last executing test programs: 2m37.289780527s ago: executing program 0 (id=7149): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59ee", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a082f8260147", 0x68}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118", 0x4f}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f44036f83f52415194225b1d75664af0bb8c7db4032895089bf7ed9c49da28ec002a2250c905af982041e9c842ea9dab20db6473e1556aca64e9c40548f5b0381db15e028b2a4f9983a447bb0aacb1b0267c1f54c88d99ea07b387d4be282d5d56e7acb15ebce07ad8846bcbbb754e3cee15d0455ceb58e34bd", 0x86}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m37.272630227s ago: executing program 0 (id=7151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000001000000d3340000000000000000000000000000320000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000caa5f19f0668ceefd513749a0a103c5190f549f324cb1c97f01c6a9a8b2487a6ce95093bd4b6415175b9d58486b30b2dedd7dcf5935a63d7d689dbf53df97b0b7e413e3f29824f764cf115aefafd5f705ca6b98ed0b13ac12406fe3d0671e67fdd5bb051ef207608592974148511afeacd4f21c75041546cfd"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000018000100000000000000000c00088008000c00ff6df53e683b15f226ac81289871f8e5e90f2bd6dd3ff80a468d965c301d02a1362b364428261deb417e6cff0cf11045c3d7e58544e6f816854c3c6b27a4df30e68bb54b83931052a9ccbbf288e36cfde324c0be20fe5cf0e6fc452861cb1b6bbe618e4b5418504dbb91643bdefb5ff2ab8a6bc146158479dbdd7738474f3ddbc864cdc600000055a2d1246ca4900743839250a04801f2418e6df5bfd0e7ca132efc4f9113f381b4a5d7de3facd2ce53711d38d81557c2149ed1a0c8fc06d84f4309231f51ea", @ANYRES32=r3, @ANYBLOB], 0x28}}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000004000000", @ANYRES64, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf8}, 0x14) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) socket$kcm(0x10, 0x2, 0x0) 2m37.142219069s ago: executing program 0 (id=7156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e43732", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="35f15471e054cca67fa478a0c454b693cdf28368e127e45d299646c4be26ebbaa2ad75aa0d7fc1f6eb749ebe1dbdfbe08bd2be625f8f4f1df42225bd875410e5290ac60282545c5141", 0x49}, {&(0x7f0000000340)="5c40c00d24d440d3d895f054ee001593dcb7b5a956dcdc85f1766a197418dfac05dc6f007c", 0x25}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)}, {&(0x7f0000001340)="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", 0x282}], 0x2}}], 0x4, 0xc0) 2m37.06245443s ago: executing program 0 (id=7161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r10 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) close(r0) 2m36.862554264s ago: executing program 0 (id=7170): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x2c}}, 0x0) 2m36.631917787s ago: executing program 0 (id=7179): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x4000000, 0x3, 0x7, 0x1c27, 0x4000000}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000040000000001c0000001c0000000a00002208000019640d520000000001000000003b006f010900000000000009010000ef00a46161005f"], &(0x7f0000000540)=""/7, 0x3e, 0x7, 0x1, 0x7, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000ac00000000000000000000315e5c5f05f871166ccde723a04fa9a86eacb10771f9e943e2d99b5dadc998014e82913c8cc68404a34e21e77d2d3103d299f41a32de170000000000000000000000000000e0fc7191b2aa548fcf99ec4655d993e8b0257b5ad0d3fb9a4173da29d683799b46cf656f435d780fc54441fc82e3e165e97ed3e14f6cc2af2819dc79af3b14b33549bc95454122fb408175928f9e6786e0a1365774b31fa4e87ec4c7e8368af4cd077f060d1a13fe63aa467e3857cd97f23b96f5ff2ea30cfd4ee3ff807f24d7ffd9fa484684787366da42cadb3958cbc2540f064873206627a5aa9d840dbaed5087871e6a847e037a744d0b11fc7050ea003400cde92e203fe9e865ac21851d3a2d1ffcd97c054aeb54b9fbcfa4827dbde87a41e07a61696bb832c1e9d9c58c64fb7a4988c4e88d007317de4ed2a416c8e6e504aee926b98058