlink: 'syz.3.4775': attribute type 4 has an invalid length. [ 231.232375][T16018] netlink: 'syz.3.4775': attribute type 1 has an invalid length. [ 231.240211][T16018] netlink: 'syz.3.4775': attribute type 4 has an invalid length. [ 231.430801][T16035] loop5: detected capacity change from 0 to 512 [ 231.470123][T16035] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.500578][T16042] netlink: 'syz.3.4787': attribute type 1 has an invalid length. [ 231.508399][T16042] netlink: 'syz.3.4787': attribute type 4 has an invalid length. [ 231.532493][T16035] program syz.5.4783 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.775195][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 231.775277][ T29] audit: type=1326 audit(1765044665.732:35867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16076 comm="syz.5.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ae5f749 code=0x7ffc0000 [ 231.805704][ T29] audit: type=1326 audit(1765044665.762:35868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16076 comm="syz.5.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa05ae5f749 code=0x7ffc0000 [ 231.829361][ T29] audit: type=1326 audit(1765044665.762:35869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16076 comm="syz.5.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ae5f749 code=0x7ffc0000 [ 231.853109][ T29] audit: type=1326 audit(1765044665.762:35870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16076 comm="syz.5.4802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05ae5f749 code=0x7ffc0000 [ 231.878458][ T29] audit: type=1326 audit(1765044665.802:35871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 231.902190][ T29] audit: type=1326 audit(1765044665.802:35872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.2.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 232.220668][ T29] audit: type=1400 audit(1765044666.182:35873): avc: denied { connect } for pid=16111 comm="syz.3.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.241740][T16112] FAULT_INJECTION: forcing a failure. [ 232.241740][T16112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.254931][T16112] CPU: 0 UID: 0 PID: 16112 Comm: syz.3.4817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.254985][T16112] Tainted: [W]=WARN [ 232.254993][T16112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.255006][T16112] Call Trace: [ 232.255013][T16112] [ 232.255020][T16112] __dump_stack+0x1d/0x30 [ 232.255043][T16112] dump_stack_lvl+0xe8/0x140 [ 232.255097][T16112] dump_stack+0x15/0x1b [ 232.255115][T16112] should_fail_ex+0x265/0x280 [ 232.255135][T16112] should_fail+0xb/0x20 [ 232.255161][T16112] should_fail_usercopy+0x1a/0x20 [ 232.255266][T16112] _copy_from_user+0x1c/0xb0 [ 232.255296][T16112] ___sys_sendmsg+0xc1/0x1d0 [ 232.255362][T16112] __x64_sys_sendmsg+0xd4/0x160 [ 232.255401][T16112] x64_sys_call+0x17ba/0x3000 [ 232.255425][T16112] do_syscall_64+0xd8/0x2a0 [ 232.255536][T16112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.255561][T16112] RIP: 0033:0x7f148503f749 [ 232.255576][T16112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.255593][T16112] RSP: 002b:00007f1483a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.255611][T16112] RAX: ffffffffffffffda RBX: 00007f1485295fa0 RCX: 00007f148503f749 [ 232.255646][T16112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 232.255661][T16112] RBP: 00007f1483a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.255675][T16112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.255686][T16112] R13: 00007f1485296038 R14: 00007f1485295fa0 R15: 00007ffee14447c8 [ 232.255703][T16112] [ 232.439607][ T29] audit: type=1400 audit(1765044666.402:35874): avc: denied { read } for pid=16114 comm="syz.3.4818" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 232.599391][ T29] audit: type=1400 audit(1765044666.562:35875): avc: denied { ioctl } for pid=16114 comm="syz.3.4818" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=249 ioctlcmd=0x5403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 232.628305][ T29] audit: type=1400 audit(1765044666.562:35876): avc: denied { setcurrent } for pid=16114 comm="syz.3.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 232.732820][T16151] FAULT_INJECTION: forcing a failure. [ 232.732820][T16151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.746195][T16151] CPU: 0 UID: 0 PID: 16151 Comm: syz.4.4833 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.746257][T16151] Tainted: [W]=WARN [ 232.746265][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 232.746277][T16151] Call Trace: [ 232.746283][T16151] [ 232.746290][T16151] __dump_stack+0x1d/0x30 [ 232.746316][T16151] dump_stack_lvl+0xe8/0x140 [ 232.746341][T16151] dump_stack+0x15/0x1b [ 232.746392][T16151] should_fail_ex+0x265/0x280 [ 232.746413][T16151] should_fail+0xb/0x20 [ 232.746432][T16151] should_fail_usercopy+0x1a/0x20 [ 232.746482][T16151] strncpy_from_user+0x27/0x260 [ 232.746518][T16151] path_setxattrat+0xeb/0x310 [ 232.746554][T16151] __x64_sys_fsetxattr+0x6b/0x80 [ 232.746657][T16151] x64_sys_call+0x23c4/0x3000 [ 232.746681][T16151] do_syscall_64+0xd8/0x2a0 [ 232.746712][T16151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.746735][T16151] RIP: 0033:0x7fe23f91f749 [ 232.746753][T16151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.746773][T16151] RSP: 002b:00007fe23e37f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 232.746837][T16151] RAX: ffffffffffffffda RBX: 00007fe23fb75fa0 RCX: 00007fe23f91f749 [ 232.746852][T16151] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 232.746866][T16151] RBP: 00007fe23e37f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.746877][T16151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.746889][T16151] R13: 00007fe23fb76038 R14: 00007fe23fb75fa0 R15: 00007fffeadf3608 [ 232.746971][T16151] [ 233.265093][T16194] FAULT_INJECTION: forcing a failure. [ 233.265093][T16194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.278386][T16194] CPU: 1 UID: 0 PID: 16194 Comm: syz.2.4853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.278496][T16194] Tainted: [W]=WARN [ 233.278502][T16194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.278514][T16194] Call Trace: [ 233.278520][T16194] [ 233.278554][T16194] __dump_stack+0x1d/0x30 [ 233.278578][T16194] dump_stack_lvl+0xe8/0x140 [ 233.278600][T16194] dump_stack+0x15/0x1b [ 233.278622][T16194] should_fail_ex+0x265/0x280 [ 233.278703][T16194] should_fail+0xb/0x20 [ 233.278759][T16194] should_fail_usercopy+0x1a/0x20 [ 233.278786][T16194] _copy_from_user+0x1c/0xb0 [ 233.278836][T16194] __sys_connect+0xd0/0x2b0 [ 233.278865][T16194] __x64_sys_connect+0x3f/0x50 [ 233.278887][T16194] x64_sys_call+0x2e09/0x3000 [ 233.278914][T16194] do_syscall_64+0xd8/0x2a0 [ 233.279017][T16194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.279038][T16194] RIP: 0033:0x7f41dce0f749 [ 233.279052][T16194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.279069][T16194] RSP: 002b:00007f41db877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 233.279087][T16194] RAX: ffffffffffffffda RBX: 00007f41dd065fa0 RCX: 00007f41dce0f749 [ 233.279165][T16194] RDX: 000000000000006e RSI: 0000200000000240 RDI: 0000000000000007 [ 233.279194][T16194] RBP: 00007f41db877090 R08: 0000000000000000 R09: 0000000000000000 [ 233.279208][T16194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.279221][T16194] R13: 00007f41dd066038 R14: 00007f41dd065fa0 R15: 00007ffc8c094d28 [ 233.279238][T16194] [ 233.579828][T16208] program syz.2.4859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.615518][T16212] loop5: detected capacity change from 0 to 512 [ 233.622385][T16212] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 233.638413][T16214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.784065][T16225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.832765][T16229] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 234.064379][ T1713] dvmrp6 (unregistering): left allmulticast mode [ 234.119463][ T1713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.151656][ T1713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.174192][ T1713] bond0 (unregistering): Released all slaves [ 234.239830][T16235] program syz.3.4871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.298718][T16255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.414904][T16260] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 234.481874][T16262] __nla_validate_parse: 47 callbacks suppressed [ 234.481894][T16262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 234.619281][ T1713] team0 (unregistering): Port device team_slave_1 removed [ 234.646610][ T1713] team0 (unregistering): Port device team_slave_0 removed [ 234.665846][T16273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4886'. [ 234.751566][T16284] program syz.3.4891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.889596][T16289] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.913166][ T1713] IPVS: stop unused estimator thread 0... [ 235.224149][T16313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4901'. [ 235.254977][T16301] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 235.275710][T16315] program syz.0.4902 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.446257][ T1713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.459258][ T1713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.469433][ T1713] bond0 (unregistering): Released all slaves [ 235.478382][ T1713] bond1 (unregistering): Released all slaves [ 235.489855][T16268] chnl_net:caif_netlink_parms(): no params data found [ 235.529675][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'. [ 235.634973][T16268] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.642175][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.656302][T16268] bridge_slave_0: entered allmulticast mode [ 235.664882][T16268] bridge_slave_0: entered promiscuous mode [ 235.683066][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.690318][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.701585][T16268] bridge_slave_1: entered allmulticast mode [ 235.709161][T16268] bridge_slave_1: entered promiscuous mode [ 235.717902][ T1713] hsr_slave_0: left promiscuous mode [ 235.723897][ T1713] hsr_slave_1: left promiscuous mode [ 235.729799][ T1713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.743086][ T1713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.781676][ T1713] team0 (unregistering): Port device team_slave_1 removed [ 235.791728][ T1713] team0 (unregistering): Port device team_slave_0 removed [ 235.865536][T16268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.915186][T16268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.951828][T16268] team0: Port device team_slave_0 added [ 235.968294][T16268] team0: Port device team_slave_1 added [ 235.986311][T16268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.993358][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.019510][T16268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.031203][T16268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.038358][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.065059][T16268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.109493][T16268] hsr_slave_0: entered promiscuous mode [ 236.115682][T16268] hsr_slave_1: entered promiscuous mode [ 236.128348][T16351] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 236.278878][T16356] FAULT_INJECTION: forcing a failure. [ 236.278878][T16356] name failslab, interval 1, probability 0, space 0, times 0 [ 236.289454][T16268] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.291655][T16356] CPU: 1 UID: 0 PID: 16356 Comm: syz.3.4916 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 236.291689][T16356] Tainted: [W]=WARN [ 236.291697][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 236.291709][T16356] Call Trace: [ 236.291715][T16356] [ 236.291723][T16356] __dump_stack+0x1d/0x30 [ 236.291749][T16356] dump_stack_lvl+0xe8/0x140 [ 236.291818][T16356] dump_stack+0x15/0x1b [ 236.291839][T16356] should_fail_ex+0x265/0x280 [ 236.291862][T16356] should_failslab+0x8c/0xb0 [ 236.291885][T16356] kmem_cache_alloc_noprof+0x69/0x4b0 [ 236.291977][T16356] ? create_new_namespaces+0x3c/0x400 [ 236.292006][T16356] create_new_namespaces+0x3c/0x400 [ 236.292061][T16356] unshare_nsproxy_namespaces+0xe8/0x120 [ 236.292089][T16356] ksys_unshare+0x3d0/0x6d0 [ 236.292116][T16356] __x64_sys_unshare+0x1f/0x30 [ 236.292190][T16356] x64_sys_call+0x2ae6/0x3000 [ 236.292287][T16356] do_syscall_64+0xd8/0x2a0 [ 236.292322][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.292344][T16356] RIP: 0033:0x7f148503f749 [ 236.292374][T16356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.292393][T16356] RSP: 002b:00007f1483a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.292414][T16356] RAX: ffffffffffffffda RBX: 00007f1485295fa0 RCX: 00007f148503f749 [ 236.292427][T16356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 236.292440][T16356] RBP: 00007f1483a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 236.292505][T16356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.292559][T16356] R13: 00007f1485296038 R14: 00007f1485295fa0 R15: 00007ffee14447c8 [ 236.292578][T16356] [ 236.483963][T16268] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.495835][T16268] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.506393][T16268] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 236.582761][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4922'. [ 236.595366][T16371] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4922'. [ 236.604614][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4922'. [ 236.617512][T16366] program syz.2.4921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.636858][T16268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.675047][T16268] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.685947][ T1890] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.693019][ T1890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.718502][ T1890] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.725702][ T1890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.855318][T16268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.871974][ T29] kauditd_printk_skb: 3404 callbacks suppressed [ 236.871988][ T29] audit: type=1326 audit(1765044670.832:39281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16377 comm="syz.2.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 236.902057][ T29] audit: type=1326 audit(1765044670.832:39282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16377 comm="syz.2.4923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dce0f749 code=0x7ffc0000 [ 236.944316][T16400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16400 comm=syz.3.4931 [ 236.967835][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4931'. [ 236.978698][T16400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4931'. [ 237.017551][T16268] veth0_vlan: entered promiscuous mode [ 237.025713][T16268] veth1_vlan: entered promiscuous mode [ 237.032630][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4931'. [ 237.033457][T16400] IPVS: Error connecting to the multicast addr [ 237.061611][T16268] veth0_macvtap: entered promiscuous mode [ 237.069653][T16268] veth1_macvtap: entered promiscuous mode [ 237.081262][T16268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.096681][T16268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.128722][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.140932][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.150115][ T29] audit: type=1326 audit(1765044671.112:39283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.151775][T16414] program syz.3.4932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.173961][ T29] audit: type=1326 audit(1765044671.112:39284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.173998][ T29] audit: type=1326 audit(1765044671.112:39285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.230430][ T29] audit: type=1326 audit(1765044671.112:39286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.253939][ T29] audit: type=1326 audit(1765044671.112:39287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.280111][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.296062][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.299820][ T29] audit: type=1326 audit(1765044671.112:39288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.328527][ T29] audit: type=1326 audit(1765044671.112:39289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 237.352126][ T29] audit: type=1326 audit(1765044671.112:39290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.3.4932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f148503df90 code=0x7ffc0000 [ 237.624598][T16441] program syz.6.4942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.710888][T16454] tipc: Started in network mode [ 237.715850][T16454] tipc: Node identity f2290e2d8951, cluster identity 4711 [ 237.723150][T16454] tipc: Enabled bearer , priority 0 [ 237.758132][T16454] tipc: Disabling bearer [ 237.945281][T16469] hub 9-0:1.0: USB hub found [ 237.957572][T16469] hub 9-0:1.0: 8 ports detected [ 238.071280][T16481] loop5: detected capacity change from 0 to 512 [ 238.078476][T16481] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.107639][T16484] FAULT_INJECTION: forcing a failure. [ 238.107639][T16484] name failslab, interval 1, probability 0, space 0, times 0 [ 238.120310][T16484] CPU: 0 UID: 0 PID: 16484 Comm: syz.0.4958 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.120350][T16484] Tainted: [W]=WARN [ 238.120356][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.120367][T16484] Call Trace: [ 238.120375][T16484] [ 238.120389][T16484] __dump_stack+0x1d/0x30 [ 238.120412][T16484] dump_stack_lvl+0xe8/0x140 [ 238.120526][T16484] dump_stack+0x15/0x1b [ 238.120542][T16484] should_fail_ex+0x265/0x280 [ 238.120562][T16484] should_failslab+0x8c/0xb0 [ 238.120580][T16484] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 238.120635][T16484] ? __request_module+0x1df/0x3e0 [ 238.120656][T16484] ? should_failslab+0x8c/0xb0 [ 238.120674][T16484] kstrdup+0x3e/0xd0 [ 238.120708][T16484] __request_module+0x1df/0x3e0 [ 238.120805][T16484] ? lockref_put_return+0xf7/0x130 [ 238.120831][T16484] ? crypto_alg_lookup+0x310/0x360 [ 238.120856][T16484] crypto_alg_mod_lookup+0xa1/0x490 [ 238.120881][T16484] crypto_alloc_tfm_node+0xb5/0x2b0 [ 238.120937][T16484] crypto_alloc_aead+0x2d/0x40 [ 238.120999][T16484] tls_set_sw_offload+0x636/0xb20 [ 238.121028][T16484] tls_setsockopt+0xb8b/0xe70 [ 238.121093][T16484] sock_common_setsockopt+0x69/0x80 [ 238.121111][T16484] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.121129][T16484] __sys_setsockopt+0x184/0x200 [ 238.121153][T16484] __x64_sys_setsockopt+0x64/0x80 [ 238.121245][T16484] x64_sys_call+0x21d5/0x3000 [ 238.121266][T16484] do_syscall_64+0xd8/0x2a0 [ 238.121298][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.121317][T16484] RIP: 0033:0x7f8eff4af749 [ 238.121331][T16484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.121347][T16484] RSP: 002b:00007f8efdf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.121364][T16484] RAX: ffffffffffffffda RBX: 00007f8eff705fa0 RCX: 00007f8eff4af749 [ 238.121426][T16484] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000003 [ 238.121438][T16484] RBP: 00007f8efdf17090 R08: 0000000000000038 R09: 0000000000000000 [ 238.121449][T16484] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 238.121460][T16484] R13: 00007f8eff706038 R14: 00007f8eff705fa0 R15: 00007ffcb2ff4c48 [ 238.121476][T16484] [ 238.392492][T16492] tipc: Started in network mode [ 238.397501][T16492] tipc: Node identity caea4497cb56, cluster identity 4711 [ 238.404959][T16492] tipc: Enabled bearer , priority 0 [ 238.408341][T16494] SELinux: Context is not valid (left unmapped). [ 238.418710][T16492] FAULT_INJECTION: forcing a failure. [ 238.418710][T16492] name failslab, interval 1, probability 0, space 0, times 0 [ 238.431562][T16492] CPU: 0 UID: 0 PID: 16492 Comm: syz.0.4960 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.431596][T16492] Tainted: [W]=WARN [ 238.431603][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.431615][T16492] Call Trace: [ 238.431623][T16492] [ 238.431632][T16492] __dump_stack+0x1d/0x30 [ 238.431671][T16492] dump_stack_lvl+0xe8/0x140 [ 238.431700][T16492] dump_stack+0x15/0x1b [ 238.431718][T16492] should_fail_ex+0x265/0x280 [ 238.431740][T16492] should_failslab+0x8c/0xb0 [ 238.431760][T16492] __kmalloc_cache_noprof+0x65/0x4c0 [ 238.431793][T16492] ? netdevice_event+0x2ae/0x610 [ 238.431820][T16492] ? __pfx_netdevice_event+0x10/0x10 [ 238.431846][T16492] netdevice_event+0x2ae/0x610 [ 238.431875][T16492] ? __pfx_del_netdev_ips+0x10/0x10 [ 238.431969][T16492] ? __pfx_pass_all_filter+0x10/0x10 [ 238.432002][T16492] ? nh_netdev_event+0x104/0x3b0 [ 238.432032][T16492] ? __pfx_netdevice_event+0x10/0x10 [ 238.432057][T16492] raw_notifier_call_chain+0x6f/0x1b0 [ 238.432105][T16492] ? unregister_netdevice_many_notify+0xe8c/0x16d0 [ 238.432142][T16492] unregister_netdevice_many_notify+0xea0/0x16d0 [ 238.432182][T16492] unregister_netdevice_queue+0x1b8/0x1e0 [ 238.432324][T16492] __tun_detach+0x82c/0xb30 [ 238.432355][T16492] ? __pfx_tun_chr_close+0x10/0x10 [ 238.432485][T16492] tun_chr_close+0x5a/0x100 [ 238.432515][T16492] __fput+0x29b/0x650 [ 238.432559][T16492] fput_close_sync+0xad/0x190 [ 238.432663][T16492] __x64_sys_close+0x56/0xf0 [ 238.432692][T16492] x64_sys_call+0x2c25/0x3000 [ 238.432714][T16492] do_syscall_64+0xd8/0x2a0 [ 238.432771][T16492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.432796][T16492] RIP: 0033:0x7f8eff4af749 [ 238.432850][T16492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.432942][T16492] RSP: 002b:00007f8efdf17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 238.432964][T16492] RAX: ffffffffffffffda RBX: 00007f8eff705fa0 RCX: 00007f8eff4af749 [ 238.432985][T16492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 238.433015][T16492] RBP: 00007f8efdf17090 R08: 0000000000000000 R09: 0000000000000000 [ 238.433026][T16492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.433041][T16492] R13: 00007f8eff706038 R14: 00007f8eff705fa0 R15: 00007ffcb2ff4c48 [ 238.433061][T16492] [ 238.433929][T16492] tipc: Disabling bearer [ 238.980609][T16529] FAULT_INJECTION: forcing a failure. [ 238.980609][T16529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.993857][T16529] CPU: 1 UID: 0 PID: 16529 Comm: syz.6.4974 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.993893][T16529] Tainted: [W]=WARN [ 238.993901][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.993912][T16529] Call Trace: [ 238.993919][T16529] [ 238.993926][T16529] __dump_stack+0x1d/0x30 [ 238.993961][T16529] dump_stack_lvl+0xe8/0x140 [ 238.993981][T16529] dump_stack+0x15/0x1b [ 238.993999][T16529] should_fail_ex+0x265/0x280 [ 238.994024][T16529] should_fail+0xb/0x20 [ 238.994045][T16529] should_fail_usercopy+0x1a/0x20 [ 238.994122][T16529] _copy_from_user+0x1c/0xb0 [ 238.994151][T16529] xt_copy_counters+0x101/0x2d0 [ 238.994183][T16529] ? security_capable+0x83/0x90 [ 238.994284][T16529] do_ipt_set_ctl+0xb3/0x820 [ 238.994307][T16529] ? _raw_spin_unlock_bh+0x36/0x40 [ 238.994332][T16529] ? tcp_release_cb+0xf1/0x370 [ 238.994364][T16529] ? sockopt_release_sock+0x42/0x50 [ 238.994445][T16529] nf_setsockopt+0x199/0x1b0 [ 238.994465][T16529] ip_setsockopt+0x102/0x110 [ 238.994497][T16529] tcp_setsockopt+0x98/0xb0 [ 238.994607][T16529] sock_common_setsockopt+0x69/0x80 [ 238.994629][T16529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.994653][T16529] __sys_setsockopt+0x184/0x200 [ 238.994718][T16529] __x64_sys_setsockopt+0x64/0x80 [ 238.994755][T16529] x64_sys_call+0x21d5/0x3000 [ 238.994781][T16529] do_syscall_64+0xd8/0x2a0 [ 238.994884][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.994908][T16529] RIP: 0033:0x7f8821a8f749 [ 238.994924][T16529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.994944][T16529] RSP: 002b:00007f88204f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 238.994970][T16529] RAX: ffffffffffffffda RBX: 00007f8821ce5fa0 RCX: 00007f8821a8f749 [ 238.994985][T16529] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 238.994999][T16529] RBP: 00007f88204f7090 R08: 0000000000000048 R09: 0000000000000000 [ 238.995014][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.995028][T16529] R13: 00007f8821ce6038 R14: 00007f8821ce5fa0 R15: 00007ffdf6b35e18 [ 238.995079][T16529] [ 239.393520][T16550] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 239.436952][T16550] loop5: detected capacity change from 0 to 8192 [ 239.476424][T16553] loop5: detected capacity change from 0 to 1024 [ 239.483180][T16553] EXT4-fs: Ignoring removed oldalloc option [ 239.499412][T16553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.512271][T16553] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.4985: directory missing '..' [ 239.531614][T16553] __nla_validate_parse: 17 callbacks suppressed [ 239.531629][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4985'. [ 239.546923][T16553] netlink: 312 bytes leftover after parsing attributes in process `syz.5.4985'. [ 239.556050][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4985'. [ 239.578698][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.596817][T16558] loop5: detected capacity change from 0 to 512 [ 239.603988][T16558] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.617532][T16558] program syz.5.4986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.649338][T16560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4987'. [ 239.677077][T16566] FAULT_INJECTION: forcing a failure. [ 239.677077][T16566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.690271][T16566] CPU: 1 UID: 0 PID: 16566 Comm: syz.0.4990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.690303][T16566] Tainted: [W]=WARN [ 239.690309][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.690375][T16566] Call Trace: [ 239.690381][T16566] [ 239.690388][T16566] __dump_stack+0x1d/0x30 [ 239.690448][T16566] dump_stack_lvl+0xe8/0x140 [ 239.690468][T16566] dump_stack+0x15/0x1b [ 239.690484][T16566] should_fail_ex+0x265/0x280 [ 239.690524][T16566] should_fail+0xb/0x20 [ 239.690590][T16566] should_fail_usercopy+0x1a/0x20 [ 239.690674][T16566] _copy_from_iter+0xcf/0xe70 [ 239.690702][T16566] ? __alloc_skb+0x3bb/0x4d0 [ 239.690722][T16566] ? __alloc_skb+0x24d/0x4d0 [ 239.690742][T16566] netlink_sendmsg+0x471/0x6b0 [ 239.690770][T16566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.690826][T16566] __sock_sendmsg+0x145/0x180 [ 239.690854][T16566] ____sys_sendmsg+0x31e/0x4a0 [ 239.690941][T16566] ___sys_sendmsg+0x17b/0x1d0 [ 239.690972][T16566] __x64_sys_sendmsg+0xd4/0x160 [ 239.691008][T16566] x64_sys_call+0x17ba/0x3000 [ 239.691029][T16566] do_syscall_64+0xd8/0x2a0 [ 239.691131][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.691150][T16566] RIP: 0033:0x7f8eff4af749 [ 239.691163][T16566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.691179][T16566] RSP: 002b:00007f8efdf17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.691197][T16566] RAX: ffffffffffffffda RBX: 00007f8eff705fa0 RCX: 00007f8eff4af749 [ 239.691262][T16566] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 239.691273][T16566] RBP: 00007f8efdf17090 R08: 0000000000000000 R09: 0000000000000000 [ 239.691284][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.691295][T16566] R13: 00007f8eff706038 R14: 00007f8eff705fa0 R15: 00007ffcb2ff4c48 [ 239.691316][T16566] [ 239.782896][T16569] SELinux: Context @ is not valid (left unmapped). [ 239.969586][T16575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 240.061687][T16581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4995'. [ 240.096640][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 240.107239][T16583] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4996'. [ 240.116344][T16583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4996'. [ 240.345722][T16614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5008'. [ 240.393105][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 240.559659][T16626] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 240.566221][T16626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.573932][T16626] vhci_hcd vhci_hcd.0: Device attached [ 240.591447][T16627] vhci_hcd: connection closed [ 240.591585][ T61] vhci_hcd: stop threads [ 240.600577][ T61] vhci_hcd: release socket [ 240.605079][ T61] vhci_hcd: disconnect device [ 241.174223][T16664] validate_nla: 6 callbacks suppressed [ 241.174238][T16664] netlink: 'syz.5.5028': attribute type 1 has an invalid length. [ 241.378975][T16688] syz.2.5037 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 241.877454][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 241.877469][ T29] audit: type=1400 audit(1765044675.842:39754): avc: denied { ioctl } for pid=13875 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=855 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.959283][T16712] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 241.978953][T16713] loop5: detected capacity change from 0 to 1024 [ 242.006512][T16713] EXT4-fs: Ignoring removed oldalloc option [ 242.035545][ T29] audit: type=1400 audit(1765044675.902:39755): avc: denied { open } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 242.055210][ T29] audit: type=1400 audit(1765044675.902:39756): avc: denied { kernel } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 242.074879][ T29] audit: type=1400 audit(1765044675.912:39757): avc: denied { write } for pid=16711 comm="syz.3.5047" name="ip_vs_stats_percpu" dev="proc" ino=4026533593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 242.099035][ T29] audit: type=1400 audit(1765044675.922:39758): avc: denied { create } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.119702][ T29] audit: type=1400 audit(1765044675.922:39759): avc: denied { write } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 242.140211][ T29] audit: type=1400 audit(1765044675.962:39760): avc: denied { mounton } for pid=16710 comm="syz.5.5046" path="/139/file0" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.163217][ T29] audit: type=1400 audit(1765044675.982:39761): avc: denied { create } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.183545][ T29] audit: type=1400 audit(1765044675.982:39762): avc: denied { connect } for pid=16711 comm="syz.3.5047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 242.319848][T16713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.355072][ T29] audit: type=1400 audit(1765044676.062:39763): avc: denied { execute } for pid=16702 comm="syz.2.5044" path="/461/file0" dev="tmpfs" ino=2418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 