last executing test programs: 4m12.857801089s ago: executing program 4 (id=452): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x7}, {0x12, 0xfff2}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x255fdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {}, {0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 4) 4m12.67372115s ago: executing program 4 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000b1000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903e}}], 0x48}, 0x0) fsmount(r2, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x1f, 0x1, 0x8}, 0xf) sigaltstack(&(0x7f0000000040)={0x0, 0x80000002, 0x3c}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000029c0)=""/4090, 0xffa}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000007c0)=""/159, 0x9f}, {&(0x7f0000000c00)=""/127, 0x7f}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f0000000880)=""/173, 0xad}], 0x7}, 0x1005}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21e004, &(0x7f00000006c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpid}, {@errors_continue}, {@mb_optimize_scan}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r8 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000003c0)={r9, @in={{0x2, 0x0, @empty}}, 0x27bf}, 0x90) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x1cb002, 0x0) r11 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x4e, 0x9, 0x5, 0x8, 0x0, 0x100000001, 0x46934, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x639, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x10500, 0x3ff, 0x9, 0x8, 0x3, 0x83, 0x8, 0x0, 0x4, 0x0, 0x5}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xc) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0xf2, 0x0, 0xec, 0x81, 0x0, 0x101, 0x4000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x4942, 0x4c96ece5, 0x1, 0x7, 0x0, 0x772, 0x5, 0x0, 0x5, 0x0, 0x9}, r10, 0x0, r11, 0x4) 4m12.218767164s ago: executing program 4 (id=459): unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006c93c209003d5cac2883b9f4f8b0312020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000038b9008500000072000000951423e4608012789285e59696dfa13e212195d384134a617f24dfdb00a6a15c06996748ff9d4745313b3a956a437ce5e3ec8a275841cd390e210845ae4149a331923dcd6cb42144baec246850e873244320c4615987483362cd2bbf593d2a2ede3fbfed644f4b40149c0fc62db650593a5594f5ada00774487270a8133ed66925109669"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX=r2, @ANYBLOB="2c756e616d653dd0"]) syz_emit_ethernet(0x55, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000011000000800000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009d40b2dd23656f568616000000000000000059ff97a5522f7f32cb47a85f1a5c9c3f8a27c6f544d505350141a611b5eccbc314c4b7b824b893f48e1ce10b4cf9183ab66d5053"], 0x50) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x4, 0x8, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r6) r7 = inotify_init() r8 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = inotify_add_watch(r7, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYRES64=r9], 0x69) close(r8) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x20000000000001bb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r10, 0x0, 0x1}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, 0x0}, 0x20) 4m12.021118166s ago: executing program 1 (id=465): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000c8fc0000000000000600000000000000002020002020207b1af8ff00000000060000000000000007010000f8ffffffcd02000008000000b703000000000083850000007100000095000000000000bbbd8797fb3ebe47000208361482d2c007e42df0ddebb76171070e76a142a1e967f6"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb493, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x7}, 0x18) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffeddf7f, 0x1000, 0x0, 0x1}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000001000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0xfff]}, 0x8, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2208002, &(0x7f0000000400)={[], [{@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, 'omfs\x00'}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'omfs\x00'}}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="80003724090000ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast2, 0x10000003}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) close(0xffffffffffffffff) 4m11.915474876s ago: executing program 3 (id=467): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r8, @ANYRES8=r6], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000101010200000000000000060a00fffe0c00198008000100ad0600003c0001802c0001801401000000000000000000000000000414000400fc000000000000000000000000000001d400028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r1) socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) preadv(r12, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) 4m11.803868547s ago: executing program 1 (id=468): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x1000, 0x2, 0xd, 0x9d}, {0xfffa, 0x6a, 0x3, 0x2}, {0x1, 0x40, 0x7, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010800000000000000000200000a0d000300686173683a6d6163000000000900020073797a300000000005000400020000000400000800064000002edc0500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x6}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000815) 4m11.773199217s ago: executing program 1 (id=469): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110af000000000006020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m11.733905238s ago: executing program 1 (id=471): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000)=[{{0x3}, {0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) recvmmsg$unix(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x1, 0x50, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) fchdir(r0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x86) write$cgroup_int(r9, &(0x7f00000001c0)=0x700, 0x12) 4m11.685497928s ago: executing program 4 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000318110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mmap$xdp(&(0x7f00004c6000/0x4000)=nil, 0x4000, 0x0, 0x2010, r7, 0x80000000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x3, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m11.538503089s ago: executing program 1 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x10001) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00', 0x0}) (async, rerun: 32) r3 = msgget$private(0x0, 0x324) (rerun: 32) msgrcv(r3, &(0x7f0000000200)={0x0, ""/207}, 0xd7, 0x1, 0x1000) unshare(0x62040200) (async) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32], 0x28}}, 0x0) 4m11.258726601s ago: executing program 2 (id=474): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m10.965343193s ago: executing program 3 (id=475): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000030000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000047d01900000007010000f8ffffffb702000005000000b7007200"/89], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x40800, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)={0x24, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x2}]}]}, 0x24}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) write$binfmt_elf64(r3, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0xa, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0x9, 0x4000004, 0x2}]}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x85e4}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffff63fe}]}}]}, 0x44}}, 0x2000400c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000140)={r9, @in={{0x2, 0x4e24, @private=0xa010101}}, [0x7295f8a7, 0xbd, 0x7ff, 0x100000000, 0xff, 0x6, 0x200, 0x9, 0xfe2, 0x80000000, 0x5, 0xfffffffffffffffd, 0xfffffffffffff001, 0xa2, 0x1ff]}, &(0x7f0000000040)=0x100) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)) geteuid() 4m10.933192184s ago: executing program 2 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x44241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5020002"], 0x11d0) 4m10.858744744s ago: executing program 3 (id=477): r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x53) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2152, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000480)="10208100", 0x40, 0x8051, &(0x7f0000000400)={0x11, 0x8100, r3}, 0x14) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 4m10.855020504s ago: executing program 2 (id=479): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x1000, 0x2, 0xd, 0x9d}, {0xfffa, 0x6a, 0x3, 0x2}, {0x1, 0x40, 0x7, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010800000000000000000200000a0d000300686173683a6d6163000000000900020073797a300000000005000400020000000400000800064000002edc0500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x6}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000815) 4m10.798209385s ago: executing program 2 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000805"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 15) 4m10.795417815s ago: executing program 3 (id=481): unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006c93c209003d5cac2883b9f4f8b0312020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000038b9008500000072000000951423e4608012789285e59696dfa13e212195d384134a617f24dfdb00a6a15c06996748ff9d4745313b3a956a437ce5e3ec8a275841cd390e210845ae4149a331923dcd6cb42144baec246850e873244320c4615987483362cd2bbf593d2a2ede3fbfed644f4b40149c0fc62db650593a5594f5ada00774487270a8133ed66925109669"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0), 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x55, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000011000000800000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009d40b2dd23656f568616000000000000000059ff97a5522f7f32cb47a85f1a5c9c3f8a27c6f544d505350141a611b5eccbc314c4b7b824b893f48e1ce10b4cf9183ab66d5053"], 0x50) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x4, 0x8, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r4) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = inotify_add_watch(r5, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x20000000000001bb, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8, 0x0, 0x1}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, 0x0}, 0x20) 4m10.759831775s ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x18060d80) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000006a40), 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @empty, 0x3}, {0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400}, r7, 0xd}}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9}}, {0x4}}]}, @qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x6c}}, 0x20048890) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006d00000329bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="000874225851b6677d020004000000"], 0x20}}, 0x0) 4m10.450621957s ago: executing program 2 (id=483): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0xfffffffc}, 0x1c) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 4m10.449935867s ago: executing program 1 (id=484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2208002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r4 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000100)="80003724090000ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast2, 0x10000003}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) lstat(&(0x7f0000001200)='./file1\x00', &(0x7f0000000e40)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@noload}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00000002030104000000000000053fffe30000"], 0x1c}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, 0x0, &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000b80)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m10.405060777s ago: executing program 4 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r8, @ANYRES8=r6], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000101010200000000000000060a00fffe0c00198008000100ad0600003c0001802c0001801401000000000000000000000000000414000400fc000000000000000000000000000001d400028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r1) socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) preadv(r12, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) 4m10.327053178s ago: executing program 3 (id=486): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) r4 = open(0x0, 0x0, 0x0) flock(r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m10.1547481s ago: executing program 3 (id=488): ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="b8ef210e77eda64260bcd16201988f94adbae2d49c70284df3b3f316e0faf76c4e2d3e14f2cf674cbd8d73ac557d3e58bbcda1d4ac76e52fcbef5d87eccebbcb") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 4m7.485350349s ago: executing program 2 (id=489): lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000180)=0xffffffffffffff4a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/104, 0x68}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)=r2}, 0x20) fsetxattr$security_selinux(r3, &(0x7f0000000280), &(0x7f0000000300)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m26.840036097s ago: executing program 32 (id=491): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000400)={0x3, &(0x7f00000003c0)=[{0x1000, 0x2, 0xd, 0x9d}, {0xfffa, 0x6a, 0x3, 0x2}, {0x1, 0x40, 0x7, 0x3}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010800000000000000000200000a0d000300686173683a6d6163000000000900020073797a300000000005000400020000000400000800064000002edc0500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x28, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}}, 0x40) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x6}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000815) 2m26.754911177s ago: executing program 33 (id=484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x9}, 0x18) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x2208002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r4 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000000100)="80003724090000ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @mcast2, 0x10000003}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000b80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x94) lstat(&(0x7f0000001200)='./file1\x00', &(0x7f0000000e40)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpquota}, {@noload}, {@abort}, {@lazytime}, {@usrquota}, {@resgid}, {@bh}]}, 0x1, 0x58d, &(0x7f00000005c0)="$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") r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00000002030104000000000000053fffe30000"], 0x1c}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, 0x0, &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f0000000b80)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m26.707821088s ago: executing program 34 (id=489): lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000180)=0xffffffffffffff4a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="05000000030000008400000010"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000005c0)=""/104, 0x68}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)=r2}, 0x20) fsetxattr$security_selinux(r3, &(0x7f0000000280), &(0x7f0000000300)='system_u:object_r:hald_cache_t:s0\x00', 0x22, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m26.645556908s ago: executing program 35 (id=488): ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000080)="b8ef210e77eda64260bcd16201988f94adbae2d49c70284df3b3f316e0faf76c4e2d3e14f2cf674cbd8d73ac557d3e58bbcda1d4ac76e52fcbef5d87eccebbcb") r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) 2m26.595811708s ago: executing program 36 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r8, @ANYRES8=r6], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000101010200000000000000060a00fffe0c00198008000100ad0600003c0001802c0001801401000000000000000000000000000414000400fc000000000000000000000000000001d400028005000100"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r1) socket$netlink(0x10, 0x3, 0x0) getsockname$l2tp(r2, &(0x7f0000000340)={0x2, 0x0, @broadcast}, &(0x7f00000003c0)=0x10) preadv(r12, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) 11.625240963s ago: executing program 9 (id=2536): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r3, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) 11.498785764s ago: executing program 9 (id=2541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{0x0}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 11.361122824s ago: executing program 9 (id=2548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000318110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x3, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10.460472632s ago: executing program 9 (id=2567): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000504000000000000000000feff00", @ANYRES32=0x0, @ANYBLOB="00000000002b0400240012800b00010065727370616e000014000280050016000000000006000e"], 0x44}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x25}) fcntl$notify(r0, 0x402, 0x8) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x9}]}, {0x0, [0x2e, 0x0]}}, &(0x7f00000003c0)=""/212, 0x28, 0xd4, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1, 0xffffffffffffffff}, 0x4) rt_sigtimedwait(&(0x7f0000000580)={[0x8a00000000000000]}, &(0x7f00000005c0), &(0x7f0000000640)={0x77359400}, 0x8) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702001a14000000b7030000000000008500000083000000bf090000000000558e94e24b40dc54009500000000000000bf91000000000000b7020000850000e584000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb5e, 0x0, 0x0, 0x0, 0xffffff01}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0x6, 0xd, 0x3, 0x1, 0x9}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xa7, &(0x7f00000000c0)=""/167, 0x40f00, 0x1, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x28, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1, r7, r2, r0, r0, r0, r1], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 9.612289347s ago: executing program 9 (id=2584): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000480)={{0x80, 0x3}, 'port0\x00', 0x85, 0x0, 0x6, 0x67, 0x0, 0x0, 0xb, 0x0, 0x0, 0xc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfe33) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000000)={'bond0\x00', 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) mlockall(0x3) io_setup(0x6, &(0x7f0000001380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x20008001) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x40409, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5}) sysfs$2(0x2, 0x3, &(0x7f0000000000)=""/187) 9.33347386s ago: executing program 9 (id=2593): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001"], 0x34}}, 0xc000) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x25, 0x805, 0x2) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0x100000001}) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x131) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f00000003c0)="00009a4bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) r9 = syz_usbip_server_init(0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0xe7) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095", @ANYRES8=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) 9.33318595s ago: executing program 37 (id=2593): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040008800c0001"], 0x34}}, 0xc000) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x25, 0x805, 0x2) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r0, 0x1) listen(r0, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4ff, 0x100000001}) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x131) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) write$qrtrtun(r6, &(0x7f00000003c0)="00009a4bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) r9 = syz_usbip_server_init(0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r9, 0x80489439, &(0x7f0000000300)) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) creat(&(0x7f0000000280)='./file0/file0\x00', 0xe7) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095", @ANYRES8=r3], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) 2.852949348s ago: executing program 6 (id=2692): creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x3, 0x5, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x7fffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.213269403s ago: executing program 8 (id=2699): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2.194403913s ago: executing program 8 (id=2701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100acf8130c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff"], 0xec}}, 0x0) 2.130672044s ago: executing program 8 (id=2703): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x0, @llc={0x1a, 0x30b, 0x10, 0x6, 0x1, 0x4, @local}, @l2={0x1f, 0x965d, @none, 0x200, 0x2}, @ethernet={0x306, @multicast}, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6348, 0x6, 0x9}) 1.959725055s ago: executing program 6 (id=2704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 1.893630566s ago: executing program 6 (id=2707): readv(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) unshare(0x6020400) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) timerfd_gettime(r2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x1b8, 0x2, 0xa, 0x401, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x73, 0x6, "49c9fa436e4893e7a6f3060ef2caed06e44d9f6fb894d17a1ff08075823fa7ddfd4588aa4a5fab45197d8f9819af9775c479386318e5410e809907c04cc415d82b7e0a4364d8b2db6691863e76d316377a10c92ba0e675ba35e8b31278b93170a60eacebb2ad45e84ecb18f01524ac"}, @NFTA_TABLE_USERDATA={0x39, 0x6, "a930c96a6f49a92ec672457f9e8e2956fc46defc99fc3274838c99a70f82b5a566964a3b809483736c6ef5ee8510adca72500feab6"}, @NFTA_TABLE_USERDATA={0xc5, 0x6, "32358088aa7b2a397219a59cfc0ea0c5db4fe205953b54e221150e7499c6f9be7c14e7713a2f7c8c2a5f605efe28e65166991fc25d6beca210e53368cb482be5cb6c2b5c86416fa9057edd9a244268c2b90491c0cccbe19a514339631ea1fbac9d0e4580b981a314eaad4f27912cd5a5c386bada5df4fbe2cfbb75fa03825469ab3d6c4ff5d6636042c000a1e2447e01bb2da0df731d6f570a8abd0f000864eea1cf35e12840079dd01e63b7ef088765935e39af06e78888e50eaba7c2b584582f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1e0}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.782337236s ago: executing program 0 (id=2712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30", @ANYRESDEC=r3, @ANYRES8=r2, @ANYRES16=r4], 0x110}}, 0x800) 1.679199167s ago: executing program 0 (id=2715): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x1}, 0x132e36, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x1000, &(0x7f00000001c0)="ecf6a3514e9bd99251969ba8f24a6b2d3256edd13d27c6121fc1be1dec580bfd342d21f557c573e88a23904dd4ce56592f89557ab8a1435d", 0x38, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500)="167a6d56217c1c3c9915f82957831aa0d23741a22ba7f0d468e7f99a2116e081bd3876d35a808a0da7d7cc169d74814d999a7de1e7f0209d03e6845cc5e14886731bd73dfb2f3cc634966a1b44e07e2261") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000580)='coda\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000080000000000000018110000b79d8989e5f67d933fd79542419b9ccf93da43babb3cefeae29774ed7d2c416aa1dfaeef84bcfa0acad6fbd4dea7d2297df9d842052d8ee4f3f9ff39f97213407178197227c70d3b", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r5 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x200000000000000) 1.464668239s ago: executing program 8 (id=2718): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 1.27385758s ago: executing program 8 (id=2719): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x40542, 0x100) sendfile(r4, r5, 0x0, 0x8000fffffffe) 1.182523851s ago: executing program 0 (id=2720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30", @ANYRESDEC=r3, @ANYRES8=r2, @ANYRES16=r4], 0x110}}, 0x800) 1.050184512s ago: executing program 0 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000050) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0xf) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (fail_nth: 1) 1.009992812s ago: executing program 6 (id=2722): open(&(0x7f00000000c0)='./bus\x00', 0x149080, 0x171) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00021b3df7614626484000000000000000010900010073797a300000000054000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000000028000480140003007866726d30000000000000000000000008000140000000040800024058d28f5814000000110001000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getrusage(0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_clone(0x45240011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) syz_io_uring_setup(0x233d, &(0x7f00000002c0)={0x0, 0x0, 0x40, 0x0, 0xb2}, &(0x7f0000000240), &(0x7f0000000200)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) 796.053034ms ago: executing program 7 (id=2723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 773.835854ms ago: executing program 7 (id=2724): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x20}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000001ab4000085000000623bb597ae4be393d5fc5082"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="ec21421c9bc0e597d35e80519123", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000800000a600000000e7f233c9f41288148a8fd7b996ba1a810730ca126ee8cee8f3fba06ec12871b00eb777ed328f44bd50eb3efd68406dc82e567ba7e344463060d984375dd6a0ddd7dad92720632153ab808d57c53cd900c95902d54ee87b53c0e91d24f9aec4ba4c07180077724c0e42af0a4d21d648eca3d4f827b41fa778032668812cb34c3de504db8034a4d1142353d28a5153384ad5381fc881725de63823b0ffe1252c68de0f9fad703138b29153ec0eade2f8da241bd736e7e452fcd80d33fe5261832d0e00"/228, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 714.333124ms ago: executing program 5 (id=2725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3}, 0x21) 654.522755ms ago: executing program 0 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000800000a600000000e7f233c9f41288148a8fd7b996ba1a810730ca126ee8cee8f3fba06ec12871b00eb777ed328f44bd50eb3efd68406dc82e567ba7e344463060d984375dd6a0ddd7dad92720632153ab808d57c53cd900c95902d54ee87b53c0e91d24f9aec4ba4c07180077724c0e42af0a4d21d648eca3d4f827b41fa778032668812cb34c3de504db8034a4d1142353d28a5153384ad5381fc881725de63823b0ffe1252c68de0f9fad703138b29153ec0eade2f8da241bd736e7e452fcd80d33fe5261832d0e00"/228, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 543.825636ms ago: executing program 5 (id=2727): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) accept4$unix(r0, 0x0, 0x0, 0x80800) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0xfe, 0x2, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="67d890", 0x3}], 0x1, 0x0, 0x0, 0x1}, 0x0) 536.963616ms ago: executing program 0 (id=2728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}, 0x1, 0x0, 0x0, 0x8000}, 0x4008090) 496.383406ms ago: executing program 7 (id=2729): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 479.576396ms ago: executing program 5 (id=2730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0xff, 0x3}, 0x21) 416.364067ms ago: executing program 7 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30", @ANYRESDEC=r3, @ANYRES8=r2, @ANYRES16=r4], 0x110}}, 0x800) 377.298157ms ago: executing program 8 (id=2732): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) 360.452817ms ago: executing program 7 (id=2733): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 298.666948ms ago: executing program 5 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) 246.381408ms ago: executing program 5 (id=2735): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000800000a600000000e7f233c9f41288148a8fd7b996ba1a810730ca126ee8cee8f3fba06ec12871b00eb777ed328f44bd50eb3efd68406dc82e567ba7e344463060d984375dd6a0ddd7dad92720632153ab808d57c53cd900c95902d54ee87b53c0e91d24f9aec4ba4c07180077724c0e42af0a4d21d648eca3d4f827b41fa778032668812cb34c3de504db8034a4d1142353d28a5153384ad5381fc881725de63823b0ffe1252c68de0f9fad703138b29153ec0eade2f8da241bd736e7e452fcd80d33fe5261832d0e00"/228, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 153.259899ms ago: executing program 6 (id=2736): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet(r1, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 141.365319ms ago: executing program 7 (id=2737): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x1}, 0x132e36, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x1000, &(0x7f00000001c0)="ecf6a3514e9bd99251969ba8f24a6b2d3256edd13d27c6121fc1be1dec580bfd342d21f557c573e88a23904dd4ce56592f89557ab8a1435d", 0x38, &(0x7f0000000300), &(0x7f00000004c0), &(0x7f0000000500)="167a6d56217c1c3c9915f82957831aa0d23741a22ba7f0d468e7f99a2116e081bd3876d35a808a0da7d7cc169d74814d999a7de1e7f0209d03e6845cc5e14886731bd73dfb2f3cc634966a1b44e07e2261") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x83, 0x40, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x8000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r2, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000580)='coda\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000080000000000000018110000b79d8989e5f67d933fd79542419b9ccf93da43babb3cefeae29774ed7d2c416aa1dfaeef84bcfa0acad6fbd4dea7d2297df9d842052d8ee4f3f9ff39f97213407178197227c70d3b", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r5 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r5, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x200000000000000) 58.842389ms ago: executing program 5 (id=2738): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000800000a600000000e7f233c9f41288148a8fd7b996ba1a810730ca126ee8cee8f3fba06ec12871b00eb777ed328f44bd50eb3efd68406dc82e567ba7e344463060d984375dd6a0ddd7dad92720632153ab808d57c53cd900c95902d54ee87b53c0e91d24f9aec4ba4c07180077724c0e42af0a4d21d648eca3d4f827b41fa778032668812cb34c3de504db8034a4d1142353d28a5153384ad5381fc881725de63823b0ffe1252c68de0f9fad703138b29153ec0eade2f8da241bd736e7e452fcd80d33fe5261832d0e00"/228, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 0s ago: executing program 6 (id=2739): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x0, @llc={0x1a, 0x30b, 0x10, 0x6, 0x1, 0x4, @local}, @l2={0x1f, 0x965d, @none, 0x200, 0x2}, @ethernet={0x306, @multicast}, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6348, 0x6, 0x9}) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.265963][ T30] audit: type=1326 audit(1741560875.393:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.273232][T10891] FAULT_INJECTION: forcing a failure. [ 255.273232][T10891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.289554][ T30] audit: type=1326 audit(1741560875.393:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.302679][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.9.1807 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 255.302712][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.302728][T10891] Call Trace: [ 255.302738][T10891] [ 255.302748][T10891] dump_stack_lvl+0xf2/0x150 [ 255.302786][T10891] dump_stack+0x15/0x1a [ 255.302857][T10891] should_fail_ex+0x24a/0x260 [ 255.302897][T10891] should_fail+0xb/0x10 [ 255.302931][T10891] should_fail_usercopy+0x1a/0x20 [ 255.303037][T10891] _copy_to_user+0x20/0xa0 [ 255.303102][T10891] simple_read_from_buffer+0xa0/0x110 [ 255.303182][T10891] proc_fail_nth_read+0xf9/0x140 [ 255.303222][T10891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.303310][T10891] vfs_read+0x19b/0x6f0 [ 255.303342][T10891] ? __rcu_read_unlock+0x4e/0x70 [ 255.303435][T10891] ? __fget_files+0x17c/0x1c0 [ 255.303581][T10891] ksys_read+0xe8/0x1b0 [ 255.303615][T10891] __x64_sys_read+0x42/0x50 [ 255.303648][T10891] x64_sys_call+0x2874/0x2dc0 [ 255.303709][T10891] do_syscall_64+0xc9/0x1c0 [ 255.303749][T10891] ? clear_bhb_loop+0x55/0xb0 [ 255.303784][T10891] ? clear_bhb_loop+0x55/0xb0 [ 255.303819][T10891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.303953][T10891] RIP: 0033:0x7f30d4a5bb7c [ 255.303971][T10891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.303995][T10891] RSP: 002b:00007f30d30c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.304018][T10891] RAX: ffffffffffffffda RBX: 00007f30d4c75fa0 RCX: 00007f30d4a5bb7c [ 255.304033][T10891] RDX: 000000000000000f RSI: 00007f30d30c70a0 RDI: 0000000000000004 [ 255.304048][T10891] RBP: 00007f30d30c7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.304063][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.304078][T10891] R13: 0000000000000000 R14: 00007f30d4c75fa0 R15: 00007ffdcaed24a8 [ 255.304099][T10891] [ 255.519549][ T30] audit: type=1326 audit(1741560875.393:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.543093][ T30] audit: type=1326 audit(1741560875.393:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.566622][ T30] audit: type=1326 audit(1741560875.393:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.590187][ T30] audit: type=1326 audit(1741560875.393:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10885 comm="syz.7.