e886ba5ea8741b5f3c3b2e6df518a90926a78c4d42862291a667a50cac0809510b1a3c629609df69ff7d5ed6063fd066a86198fb0159aeec98f7e0c8d178b432342725bdeb46eee563a00f8995d56253faa273cead39fbfbcb1a8ecc0668fb9ed08e70a91088a7e8401d166b5e9660b9558476e3449d751318f7ccda1cedc45be106564c5f174d4d3d2418dbf1e500b9b4d3aee2795869bd51f4cc67c96f44be7e6fc4fef406ac8143822cfe7515b12d8b6c8b0857e7de65aab22a04b9ee36220dd9e592613fb2c5df5f23c39e62fdc3cc3c705c1b5479a9f629bed7a943", @ANYRES32=0x1, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x5f14, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x10, 0x77379641, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x2, 0x1, 0x6}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x2, 0x4, 0xc}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='rxrpc_disconnect_call\x00', r6, 0x0, 0x700000000000000}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000020000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) lstat(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./cgroup\x00', r11, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r12, 0x0, 0xc9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m36.616743187s ago: executing program 32 (id=7179): pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x80, 0x4000000, 0x3, 0x7, 0x1c27, 0x4000000}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000040000000001c0000001c0000000a00002208000019640d520000000001000000003b006f010900000000000009010000ef00a46161005f"], &(0x7f0000000540)=""/7, 0x3e, 0x7, 0x1, 0x7, 0x10000, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x5f14, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x10, 0x77379641, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x2, 0x1, 0x6}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x2, 0x4, 0xc}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='rxrpc_disconnect_call\x00', r6, 0x0, 0x700000000000000}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESOCT], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000020000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) lstat(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./cgroup\x00', r11, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r12, 0x0, 0xc9, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m25.786960477s ago: executing program 1 (id=7512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) 2m25.621345469s ago: executing program 1 (id=7519): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c05215"], 0x24}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmmsg$unix(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/263, 0x107}, {&(0x7f0000002a80)=""/4111, 0x100f}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000840)=""/95, 0x5f}], 0x5}}], 0x1, 0x40000000, 0x0) 2m25.530895051s ago: executing program 1 (id=7523): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59ee", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000840)="3f1c4a04940ee0b20aec8b4090986a3bff84255d40657e7ee0d40a25584e869ef417cfb843df9bab6a733f72f13c385945fbe4f6592503b0013edc972aa7f382cfe6f924e9b3058c5dc3a39af5f6868c9031d7f0fba663fed16b868a4e53436b1be7a0", 0x63}, {&(0x7f00000008c0)="ab802595e16402267afad4132bae032aeebc5d3df8873915f385de7623fdcdbb497d2913cabe2bd146dee84fdcbeaa251db4f747090dc6c625ed3b915aae8dda1394c0d541055b3e89cab518a94118", 0x4f}, {&(0x7f0000000940)="2c5e42e310fe2f095389d5264f", 0xd}], 0x3}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2m25.502262281s ago: executing program 1 (id=7524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00170000000000120000f1850000007d00000095"], &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r5, 0x1, 0x0, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f0ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r10 