242.512888][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.601485][T16731] loop5: detected capacity change from 0 to 512 [ 242.640689][T16731] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.718166][T16731] program syz.5.5053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.780636][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.788209][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.795648][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.803136][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.810576][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.818074][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.825486][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.832944][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.840444][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.844500][T16746] bridge0: port 1(vlan2) entered blocking state [ 242.847884][ T23] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 242.854157][T16746] bridge0: port 1(vlan2) entered disabled state [ 242.916659][T16704] syz.0.5043 (16704) used greatest stack depth: 6120 bytes left [ 242.918232][ T23] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 242.933812][T16746] vlan2: entered allmulticast mode [ 242.939124][T16746] bridge0: entered allmulticast mode [ 242.957606][T16746] vlan2: left allmulticast mode [ 242.962546][T16746] bridge0: left allmulticast mode [ 243.131095][T16779] loop5: detected capacity change from 0 to 512 [ 243.151738][T16779] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.257439][T16794] FAULT_INJECTION: forcing a failure. [ 243.257439][T16794] name failslab, interval 1, probability 0, space 0, times 0 [ 243.270333][T16794] CPU: 1 UID: 0 PID: 16794 Comm: syz.3.5077 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.270437][T16794] Tainted: [W]=WARN [ 243.270444][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.270455][T16794] Call Trace: [ 243.270460][T16794] [ 243.270468][T16794] __dump_stack+0x1d/0x30 [ 243.270503][T16794] dump_stack_lvl+0xe8/0x140 [ 243.270527][T16794] dump_stack+0x15/0x1b [ 243.270549][T16794] should_fail_ex+0x265/0x280 [ 243.270587][T16794] should_failslab+0x8c/0xb0 [ 243.270608][T16794] kmem_cache_alloc_noprof+0x69/0x4b0 [ 243.270632][T16794] ? security_file_alloc+0x32/0x100 [ 243.270659][T16794] security_file_alloc+0x32/0x100 [ 243.270706][T16794] init_file+0x5c/0x1c0 [ 243.270733][T16794] alloc_empty_file+0x8b/0x200 [ 243.270757][T16794] alloc_file_pseudo+0xc6/0x160 [ 243.270860][T16794] __shmem_file_setup+0x1de/0x210 [ 243.270939][T16794] shmem_file_setup+0x3b/0x50 [ 243.270962][T16794] __se_sys_memfd_create+0x2f7/0x6b0 [ 243.270992][T16794] __x64_sys_memfd_create+0x31/0x40 [ 243.271079][T16794] x64_sys_call+0x28cb/0x3000 [ 243.271104][T16794] do_syscall_64+0xd8/0x2a0 [ 243.271141][T16794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.271162][T16794] RIP: 0033:0x7f148503f749 [ 243.271177][T16794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.271210][T16794] RSP: 002b:00007f1483a9ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 243.271230][T16794] RAX: ffffffffffffffda RBX: 00000000000004be RCX: 00007f148503f749 [ 243.271242][T16794] RDX: 00007f1483a9eef0 RSI: 0000000000000000 RDI: 00007f14850c4960 [ 243.271254][T16794] RBP: 0000200000000540 R08: 00007f1483a9ebb7 R09: 00007f1483a9ee40 [ 243.271265][T16794] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 243.271276][T16794] R13: 00007f1483a9eef0 R14: 00007f1483a9eeb0 R15: 0000200000000380 [ 243.271295][T16794] [ 243.541809][T16805] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.636291][T16813] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 243.651424][T16819] netlink: 'syz.2.5090': attribute type 3 has an invalid length. [ 243.736627][T16832] FAULT_INJECTION: forcing a failure. [ 243.736627][T16832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.749780][T16832] CPU: 1 UID: 0 PID: 16832 Comm: syz.2.5094 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.749823][T16832] Tainted: [W]=WARN [ 243.749827][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.749834][T16832] Call Trace: [ 243.749840][T16832] [ 243.749845][T16832] __dump_stack+0x1d/0x30 [ 243.749897][T16832] dump_stack_lvl+0xe8/0x140 [ 243.749910][T16832] dump_stack+0x15/0x1b [ 243.749921][T16832] should_fail_ex+0x265/0x280 [ 243.749934][T16832] should_fail+0xb/0x20 [ 243.750009][T16832] should_fail_usercopy+0x1a/0x20 [ 243.750053][T16832] _copy_to_user+0x20/0xa0 [ 243.750069][T16832] simple_read_from_buffer+0xb5/0x130 [ 243.750208][T16832] proc_fail_nth_read+0x10e/0x150 [ 243.750225][T16832] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.750248][T16832] vfs_read+0x1a8/0x770 [ 243.750266][T16832] ? __rcu_read_unlock+0x4f/0x70 [ 243.750337][T16832] ? __fget_files+0x184/0x1c0 [ 243.750355][T16832] ? mutex_lock+0x58/0x90 [ 243.750371][T16832] ksys_read+0xda/0x1a0 [ 243.750382][T16832] __x64_sys_read+0x40/0x50 [ 243.750392][T16832] x64_sys_call+0x2889/0x3000 [ 243.750442][T16832] do_syscall_64+0xd8/0x2a0 [ 243.750544][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.750557][T16832] RIP: 0033:0x7f41dce0e15c [ 243.750568][T16832] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.750581][T16832] RSP: 002b:00007f41db877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.750594][T16832] RAX: ffffffffffffffda RBX: 00007f41dd065fa0 RCX: 00007f41dce0e15c [ 243.750680][T16832] RDX: 000000000000000f RSI: 00007f41db8770a0 RDI: 0000000000000006 [ 243.750687][T16832] RBP: 00007f41db877090 R08: 0000000000000000 R09: 0000000000000000 [ 243.750694][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.750701][T16832] R13: 00007f41dd066038 R14: 00007f41dd065fa0 R15: 00007ffc8c094d28 [ 243.750712][T16832] [ 243.964538][T16835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=16835 comm=syz.2.5096 [ 244.541601][T16893] loop5: detected capacity change from 0 to 1024 [ 244.548473][T16893] EXT4-fs: Ignoring removed oldalloc option [ 244.561380][T16893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.582445][T16893] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.5119: directory missing '..' [ 244.599401][T16893] __nla_validate_parse: 61 callbacks suppressed [ 244.599415][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 244.614767][T16893] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5119'. [ 244.623868][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 244.648095][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.966038][T16917] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5128'. [ 245.018923][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5132'. [ 245.028317][T16925] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5132'. [ 245.037433][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5132'. [ 245.074209][T16933] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 245.133154][T16933] loop5: detected capacity change from 0 to 8192 [ 245.334398][T16954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.373103][T16958] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5147'. [ 245.399539][T16957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5146'. [ 245.410388][T16957] netlink: 312 bytes leftover after parsing attributes in process `syz.6.5146'. [ 245.426836][T16961] 9pnet_fd: Insufficient options for proto=fd [ 245.436858][T16961] loop5: detected capacity change from 0 to 512 [ 245.444259][T16961] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 245.463208][T16961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.483345][T16961] ext4 filesystem being mounted at /168/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.509538][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.619659][T16967] tmpfs: Unknown parameter 'x[PEBD-v)8r0 FHpHi' [ 245.738152][T16990] netlink: 'syz.2.5160': attribute type 1 has an invalid length. [ 245.762631][T16993] FAULT_INJECTION: forcing a failure. [ 245.762631][T16993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.775881][T16993] CPU: 0 UID: 0 PID: 16993 Comm: syz.5.5161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 245.775915][T16993] Tainted: [W]=WARN [ 245.775921][T16993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.775932][T16993] Call Trace: [ 245.775939][T16993] [ 245.775946][T16993] __dump_stack+0x1d/0x30 [ 245.775970][T16993] dump_stack_lvl+0xe8/0x140 [ 245.776001][T16993] dump_stack+0x15/0x1b [ 245.776023][T16993] should_fail_ex+0x265/0x280 [ 245.776125][T16993] should_fail+0xb/0x20 [ 245.776144][T16993] should_fail_usercopy+0x1a/0x20 [ 245.776241][T16993] _copy_from_user+0x1c/0xb0 [ 245.776342][T16993] ___sys_sendmsg+0xc1/0x1d0 [ 245.776380][T16993] __x64_sys_sendmsg+0xd4/0x160 [ 245.776409][T16993] x64_sys_call+0x17ba/0x3000 [ 245.776514][T16993] do_syscall_64+0xd8/0x2a0 [ 245.776615][T16993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.776637][T16993] RIP: 0033:0x7fa05ae5f749 [ 245.776697][T16993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.776713][T16993] RSP: 002b:00007fa0598c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.776784][T16993] RAX: ffffffffffffffda RBX: 00007fa05b0b5fa0 RCX: 00007fa05ae5f749 [ 245.776798][T16993] RDX: 0000000020000004 RSI: 0000200000000000 RDI: 0000000000000007 [ 245.776812][T16993] RBP: 00007fa0598c7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.776826][T16993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.776846][T16993] R13: 00007fa05b0b6038 R14: 00007fa05b0b5fa0 R15: 00007ffc13799558 [ 245.776862][T16993] [ 245.952754][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.968905][T16995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.978463][T16995] bond0: (slave vxcan7): The slave device specified does not support setting the MAC address [ 245.993779][T16995] bond0: (slave vxcan7): Error -95 calling set_mac_address [ 246.016921][T16990] bond1: entered promiscuous mode [ 246.022440][T16997] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 246.065880][T17000] program syz.2.5163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.146161][T17007] netlink: 'syz.2.5166': attribute type 12 has an invalid length. [ 246.270034][T17016] netlink: 'syz.6.5169': attribute type 1 has an invalid length. [ 246.278014][T17016] netlink: 'syz.6.5169': attribute type 4 has an invalid length. [ 