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 255.615568][ T30] audit: type=1400 audit(1741560875.473:8662): avc: denied { read write } for pid=10890 comm="syz.9.1807" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 255.666670][T10908] loop9: detected capacity change from 0 to 512 [ 255.684757][T10908] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 255.700730][T10912] 9pnet_fd: Insufficient options for proto=fd [ 255.743671][T10905] lo speed is unknown, defaulting to 1000 [ 255.792268][T10905] lo speed is unknown, defaulting to 1000 [ 255.823457][T10908] EXT4-fs (loop9): 1 truncate cleaned up [ 255.830865][T10908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.855572][T10908] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.265898][T10929] 8021q: VLANs not supported on sit0 [ 256.332090][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.342377][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.384402][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.397295][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.440876][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.447887][T10944] loop8: detected capacity change from 0 to 2048 [ 256.450632][T10929] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1818'. [ 256.474002][T10944] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 256.484360][T10944] System zones: 0-4 [ 256.488877][T10944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.501440][T10944] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.856586][T10984] can: request_module (can-proto-0) failed. [ 256.875889][T10984] sctp: [Deprecated]: syz.6.1835 (pid 10984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.875889][T10984] Use struct sctp_sack_info instead [ 256.920187][T10989] SELinux: +}[@ (10989) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 257.728449][ T9024] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:32: bg 0: block 345: padding at end of block bitmap is not set [ 257.748746][ T9024] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 257.761554][ T9024] EXT4-fs (loop8): This should not happen!! Data will be lost [ 257.761554][ T9024] [ 257.861912][T11014] loop5: detected capacity change from 0 to 512 [ 257.880796][ T9024] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 257.893787][ T9024] EXT4-fs (loop8): This should not happen!! Data will be lost [ 257.893787][ T9024] [ 257.903601][ T9024] EXT4-fs (loop8): Total free blocks count 0 [ 257.909742][ T9024] EXT4-fs (loop8): Free/Dirty block details [ 257.915715][ T9024] EXT4-fs (loop8): free_blocks=0 [ 257.920676][ T9024] EXT4-fs (loop8): dirty_blocks=2048 [ 257.926183][ T9024] EXT4-fs (loop8): Block reservation details [ 258.002487][T11020] FAULT_INJECTION: forcing a failure. [ 258.002487][T11020] name failslab, interval 1, probability 0, space 0, times 0 [ 258.015304][T11020] CPU: 0 UID: 0 PID: 11020 Comm: syz.5.1846 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 258.015352][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.015421][T11020] Call Trace: [ 258.015427][T11020] [ 258.015433][T11020] dump_stack_lvl+0xf2/0x150 [ 258.015547][T11020] dump_stack+0x15/0x1a [ 258.015574][T11020] should_fail_ex+0x24a/0x260 [ 258.015612][T11020] should_failslab+0x8f/0xb0 [ 258.015707][T11020] kmem_cache_alloc_node_noprof+0x59/0x320 [ 258.015736][T11020] ? __alloc_skb+0x10b/0x310 [ 258.015758][T11020] ? avc_has_perm_noaudit+0x1cc/0x210 [ 258.015860][T11020] __alloc_skb+0x10b/0x310 [ 258.015953][T11020] alloc_skb_with_frags+0x80/0x450 [ 258.016042][T11020] ? selinux_file_open+0x34a/0x3b0 [ 258.016199][T11020] ? __rcu_read_unlock+0x34/0x70 [ 258.016223][T11020] ? 0xffffffffa0003a40 [ 258.016241][T11020] sock_alloc_send_pskb+0x435/0x4f0 [ 258.016276][T11020] ? bpf_prog_6e3709ad7adffd83+0x47/0x4d [ 258.016308][T11020] tun_get_user+0xa24/0x25c0 [ 258.016340][T11020] ? avc_has_perm+0xd4/0x160 [ 258.016364][T11020] ? ref_tracker_alloc+0x1f5/0x2f0 [ 258.016471][T11020] tun_chr_write_iter+0x188/0x240 [ 258.016500][T11020] vfs_write+0x77b/0x920 [ 258.016569][T11020] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 258.016602][T11020] ksys_write+0xe8/0x1b0 [ 258.016628][T11020] __x64_sys_write+0x42/0x50 [ 258.016734][T11020] x64_sys_call+0x287e/0x2dc0 [ 258.016760][T11020] do_syscall_64+0xc9/0x1c0 [ 258.016797][T11020] ? clear_bhb_loop+0x55/0xb0 [ 258.016829][T11020] ? clear_bhb_loop+0x55/0xb0 [ 258.016916][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.016975][T11020] RIP: 0033:0x7fa22f09d169 [ 258.016990][T11020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.017007][T11020] RSP: 002b:00007fa22d707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.017026][T11020] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09d169 [ 258.017041][T11020] RDX: 000000000000fdef RSI: 0000400000000580 RDI: 00000000000000c8 [ 258.017056][T11020] RBP: 00007fa22d707090 R08: 0000000000000000 R09: 0000000000000000 [ 258.017120][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.017132][T11020] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 258.017151][T11020] [ 258.435960][T11048] 9pnet_fd: Insufficient options for proto=fd [ 258.461727][T11047] loop5: detected capacity change from 0 to 2048 [ 258.506467][T11047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.525662][T11047] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.552729][T11047] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 258.565105][T11047] EXT4-fs (loop5): This should not happen!! Data will be lost [ 258.565105][T11047] [ 258.574901][T11047] EXT4-fs (loop5): Total free blocks count 0 [ 258.580908][T11047] EXT4-fs (loop5): Free/Dirty block details [ 258.586863][T11047] EXT4-fs (loop5): free_blocks=2415919104 [ 258.592624][T11047] EXT4-fs (loop5): dirty_blocks=16 [ 258.597811][T11047] EXT4-fs (loop5): Block reservation details [ 258.603891][T11047] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 258.698456][T11059] loop7: detected capacity change from 0 to 8192 [ 258.747748][T11059] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 258.756768][T11059] FAT-fs (loop7): Filesystem has been set read-only [ 258.763632][T11059] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 2068) [ 258.773111][T11059] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 2068) [ 258.788176][T11059] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 258.800117][T11059] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 258.810375][ T9024] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 258.824521][T11059] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 258.868952][T11059] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 258.997914][T11072] 9pnet_fd: Insufficient options for proto=fd [ 259.100525][T11067] lo speed is unknown, defaulting to 1000 [ 259.278919][T11067] lo speed is unknown, defaulting to 1000 [ 259.698999][T11108] netlink: 'syz.7.1876': attribute type 4 has an invalid length. [ 259.766977][T11114] SELinux: +}[@ (11114) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 259.913362][T11126] veth0_to_bond: entered promiscuous mode [ 259.919480][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1882'. [ 259.937939][T11126] veth0_to_bond (unregistering): left promiscuous mode [ 259.948803][T11126] : (slave bond_slave_0): Releasing backup interface [ 259.971246][T11131] loop8: detected capacity change from 0 to 128 [ 260.019573][T11135] loop8: detected capacity change from 0 to 1024 [ 260.038602][T11135] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 260.048117][T11135] System zones: 0-1, 3-36 [ 260.053991][T11135] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.069283][T11135] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.8.1884: corrupted in-inode xattr: bad e_name length [ 260.084690][T11135] EXT4-fs (loop8): Remounting filesystem read-only [ 260.104371][ T5047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.117004][T11130] FAULT_INJECTION: forcing a failure. [ 260.117004][T11130] name failslab, interval 1, probability 0, space 0, times 0 [ 260.129685][T11130] CPU: 1 UID: 0 PID: 11130 Comm: syz.6.1881 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 260.129759][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.129772][T11130] Call Trace: [ 260.129779][T11130] [ 260.129787][T11130] dump_stack_lvl+0xf2/0x150 [ 260.129815][T11130] dump_stack+0x15/0x1a [ 260.129835][T11130] should_fail_ex+0x24a/0x260 [ 260.129864][T11130] ? kobject_uevent_env+0x1a4/0x550 [ 260.129949][T11130] should_failslab+0x8f/0xb0 [ 260.130044][T11130] __kmalloc_cache_noprof+0x4e/0x320 [ 260.130075][T11130] kobject_uevent_env+0x1a4/0x550 [ 260.130104][T11130] kobject_uevent+0x1c/0x30 [ 260.130199][T11130] __kobject_del+0x8e/0x1a0 [ 260.130226][T11130] kobject_put+0x126/0x180 [ 260.130250][T11130] netdev_queue_update_kobjects+0x38d/0x3c0 [ 260.130286][T11130] netdev_unregister_kobject+0xc1/0x120 [ 260.130324][T11130] unregister_netdevice_many_notify+0xe77/0x1280 [ 260.130376][T11130] ? __flush_work+0x4a1/0x580 [ 260.130409][T11130] ? detach_if_pending+0x94/0x200 [ 260.130433][T11130] unregister_netdevice_queue+0x1f4/0x220 [ 260.130462][T11130] unregister_netdev+0x1f/0x50 [ 260.130487][T11130] slip_close+0xe5/0x100 [ 260.130508][T11130] ? __pfx_slip_close+0x10/0x10 [ 260.130548][T11130] tty_ldisc_close+0x77/0xa0 [ 260.130576][T11130] tty_set_ldisc+0x1e2/0x3b0 [ 260.130601][T11130] tiocsetd+0x52/0x60 [ 260.130693][T11130] tty_ioctl+0xa94/0xbe0 [ 260.130717][T11130] ? __pfx_tty_ioctl+0x10/0x10 [ 260.130758][T11130] __se_sys_ioctl+0xc9/0x140 [ 260.130790][T11130] __x64_sys_ioctl+0x43/0x50 [ 260.130861][T11130] x64_sys_call+0x1690/0x2dc0 [ 260.130888][T11130] do_syscall_64+0xc9/0x1c0 [ 260.130919][T11130] ? clear_bhb_loop+0x55/0xb0 [ 260.130946][T11130] ? clear_bhb_loop+0x55/0xb0 [ 260.131105][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.131138][T11130] RIP: 0033:0x7ff975a9d169 [ 260.131157][T11130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.131179][T11130] RSP: 002b:00007ff9740e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.131202][T11130] RAX: ffffffffffffffda RBX: 00007ff975cb6080 RCX: 00007ff975a9d169 [ 260.131221][T11130] RDX: 0000400000000140 RSI: 0000000000005423 RDI: 0000000000000004 [ 260.131236][T11130] RBP: 00007ff9740e6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.131251][T11130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.131266][T11130] R13: 0000000000000000 R14: 00007ff975cb6080 R15: 00007ffd1c25c8e8 [ 260.131287][T11130] [ 260.395635][ T30] kauditd_printk_skb: 333 callbacks suppressed [ 260.395653][ T30] audit: type=1400 audit(1741560880.604:8996): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 260.423369][ T30] audit: type=1326 audit(1741560880.614:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.447243][ T30] audit: type=1326 audit(1741560880.614:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.470795][ T30] audit: type=1326 audit(1741560880.614:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.494417][ T30] audit: type=1326 audit(1741560880.614:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.518052][ T30] audit: type=1326 audit(1741560880.614:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.541559][ T30] audit: type=1326 audit(1741560880.614:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.548977][T11152] FAULT_INJECTION: forcing a failure. [ 260.548977][T11152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.565151][ T30] audit: type=1326 audit(1741560880.614:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.565210][ T30] audit: type=1326 audit(1741560880.614:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.565242][ T30] audit: type=1326 audit(1741560880.614:9005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.9.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 260.578327][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.9.1890 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 260.578361][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.578377][T11152] Call Trace: [ 260.578384][T11152] [ 260.578395][T11152] dump_stack_lvl+0xf2/0x150 [ 260.578494][T11152] dump_stack+0x15/0x1a [ 260.578522][T11152] should_fail_ex+0x24a/0x260 [ 260.578561][T11152] should_fail+0xb/0x10 [ 260.578603][T11152] should_fail_usercopy+0x1a/0x20 [ 260.578682][T11152] _copy_from_user+0x1c/0xa0 [ 260.578791][T11152] copy_msghdr_from_user+0x54/0x2a0 [ 260.578833][T11152] ? __fget_files+0x17c/0x1c0 [ 260.578990][T11152] __sys_sendmsg+0x13e/0x230 [ 260.579038][T11152] __x64_sys_sendmsg+0x46/0x50 [ 260.579071][T11152] x64_sys_call+0x2734/0x2dc0 [ 260.579105][T11152] do_syscall_64+0xc9/0x1c0 [ 260.579203][T11152] ? clear_bhb_loop+0x55/0xb0 [ 260.579238][T11152] ? clear_bhb_loop+0x55/0xb0 [ 260.579351][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.579386][T11152] RIP: 0033:0x7f30d4a5d169 [ 260.579405][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.579428][T11152] RSP: 002b:00007f30d30c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.579457][T11152] RAX: ffffffffffffffda RBX: 00007f30d4c75fa0 RCX: 00007f30d4a5d169 [ 260.579472][T11152] RDX: 0000000000008000 RSI: 0000400000000300 RDI: 0000000000000003 [ 260.579488][T11152] RBP: 00007f30d30c7090 R08: 0000000000000000 R09: 0000000000000000 [ 260.579504][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.579578][T11152] R13: 0000000000000000 R14: 00007f30d4c75fa0 R15: 00007ffdcaed24a8 [ 260.579607][T11152] [ 260.882014][T11130] Falling back ldisc for ttyS3. [ 261.638427][T11201] loop6: detected capacity change from 0 to 128 [ 261.842769][T11221] 9pnet_fd: Insufficient options for proto=fd [ 261.864867][T11218] lo speed is unknown, defaulting to 1000 [ 261.987204][T11232] SELinux: policydb version 0 does not match my version range 15-34 [ 262.029841][T11232] SELinux: failed to load policy [ 262.118417][T11218] lo speed is unknown, defaulting to 1000 [ 262.155919][T11255] FAULT_INJECTION: forcing a failure. [ 262.155919][T11255] name failslab, interval 1, probability 0, space 0, times 0 [ 262.168737][T11255] CPU: 1 UID: 0 PID: 11255 Comm: syz.5.1933 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 262.168781][T11255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.168803][T11255] Call Trace: [ 262.168812][T11255] [ 262.168820][T11255] dump_stack_lvl+0xf2/0x150 [ 262.168854][T11255] dump_stack+0x15/0x1a [ 262.168878][T11255] should_fail_ex+0x24a/0x260 [ 262.168909][T11255] ? alloc_pipe_info+0xb0/0x360 [ 262.169005][T11255] should_failslab+0x8f/0xb0 [ 262.169038][T11255] __kmalloc_cache_noprof+0x4e/0x320 [ 262.169069][T11255] alloc_pipe_info+0xb0/0x360 [ 262.169105][T11255] splice_direct_to_actor+0x60f/0x670 [ 262.169266][T11255] ? __pfx_direct_splice_actor+0x10/0x10 [ 262.169299][T11255] ? selinux_file_permission+0x327/0x360 [ 262.169336][T11255] do_splice_direct+0xd7/0x150 [ 262.169416][T11255] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 262.169453][T11255] do_sendfile+0x398/0x660 [ 262.169480][T11255] __x64_sys_sendfile64+0x110/0x150 [ 262.169515][T11255] x64_sys_call+0xfbd/0x2dc0 [ 262.169566][T11255] do_syscall_64+0xc9/0x1c0 [ 262.169597][T11255] ? clear_bhb_loop+0x55/0xb0 [ 262.169659][T11255] ? clear_bhb_loop+0x55/0xb0 [ 262.169686][T11255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.169762][T11255] RIP: 0033:0x7fa22f09d169 [ 262.169780][T11255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.169815][T11255] RSP: 002b:00007fa22d707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.169835][T11255] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09d169 [ 262.169926][T11255] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 262.170014][T11255] RBP: 00007fa22d707090 R08: 0000000000000000 R09: 0000000000000000 [ 262.170026][T11255] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000001 [ 262.170063][T11255] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 262.170082][T11255] [ 262.881714][ C1] bridge0: port 3(dummy0) entered forwarding state [ 262.888320][ C1] bridge0: topology change detected, propagating [ 263.015622][T11286] loop5: detected capacity change from 0 to 1024 [ 263.022350][T11286] EXT4-fs: Ignoring removed orlov option [ 263.028183][T11286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.030934][T11284] loop9: detected capacity change from 0 to 2048 [ 263.100043][T11286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.119864][T11294] netlink: 