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) close(r0) 2m24.999227919s ago: executing program 1 (id=7544): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) lseek(r0, 0x100, 0x0) getdents64(r0, &(0x7f0000000240)=""/35, 0x23) getdents(r0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 2m24.822557992s ago: executing program 1 (id=7542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m24.821813582s ago: executing program 33 (id=7542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.125195232s ago: executing program 3 (id=11311): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402, 0xc0) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x89901) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x40000) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') preadv2(r5, &(0x7f0000000200)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, 0x0, 0xdf68, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800b0001006272cf64677500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpeername(r1, &(0x7f0000000380)=@ax25={{0x3, @rose}, [@bcast, @null, @remote, @bcast, @null, @default, @null, @rose]}, &(0x7f0000000400)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x7e1f, &(0x7f0000000240)={0x0, 0x3e24, 0x8000, 0xfffffffe, 0x3cb, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) io_uring_setup(0x1782, &(0x7f0000000480)={0x0, 0x3e7f, 0x20, 0x4, 0x80126, 0x0, r7}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0xf4ff, 0x0}, 0x0) r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x5) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, &(0x7f00000000c0)=""/154, 0x9a) lseek(r11, 0x8, 0x1) getdents64(r11, 0x0, 0x0) 1.008642524s ago: executing program 3 (id=11316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="000000000001000000d3340000000000000000000000000000320000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000caa5f19f0668ceefd513749a0a103c5190f549f324cb1c97f01c6a9a8b2487a6ce95093bd4b6415175b9d58486b30b2dedd7dcf5935a63d7d689dbf53df97b0b7e413e3f29824f764cf115aefafd5f705ca6b98ed0b13ac12406fe3d0671e67fdd5bb051ef207608592974148511afeacd4f21c75041546cfd"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) acct(0x0) acct(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000018000100000000000000000c00088008000c00ff6df53e683b15f226ac81289871f8e5e90f2bd6dd3ff80a468d965c301d02a1362b364428261deb417e6cff0cf11045c3d7e58544e6f816854c3c6b27a4df30e68bb54b83931052a9ccbbf288e36cfde324c0be20fe5cf0e6fc452861cb1b6bbe618e4b5418504dbb91643bdefb5ff2ab8a6bc146158479dbdd7738474f3ddbc864cdc600000055a2d1246ca4900743839250a04801f2418e6df5bfd0e7ca132efc4f9113f381b4a5d7de3facd2ce53711d38d81557c2149ed1a0c8fc06d84f4309231f51ea", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000004000000", @ANYRES64, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0xf8}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) 951.709735ms ago: executing program 3 (id=11318): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@delchain={0x149c, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xb}, {0x5, 0xb}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4cf}, @filter_kind_options=@f_matchall={{0xd}, {0x1430, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_MATCHALL_ACT={0x1400, 0x2, [@m_police={0xd28, 0x17, 0x0, 0x0, {{0xb}, {0xc80, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x8, 0x101, 0x7a, 0xa, 0x8, 0x10, 0x3, 0x5023bb58, 0x73, 0x0, 0xf604, 0xff, 0x9, 0x1, 0x3488, 0x8, 0xf3e898e, 0x8d, 0x1, 0x7f57, 0x25, 0xc6, 0x5, 0x6983, 0x0, 0x8, 0x3, 0x0, 0x1, 0x2, 0x8, 0x0, 0x14, 0x28b, 0x80000000, 0x6, 0x4, 0x9, 0x9, 0xffffffea, 0xe0000000, 0x4, 0xa7c, 0x3, 0x8, 0x8, 0x56ad, 0x2, 0xaa, 0x0, 0x7, 0x200, 0x0, 0x2, 0x8000, 0xd, 0x9d, 0xffff, 0x8001, 0x3, 0xf, 0x215, 0x1, 0xffffffff, 0x80, 0x9, 