246.329072][T17024] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 246.417205][T17027] FAULT_INJECTION: forcing a failure. [ 246.417205][T17027] name failslab, interval 1, probability 0, space 0, times 0 [ 246.429875][T17027] CPU: 1 UID: 0 PID: 17027 Comm: syz.2.5172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.429958][T17027] Tainted: [W]=WARN [ 246.429964][T17027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.429975][T17027] Call Trace: [ 246.429981][T17027] [ 246.429988][T17027] __dump_stack+0x1d/0x30 [ 246.430080][T17027] dump_stack_lvl+0xe8/0x140 [ 246.430103][T17027] dump_stack+0x15/0x1b [ 246.430125][T17027] should_fail_ex+0x265/0x280 [ 246.430232][T17027] should_failslab+0x8c/0xb0 [ 246.430257][T17027] kmem_cache_alloc_noprof+0x69/0x4b0 [ 246.430281][T17027] ? __anon_vma_prepare+0xcd/0x2f0 [ 246.430359][T17027] __anon_vma_prepare+0xcd/0x2f0 [ 246.430413][T17027] do_wp_page+0x18ee/0x2510 [ 246.430524][T17027] ? css_rstat_updated+0xb7/0x240 [ 246.430545][T17027] ? __rcu_read_lock+0x37/0x50 [ 246.430567][T17027] handle_mm_fault+0x7b0/0x2c60 [ 246.430656][T17027] do_user_addr_fault+0x630/0x1080 [ 246.430711][T17027] ? ksys_mmap_pgoff+0xc2/0x310 [ 246.430755][T17027] exc_page_fault+0x62/0xa0 [ 246.430779][T17027] asm_exc_page_fault+0x26/0x30 [ 246.430837][T17027] RIP: 0033:0x7f41dccd0943 [ 246.430854][T17027] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 246.430874][T17027] RSP: 002b:00007f41db8554a0 EFLAGS: 00010202 [ 246.430893][T17027] RAX: 0000000000000400 RBX: 00007f41db855540 RCX: 00007f41d3436000 [ 246.430905][T17027] RDX: 00007f41db8556e0 RSI: 0000000000000000 RDI: 00007f41db8555e0 [ 246.430944][T17027] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009f [ 246.430956][T17027] R10: 00000000000000ba R11: 00007f41db855540 R12: 0000000000000001 [ 246.430971][T17027] R13: 00007f41dceafc40 R14: 0000000000000020 R15: 00007f41db8555e0 [ 246.430989][T17027] [ 246.431003][T17027] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 246.719752][T17039] netlink: 'syz.2.5180': attribute type 1 has an invalid length. [ 246.727553][T17039] netlink: 'syz.2.5180': attribute type 4 has an invalid length. [ 246.794411][T17044] FAULT_INJECTION: forcing a failure. [ 246.794411][T17044] name failslab, interval 1, probability 0, space 0, times 0 [ 246.807250][T17044] CPU: 1 UID: 0 PID: 17044 Comm: syz.2.5182 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.807283][T17044] Tainted: [W]=WARN [ 246.807290][T17044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.807301][T17044] Call Trace: [ 246.807306][T17044] [ 246.807313][T17044] __dump_stack+0x1d/0x30 [ 246.807338][T17044] dump_stack_lvl+0xe8/0x140 [ 246.807433][T17044] dump_stack+0x15/0x1b [ 246.807454][T17044] should_fail_ex+0x265/0x280 [ 246.807478][T17044] should_failslab+0x8c/0xb0 [ 246.807501][T17044] __kmalloc_noprof+0xb9/0x5a0 [ 246.807525][T17044] ? shmem_initxattrs+0x1c2/0x350 [ 246.807574][T17044] shmem_initxattrs+0x1c2/0x350 [ 246.807614][T17044] security_inode_init_security+0x249/0x320 [ 246.807639][T17044] ? __pfx_shmem_initxattrs+0x10/0x10 [ 246.807676][T17044] shmem_mknod+0xaa/0x170 [ 246.807782][T17044] shmem_create+0x34/0x50 [ 246.807845][T17044] ? __pfx_shmem_create+0x10/0x10 [ 246.807878][T17044] path_openat+0x1115/0x23b0 [ 246.807969][T17044] do_filp_open+0x109/0x230 [ 246.808015][T17044] do_sys_openat2+0xa6/0x150 [ 246.808043][T17044] __x64_sys_openat+0xf2/0x120 [ 246.808072][T17044] x64_sys_call+0x2b07/0x3000 [ 246.808114][T17044] do_syscall_64+0xd8/0x2a0 [ 246.808147][T17044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.808171][T17044] RIP: 0033:0x7f41dce0f749 [ 246.808186][T17044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.808243][T17044] RSP: 002b:00007f41db877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.808265][T17044] RAX: ffffffffffffffda RBX: 00007f41dd065fa0 RCX: 00007f41dce0f749 [ 246.808278][T17044] RDX: 0000000000105042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 246.808290][T17044] RBP: 00007f41db877090 R08: 0000000000000000 R09: 0000000000000000 [ 246.808303][T17044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.808316][T17044] R13: 00007f41dd066038 R14: 00007f41dd065fa0 R15: 00007ffc8c094d28 [ 246.808383][T17044] [ 247.046651][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 247.046666][ T29] audit: type=1326 audit(1765044681.002:40133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.076693][ T29] audit: type=1326 audit(1765044681.002:40134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8821a8df90 code=0x7ffc0000 [ 247.115469][ T29] audit: type=1326 audit(1765044681.002:40135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8821a8df90 code=0x7ffc0000 [ 247.139228][ T29] audit: type=1326 audit(1765044681.042:40136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.162880][ T29] audit: type=1326 audit(1765044681.042:40137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.186530][ T29] audit: type=1326 audit(1765044681.042:40138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.210197][ T29] audit: type=1326 audit(1765044681.042:40139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.234016][ T29] audit: type=1326 audit(1765044681.042:40140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.249567][T17061] loop5: detected capacity change from 0 to 512 [ 247.257597][ T29] audit: type=1326 audit(1765044681.042:40141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.287381][ T29] audit: type=1326 audit(1765044681.042:40142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.6.5183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8821a8f749 code=0x7ffc0000 [ 247.313326][T17061] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.401288][T17078] loop5: detected capacity change from 0 to 128 [ 247.420182][T17078] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 247.432698][T17078] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.548112][T13875] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.607117][T17087] netlink: 'syz.5.5192': attribute type 1 has an invalid length. [ 247.614914][T17087] netlink: 'syz.5.5192': attribute type 4 has an invalid length. [ 247.645092][T17087] netlink: 'syz.5.5192': attribute type 1 has an invalid length. [ 247.652881][T17087] netlink: 'syz.5.5192': attribute type 4 has an invalid length. [ 247.720629][T17090] program syz.3.5194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.506076][T17159] FAULT_INJECTION: forcing a failure. [ 248.506076][T17159] name failslab, interval 1, probability 0, space 0, times 0 [ 248.518898][T17159] CPU: 1 UID: 0 PID: 17159 Comm: syz.5.5220 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.518932][T17159] Tainted: [W]=WARN [ 248.518938][T17159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.518948][T17159] Call Trace: [ 248.518954][T17159] [ 248.518960][T17159] __dump_stack+0x1d/0x30 [ 248.518985][T17159] dump_stack_lvl+0xe8/0x140 [ 248.519006][T17159] dump_stack+0x15/0x1b [ 248.519023][T17159] should_fail_ex+0x265/0x280 [ 248.519042][T17159] should_failslab+0x8c/0xb0 [ 248.519061][T17159] kmem_cache_alloc_noprof+0x69/0x4b0 [ 248.519082][T17159] ? vm_area_dup+0x33/0x2c0 [ 248.519105][T17159] vm_area_dup+0x33/0x2c0 [ 248.519126][T17159] __split_vma+0xe9/0x660 [ 248.519145][T17159] ? __rcu_read_unlock+0x4f/0x70 [ 248.519167][T17159] ? terminate_walk+0x1e6/0x210 [ 248.519191][T17159] ? path_openat+0x1d88/0x23b0 [ 248.519228][T17159] vms_gather_munmap_vmas+0x17a/0x7b0 [ 248.519261][T17159] ? _parse_integer_limit+0x170/0x190 [ 248.519297][T17159] do_vmi_align_munmap+0x1ac/0x3d0 [ 248.519336][T17159] do_vmi_munmap+0x1db/0x220 [ 248.519367][T17159] __vm_munmap+0x193/0x270 [ 248.519388][T17159] __x64_sys_munmap+0x36/0x50 [ 248.519416][T17159] x64_sys_call+0xbee/0x3000 [ 248.519439][T17159] do_syscall_64+0xd8/0x2a0 [ 248.519470][T17159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.519491][T17159] RIP: 0033:0x7fa05ae5f749 [ 248.519506][T17159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.519524][T17159] RSP: 002b:00007fa0598c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 248.519541][T17159] RAX: ffffffffffffffda RBX: 00007fa05b0b5fa0 RCX: 00007fa05ae5f749 [ 248.519554][T17159] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 248.519567][T17159] RBP: 00007fa0598c7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.519580][T17159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.519591][T17159] R13: 00007fa05b0b6038 R14: 00007fa05b0b5fa0 R15: 00007ffc13799558 [ 248.519607][T17159] [ 248.749641][T17166] loop5: detected capacity change from 0 to 1024 [ 248.756674][T17166] EXT4-fs: Ignoring removed oldalloc option [ 248.768963][T17166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.785436][T17166] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.5222: directory missing '..' [ 248.795043][T17174] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 248.866848][T17176] program syz.0.5226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.879595][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.900552][T17180] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 248.921045][T17182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 248.943186][T17180] loop5: detected capacity change from 0 to 8192 [ 249.021856][T17188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17188 comm=syz.5.5231 [ 249.035580][T17188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=17188 comm=syz.5.5231 [ 249.062854][T17192] FAULT_INJECTION: forcing a failure. [ 249.062854][T17192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.075995][T17192] CPU: 1 UID: 0 PID: 17192 Comm: syz.0.5233 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.076095][T17192] Tainted: [W]=WARN [ 249.076101][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.076114][T17192] Call Trace: [ 249.076120][T17192] [ 249.076176][T17192] __dump_stack+0x1d/0x30 [ 249.076211][T17192] dump_stack_lvl+0xe8/0x140 [ 249.076232][T17192] dump_stack+0x15/0x1b [ 249.076250][T17192] should_fail_ex+0x265/0x280 [ 249.076303][T17192] should_fail+0xb/0x20 [ 249.076325][T17192] should_fail_usercopy+0x1a/0x20 [ 249.076352][T17192] _copy_to_user+0x20/0xa0 [ 249.076422][T17192] simple_read_from_buffer+0xb5/0x130 [ 249.076454][T17192] proc_fail_nth_read+0x10e/0x150 [ 