'syz.8.1945': attribute type 29 has an invalid length. [ 263.126380][T11284] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 263.138363][T11294] netlink: 'syz.8.1945': attribute type 29 has an invalid length. [ 263.176916][T11294] loop8: detected capacity change from 0 to 256 [ 263.191237][ T5033] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.218618][T11294] FAT-fs (loop8): Directory bread(block 64) failed [ 263.226272][T11294] FAT-fs (loop8): Directory bread(block 65) failed [ 263.247105][T11294] FAT-fs (loop8): Directory bread(block 66) failed [ 263.271987][T11294] FAT-fs (loop8): Directory bread(block 67) failed [ 263.307084][T11294] FAT-fs (loop8): Directory bread(block 68) failed [ 263.315373][T11294] FAT-fs (loop8): Directory bread(block 69) failed [ 263.328097][T11294] FAT-fs (loop8): Directory bread(block 70) failed [ 263.341876][T11294] FAT-fs (loop8): Directory bread(block 71) failed [ 263.351710][T11294] FAT-fs (loop8): Directory bread(block 72) failed [ 263.368259][T11294] FAT-fs (loop8): Directory bread(block 73) failed [ 263.475498][T11319] syz.7.1951 (11319): /proc/11310/oom_adj is deprecated, please use /proc/11310/oom_score_adj instead. [ 263.494064][T11311] lo speed is unknown, defaulting to 1000 [ 263.527168][T11319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11319 comm=syz.7.1951 [ 263.535923][T11311] lo speed is unknown, defaulting to 1000 [ 264.306984][T11337] loop7: detected capacity change from 0 to 512 [ 264.314366][T11337] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 264.323612][T11337] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 264.338544][T11337] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #11: comm syz.7.1959: corrupted inode contents [ 264.350747][T11337] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #11: comm syz.7.1959: mark_inode_dirty error [ 264.364185][T11337] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1959: invalid indirect mapped block 1 (level 1) [ 264.386797][T11337] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #11: comm syz.7.1959: corrupted inode contents [ 264.461827][T11337] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 264.472537][T11353] SELinux: +}[@ (11353) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 264.498445][T11337] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #11: comm syz.7.1959: corrupted inode contents [ 264.512271][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1965'. [ 264.533006][T11337] EXT4-fs error (device loop7): ext4_truncate:4240: inode #11: comm syz.7.1959: mark_inode_dirty error [ 264.550752][T11337] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 264.580091][T11337] EXT4-fs (loop7): 1 truncate cleaned up [ 264.583223][T11360] veth0_to_bond: entered promiscuous mode [ 264.602489][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'. [ 264.611832][T11337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.678165][T11360] veth0_to_bond (unregistering): left promiscuous mode [ 264.686837][T11360] : (slave bond_slave_0): Releasing backup interface [ 264.722489][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 264.731438][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 264.740362][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1971'. [ 264.758965][ T5045] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.773435][T11366] lo speed is unknown, defaulting to 1000 [ 264.800569][T11376] loop7: detected capacity change from 0 to 1024 [ 264.856573][T11376] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.916275][T11366] lo speed is unknown, defaulting to 1000 [ 264.939883][T11376] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 265.067105][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 265.078889][T11377] lo speed is unknown, defaulting to 1000 [ 265.085999][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.112138][ T5045] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.122690][T11384] Cannot find del_set index 0 as target [ 265.182251][T11387] syz_tun: entered allmulticast mode [ 265.205658][T11387] pimreg: entered allmulticast mode [ 265.215280][T11387] syz_tun: left allmulticast mode [ 265.233555][T11377] lo speed is unknown, defaulting to 1000 [ 265.239976][T11387] FAULT_INJECTION: forcing a failure. [ 265.239976][T11387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.253303][T11387] CPU: 1 UID: 0 PID: 11387 Comm: syz.7.1977 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 265.253395][T11387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.253410][T11387] Call Trace: [ 265.253419][T11387] [ 265.253428][T11387] dump_stack_lvl+0xf2/0x150 [ 265.253462][T11387] dump_stack+0x15/0x1a [ 265.253628][T11387] should_fail_ex+0x24a/0x260 [ 265.253660][T11387] should_fail_alloc_page+0xfd/0x110 [ 265.253693][T11387] __alloc_frozen_pages_noprof+0x109/0x340 [ 265.253733][T11387] __alloc_pages_noprof+0x9/0x20 [ 265.253837][T11387] ___kmalloc_large_node+0x7a/0x120 [ 265.253865][T11387] __kmalloc_large_noprof+0x1f/0xb0 [ 265.253891][T11387] ? __pfx_uhid_char_open+0x10/0x10 [ 265.253928][T11387] uhid_char_open+0x25/0x150 [ 265.253987][T11387] ? __pfx_uhid_char_open+0x10/0x10 [ 265.254027][T11387] misc_open+0x1d5/0x200 [ 265.254050][T11387] chrdev_open+0x2f9/0x370 [ 265.254111][T11387] ? __pfx_chrdev_open+0x10/0x10 [ 265.254146][T11387] do_dentry_open+0x621/0xa20 [ 265.254192][T11387] vfs_open+0x38/0x1e0 [ 265.254357][T11387] path_openat+0x1ae0/0x1fc0 [ 265.254439][T11387] ? default_send_IPI_self+0x38/0x80 [ 265.254475][T11387] ? irq_work_queue+0xb4/0x120 [ 265.254511][T11387] do_filp_open+0x107/0x230 [ 265.254552][T11387] do_sys_openat2+0xab/0x120 [ 265.254580][T11387] __x64_sys_openat+0xf3/0x120 [ 265.254604][T11387] x64_sys_call+0x2b30/0x2dc0 [ 265.254641][T11387] do_syscall_64+0xc9/0x1c0 [ 265.254735][T11387] ? clear_bhb_loop+0x55/0xb0 [ 265.254764][T11387] ? clear_bhb_loop+0x55/0xb0 [ 265.254791][T11387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.254823][T11387] RIP: 0033:0x7f3a1741d169 [ 265.254880][T11387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.254901][T11387] RSP: 002b:00007f3a15a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.254923][T11387] RAX: ffffffffffffffda RBX: 00007f3a17635fa0 RCX: 00007f3a1741d169 [ 265.254938][T11387] RDX: 0000000000000002 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 265.254950][T11387] RBP: 00007f3a15a87090 R08: 0000000000000000 R09: 0000000000000000 [ 265.255003][T11387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.255016][T11387] R13: 0000000000000000 R14: 00007f3a17635fa0 R15: 00007ffc1d932288 [ 265.255035][T11387] [ 265.539491][T11389] loop7: detected capacity change from 0 to 1024 [ 265.621096][T11393] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1980'. [ 265.640267][T11389] EXT4-fs: Ignoring removed bh option [ 265.659635][T11389] EXT4-fs: Ignoring removed orlov option [ 265.665428][T11389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.764014][T11404] syz_tun: entered allmulticast mode [ 265.772667][T11404] pimreg: entered allmulticast mode [ 265.778722][T11404] syz_tun: left allmulticast mode [ 265.788521][T11404] loop9: detected capacity change from 0 to 1024 [ 265.795291][T11404] EXT4-fs: Ignoring removed bh option [ 265.800742][T11404] EXT4-fs: Ignoring removed orlov option [ 265.806446][T11404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.847409][T11389] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.065556][ T30] kauditd_printk_skb: 342 callbacks suppressed [ 266.065573][ T30] audit: type=1400 audit(1741560886.274:9348): avc: denied { ioctl } for pid=11419 comm="syz.8.1986" path="socket:[27645]" dev="sockfs" ino=27645 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 266.190835][ T30] audit: type=1326 audit(1741560886.314:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.214439][ T30] audit: type=1326 audit(1741560886.314:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.237968][ T30] audit: type=1326 audit(1741560886.314:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.261441][ T30] audit: type=1326 audit(1741560886.314:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.285137][ T30] audit: type=1326 audit(1741560886.314:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.308705][ T30] audit: type=1326 audit(1741560886.314:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.321773][T11385] pimreg: left allmulticast mode [ 266.332287][ T30] audit: type=1326 audit(1741560886.314:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.340327][T11404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.361044][ T30] audit: type=1326 audit(1741560886.314:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.396684][ T30] audit: type=1326 audit(1741560886.314:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.8.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 266.472882][T11389] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 266.507424][ T5045] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.567768][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x3 [ 266.575893][T11398] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 266.585893][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.593441][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.600956][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 266.608396][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.615878][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.623367][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.630803][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.638286][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.645866][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 266.653351][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.660753][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.668232][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.675768][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.683227][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.690637][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.698104][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.705550][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.712995][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.720403][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.727894][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.735342][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.742804][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.750211][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.757657][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.762670][T11397] pimreg: left allmulticast mode [ 266.765237][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.777677][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.785152][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.792608][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.800033][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.807582][ T25] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 266.833495][ T25] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.01 Device [syz0] on syz1 [ 266.854598][T11438] netlink: 'syz.8.1992': attribute type 4 has an invalid length. [ 266.908180][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.988043][T11448] SELinux: syz.8.1995 (11448) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 267.039525][T11453] SELinux: syz.9.1997 (11453) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 267.207711][T11461] loop8: detected capacity change from 0 to 1024 [ 267.234490][T11461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.252969][T11467] netlink: 'syz.9.2003': attribute type 4 has an invalid length. [ 267.304215][T11461] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.463210][T11461] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 267.703639][ T5047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.785273][T11484] veth0_to_bond: entered promiscuous mode [ 267.808510][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2011'. [ 267.839443][T11484] veth0_to_bond (unregistering): left promiscuous mode [ 267.852039][T11484] : (slave bond_slave_0): Releasing backup interface [ 268.028704][T11500] loop9: detected capacity change from 0 to 512 [ 268.043766][T11500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.056728][T11500] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.068255][T11500] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.221669][T11516] SELinux: syz.9.2022 (11516) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 268.933180][T11534] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2028'. [ 269.025168][T11541] FAULT_INJECTION: forcing a failure. [ 269.025168][T11541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.038479][T11541] CPU: 1 UID: 0 PID: 11541 Comm: syz.6.2031 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 269.038509][T11541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.038523][T11541] Call Trace: [ 269.038529][T11541] [ 269.038537][T11541] dump_stack_lvl+0xf2/0x150 [ 269.038586][T11541] dump_stack+0x15/0x1a [ 269.038610][T11541] should_fail_ex+0x24a/0x260 [ 269.038654][T11541] should_fail+0xb/0x10 [ 269.038682][T11541] should_fail_usercopy+0x1a/0x20 [ 269.038716][T11541] _copy_from_iter+0xd5/0xd00 [ 269.038749][T11541] ? kmalloc_reserve+0x16e/0x190 [ 269.038771][T11541] ? __build_skb_around+0x196/0x1f0 [ 269.038806][T11541] ? __alloc_skb+0x21f/0x310 [ 269.038827][T11541] ? __virt_addr_valid+0x1ed/0x250 [ 269.038853][T11541] ? __check_object_size+0x364/0x520 [ 269.038934][T11541] netlink_sendmsg+0x460/0x6e0 [ 269.039048][T11541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.039083][T11541] __sock_sendmsg+0x140/0x180 [ 269.039134][T11541] ____sys_sendmsg+0x326/0x4b0 [ 269.039164][T11541] __sys_sendmsg+0x19d/0x230 [ 269.039204][T11541] __x64_sys_sendmsg+0x46/0x50 [ 269.039246][T11541] x64_sys_call+0x2734/0x2dc0 [ 269.039274][T11541] do_syscall_64+0xc9/0x1c0 [ 269.039307][T11541] ? clear_bhb_loop+0x55/0xb0 [ 269.039349][T11541] ? clear_bhb_loop+0x55/0xb0 [ 269.039377][T11541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.039404][T11541] RIP: 0033:0x7ff975a9d169 [ 269.039420][T11541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.039439][T11541] RSP: 002b:00007ff974107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.039520][T11541] RAX: ffffffffffffffda RBX: 00007ff975cb5fa0 RCX: 00007ff975a9d169 [ 269.039608][T11541] RDX: 0000000000000000 RSI: 0000400000000400 RDI: 0000000000000003 [ 269.039621][T11541] RBP: 00007ff974107090 R08: 0000000000000000 R09: 0000000000000000 [ 269.039633][T11541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.039646][T11541] R13: 0000000000000000 R14: 00007ff975cb5fa0 R15: 00007ffd1c25c8e8 [ 269.039665][T11541] [ 269.698929][T11595] loop5: detected capacity change from 0 to 128 [ 269.727352][T11595] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.742873][T11595] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.804054][T11595] EXT4-fs (loop5): resizing filesystem from 64 to 1 blocks [ 269.811380][T11595] EXT4-fs warning (device loop5): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 269.884787][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 269.893792][T11595] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2044'. [ 269.959727][ T5033] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 270.459961][T11634] SELinux: +}[@ (11634) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 270.715063][T11639] netlink: 'syz.8.2052': attribute type 4 has an invalid length. [ 270.818915][T11653] FAULT_INJECTION: forcing a failure. [ 270.818915][T11653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.832163][T11653] CPU: 0 UID: 0 PID: 11653 Comm: syz.9.2060 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 270.832195][T11653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 270.832265][T11653] Call Trace: [ 270.832274][T11653] [ 270.832283][T11653] dump_stack_lvl+0xf2/0x150 [ 270.832317][T11653] dump_stack+0x15/0x1a [ 270.832343][T11653] should_fail_ex+0x24a/0x260 [ 270.832380][T11653] should_fail+0xb/0x10 [ 270.832494][T11653] should_fail_usercopy+0x1a/0x20 [ 270.832535][T11653] _copy_from_user+0x1c/0xa0 [ 270.832558][T11653] ucma_write+0xd4/0x240 [ 270.832589][T11653] ? __pfx_ucma_write+0x10/0x10 [ 270.832637][T11653] vfs_write+0x27d/0x920 [ 270.832669][T11653] ? putname+0xcf/0xf0 [ 270.832689][T11653] ? __fget_files+0x17c/0x1c0 [ 270.832732][T11653] ksys_write+0xe8/0x1b0 [ 270.832760][T11653] __x64_sys_write+0x42/0x50 [ 270.832786][T11653] x64_sys_call+0x287e/0x2dc0 [ 270.832814][T11653] do_syscall_64+0xc9/0x1c0 [ 270.832867][T11653] ? clear_bhb_loop+0x55/0xb0 [ 270.832906][T11653] ? clear_bhb_loop+0x55/0xb0 [ 270.832961][T11653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.832995][T11653] RIP: 0033:0x7f30d4a5d169 [ 270.833012][T11653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.833035][T11653] RSP: 002b:00007f30d30c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 270.833057][T11653] RAX: ffffffffffffffda RBX: 00007f30d4c75fa0 RCX: 00007f30d4a5d169 [ 270.833072][T11653] RDX: 0000000000000048 RSI: 00004000000000c0 RDI: 0000000000000003 [ 270.833087][T11653] RBP: 00007f30d30c7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.833160][T11653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.833174][T11653] R13: 0000000000000000 R14: 00007f30d4c75fa0 R15: 00007ffdcaed24a8 [ 270.833195][T11653] [ 271.182722][T11666] netlink: 'syz.7.2065': attribute type 4 has an invalid length. [ 271.209992][T11670] SELinux: +}[@ (11670) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 271.267386][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 271.267454][ T30] audit: type=1326 audit(1741560891.475:9487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.9.