249.076481][T17192] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.076549][T17192] vfs_read+0x1a8/0x770 [ 249.076580][T17192] ? __rcu_read_unlock+0x4f/0x70 [ 249.076600][T17192] ? __fget_files+0x184/0x1c0 [ 249.076681][T17192] ? mutex_lock+0x58/0x90 [ 249.076711][T17192] ksys_read+0xda/0x1a0 [ 249.076732][T17192] __x64_sys_read+0x40/0x50 [ 249.076755][T17192] x64_sys_call+0x2889/0x3000 [ 249.076777][T17192] do_syscall_64+0xd8/0x2a0 [ 249.076806][T17192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.076892][T17192] RIP: 0033:0x7f8eff4ae15c [ 249.076910][T17192] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.076930][T17192] RSP: 002b:00007f8efdf17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.076952][T17192] RAX: ffffffffffffffda RBX: 00007f8eff705fa0 RCX: 00007f8eff4ae15c [ 249.076967][T17192] RDX: 000000000000000f RSI: 00007f8efdf170a0 RDI: 0000000000000004 [ 249.076998][T17192] RBP: 00007f8efdf17090 R08: 0000000000000000 R09: 0000000000000000 [ 249.077061][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.077075][T17192] R13: 00007f8eff706038 R14: 00007f8eff705fa0 R15: 00007ffcb2ff4c48 [ 249.077092][T17192] [ 249.289746][T17194] bond_slave_1: mtu less than device minimum [ 249.343127][T17200] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 249.386738][T17200] loop5: detected capacity change from 0 to 8192 [ 249.427357][T17204] loop5: detected capacity change from 0 to 512 [ 249.434729][T17204] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.448423][T17204] program syz.5.5239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.488729][T17208] FAULT_INJECTION: forcing a failure. [ 249.488729][T17208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.501879][T17208] CPU: 0 UID: 0 PID: 17208 Comm: syz.2.5241 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.501917][T17208] Tainted: [W]=WARN [ 249.501924][T17208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.501934][T17208] Call Trace: [ 249.501940][T17208] [ 249.501947][T17208] __dump_stack+0x1d/0x30 [ 249.502044][T17208] dump_stack_lvl+0xe8/0x140 [ 249.502063][T17208] dump_stack+0x15/0x1b [ 249.502080][T17208] should_fail_ex+0x265/0x280 [ 249.502099][T17208] should_fail+0xb/0x20 [ 249.502125][T17208] should_fail_usercopy+0x1a/0x20 [ 249.502147][T17208] _copy_from_user+0x1c/0xb0 [ 249.502169][T17208] ___sys_recvmsg+0xaa/0x370 [ 249.502193][T17208] ? 0xffffffff81000000 [ 249.502331][T17208] ? __rcu_read_unlock+0x4f/0x70 [ 249.502355][T17208] __x64_sys_recvmsg+0xd1/0x160 [ 249.502434][T17208] x64_sys_call+0x2cbf/0x3000 [ 249.502455][T17208] do_syscall_64+0xd8/0x2a0 [ 249.502483][T17208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.502521][T17208] RIP: 0033:0x7f41dce0f749 [ 249.502534][T17208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.502550][T17208] RSP: 002b:00007f41db877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 249.502572][T17208] RAX: ffffffffffffffda RBX: 00007f41dd065fa0 RCX: 00007f41dce0f749 [ 249.502583][T17208] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000005 [ 249.502610][T17208] RBP: 00007f41db877090 R08: 0000000000000000 R09: 0000000000000000 [ 249.502621][T17208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.502632][T17208] R13: 00007f41dd066038 R14: 00007f41dd065fa0 R15: 00007ffc8c094d28 [ 249.502648][T17208] [ 249.509090][T17210] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 249.764152][T17219] SELinux: failed to load policy [ 249.783538][T17219] loop5: detected capacity change from 0 to 2048 [ 249.827419][T17219] loop5: p1 < > p3 [ 249.832558][T17219] loop5: p3 size 54016 extends beyond EOD, truncated [ 249.848639][T17226] __nla_validate_parse: 36 callbacks suppressed [ 249.848655][T17226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5248'. [ 249.937009][T17232] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 250.142509][T17238] loop5: detected capacity change from 0 to 1024 [ 250.167801][T17238] EXT4-fs: Ignoring removed oldalloc option [ 250.200394][T17238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.222087][T17240] program syz.0.5253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.233980][T17238] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.5251: directory missing '..' [ 250.272106][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5251'. [ 250.281306][T17238] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5251'. [ 250.290591][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5251'. [ 250.309302][T17244] program syz.0.5254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.319169][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.653264][T17261] loop5: detected capacity change from 0 to 512 [ 250.660402][T17261] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.733144][T17267] loop5: detected capacity change from 0 to 512 [ 250.740543][T17267] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.752772][T17267] program syz.5.5264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.783681][T17269] loop5: detected capacity change from 0 to 1024 [ 250.790285][T17269] EXT4-fs: Ignoring removed oldalloc option [ 250.798550][T17269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.811490][T17269] EXT4-fs error (device loop5): ext4_get_first_dir_block:3550: inode #11: comm syz.5.5265: directory missing '..' [ 250.825519][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5265'. [ 250.834623][T17269] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5265'. [ 250.843685][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5265'. [ 250.863099][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.901063][T17273] loop5: detected capacity change from 0 to 8192 [ 250.907797][T17273] vfat: Unknown parameter '0xffffffffffffffff0x000000000000000001777777777777777777777' [ 251.018599][T17278] FAULT_INJECTION: forcing a failure. [ 251.018599][T17278] name failslab, interval 1, probability 0, space 0, times 0 [ 251.031310][T17278] CPU: 1 UID: 0 PID: 17278 Comm: syz.5.5267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.031471][T17278] Tainted: [W]=WARN [ 251.031475][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.031483][T17278] Call Trace: [ 251.031487][T17278] [ 251.031493][T17278] __dump_stack+0x1d/0x30 [ 251.031584][T17278] dump_stack_lvl+0xe8/0x140 [ 251.031597][T17278] dump_stack+0x15/0x1b [ 251.031626][T17278] should_fail_ex+0x265/0x280 [ 251.031711][T17278] should_failslab+0x8c/0xb0 [ 251.031723][T17278] kmem_cache_alloc_noprof+0x69/0x4b0 [ 251.031737][T17278] ? security_file_alloc+0x32/0x100 [ 251.031752][T17278] security_file_alloc+0x32/0x100 [ 251.031780][T17278] init_file+0x5c/0x1c0 [ 251.031794][T17278] alloc_empty_file+0x8b/0x200 [ 251.031886][T17278] alloc_file_pseudo+0xc6/0x160 [ 251.031902][T17278] sock_alloc_file+0x9c/0x1e0 [ 251.031921][T17278] do_accept+0x1e4/0x3a0 [ 251.031983][T17278] __sys_accept4+0xbe/0x170 [ 251.031996][T17278] __x64_sys_accept+0x42/0x50 [ 251.032009][T17278] x64_sys_call+0x2215/0x3000 [ 251.032060][T17278] do_syscall_64+0xd8/0x2a0 [ 251.032123][T17278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.032185][T17278] RIP: 0033:0x7fa05ae5f749 [ 251.032195][T17278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.032207][T17278] RSP: 002b:00007fa0598a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 251.032219][T17278] RAX: ffffffffffffffda RBX: 00007fa05b0b6090 RCX: 00007fa05ae5f749 [ 251.032226][T17278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 251.032234][T17278] RBP: 00007fa0598a6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.032248][T17278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.032256][T17278] R13: 00007fa05b0b6128 R14: 00007fa05b0b6090 R15: 00007ffc13799558 [ 251.032266][T17278] [ 251.264455][T17282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5269'. [ 251.299672][T17287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5272'. [ 251.344417][T17295] netlink: 'syz.6.5275': attribute type 1 has an invalid length. [ 251.352309][T17295] netlink: 'syz.6.5275': attribute type 4 has an invalid length. [ 251.360064][T17295] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5275'. [ 251.370907][T17295] netlink: 'syz.6.5275': attribute type 1 has an invalid length. [ 251.378697][T17295] netlink: 'syz.6.5275': attribute type 4 has an invalid length. [ 251.771348][T17339] netlink: 'syz.6.5291': attribute type 1 has an invalid length. [ 251.779352][T17339] netlink: 'syz.6.5291': attribute type 4 has an invalid length. [ 251.787505][T17339] netlink: 'syz.6.5291': attribute type 1 has an invalid length. [ 251.795213][T17339] netlink: 'syz.6.5291': attribute type 4 has an invalid length. [ 251.840777][T17345] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.932285][T17357] pim6reg: entered allmulticast mode [ 251.938641][T17357] pim6reg: left allmulticast mode [ 252.000460][T17361] program syz.6.5301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.035145][T17366] netlink: 'syz.6.5303': attribute type 1 has an invalid length. [ 252.043168][T17366] netlink: 'syz.6.5303': attribute type 4 has an invalid length. [ 252.066000][ T29] kauditd_printk_skb: 1010 callbacks suppressed [ 252.066017][ T29] audit: type=1400 audit(1765044686.022:41151): avc: denied { bind } for pid=17368 comm="syz.5.5305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.092412][ T29] audit: type=1400 audit(1765044686.022:41152): avc: denied { write } for pid=17368 comm="syz.5.5305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 252.177147][T17379] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 252.187309][ T29] audit: type=1326 audit(1765044686.152:41153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.223815][ T29] audit: type=1326 audit(1765044686.172:41154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.247924][ T29] audit: type=1326 audit(1765044686.172:41155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.271533][ T29] audit: type=1326 audit(1765044686.172:41156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.295249][ T29] audit: type=1326 audit(1765044686.172:41157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.318864][ T29] audit: type=1326 audit(1765044686.172:41158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.342816][ T29] audit: type=1326 audit(1765044686.172:41159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.366638][ T29] audit: type=1326 audit(1765044686.172:41160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17380 comm="syz.3.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 252.625205][T17410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.658549][T17413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.733834][T17413] macvlan2: entered promiscuous mode [ 252.739296][T17413] macvlan2: entered allmulticast mode [ 252.761260][T17427] FAULT_INJECTION: forcing a failure. [ 252.761260][T17427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.774674][T17427] CPU: 0 UID: 0 PID: 17427 Comm: syz.6.5330 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 252.774705][T17427] Tainted: [W]=WARN [ 252.774711][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.774723][T17427] Call Trace: [ 252.774728][T17427] [ 252.774735][T17427] __dump_stack+0x1d/0x30 [ 252.774767][T17427] dump_stack_lvl+0xe8/0x140 [ 252.774787][T17427] dump_stack+0x15/0x1b [ 252.774805][T17427] should_fail_ex+0x265/0x280 [ 252.774826][T17427] should_fail+0xb/0x20 [ 252.774845][T17427] should_fail_usercopy+0x1a/0x20 [ 252.774934][T17427] _copy_to_iter+0x387/0xe70 [ 252.774967][T17427] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 252.774992][T17427] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 252.775045][T17427] __skb_datagram_iter+0xc6/0x690 [ 252.775077][T17427] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 252.775109][T17427] skb_copy_datagram_iter+0x3d/0x110 [ 252.775147][T17427] netlink_recvmsg+0x1a8/0x550 [ 252.775184][T17427] ? __pfx_netlink_recvmsg+0x10/0x10 [ 252.775219][T17427] sock_recvmsg+0x139/0x170 [ 252.775241][T17427] ____sys_recvmsg+0xf5/0x280 [ 252.775276][T17427] ___sys_recvmsg+0x11f/0x370 [ 252.775334][T17427] do_recvmmsg+0x1ef/0x540 [ 252.775368][T17427] ? get_timespec64+0xc9/0x100 [ 252.775422][T17427] __x64_sys_recvmmsg+0xfb/0x170 [ 252.775454][T17427] x64_sys_call+0x2b75/0x3000 [ 252.775556][T17427] do_syscall_64+0xd8/0x2a0 [ 252.775590][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.775677][T17427] RIP: 0033:0x7f8821a8f749 [ 252.775693][T17427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.775761][T17427] RSP: 002b:00007f88204f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 252.775840][T17427] RAX: ffffffffffffffda RBX: 00007f8821ce5fa0 RCX: 00007f8821a8f749 [ 252.775855][T17427] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 252.775869][T17427] RBP: 00007f88204f7090 R08: 0000200000003700 R09: 0000000000000000 [ 252.775883][T17427] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 252.775897][T17427] R13: 00007f8821ce6038 R14: 00007f8821ce5fa0 R15: 00007ffdf6b35e18 [ 252.775916][T17427] [ 252.776942][T17425] FAULT_INJECTION: forcing a failure. [ 252.776942][T17425] name failslab, interval 1, probability 0, space 0, times 0 [ 252.791173][T17429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.792279][T17425] CPU: 0 UID: 0 PID: 17425 Comm: syz.3.5329 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 252.792312][T17425] Tainted: [W]=WARN [ 252.792318][T17425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.792329][T17425] Call Trace: [ 252.792335][T17425] [ 252.792417][T17425] __dump_stack+0x1d/0x30 [ 252.792442][T17425] dump_stack_lvl+0xe8/0x140 [ 252.792465][T17425] dump_stack+0x15/0x1b [ 252.792486][T17425] should_fail_ex+0x265/0x280 [ 252.792573][T17425] should_failslab+0x8c/0xb0 [ 252.792596][T17425] __kmalloc_noprof+0xb9/0x5a0 [ 252.792687][T17425] ? iter_file_splice_write+0xf7/0xa20 [ 252.792714][T17425] iter_file_splice_write+0xf7/0xa20 [ 252.792736][T17425] ? shmem_file_read_iter+0x488/0x540 [ 252.792769][T17425] ? copy_splice_read+0x623/0x660 [ 252.792864][T17425] ? copy_splice_read+0x623/0x660 [ 252.792956][T17425] ? __pfx_iter_file_splice_write+0x10/0x10 [ 252.792978][T17425] direct_splice_actor+0x156/0x2a0 [ 252.792999][T17425] ? shmem_file_splice_read+0x1/0x600 [ 252.793102][T17425] splice_direct_to_actor+0x312/0x680 [ 252.793201][T17425] ? __pfx_direct_splice_actor+0x10/0x10 [ 252.793226][T17425] do_splice_direct+0xda/0x150 [ 252.793246][T17425] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 252.793272][T17425] do_sendfile+0x380/0x650 [ 252.793305][T17425] __x64_sys_sendfile64+0x105/0x150 [ 252.793341][T17425] x64_sys_call+0x2db1/0x3000 [ 252.793403][T17425] do_syscall_64+0xd8/0x2a0 [ 252.793438][T17425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.793461][T17425] RIP: 0033:0x7f148503f749 [ 252.793477][T17425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.793572][T17425] RSP: 002b:00007f1483a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 252.793663][T17425] RAX: ffffffffffffffda RBX: 00007f1485295fa0 RCX: 00007f148503f749 [ 252.793677][T17425] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 252.793690][T17425] RBP: 00007f1483a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.793703][T17425] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 252.793717][T17425] R13: 00007f1485296038 R14: 00007f1485295fa0 R15: 00007ffee14447c8 [ 252.793736][T17425] [ 253.240500][T17433] FAULT_INJECTION: forcing a failure. [ 253.240500][T17433] name failslab, interval 1, probability 0, space 0, times 0 [ 253.253197][T17433] CPU: 0 UID: 0 PID: 17433 Comm: syz.0.5331 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.253262][T17433] Tainted: [W]=WARN [ 253.253270][T17433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.253283][T17433] Call Trace: [ 253.253290][T17433] [ 253.253298][T17433] __dump_stack+0x1d/0x30 [ 253.253320][T17433] dump_stack_lvl+0xe8/0x140 [ 253.253340][T17433] dump_stack+0x15/0x1b [ 253.253428][T17433] should_fail_ex+0x265/0x280 [ 253.253448][T17433] should_failslab+0x8c/0xb0 [ 253.253468][T17433] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 253.253550][T17433] ? __d_alloc+0x37/0x340 [ 253.253574][T17433] __d_alloc+0x37/0x340 [ 253.253597][T17433] d_alloc+0x2e/0x100 [ 253.253641][T17433] lookup_one_qstr_excl+0x99/0x250 [ 253.253665][T17433] start_dirop+0x3e/0x70 [ 253.253712][T17433] simple_start_creating+0x83/0xb0 [ 253.253813][T17433] debugfs_start_creating+0xda/0x150 [ 253.253845][T17433] __debugfs_create_file+0x70/0x2b0 [ 253.253875][T17433] debugfs_create_file_full+0x3f/0x60 [ 253.253980][T17433] ? __pfx_macvlan_setup+0x10/0x10 [ 253.254000][T17433] ref_tracker_dir_debugfs+0x100/0x210 [ 253.254027][T17433] alloc_netdev_mqs+0x1a7/0xa40 [ 253.254055][T17433] rtnl_create_link+0x239/0x6e0 [ 253.254091][T17433] rtnl_newlink_create+0x14c/0x620 [ 253.254115][T17433] rtnl_newlink+0xf5b/0x1360 [ 253.254151][T17433] ? __rcu_read_unlock+0x34/0x70 [ 253.254177][T17433] ? bpf_trace_run3+0x12c/0x1e0 [ 253.254282][T17433] ? xas_load+0x413/0x430 [ 253.254327][T17433] ? __kfree_skb+0x109/0x150 [ 253.254390][T17433] ? __rcu_read_unlock+0x4f/0x70 [ 253.254408][T17433] ? __rcu_read_unlock+0x4f/0x70 [ 253.254426][T17433] ? avc_has_perm_noaudit+0xab/0x130 [ 253.254472][T17433] ? cred_has_capability+0x210/0x280 [ 253.254500][T17433] ? selinux_capable+0x31/0x40 [ 253.254556][T17433] ? security_capable+0x83/0x90 [ 253.254627][T17433] ? ns_capable+0x7d/0xb0 [ 253.254653][T17433] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.254682][T17433] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 253.254747][T17433] netlink_rcv_skb+0x123/0x220 [ 253.254780][T17433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.254814][T17433] rtnetlink_rcv+0x1c/0x30 [ 253.254903][T17433] netlink_unicast+0x5c0/0x690 [ 253.254929][T17433] netlink_sendmsg+0x58b/0x6b0 [ 253.254957][T17433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.254985][T17433] __sock_sendmsg+0x145/0x180 [ 253.255066][T17433] ____sys_sendmsg+0x31e/0x4a0 [ 253.255092][T17433] ___sys_sendmsg+0x17b/0x1d0 [ 253.255125][T17433] __x64_sys_sendmsg+0xd4/0x160 [ 253.255194][T17433] x64_sys_call+0x17ba/0x3000 [ 253.255216][T17433] do_syscall_64+0xd8/0x2a0 [ 253.255246][T17433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.255313][T17433] RIP: 0033:0x7f8eff4af749 [ 253.255328][T17433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.255344][T17433] RSP: 002b:00007f8efdef6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.255361][T17433] RAX: ffffffffffffffda RBX: 00007f8eff706090 RCX: 00007f8eff4af749 [ 253.255373][T17433] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 253.255384][T17433] RBP: 00007f8efdef6090 R08: 0000000000000000 R09: 0000000000000000 [ 253.255401][T17433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.255412][T17433] R13: 00007f8eff706128 R14: 00007f8eff706090 R15: 00007ffcb2ff4c48 [ 253.255428][T17433] [ 253.592296][T17433] macvlan2: entered promiscuous mode [ 253.597694][T17433] macvlan2: entered allmulticast mode [ 253.825771][ T826] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.121904][T17463] set_capacity_and_notify: 2 callbacks suppressed [ 254.121923][T17463] loop5: detected capacity change from 0 to 1024 [ 254.149720][T17463] EXT4-fs: dax option not supported [ 254.166418][T17463] loop5: detected capacity change from 0 to 2048 [ 254.173354][T17463] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.189545][T17463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.203974][T17463] SELinux: security_context_str_to_sid (T#) failed with errno=-22 [ 254.215851][T17463] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 234: padding at end of block bitmap is not set [ 254.230130][T17463] EXT4-fs (loop5): Remounting filesystem read-only [ 254.248538][T13875] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.299402][T17478] loop5: detected capacity change from 0 to 512 [ 254.306510][T17478] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.516547][T17480] loop5: detected capacity change from 0 to 764 [ 254.523935][T17480] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 254.708565][T17486] serio: Serial port ptm1 [ 254.772109][T17488] loop5: detected capacity change from 0 to 1024 [ 254.787442][T17488] EXT4-fs: Ignoring removed orlov option [ 254.793186][T17488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.816471][T17488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.829360][T17488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.969788][T17509] program syz.3.5361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.095446][T17523] __nla_validate_parse: 41 callbacks