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 271.297478][ T30] audit: type=1326 audit(1741560891.475:9488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.9.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 271.321231][ T30] audit: type=1326 audit(1741560891.475:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11671 comm="syz.9.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 271.403226][T11685] loop7: detected capacity change from 0 to 128 [ 271.421325][T11685] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.441823][T11685] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.459144][T11691] SELinux: +}[@ (11691) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 271.475743][T11685] EXT4-fs (loop7): resizing filesystem from 64 to 1 blocks [ 271.483148][T11685] EXT4-fs warning (device loop7): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 271.525324][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2073'. [ 271.534384][T11685] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2073'. [ 271.612987][ T5045] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.629169][T11708] netlink: 'syz.6.2080': attribute type 4 has an invalid length. [ 271.851297][T11720] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2086'. [ 271.870506][ T30] audit: type=1326 audit(1741560891.905:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11713 comm="syz.7.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 271.894135][ T30] audit: type=1326 audit(1741560891.905:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11713 comm="syz.7.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 271.917836][ T30] audit: type=1326 audit(1741560891.905:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11713 comm="syz.7.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 271.957161][T11725] SELinux: +}[@ (11725) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 272.256497][T11733] loop9: detected capacity change from 0 to 764 [ 272.301408][T11733] FAULT_INJECTION: forcing a failure. [ 272.301408][T11733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.314550][T11733] CPU: 1 UID: 0 PID: 11733 Comm: syz.9.2090 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 272.314576][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.314590][T11733] Call Trace: [ 272.314598][T11733] [ 272.314638][T11733] dump_stack_lvl+0xf2/0x150 [ 272.314674][T11733] dump_stack+0x15/0x1a [ 272.314700][T11733] should_fail_ex+0x24a/0x260 [ 272.314737][T11733] should_fail+0xb/0x10 [ 272.314764][T11733] should_fail_usercopy+0x1a/0x20 [ 272.314817][T11733] strncpy_from_user+0x25/0x210 [ 272.314846][T11733] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 272.314870][T11733] ? getname_flags+0x81/0x3b0 [ 272.314905][T11733] getname_flags+0xb0/0x3b0 [ 272.314985][T11733] user_path_at+0x26/0x120 [ 272.315029][T11733] do_sys_truncate+0x5b/0x130 [ 272.315063][T11733] __x64_sys_truncate+0x31/0x40 [ 272.315116][T11733] x64_sys_call+0x26d0/0x2dc0 [ 272.315142][T11733] do_syscall_64+0xc9/0x1c0 [ 272.315179][T11733] ? clear_bhb_loop+0x55/0xb0 [ 272.315213][T11733] ? clear_bhb_loop+0x55/0xb0 [ 272.315318][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.315347][T11733] RIP: 0033:0x7f30d4a5d169 [ 272.315362][T11733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.315383][T11733] RSP: 002b:00007f30d30c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 272.315406][T11733] RAX: ffffffffffffffda RBX: 00007f30d4c75fa0 RCX: 00007f30d4a5d169 [ 272.315438][T11733] RDX: 0000000000000000 RSI: 000000000000b73d RDI: 0000400000000900 [ 272.315453][T11733] RBP: 00007f30d30c7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.315474][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.315486][T11733] R13: 0000000000000000 R14: 00007f30d4c75fa0 R15: 00007ffdcaed24a8 [ 272.315503][T11733] [ 272.584178][T11744] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2093'. [ 272.701555][ T30] audit: type=1326 audit(1741560892.905:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.9.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 272.725234][ T30] audit: type=1326 audit(1741560892.905:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.9.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 272.810077][ T30] audit: type=1326 audit(1741560892.955:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.9.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 272.833900][ T30] audit: type=1326 audit(1741560892.955:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.9.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d4a5d169 code=0x7ffc0000 [ 272.890886][T11765] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 272.905576][T11765] SELinux: failed to load policy [ 272.977075][T11771] SELinux: +}[@ (11771) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 273.017556][T11774] loop6: detected capacity change from 0 to 512 [ 273.046129][T11774] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 273.068522][T11774] EXT4-fs (loop6): 1 truncate cleaned up [ 273.080638][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.185350][T11774] nfs4: Unknown parameter ']' [ 273.266376][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2115'. [ 273.279567][ T5039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.297735][T11795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2117'. [ 273.396453][T11806] loop8: detected capacity change from 0 to 128 [ 273.433425][T11808] syz.8.2120: attempt to access beyond end of device [ 273.433425][T11808] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 273.460082][T11805] syz.8.2120: attempt to access beyond end of device [ 273.460082][T11805] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 273.474061][T11806] syz.8.2120: attempt to access beyond end of device [ 273.474061][T11806] loop8: rw=0, sector=145, nr_sectors = 8 limit=128 [ 274.021964][T11831] loop5: detected capacity change from 0 to 512 [ 274.241444][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2129'. [ 274.281882][T11840] SELinux: +}[@ (11840) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 274.346044][T11842] netlink: 'syz.5.2132': attribute type 1 has an invalid length. [ 274.364814][T11842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 274.489971][T11853] geneve2: entered promiscuous mode [ 274.495268][T11853] geneve2: entered allmulticast mode [ 274.503902][T11853] bond2: (slave geneve2): making interface the new active one [ 274.531549][T11853] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 275.387643][T11879] SELinux: syz.9.2146 (11879) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 275.828439][T11909] 9pnet_fd: Insufficient options for proto=fd [ 275.876824][T11902] lo speed is unknown, defaulting to 1000 [ 275.937907][T11911] lo speed is unknown, defaulting to 1000 [ 275.951629][T11915] 9pnet_fd: Insufficient options for proto=fd [ 275.962476][T11902] lo speed is unknown, defaulting to 1000 [ 276.308356][T11911] lo speed is unknown, defaulting to 1000 [ 276.336285][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 276.336303][ T30] audit: type=1326 audit(1741560896.545:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 276.507163][ T30] audit: type=1326 audit(1741560896.575:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 276.530990][ T30] audit: type=1326 audit(1741560896.575:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11901 comm="syz.7.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 276.554570][ T30] audit: type=1326 audit(1741560896.585:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 276.578267][ T30] audit: type=1326 audit(1741560896.585:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 276.601978][ T30] audit: type=1326 audit(1741560896.585:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.6.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 276.676937][T11930] SELinux: +}[@ (11930) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 276.850984][T11946] FAULT_INJECTION: forcing a failure. [ 276.850984][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.864257][T11946] CPU: 1 UID: 0 PID: 11946 Comm: syz.9.2171 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 276.864287][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.864302][T11946] Call Trace: [ 276.864311][T11946] [ 276.864320][T11946] dump_stack_lvl+0xf2/0x150 [ 276.864369][T11946] dump_stack+0x15/0x1a [ 276.864390][T11946] should_fail_ex+0x24a/0x260 [ 276.864453][T11946] should_fail+0xb/0x10 [ 276.864486][T11946] should_fail_usercopy+0x1a/0x20 [ 276.864535][T11946] _copy_from_user+0x1c/0xa0 [ 276.864554][T11946] ucma_write+0xd4/0x240 [ 276.864580][T11946] ? __pfx_ucma_write+0x10/0x10 [ 276.864610][T11946] vfs_write+0x27d/0x920 [ 276.864640][T11946] ? putname+0xcf/0xf0 [ 276.864687][T11946] ? __fget_files+0x17c/0x1c0 [ 276.864802][T11946] ksys_write+0xe8/0x1b0 [ 276.864828][T11946] __x64_sys_write+0x42/0x50 [ 276.864857][T11946] x64_sys_call+0x287e/0x2dc0 [ 276.864955][T11946] do_syscall_64+0xc9/0x1c0 [ 276.865039][T11946] ? clear_bhb_loop+0x55/0xb0 [ 276.865116][T11946] ? clear_bhb_loop+0x55/0xb0 [ 276.865145][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.865184][T11946] RIP: 0033:0x7f30d4a5d169 [ 276.865202][T11946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.865224][T11946] RSP: 002b:00007f30d30c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.865275][T11946] RAX: ffffffffffffffda RBX: 00007f30d4c75fa0 RCX: 00007f30d4a5d169 [ 276.865291][T11946] RDX: 0000000000000010 RSI: 0000400000000080 RDI: 0000000000000003 [ 276.865305][T11946] RBP: 00007f30d30c7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.865362][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.865374][T11946] R13: 0000000000000000 R14: 00007f30d4c75fa0 R15: 00007ffdcaed24a8 [ 276.865391][T11946] [ 277.212444][T11963] SELinux: +}[@ (11963) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.473823][T11974] 9pnet_fd: Insufficient options for proto=fd [ 277.803214][T11978] SELinux: +}[@ (11978) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 278.195411][T11998] SELinux: +}[@ (11998) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 278.328058][T12006] veth0_to_bond: entered promiscuous mode [ 278.334382][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2193'. [ 278.349271][T12006] veth0_to_bond (unregistering): left promiscuous mode [ 278.404533][T12006] : (slave bond_slave_0): Releasing backup interface [ 278.645851][ T30] audit: type=1400 audit(1741560898.855:9616): avc: denied { connect } for pid=12010 comm="syz.7.2195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.667822][T12011] vhci_hcd: default hub control req: 050b v0010 i0005 l0 [ 278.755065][T12016] lo speed is unknown, defaulting to 1000 [ 278.807230][T12021] 9pnet_fd: Insufficient options for proto=fd [ 278.832736][ T30] audit: type=1326 audit(1741560899.015:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.8.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 278.856327][ T30] audit: type=1326 audit(1741560899.015:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.8.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 278.879929][ T30] audit: type=1326 audit(1741560899.015:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12013 comm="syz.8.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 278.935088][T12016] lo speed is unknown, defaulting to 1000 [ 279.190253][T12029] wireguard0: entered promiscuous mode [ 279.195819][T12029] wireguard0: entered allmulticast mode [ 279.515244][T12032] lo speed is unknown, defaulting to 1000 [ 279.566102][T12042] 9pnet_fd: Insufficient options for proto=fd [ 279.757806][T12032] lo speed is unknown, defaulting to 1000 [ 279.895712][T12052] loop6: detected capacity change from 0 to 8192 [ 279.905542][T12041] lo speed is unknown, defaulting to 1000 [ 279.964018][T12052] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 279.972914][T12052] FAT-fs (loop6): Filesystem has been set read-only [ 279.990868][T12052] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 279.999127][T12052] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 280.014426][T12041] lo speed is unknown, defaulting to 1000 [ 280.043523][T12052] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 280.073596][T12052] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 280.100374][T12052] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 280.142262][T12052] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 280.996367][T12091] SELinux: +}[@ (12091) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 281.605905][T12116] FAULT_INJECTION: forcing a failure. [ 281.605905][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.619102][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.5.2228 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 281.619134][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.619150][T12116] Call Trace: [ 281.619159][T12116] [ 281.619169][T12116] dump_stack_lvl+0xf2/0x150 [ 281.619242][T12116] dump_stack+0x15/0x1a [ 281.619263][T12116] should_fail_ex+0x24a/0x260 [ 281.619361][T12116] should_fail+0xb/0x10 [ 281.619395][T12116] should_fail_usercopy+0x1a/0x20 [ 281.619433][T12116] _copy_from_user+0x1c/0xa0 [ 281.619507][T12116] __sys_bpf+0x14e/0x7a0 [ 281.619545][T12116] __x64_sys_bpf+0x43/0x50 [ 281.619570][T12116] x64_sys_call+0x2914/0x2dc0 [ 281.619598][T12116] do_syscall_64+0xc9/0x1c0 [ 281.619712][T12116] ? clear_bhb_loop+0x55/0xb0 [ 281.619745][T12116] ? clear_bhb_loop+0x55/0xb0 [ 281.619775][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.619840][T12116] RIP: 0033:0x7fa22f09d169 [ 281.619859][T12116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.619880][T12116] RSP: 002b:00007fa22d707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.619902][T12116] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09d169 [ 281.619955][T12116] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 281.619970][T12116] RBP: 00007fa22d707090 R08: 0000000000000000 R09: 0000000000000000 [ 281.619984][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.619998][T12116] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 281.620020][T12116] [ 282.556884][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 282.556903][ T30] audit: type=1326 audit(1741560902.765:9756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 282.740642][ T30] audit: type=1326 audit(1741560902.765:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 282.764628][ T30] audit: type=1326 audit(1741560902.795:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 282.788194][ T30] audit: type=1326 audit(1741560902.795:9759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 282.791105][T12150] SELinux: +}[@ (12150) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 282.811798][ T30] audit: type=1326 audit(1741560902.795:9760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.7.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 282.986877][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2241'. [ 283.039792][T12162] 8021q: VLANs not supported on sit0 [ 283.513570][T12187] SELinux: +}[@ (12187) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 283.698427][T12191] 8021q: VLANs not supported on sit0 [ 283.837821][T12194] loop8: detected capacity change from 0 to 1024 [ 283.982455][T12194] EXT4-fs: Ignoring removed orlov option [ 283.988266][T12194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.300939][T12194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.513276][ T5047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.081315][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2265'. [ 285.156853][ T30] audit: type=1326 audit(1741560905.365:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 285.180503][ T30] audit: type=1326 audit(1741560905.365:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 285.253660][T12228] 9pnet_fd: Insufficient options for proto=fd [ 285.262262][T12230] 8021q: VLANs not supported on sit0 [ 285.299013][ T30] audit: type=1326 audit(1741560905.375:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 285.322705][ T30] audit: type=1326 audit(1741560905.375:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 285.346616][ T30] audit: type=1326 audit(1741560905.375:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12225 comm="syz.7.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 285.399099][T12227] lo speed is unknown, defaulting to 1000 [ 285.474023][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.487799][T12227] lo speed is unknown, defaulting to 1000 [ 285.508568][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.557067][T12243] netlink: 'syz.9.2271': attribute type 29 has an invalid length. [ 285.565447][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.581787][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.594057][T12243] netlink: 'syz.9.2271': attribute type 29 has an invalid length. [ 285.613546][T12243] loop9: detected capacity change from 0 to 256 [ 285.628384][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.637544][T12236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2268'. [ 285.672177][T12243] FAT-fs (loop9): Directory bread(block 64) failed [ 285.678791][T12243] FAT-fs (loop9): Directory bread(block 65) failed [ 285.699181][T12243] FAT-fs (loop9): Directory bread(block 66) failed [ 285.708739][T12243] FAT-fs (loop9): Directory bread(block 67) failed [ 285.740576][T12243] FAT-fs (loop9): Directory bread(block 68) failed [ 285.751472][T12243] FAT-fs (loop9): Directory bread(block 69) failed [ 285.758125][T12243] FAT-fs (loop9): Directory bread(block 70) failed [ 285.796528][T12243] FAT-fs (loop9): Directory bread(block 71) failed [ 285.825645][T12243] FAT-fs (loop9): Directory bread(block 72) failed [ 285.845860][T12243] FAT-fs (loop9): Directory bread(block 73) failed [ 285.916124][T12254] SELinux: policydb version 0 does not match my version range 15-34 [ 285.960609][T12254] SELinux: failed to load policy [ 286.037223][T12262] 8021q: VLANs not supported on sit0 [ 286.045228][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2279'. [ 286.082285][T12266] loop9: detected capacity change from 0 to 1024 [ 286.088875][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2279'. [ 286.124958][T12266] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.137831][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2279'. [ 286.192560][T12266] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 286.327688][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.582993][T12312] FAULT_INJECTION: forcing a failure. [ 286.582993][T12312] name failslab, interval 1, probability 0, space 0, times 0 [ 286.595795][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.5.2287 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 286.595820][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.595903][T12312] Call Trace: [ 286.595911][T12312] [ 286.595920][T12312] dump_stack_lvl+0xf2/0x150 [ 286.595954][T12312] dump_stack+0x15/0x1a [ 286.595978][T12312] should_fail_ex+0x24a/0x260 [ 286.596014][T12312] should_failslab+0x8f/0xb0 [ 286.596077][T12312] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 286.596105][T12312] ? strcmp+0x21/0x50 [ 286.596121][T12312] ? match_strdup+0x37/0x40 [ 286.596142][T12312] kmemdup_nul+0x35/0xc0 [ 286.596252][T12312] match_strdup+0x37/0x40 [ 286.596276][T12312] p9_client_create+0x2c1/0xb90 [ 286.596306][T12312] v9fs_session_init+0xf9/0xda0 [ 286.596337][T12312] ? should_fail_ex+0xd7/0x260 [ 286.596365][T12312] ? v9fs_mount+0x53/0x570 [ 286.596466][T12312] ? should_failslab+0x8f/0xb0 [ 286.596503][T12312] ? __kmalloc_cache_noprof+0x186/0x320 [ 286.596532][T12312] v9fs_mount+0x69/0x570 [ 286.596557][T12312] ? __pfx_v9fs_mount+0x10/0x10 [ 286.596583][T12312] legacy_get_tree+0x77/0xd0 [ 286.596818][T12312] vfs_get_tree+0x56/0x1e0 [ 286.596866][T12312] do_new_mount+0x227/0x690 [ 286.596905][T12312] path_mount+0x49b/0xb30 [ 286.596938][T12312] __se_sys_mount+0x27f/0x2d0 [ 286.596974][T12312] ? fput+0x1c4/0x200 [ 286.596996][T12312] __x64_sys_mount+0x67/0x80 [ 286.597104][T12312] x64_sys_call+0x2c84/0x2dc0 [ 286.597138][T12312] do_syscall_64+0xc9/0x1c0 [ 286.597175][T12312] ? clear_bhb_loop+0x55/0xb0 [ 286.597206][T12312] ? clear_bhb_loop+0x55/0xb0 [ 286.597236][T12312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.597283][T12312] RIP: 0033:0x7fa22f09d169 [ 286.597301][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.597319][T12312] RSP: 002b:00007fa22d707038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.597337][T12312] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09d169 [ 286.597349][T12312] RDX: 0000400000000400 RSI: 0000400000000340 RDI: 0000000000000000 [ 286.597362][T12312] RBP: 00007fa22d707090 R08: 0000400000000040 R09: 0000000000000000 [ 286.597413][T12312] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 286.597425][T12312] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 286.597443][T12312] [ 287.217891][T12365] netlink: 'syz.7.2293': attribute type 29 has an invalid length. [ 287.257021][T12368] SELinux: +}[@ (12368) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 287.440163][T12309] loop8: detected capacity change from 0 to 512 [ 287.507755][T12309] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.550713][T12365] netlink: 'syz.7.2293': attribute type 29 has an invalid length. [ 287.561342][T12309] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.639082][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 287.639100][ T30] audit: type=1400 audit(1741560907.845:9874): avc: denied { setattr } for pid=12297 comm="syz.8.2285" path="/376/file1/blkio.bfq.idle_time" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.770429][T12380] 8021q: VLANs not supported on ip6_vti0 [ 287.885483][ T5047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.948706][ T30] audit: type=1400 audit(1741560908.155:9875): avc: denied { bind } for pid=12390 comm="syz.8.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 287.968414][ T30] audit: type=1400 audit(1741560908.155:9876): avc: denied { node_bind } for pid=12390 comm="syz.8.2303" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 288.115880][ T30] audit: type=1326 audit(1741560908.325:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.139572][ T30] audit: type=1326 audit(1741560908.325:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.227882][ T30] audit: type=1326 audit(1741560908.355:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.251578][ T30] audit: type=1326 audit(1741560908.355:9880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.275180][ T30] audit: type=1326 audit(1741560908.355:9881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.298855][ T30] audit: type=1326 audit(1741560908.355:9882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.8.2304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f28e0b4d169 code=0x7ffc0000 [ 288.322438][ T30] audit: type=1400 audit(1741560908.355:9883): avc: denied { getopt } for pid=12408 comm="syz.8.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 288.407350][T12436] 8021q: VLANs not supported on sit0 [ 288.778588][T12470] loop9: detected capacity change from 0 to 1024 [ 288.795759][T12473] netlink: 'syz.6.2314': attribute type 29 has an invalid length. [ 288.821404][T12473] netlink: 'syz.6.2314': attribute type 29 has an invalid length. [ 288.833383][T12470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.854286][T12477] 9pnet_fd: Insufficient options for proto=fd [ 288.861196][T12470] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.869794][T12471] lo speed is unknown, defaulting to 1000 [ 288.918851][T12471] lo speed is unknown, defaulting to 1000 [ 288.946131][T12470] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 289.030295][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.543731][T12490] mmap: syz.8.2319 (12490): VmData 167620608 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 289.562810][T12490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.669141][T12521] netlink: 'syz.8.2326': attribute type 29 has an invalid length. [ 289.718727][T12527] netlink: 'syz.8.2326': attribute type 29 has an invalid length. [ 290.068911][T12553] 9pnet_fd: Insufficient options for proto=fd [ 290.170751][T12549] lo speed is unknown, defaulting to 1000 [ 290.213565][T12549] lo speed is unknown, defaulting to 1000 [ 290.823435][T12601] lo speed is unknown, defaulting to 1000 [ 290.844377][T12602] 9pnet_fd: Insufficient options for proto=fd [ 290.856550][T12601] lo speed is unknown, defaulting to 1000 [ 290.999155][T12610] loop9: detected capacity change from 0 to 512 [ 291.015529][T12610] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 291.024815][T12610] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 291.046855][T12610] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 291.056386][T12610] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 291.065101][T12610] System zones: 0-2, 18-18, 34-34 [ 291.070949][T12610] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 291.086268][T12610] EXT4-fs (loop9): 1 truncate cleaned up [ 291.092392][T12610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.093007][T12617] __nla_validate_parse: 22 callbacks suppressed [ 291.093040][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.121488][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.140202][ T5067] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.165759][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.175231][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.236694][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.254169][T12617] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2354'. [ 291.265158][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2356'. [ 291.298086][T12636] 9pnet_fd: Insufficient options for proto=fd [ 291.327805][T12632] lo speed is unknown, defaulting to 1000 [ 291.415252][T12632] lo speed is unknown, defaulting to 1000 [ 291.568537][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2371'. [ 291.589748][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2371'. [ 291.593364][T12664] FAULT_INJECTION: forcing a failure. [ 291.593364][T12664] name failslab, interval 1, probability 0, space 0, times 0 [ 291.611577][T12664] CPU: 1 UID: 0 PID: 12664 Comm: syz.8.2370 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 291.611643][T12664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 291.611659][T12664] Call Trace: [ 291.611667][T12664] [ 291.611675][T12664] dump_stack_lvl+0xf2/0x150 [ 291.611719][T12664] dump_stack+0x15/0x1a [ 291.611821][T12664] should_fail_ex+0x24a/0x260 [ 291.611859][T12664] should_failslab+0x8f/0xb0 [ 291.611926][T12664] kmem_cache_alloc_node_noprof+0x59/0x320 [ 291.611956][T12664] ? __alloc_skb+0x10b/0x310 [ 291.611982][T12664] ? avc_has_perm_noaudit+0x1cc/0x210 [ 291.612010][T12664] __alloc_skb+0x10b/0x310 [ 291.612080][T12664] alloc_skb_with_frags+0x80/0x450 [ 291.612112][T12664] ? selinux_file_open+0x34a/0x3b0 [ 291.612193][T12664] ? should_fail_ex+0xd7/0x260 [ 291.612231][T12664] sock_alloc_send_pskb+0x435/0x4f0 [ 291.612270][T12664] tun_get_user+0xa24/0x25c0 [ 291.612375][T12664] ? _parse_integer+0x27/0x30 [ 291.612408][T12664] ? ref_tracker_alloc+0x1f5/0x2f0 [ 291.612451][T12664] tun_chr_write_iter+0x188/0x240 [ 291.612476][T12664] vfs_write+0x77b/0x920 [ 291.612508][T12664] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 291.612563][T12664] ksys_write+0xe8/0x1b0 [ 291.612598][T12664] __x64_sys_write+0x42/0x50 [ 291.612632][T12664] x64_sys_call+0x287e/0x2dc0 [ 291.612664][T12664] do_syscall_64+0xc9/0x1c0 [ 291.612776][T12664] ? clear_bhb_loop+0x55/0xb0 [ 291.612875][T12664] ? clear_bhb_loop+0x55/0xb0 [ 291.612908][T12664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.612941][T12664] RIP: 0033:0x7f28e0b4d169 [ 291.612960][T12664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.613028][T12664] RSP: 002b:00007f28df1b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.613049][T12664] RAX: ffffffffffffffda RBX: 00007f28e0d65fa0 RCX: 00007f28e0b4d169 [ 291.613064][T12664] RDX: 000000000000003a RSI: 0000400000000040 RDI: 0000000000000003 [ 291.613080][T12664] RBP: 00007f28df1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 291.613156][T12664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.613168][T12664] R13: 0000000000000000 R14: 00007f28e0d65fa0 R15: 00007ffe4bd4a408 [ 291.613191][T12664] [ 291.842170][T12651] loop6: detected capacity change from 0 to 512 [ 291.875107][T12663] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2371'. [ 292.224065][T12651] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.242396][T12651] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.398553][T12702] 9pnet_fd: Insufficient options for proto=fd [ 292.454610][ T5039] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.477764][T12696] lo speed is unknown, defaulting to 1000 [ 292.525479][T12696] lo speed is unknown, defaulting to 1000 [ 292.666805][ T30] kauditd_printk_skb: 498 callbacks suppressed [ 292.666823][ T30] audit: type=1326 audit(1741560912.875:10382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.668915][T12734] SELinux: policydb version 0 does not match my version range 15-34 [ 292.675803][ T30] audit: type=1326 audit(1741560912.885:10383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.730952][ T30] audit: type=1326 audit(1741560912.915:10384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.754974][ T30] audit: type=1326 audit(1741560912.915:10385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.758894][T12734] SELinux: failed to load policy [ 292.778598][ T30] audit: type=1326 audit(1741560912.915:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.807167][ T30] audit: type=1326 audit(1741560912.915:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.807254][ T30] audit: type=1326 audit(1741560912.915:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.807319][ T30] audit: type=1326 audit(1741560912.915:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.807347][ T30] audit: type=1326 audit(1741560912.915:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.812986][ T30] audit: type=1326 audit(1741560912.995:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.7.