suppressed [ 255.095457][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5367'. [ 255.104215][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5364'. [ 255.145659][T17527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5368'. [ 255.154814][T17527] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5368'. [ 255.192668][T17531] FAULT_INJECTION: forcing a failure. [ 255.192668][T17531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.205885][T17531] CPU: 0 UID: 0 PID: 17531 Comm: syz.5.5371 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.205977][T17531] Tainted: [W]=WARN [ 255.205984][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.205995][T17531] Call Trace: [ 255.206002][T17531] [ 255.206012][T17531] __dump_stack+0x1d/0x30 [ 255.206039][T17531] dump_stack_lvl+0xe8/0x140 [ 255.206064][T17531] dump_stack+0x15/0x1b [ 255.206086][T17531] should_fail_ex+0x265/0x280 [ 255.206117][T17531] should_fail+0xb/0x20 [ 255.206136][T17531] should_fail_usercopy+0x1a/0x20 [ 255.206158][T17531] _copy_from_user+0x1c/0xb0 [ 255.206253][T17531] ___sys_sendmsg+0xc1/0x1d0 [ 255.206291][T17531] __x64_sys_sendmsg+0xd4/0x160 [ 255.206325][T17531] x64_sys_call+0x17ba/0x3000 [ 255.206368][T17531] do_syscall_64+0xd8/0x2a0 [ 255.206511][T17531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.206536][T17531] RIP: 0033:0x7fa05ae5f749 [ 255.206551][T17531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.206568][T17531] RSP: 002b:00007fa0598c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.206644][T17531] RAX: ffffffffffffffda RBX: 00007fa05b0b5fa0 RCX: 00007fa05ae5f749 [ 255.206656][T17531] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000005 [ 255.206741][T17531] RBP: 00007fa0598c7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.206755][T17531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.206769][T17531] R13: 00007fa05b0b6038 R14: 00007fa05b0b5fa0 R15: 00007ffc13799558 [ 255.206797][T17531] [ 255.390505][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5370'. [ 255.402549][T17537] loop5: detected capacity change from 0 to 512 [ 255.417636][T17537] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.439402][T17537] program syz.5.5372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.455016][T17539] syz_tun: entered promiscuous mode [ 255.460722][T17539] $H: (slave syz_tun): Enslaving as an active interface with an up link [ 255.493646][T17539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.513418][T17539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.522173][T17539] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 255.745136][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5374'. [ 255.857070][ T3781] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.857616][T17500] Bluetooth: hci0: command 0x1003 tx timeout [ 255.883469][T17552] program syz.0.5378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.938879][T17556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5380'. [ 256.084733][T17560] serio: Serial port ptm0 [ 256.166488][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5383'. [ 256.246488][T17571] program syz.3.5385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.282579][T17573] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 256.406420][T17579] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 256.420202][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5387'. [ 256.548002][T17595] loop5: detected capacity change from 0 to 8192 [ 256.565361][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5394'. [ 256.615507][T17599] validate_nla: 12 callbacks suppressed [ 256.615522][T17599] netlink: 'syz.3.5395': attribute type 3 has an invalid length. [ 256.828329][T17603] program syz.3.5396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.860598][T17605] program syz.3.5397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.949827][T17607] serio: Serial port ptm0 [ 256.977251][ T6501] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 256.977304][ T3781] Bluetooth: hci1: command 0x1003 tx timeout [ 257.049834][T17612] bridge_slave_1: left allmulticast mode [ 257.055519][T17612] bridge_slave_1: left promiscuous mode [ 257.061189][T17612] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.069124][T17612] bridge_slave_0: left allmulticast mode [ 257.074752][T17612] bridge_slave_0: left promiscuous mode [ 257.080549][T17612] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.195898][ T29] kauditd_printk_skb: 892 callbacks suppressed [ 257.195914][ T29] audit: type=1326 audit(1765044691.152:42053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.225947][ T29] audit: type=1326 audit(1765044691.152:42054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.249555][ T29] audit: type=1326 audit(1765044691.152:42055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.273283][ T29] audit: type=1326 audit(1765044691.152:42056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.296860][ T29] audit: type=1326 audit(1765044691.152:42057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.320748][ T29] audit: type=1326 audit(1765044691.152:42058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.344487][ T29] audit: type=1326 audit(1765044691.152:42059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.368286][ T29] audit: type=1326 audit(1765044691.152:42060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.391876][ T29] audit: type=1326 audit(1765044691.152:42061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.415532][ T29] audit: type=1326 audit(1765044691.152:42062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17614 comm="syz.3.5400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f148503f749 code=0x7ffc0000 [ 257.485121][T17619] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 258.054113][T17637] program syz.3.5408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.343733][T17656] sg_read: process 196 (syz.6.5415) changed security contexts after opening file descriptor, this is not allowed. [ 258.417344][T17660] netlink: 'syz.6.5416': attribute type 3 has an invalid length. [ 258.825123][T17682] program syz.6.5423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.522222][T17704] netlink: 'syz.5.5433': attribute type 10 has an invalid length. [ 259.581876][T17704] netlink: 'syz.5.5433': attribute type 1 has an invalid length. [ 259.624428][T17704] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 259.658461][T17707] loop9: detected capacity change from 0 to 7 [ 259.695852][T17707] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.734737][T17714] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.759228][T17707] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.767135][T17707] loop9: unable to read partition table [ 259.803729][T17707] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 259.803729][T17707] ) failed (rc=-5) [ 259.883157][T17727] loop5: detected capacity change from 0 to 512 [ 259.900676][T17727] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.938825][T17727] program syz.5.5441 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.170091][T17745] __nla_validate_parse: 15 callbacks suppressed [ 260.170109][T17745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5448'. [ 260.291241][T17745] bond2: option mode: invalid value (114) [ 260.293975][T17753] xt_hashlimit: max too large, truncated to 1048576 [ 260.362201][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5447'. [ 260.375485][T17745] bond2 (unregistering): Released all slaves [ 260.892147][T17771] netlink: 'syz.0.5456': attribute type 13 has an invalid length. [ 260.929293][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5457'. [ 260.938594][T17773] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5457'. [ 260.948084][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5457'. [ 260.982497][T17771] batman_adv: batadv0: Interface deactivated: dummy0 [ 261.020948][T17771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.031549][T17771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.227298][ T1713] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.236077][ T1713] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.254740][ T1713] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.293982][ T1713] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.336238][T17786] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5462'. [ 261.432625][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5460'. [ 261.571397][T17799] ================================================================== [ 261.579531][T17799] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 261.586758][T17799] [ 261.589151][T17799] write to 0xffff88810498e7c8 of 8 bytes by task 3047 on cpu 0: [ 261.596780][T17799] release_task+0x6f9/0xb70 [ 261.601290][T17799] wait_consider_task+0x114a/0x1660 [ 261.606590][T17799] __do_wait+0xfa/0x510 [ 261.610755][T17799] do_wait+0xb7/0x250 [ 261.614740][T17799] kernel_wait4+0x16b/0x1e0 [ 261.619238][T17799] __x64_sys_wait4+0x91/0x120 [ 261.623945][T17799] x64_sys_call+0x28ec/0x3000 [ 261.628628][T17799] do_syscall_64+0xd8/0x2a0 [ 261.633128][T17799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.639010][T17799] [ 261.641318][T17799] read to 0xffff88810498e300 of 3264 bytes by task 17799 on cpu 1: [ 261.649192][T17799] memcpy_and_pad+0x48/0x80 [ 261.653692][T17799] arch_dup_task_struct+0x2c/0x40 [ 261.658720][T17799] dup_task_struct+0x6e/0x8e0 [ 261.663379][T17799] copy_process+0x37d/0x1ef0 [ 261.668071][T17799] kernel_clone+0x16c/0x5c0 [ 261.672563][T17799] __se_sys_clone3+0x1c2/0x200 [ 261.677485][T17799] __x64_sys_clone3+0x31/0x40 [ 261.682148][T17799] x64_sys_call+0x2c0f/0x3000 [ 261.686901][T17799] do_syscall_64+0xd8/0x2a0 [ 261.691408][T17799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.697299][T17799] [ 261.699607][T17799] Reported by Kernel Concurrency Sanitizer on: [ 261.705761][T17799] CPU: 1 UID: 0 PID: 17799 Comm: syz.3.5466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 261.717172][T17799] Tainted: [W]=WARN [ 261.720976][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 261.731049][T17799] ================================================================== [ 261.789651][T17804] vlan2: entered promiscuous mode [ 261.794727][T17804] dummy0: entered promiscuous mode