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1741d169 code=0x7ffc0000 [ 292.847489][T12734] FAULT_INJECTION: forcing a failure. [ 292.847489][T12734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.939771][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.6.2395 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 292.939805][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 292.939852][T12734] Call Trace: [ 292.939858][T12734] [ 292.939865][T12734] dump_stack_lvl+0xf2/0x150 [ 292.939889][T12734] dump_stack+0x15/0x1a [ 292.939907][T12734] should_fail_ex+0x24a/0x260 [ 292.939947][T12734] should_fail+0xb/0x10 [ 292.940103][T12734] should_fail_usercopy+0x1a/0x20 [ 292.940129][T12734] _copy_to_user+0x20/0xa0 [ 292.940186][T12734] simple_read_from_buffer+0xa0/0x110 [ 292.940211][T12734] proc_fail_nth_read+0xf9/0x140 [ 292.940242][T12734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.940266][T12734] vfs_read+0x19b/0x6f0 [ 292.940287][T12734] ? __rcu_read_unlock+0x4e/0x70 [ 292.940342][T12734] ? __fget_files+0x17c/0x1c0 [ 292.940381][T12734] ksys_read+0xe8/0x1b0 [ 292.940432][T12734] __x64_sys_read+0x42/0x50 [ 292.940461][T12734] x64_sys_call+0x2874/0x2dc0 [ 292.940489][T12734] do_syscall_64+0xc9/0x1c0 [ 292.940544][T12734] ? clear_bhb_loop+0x55/0xb0 [ 292.940578][T12734] ? clear_bhb_loop+0x55/0xb0 [ 292.940609][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.940671][T12734] RIP: 0033:0x7ff975a9bb7c [ 292.940689][T12734] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 292.940710][T12734] RSP: 002b:00007ff974107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.940799][T12734] RAX: ffffffffffffffda RBX: 00007ff975cb5fa0 RCX: 00007ff975a9bb7c [ 292.940812][T12734] RDX: 000000000000000f RSI: 00007ff9741070a0 RDI: 0000000000000004 [ 292.940825][T12734] RBP: 00007ff974107090 R08: 0000000000000000 R09: 0000000000000000 [ 292.940838][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.940851][T12734] R13: 0000000000000000 R14: 00007ff975cb5fa0 R15: 00007ffd1c25c8e8 [ 292.940913][T12734] [ 293.273990][T12750] lo speed is unknown, defaulting to 1000 [ 293.288184][T12751] 9pnet_fd: Insufficient options for proto=fd [ 293.328244][T12750] lo speed is unknown, defaulting to 1000 [ 293.403958][T12760] 9pnet_fd: Insufficient options for proto=fd [ 293.458479][T12760] team0 (unregistering): Port device team_slave_0 removed [ 293.470951][T12760] team0 (unregistering): Port device team_slave_1 removed [ 293.783725][T12799] FAULT_INJECTION: forcing a failure. [ 293.783725][T12799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.796989][T12799] CPU: 1 UID: 0 PID: 12799 Comm: syz.9.2407 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 293.797084][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.797100][T12799] Call Trace: [ 293.797107][T12799] [ 293.797116][T12799] dump_stack_lvl+0xf2/0x150 [ 293.797159][T12799] dump_stack+0x15/0x1a [ 293.797198][T12799] should_fail_ex+0x24a/0x260 [ 293.797234][T12799] should_fail+0xb/0x10 [ 293.797266][T12799] should_fail_usercopy+0x1a/0x20 [ 293.797337][T12799] _copy_from_user+0x1c/0xa0 [ 293.797357][T12799] __sys_bpf+0x14e/0x7a0 [ 293.797392][T12799] __x64_sys_bpf+0x43/0x50 [ 293.797420][T12799] x64_sys_call+0x2914/0x2dc0 [ 293.797480][T12799] do_syscall_64+0xc9/0x1c0 [ 293.797513][T12799] ? clear_bhb_loop+0x55/0xb0 [ 293.797540][T12799] ? clear_bhb_loop+0x55/0xb0 [ 293.797636][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.797668][T12799] RIP: 0033:0x7f30d4a5d169 [ 293.797682][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.797704][T12799] RSP: 002b:00007f30d30a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.797726][T12799] RAX: ffffffffffffffda RBX: 00007f30d4c76080 RCX: 00007f30d4a5d169 [ 293.797747][T12799] RDX: 0000000000000048 RSI: 00004000000001c0 RDI: 0000000000000000 [ 293.797782][T12799] RBP: 00007f30d30a6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.797823][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.797837][T12799] R13: 0000000000000000 R14: 00007f30d4c76080 R15: 00007ffdcaed24a8 [ 293.797856][T12799] [ 294.604211][T12932] SELinux: +}[@ (12932) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.385801][T13063] lo speed is unknown, defaulting to 1000 [ 295.398404][T13069] 9pnet_fd: Insufficient options for proto=fd [ 295.427248][T13063] lo speed is unknown, defaulting to 1000 [ 295.550523][T13087] veth0_to_bond: entered promiscuous mode [ 295.557036][T13086] veth0_to_bond: left promiscuous mode [ 295.637444][T13097] veth0_to_bond: entered promiscuous mode [ 295.672717][T13097] veth0_to_bond (unregistering): left promiscuous mode [ 295.694563][T13097] : (slave bond_slave_0): Releasing backup interface [ 295.811557][T13117] SELinux: +}[@ (13117) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 296.240508][T13140] loop8: detected capacity change from 0 to 1024 [ 296.559470][T12354] tipc: Subscription rejected, illegal request [ 296.570699][T13182] 9pnet_fd: Insufficient options for proto=fd [ 296.687286][T13173] lo speed is unknown, defaulting to 1000 [ 296.690741][T13197] SELinux: +}[@ (13197) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 296.773335][T13173] lo speed is unknown, defaulting to 1000 [ 296.794366][T13199] __nla_validate_parse: 48 callbacks suppressed [ 296.794386][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2481'. [ 297.154621][T13248] 9pnet_fd: Insufficient options for proto=fd [ 297.337541][T13254] 9pnet_fd: Insufficient options for proto=fd [ 297.528045][T13239] lo speed is unknown, defaulting to 1000 [ 297.625041][T13250] lo speed is unknown, defaulting to 1000 [ 297.640609][T13239] lo speed is unknown, defaulting to 1000 [ 297.672215][T13250] lo speed is unknown, defaulting to 1000 [ 297.695092][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.716631][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.761727][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.770908][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.807737][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.821117][T13267] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2503'. [ 297.975246][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2508'. [ 298.015817][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2511'. [ 298.029493][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2508'. [ 298.088836][ T30] kauditd_printk_skb: 494 callbacks suppressed [ 298.088854][ T30] audit: type=1326 audit(1741560918.295:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13297 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 298.162034][ T30] audit: type=1326 audit(1741560918.335:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13297 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 298.185861][ T30] audit: type=1326 audit(1741560918.335:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13297 comm="syz.6.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff975a9d169 code=0x7ffc0000 [ 298.382248][ T30] audit: type=1326 audit(1741560918.595:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.412061][T13329] 9pnet_fd: Insufficient options for proto=fd [ 298.433498][T13321] lo speed is unknown, defaulting to 1000 [ 298.447332][ T30] audit: type=1326 audit(1741560918.625:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.471046][ T30] audit: type=1326 audit(1741560918.625:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.494651][ T30] audit: type=1326 audit(1741560918.625:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.518326][ T30] audit: type=1326 audit(1741560918.625:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.542038][ T30] audit: type=1326 audit(1741560918.625:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.565732][ T30] audit: type=1326 audit(1741560918.625:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13316 comm="syz.5.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 298.579158][T13335] 9pnet_fd: Insufficient options for proto=fd [ 298.623173][T13321] lo speed is unknown, defaulting to 1000 [ 298.659916][T13333] lo speed is unknown, defaulting to 1000 [ 298.823971][T13333] lo speed is unknown, defaulting to 1000 [ 298.877470][T13361] SELinux: +}[@ (13361) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.146071][T13389] SELinux: +}[@ (13389) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.376592][T13421] SELinux: +}[@ (13421) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.889798][T13453] SELinux: +}[@ (13453) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 299.944920][T13455] FAULT_INJECTION: forcing a failure. [ 299.944920][T13455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.958243][T13455] CPU: 0 UID: 0 PID: 13455 Comm: syz.5.2560 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 299.958283][T13455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.958299][T13455] Call Trace: [ 299.958307][T13455] [ 299.958316][T13455] dump_stack_lvl+0xf2/0x150 [ 299.958411][T13455] dump_stack+0x15/0x1a [ 299.958435][T13455] should_fail_ex+0x24a/0x260 [ 299.958466][T13455] should_fail+0xb/0x10 [ 299.958543][T13455] should_fail_usercopy+0x1a/0x20 [ 299.958582][T13455] _copy_to_user+0x20/0xa0 [ 299.958604][T13455] simple_read_from_buffer+0xa0/0x110 [ 299.958708][T13455] proc_fail_nth_read+0xf9/0x140 [ 299.958739][T13455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.958774][T13455] vfs_read+0x19b/0x6f0 [ 299.958845][T13455] ? __cond_resched+0x4f/0x90 [ 299.958869][T13455] ksys_read+0xe8/0x1b0 [ 299.958896][T13455] __x64_sys_read+0x42/0x50 [ 299.958923][T13455] x64_sys_call+0x2874/0x2dc0 [ 299.958956][T13455] do_syscall_64+0xc9/0x1c0 [ 299.958995][T13455] ? clear_bhb_loop+0x55/0xb0 [ 299.959098][T13455] ? clear_bhb_loop+0x55/0xb0 [ 299.959131][T13455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.959165][T13455] RIP: 0033:0x7fa22f09bb7c [ 299.959182][T13455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.959204][T13455] RSP: 002b:00007fa22d707030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.959233][T13455] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09bb7c [ 299.959245][T13455] RDX: 000000000000000f RSI: 00007fa22d7070a0 RDI: 0000000000000004 [ 299.959305][T13455] RBP: 00007fa22d707090 R08: 0000000000000000 R09: 0000000000000000 [ 299.959319][T13455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.959334][T13455] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 299.959356][T13455] [ 300.301124][T13475] loop9: detected capacity change from 0 to 512 [ 300.333893][T13475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.348140][T13475] ext4 filesystem being mounted at /403/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.401147][T13475] loop9: detected capacity change from 512 to 64 [ 300.414709][T13492] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5838: Out of memory [ 300.426146][T13492] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #15: comm syz.9.2567: mark_inode_dirty error [ 300.438359][T13492] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5838: Out of memory [ 300.448783][T13492] EXT4-fs error (device loop9): ext4_alloc_file_blocks:4550: inode #15: comm syz.9.2567: mark_inode_dirty error [ 300.511484][T13491] bond0: entered promiscuous mode [ 300.516564][T13491] bond0: entered allmulticast mode [ 300.528975][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.539533][T13491] bond0 (unregistering): Released all slaves [ 300.563881][T13492] EXT4-fs warning (device loop9): ext4_read_inode_bitmap:148: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 300.716379][T13519] 9pnet_fd: Insufficient options for proto=fd [ 301.174213][ T7206] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.408543][T12354] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.493372][T12354] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.544433][T12354] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.584833][T12354] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.646624][T13545] lo speed is unknown, defaulting to 1000 [ 301.709597][T12354] bridge_slave_1: left allmulticast mode [ 301.715358][T12354] bridge_slave_1: left promiscuous mode [ 301.721274][T12354] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.755540][T12354] bridge_slave_0: left allmulticast mode [ 301.761404][T12354] bridge_slave_0: left promiscuous mode [ 301.767146][T12354] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.872078][T12354] bond0 (unregistering): (slave geneve2): Releasing active interface [ 301.889155][T12354]  (unregistering): (slave bridge0): Releasing backup interface [ 301.922901][T12354]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.932404][T12354]  (unregistering): Released all slaves [ 301.940810][T12354] bond0 (unregistering): Released all slaves [ 301.948873][T13545] lo speed is unknown, defaulting to 1000 [ 302.048596][T12354] hsr_slave_0: left promiscuous mode [ 302.063533][T12354] hsr_slave_1: left promiscuous mode [ 302.069415][T12354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.077066][T12354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.087436][T12354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.094961][T12354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.106428][T12354] veth1_macvtap: left promiscuous mode [ 302.112099][T12354] veth0_macvtap: left promiscuous mode [ 302.117876][T12354] veth1_vlan: left promiscuous mode [ 302.125139][T12354] veth0_vlan: left promiscuous mode [ 302.197841][T12354] team0 (unregistering): Port device team_slave_1 removed [ 302.207408][T12354] team0 (unregistering): Port device team_slave_0 removed [ 302.215029][T12335] smc: removing ib device syz! [ 302.250724][T13545] chnl_net:caif_netlink_parms(): no params data found [ 302.359797][T13545] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.366991][T13545] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.381612][T13545] bridge_slave_0: entered allmulticast mode [ 302.393625][T13545] bridge_slave_0: entered promiscuous mode [ 302.404184][T13545] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.411385][T13545] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.425155][T13545] bridge_slave_1: entered allmulticast mode [ 302.432026][T13545] bridge_slave_1: entered promiscuous mode [ 302.462353][T13629] __nla_validate_parse: 28 callbacks suppressed [ 302.462375][T13629] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 302.512057][T13545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.545790][T13637] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2610'. [ 302.558954][T13629] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2608'. [ 302.602732][T13545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.661123][T13545] team0: Port device team_slave_0 added [ 302.670118][T13647] netlink: 180900 bytes leftover after parsing attributes in process `syz.8.2614'. [ 302.689968][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.689998][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.735116][T13545] team0: Port device team_slave_1 added [ 302.751940][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.772315][T13647] netlink: zone id is out of range [ 302.778194][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.789732][T13647] netlink: zone id is out of range [ 302.800030][T13647] netlink: zone id is out of range [ 302.810566][T13545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.817542][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.843715][T13545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.856347][T13545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.863420][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.889473][T13545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.892167][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.950492][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 302.993019][T13545] hsr_slave_0: entered promiscuous mode [ 302.999185][T13545] hsr_slave_1: entered promiscuous mode [ 303.046905][T13660] lo speed is unknown, defaulting to 1000 [ 303.095156][ T30] kauditd_printk_skb: 200 callbacks suppressed [ 303.095174][ T30] audit: type=1326 audit(1741560923.306:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.172542][T13676] loop5: detected capacity change from 0 to 128 [ 303.228454][ T30] audit: type=1326 audit(1741560923.356:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa22f0cfa25 code=0x7ffc0000 [ 303.252240][ T30] audit: type=1326 audit(1741560923.356:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.275951][ T30] audit: type=1326 audit(1741560923.366:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.299572][ T30] audit: type=1326 audit(1741560923.376:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.323277][ T30] audit: type=1326 audit(1741560923.376:11101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.346951][ T30] audit: type=1326 audit(1741560923.376:11102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.370795][ T30] audit: type=1326 audit(1741560923.376:11103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.394498][ T30] audit: type=1326 audit(1741560923.376:11104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.395539][T13676] syz.5.2618: attempt to access beyond end of device [ 303.395539][T13676] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 303.418274][ T30] audit: type=1326 audit(1741560923.376:11105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13674 comm="syz.5.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 303.470197][T13660] lo speed is unknown, defaulting to 1000 [ 303.496609][T13647] netlink: set zone limit has 8 unknown bytes [ 303.597287][T13692] lo speed is unknown, defaulting to 1000 [ 303.628861][T13696] 9pnet_fd: Insufficient options for proto=fd [ 303.687526][T13692] lo speed is unknown, defaulting to 1000 [ 303.966739][T13545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.977458][T13545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.027966][T13545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.053247][T13545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.202754][T13545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.214102][T13545] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.289955][T12335] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.297160][T12335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.344834][T12354] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.351966][T12354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.392165][T13740] loop8: detected capacity change from 0 to 1024 [ 304.403323][T13744] 9pnet_fd: Insufficient options for proto=fd [ 304.431211][T13738] lo speed is unknown, defaulting to 1000 [ 304.468843][T13740] EXT4-fs: Ignoring removed bh option [ 304.571940][T13545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.638485][T13740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.655128][T13738] lo speed is unknown, defaulting to 1000 [ 304.729103][T13740] FAULT_INJECTION: forcing a failure. [ 304.729103][T13740] name failslab, interval 1, probability 0, space 0, times 0 [ 304.741927][T13740] CPU: 1 UID: 0 PID: 13740 Comm: syz.8.2632 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 304.741953][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.742020][T13740] Call Trace: [ 304.742028][T13740] [ 304.742037][T13740] dump_stack_lvl+0xf2/0x150 [ 304.742078][T13740] dump_stack+0x15/0x1a [ 304.742104][T13740] should_fail_ex+0x24a/0x260 [ 304.742138][T13740] should_failslab+0x8f/0xb0 [ 304.742205][T13740] __kmalloc_noprof+0xab/0x3f0 [ 304.742279][T13740] ? ext4_convert_inline_data_nolock+0x92/0x4c0 [ 304.742309][T13740] ext4_convert_inline_data_nolock+0x92/0x4c0 [ 304.742342][T13740] ? __ext4_journal_start_sb+0x130/0x340 [ 304.742403][T13740] ext4_convert_inline_data+0x2c2/0x370 [ 304.742493][T13740] ext4_fallocate+0xac/0x1170 [ 304.742527][T13740] vfs_fallocate+0x368/0x3b0 [ 304.742602][T13740] __x64_sys_fallocate+0x78/0xc0 [ 304.742632][T13740] x64_sys_call+0x43c/0x2dc0 [ 304.742658][T13740] do_syscall_64+0xc9/0x1c0 [ 304.742735][T13740] ? clear_bhb_loop+0x55/0xb0 [ 304.742771][T13740] ? clear_bhb_loop+0x55/0xb0 [ 304.742804][T13740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.742834][T13740] RIP: 0033:0x7f28e0b4d169 [ 304.742858][T13740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.742934][T13740] RSP: 002b:00007f28df1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 304.742957][T13740] RAX: ffffffffffffffda RBX: 00007f28e0d65fa0 RCX: 00007f28e0b4d169 [ 304.742972][T13740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 304.743104][T13740] RBP: 00007f28df1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.743116][T13740] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000001 [ 304.743130][T13740] R13: 0000000000000000 R14: 00007f28e0d65fa0 R15: 00007ffe4bd4a408 [ 304.743151][T13740] [ 304.987352][T13774] loop6: detected capacity change from 0 to 1024 [ 304.997758][T13774] ext4: Unknown parameter 'noacl' [ 305.028856][T13545] veth0_vlan: entered promiscuous mode [ 305.085928][T13545] veth1_vlan: entered promiscuous mode [ 305.150974][ T5047] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.168903][T13545] veth0_macvtap: entered promiscuous mode [ 305.211668][T13545] veth1_macvtap: entered promiscuous mode [ 305.246973][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.257505][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.267460][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.277938][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.287853][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.298317][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.308154][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.318762][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.338133][T13545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.391131][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.401705][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.411819][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.422371][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.432334][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.442914][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.452776][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.463671][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.476595][T13545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.544484][T13545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.553263][T13545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.562084][T13545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.570938][T13545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.410615][T13865] Invalid ELF header magic: != ELF [ 306.677495][T13911] SELinux: +}[@ (13911) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 306.704006][T13919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.713897][T13919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.788072][T13891] FAULT_INJECTION: forcing a failure. [ 306.788072][T13891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.801211][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.5.2664 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 306.801288][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.801302][T13891] Call Trace: [ 306.801311][T13891] [ 306.801320][T13891] dump_stack_lvl+0xf2/0x150 [ 306.801360][T13891] dump_stack+0x15/0x1a [ 306.801382][T13891] should_fail_ex+0x24a/0x260 [ 306.801413][T13891] should_fail+0xb/0x10 [ 306.801457][T13891] should_fail_usercopy+0x1a/0x20 [ 306.801498][T13891] _copy_from_user+0x1c/0xa0 [ 306.801550][T13891] move_addr_to_kernel+0x82/0x120 [ 306.801616][T13891] __sys_sendto+0x12e/0x230 [ 306.801651][T13891] __x64_sys_sendto+0x78/0x90 [ 306.801672][T13891] x64_sys_call+0x29fa/0x2dc0 [ 306.801706][T13891] do_syscall_64+0xc9/0x1c0 [ 306.801742][T13891] ? clear_bhb_loop+0x55/0xb0 [ 306.801775][T13891] ? clear_bhb_loop+0x55/0xb0 [ 306.801808][T13891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.801912][T13891] RIP: 0033:0x7fa22f09d169 [ 306.801931][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.801953][T13891] RSP: 002b:00007fa22d707038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 306.801975][T13891] RAX: ffffffffffffffda RBX: 00007fa22f2b5fa0 RCX: 00007fa22f09d169 [ 306.801987][T13891] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000003 [ 306.801999][T13891] RBP: 00007fa22d707090 R08: 0000400000b63fe4 R09: 000000000000001c [ 306.802010][T13891] R10: 0000000020000845 R11: 0000000000000246 R12: 0000000000000001 [ 306.802045][T13891] R13: 0000000000000000 R14: 00007fa22f2b5fa0 R15: 00007ffc26b2f948 [ 306.802062][T13891] [ 306.981685][T13930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.990402][T13930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.038049][T13930] FAULT_INJECTION: forcing a failure. [ 307.038049][T13930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.051460][T13930] CPU: 1 UID: 0 PID: 13930 Comm: syz.8.2673 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 307.051485][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.051498][T13930] Call Trace: [ 307.051584][T13930] [ 307.051593][T13930] dump_stack_lvl+0xf2/0x150 [ 307.051621][T13930] dump_stack+0x15/0x1a [ 307.051697][T13930] should_fail_ex+0x24a/0x260 [ 307.051892][T13930] should_fail_alloc_page+0xfd/0x110 [ 307.051927][T13930] __alloc_frozen_pages_noprof+0x109/0x340 [ 307.051978][T13930] alloc_pages_mpol+0xb4/0x260 [ 307.052125][T13930] alloc_pages_noprof+0xe8/0x130 [ 307.052162][T13930] pipe_write+0x29d/0xd00 [ 307.052200][T13930] vfs_write+0x77b/0x920 [ 307.052229][T13930] ? __pfx_pipe_write+0x10/0x10 [ 307.052264][T13930] ksys_write+0xe8/0x1b0 [ 307.052290][T13930] __x64_sys_write+0x42/0x50 [ 307.052387][T13930] x64_sys_call+0x287e/0x2dc0 [ 307.052458][T13930] do_syscall_64+0xc9/0x1c0 [ 307.052490][T13930] ? clear_bhb_loop+0x55/0xb0 [ 307.052526][T13930] ? clear_bhb_loop+0x55/0xb0 [ 307.052584][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.052616][T13930] RIP: 0033:0x7f28e0b4bc1f [ 307.052634][T13930] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 307.052677][T13930] RSP: 002b:00007f28df1b4d30 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 307.052696][T13930] RAX: ffffffffffffffda RBX: 0000000000000029 RCX: 00007f28e0b4bc1f [ 307.052710][T13930] RDX: 0000000000000029 RSI: 00007f28df1b4f30 RDI: 0000000000000002 [ 307.052724][T13930] RBP: 00007f28df1b4f30 R08: 0000000000000000 R09: 0000000000000000 [ 307.052737][T13930] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000029 [ 307.052750][T13930] R13: 00007f28e0d3c620 R14: 0000000000000029 R15: 00007f28e0d3dc80 [ 307.052797][T13930] [ 307.277753][T13937] Invalid ELF header magic: != ELF [ 307.619637][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.630902][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.722657][T13987] Invalid ELF header magic: != ELF [ 307.804612][T14000] __nla_validate_parse: 10 callbacks suppressed [ 307.804631][T14000] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2689'. [ 307.853545][T14000] lo speed is unknown, defaulting to 1000 [ 307.939639][T14000] lo speed is unknown, defaulting to 1000 [ 307.999465][T14024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2694'. [ 308.390482][ T2964] page_pool_release_retry() stalled pool shutdown: id 68, 1 inflight 60 sec [ 308.493449][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 308.493464][ T30] audit: type=1326 audit(1741560928.706:11365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14048 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.570300][ T30] audit: type=1326 audit(1741560928.736:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14048 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.594094][ T30] audit: type=1326 audit(1741560928.736:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14048 comm="syz.5.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.617741][ T30] audit: type=1326 audit(1741560928.776:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.641519][ T30] audit: type=1326 audit(1741560928.776:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.663302][T14055] loop5: detected capacity change from 0 to 128 [ 308.665166][ T30] audit: type=1326 audit(1741560928.776:11370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.694868][ T30] audit: type=1326 audit(1741560928.776:11371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.718560][ T30] audit: type=1326 audit(1741560928.776:11372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.761199][ T30] audit: type=1326 audit(1741560928.806:11373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.785024][ T30] audit: type=1326 audit(1741560928.826:11374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14052 comm="syz.5.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa22f09d169 code=0x7ffc0000 [ 308.984122][T14089] netlink: 180900 bytes leftover after parsing attributes in process `syz.7.2713'. [ 309.004777][T14089] netlink: zone id is out of range [ 309.010101][T14089] netlink: zone id is out of range [ 309.040633][T14089] netlink: set zone limit has 8 unknown bytes [ 309.375735][T14119] lo speed is unknown, defaulting to 1000 [ 309.454111][T14120] 9pnet_fd: Insufficient options for proto=fd [ 309.625763][T14119] lo speed is unknown, defaulting to 1000 [ 309.773472][T14142] FAULT_INJECTION: forcing a failure. [ 309.773472][T14142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.786627][T14142] CPU: 0 UID: 0 PID: 14142 Comm: syz.0.2721 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 309.786690][T14142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.786702][T14142] Call Trace: [ 309.786710][T14142] [ 309.786717][T14142] dump_stack_lvl+0xf2/0x150 [ 309.786745][T14142] dump_stack+0x15/0x1a [ 309.786772][T14142] should_fail_ex+0x24a/0x260 [ 309.786832][T14142] should_fail+0xb/0x10 [ 309.786918][T14142] should_fail_usercopy+0x1a/0x20 [ 309.787038][T14142] _copy_from_user+0x1c/0xa0 [ 309.787063][T14142] get_user_ifreq+0x8c/0x160 [ 309.787116][T14142] sock_do_ioctl+0xc6/0x260 [ 309.787155][T14142] sock_ioctl+0x40f/0x600 [ 309.787268][T14142] ? __pfx_sock_ioctl+0x10/0x10 [ 309.787298][T14142] __se_sys_ioctl+0xc9/0x140 [ 309.787328][T14142] __x64_sys_ioctl+0x43/0x50 [ 309.787437][T14142] x64_sys_call+0x1690/0x2dc0 [ 309.787477][T14142] do_syscall_64+0xc9/0x1c0 [ 309.787511][T14142] ? clear_bhb_loop+0x55/0xb0 [ 309.787538][T14142] ? clear_bhb_loop+0x55/0xb0 [ 309.787594][T14142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.787683][T14142] RIP: 0033:0x7fb07afad169 [ 309.787700][T14142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.787720][T14142] RSP: 002b:00007fb079611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.787741][T14142] RAX: ffffffffffffffda RBX: 00007fb07b1c5fa0 RCX: 00007fb07afad169 [ 309.787755][T14142] RDX: 0000400000000000 RSI: 0000000000008923 RDI: 000000000000000c [ 309.787770][T14142] RBP: 00007fb079611090 R08: 0000000000000000 R09: 0000000000000000 [ 309.787785][T14142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.787854][T14142] R13: 0000000000000000 R14: 00007fb07b1c5fa0 R15: 00007fffa981ce58 [ 309.787875][T14142] [ 309.795319][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2722'. [ 310.006644][T14160] lo speed is unknown, defaulting to 1000 [ 310.121443][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2724'. [ 310.288505][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'. [ 310.310056][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'. [ 310.317266][T14160] lo speed is unknown, defaulting to 1000 [ 310.398773][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'. [ 310.550611][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'. [ 310.718511][T14192] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2728'. [ 310.839784][ T5045] ================================================================== [ 310.847958][ T5045] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 310.855466][ T5045] [ 310.857833][ T5045] read-write to 0xffff88811d145b30 of 8 bytes by task 14238 on cpu 1: [ 310.866009][ T5045] inode_add_bytes+0x45/0xd0 [ 310.870628][ T5045] __dquot_alloc_space+0x181/0x8a0 [ 310.875770][ T5045] shmem_inode_acct_blocks+0x124/0x230 [ 310.881275][ T5045] shmem_get_folio_gfp+0x5be/0xd90 [ 310.886417][ T5045] shmem_write_begin+0xa2/0x180 [ 310.891287][ T5045] generic_perform_write+0x1a8/0x4a0 [ 310.896604][ T5045] shmem_file_write_iter+0xc2/0xe0 [ 310.901787][ T5045] __kernel_write_iter+0x247/0x4c0 [ 310.906928][ T5045] dump_user_range+0x3ac/0x550 [ 310.911711][ T5045] elf_core_dump+0x1d17/0x1ea0 [ 310.916502][ T5045] do_coredump+0x17fe/0x1f40 [ 310.921135][ T5045] get_signal+0xd4f/0x1000 [ 310.925557][ T5045] arch_do_signal_or_restart+0x95/0x4b0 [ 310.931158][ T5045] irqentry_exit_to_user_mode+0xa7/0x120 [ 310.936809][ T5045] irqentry_exit+0x12/0x50 [ 310.941348][ T5045] exc_general_protection+0x33d/0x4d0 [ 310.946724][ T5045] asm_exc_general_protection+0x26/0x30 [ 310.952283][ T5045] [ 310.954607][ T5045] read to 0xffff88811d145b30 of 8 bytes by task 5045 on cpu 0: [ 310.962149][ T5045] generic_fillattr+0x274/0x330 [ 310.967020][ T5045] shmem_getattr+0x17b/0x200 [ 310.971623][ T5045] vfs_getattr+0x172/0x1b0 [ 310.976039][ T5045] vfs_statx+0x12d/0x320 [ 310.980288][ T5045] vfs_fstatat+0xe4/0x130 [ 310.984618][ T5045] __se_sys_newfstatat+0x58/0x260 [ 310.989647][ T5045] __x64_sys_newfstatat+0x55/0x70 [ 310.994677][ T5045] x64_sys_call+0x236d/0x2dc0 [ 310.999539][ T5045] do_syscall_64+0xc9/0x1c0 [ 311.004056][ T5045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.009973][ T5045] [ 311.012318][ T5045] value changed: 0x0000000000001718 -> 0x0000000000001730 [ 311.019422][ T5045] [ 311.021850][ T5045] Reported by Kernel Concurrency Sanitizer on: [ 311.027995][ T5045] CPU: 0 UID: 0 PID: 5045 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 311.038955][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.049032][ T5045] ==================================================================