0x1, 0x40, 0x4, 0x9, 0x5, 0xfff, 0x7, 0x4, 0xa, 0x800000, 0x0, 0x8b, 0xae06, 0xfffffffb, 0x5e8, 0x2, 0x1, 0x5, 0xeef, 0x101, 0x6, 0x800, 0x1, 0xa89f, 0x1, 0x8, 0x1, 0xea7, 0x1ff, 0x1, 0x3, 0x8, 0x2fd80000, 0x9, 0xa, 0x2, 0xc, 0x1, 0x3, 0xb, 0xd, 0x4, 0x0, 0xfffffffb, 0x0, 0x1, 0xb, 0x5, 0x0, 0x1, 0x800, 0x6, 0x8, 0xc5f, 0x5, 0xb75, 0x4, 0x1, 0x1ff, 0x7f, 0x8, 0x2dad, 0x6, 0x80000000, 0x7ff, 0x1, 0x4, 0xe0000000, 0xf, 0x81, 0x1d15, 0xbd6, 0x1, 0xd3, 0x8, 0x6, 0x9, 0xc, 0x9, 0x12, 0x400, 0x2, 0x5, 0x9, 0xe, 0x6, 0x9, 0x6, 0x7, 0x220bfcf0, 0xc, 0x0, 0x9, 0xff, 0x8001, 0xfffffbff, 0xfffffff8, 0x3, 0x1, 0x0, 0x6, 0x8000, 0x5, 0x1, 0x7, 0xfffffff8, 0x1, 0x200, 0x9, 0x7ff, 0x3, 0x101, 0x7ff, 0x101, 0x6, 0xfffffffa, 0x1, 0xff, 0x2, 0x6, 0x5, 0x5, 0x9e, 0xfffffc01, 0x3ff, 0x237d7f9c, 0x308c9663, 0xffffffff, 0x8a2, 0x9, 0xbe4, 0x3, 0x7, 0x1, 0x1, 0x5, 0x1, 0x67b4, 0x756e6a33, 0x1, 0xfffffff6, 0x38, 0xd, 0x142e, 0x3, 0x582, 0xf, 0xd, 0x4b, 0xfffffffb, 0x8, 0xfdba, 0x89f3, 0x5, 0x77c, 0x80000000, 0x9, 0x9, 0x2, 0x0, 0x4e, 0x1, 0xf42, 0xa7f5, 0x9, 0xa, 0x2, 0xe, 0x27d48b2a, 0x6, 0x9, 0x2, 0x1, 0x5, 0x2, 0x1, 0x3, 0x4, 0x7, 0x9, 0x6, 0x2, 0x14000000, 0x7, 0x3ff, 0xc, 0xfffff001, 0xbf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1d19}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x619, 0xfffffff7, 0x10000, 0x5edb76d0, 0x5, 0x9, 0x200, 0x10, 0x0, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1ff, 0xc0, 0x3, 0x2b, 0xfffffffd, 0x8, 0x3, 0xfffff63f, 0x0, 0xe597, 0x35, 0x8001, 0x5, 0x2, 0x18c4e, 0x3, 0x0, 0x8f8, 0xa0, 0x2, 0x10001, 0x0, 0xffff7fff, 0x7, 0x7, 0x1, 0x2, 0x7fffffff, 0x5, 0x8, 0x5, 0x39f, 0x7f, 0x2, 0x7, 0xfffffffb, 0x1, 0x9a0, 0x6, 0xd, 0xfd49, 0x3, 0x4, 0x2, 0x8, 0xff, 0x4, 0x400, 0x1c00, 0x2, 0x51a, 0x8, 0x2f64, 0x0, 0xffffffff, 0x3, 0x5, 0x5, 0x2, 0x0, 0x1, 0xf, 0xf2f, 0x7, 0x8, 0x9, 0x823e, 0x401, 0x101, 0x4, 0x7fffffff, 0x3ff, 0x10, 0x9, 0x4, 0x7ff, 0x7, 0x100, 0x1, 0xd, 0x588a, 0xbc, 0x9, 0x4, 0xc, 0x10000, 0xda, 0xffff, 0x6, 0x4d, 0x6, 0x200, 0x2, 0x4, 0x1, 0x6, 0x80, 0x7bb9d348, 0x2, 0x7, 0x8000, 0x6, 0x0, 0x8, 0xc, 0x64af, 0x8, 0x6, 0x81, 0x2, 0x7, 0x9, 0x401, 0x4, 0x237b9051, 0x616a, 0x7, 0x9, 0x6, 0x10, 0x80000000, 0x1dc, 0x3b, 0x5, 0x3, 0x9, 0x4, 0x7, 0xf, 0x1, 0x6, 0x1, 0x1, 0x2, 0x6, 0x5, 0x8, 0x5, 0xffffffff, 0x0, 0x8000, 0x401, 0x7, 0x1, 0x100, 0x7, 0x5, 0x7fff, 0xb1b2, 0x0, 0x8, 0x800, 0x3448a12b, 0xfffff1ce, 0x1, 0x8, 0x7f, 0x5, 0x1, 0x6, 0x6, 0xffffffff, 0xfd5e, 0x10000, 0x8, 0xfffffffe, 0xa, 0x8, 0x2, 0x80000000, 0x7fff, 0x10, 0x79b, 0x40be, 0x80000001, 0xfffffffa, 0x40, 0xf0, 0x2, 0x2, 0x10, 0x4, 0x80000000, 0x2, 0x7, 0xffff, 0x3, 0x6, 0x9, 0x7, 0x5, 0xfb1c, 0x5, 0xae3, 0x1, 0x6, 0xfffffffe, 0xfffffff0, 0xe, 0x7, 0x2, 0x4, 0x4, 0x4, 0x3, 0x6, 0x2, 0x9, 0x9, 0x8000, 0x3, 0x1, 0x1, 0x3, 0x1e, 0x7fff, 0x5, 0x5b0, 0xb, 0x9, 0x6, 0x4, 0x2, 0x9, 0x157, 0x3, 0x2, 0x3, 0xe, 0x2, 0xffffffff, 0x80, 0xffffffff, 0x8, 0x287, 0xd, 0x4a79, 0xc0000000, 0x9, 0x2, 0x543c, 0xce6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x67, 0x8, 0x2, 0x1ff, 0x4, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, 0xa, 0xff, 0x10000, 0x9, 0x0, 0x0, 0x5, 0x4, 0xa, 0x7, 0x40, 0xf, 0xfff, 0x7f, 0x7ff, 0x4, 0x40, 0x1ff, 0x2, 0x8, 0xdde, 0x9, 0x8, 0x48ef10b0, 0x2, 0x9, 0x3, 0x8, 0x2, 0x8, 0x4, 0x8, 0x7, 0x4, 0x5, 0x0, 0xf, 0x6, 0x1000, 0x9, 0x200, 0x2c69000, 0x2, 0x10, 0x6, 0x0, 0x2, 0x8, 0xed13, 0x5, 0x3, 0x7ff, 0x6, 0x3, 0x10, 0x5, 0x200, 0x708, 0x0, 0x4, 0x1, 0x4, 0x8, 0xff, 0x80, 0xffff11be, 0x1, 0xffff8885, 0x80, 0x2, 0x401, 0x8, 0x0, 0xae, 0x3, 0x3, 0x5a2e, 0xd496, 0x5147, 0x4, 0x6, 0x1, 0x4fe, 0x7f2, 0x7f, 0x7bd70000, 0x6, 0xce6f, 0x0, 0x600, 0x7fffffff, 0x4, 0x4, 0x7, 0x80000000, 0xfffffffb, 0x4, 0x81, 0x6, 0x1000, 0x1, 0x4548d22b, 0x26b, 0x9, 0xa, 0x2, 0x81, 0x3, 0x8, 0x5, 0xc3, 0x4, 0x1dae39cb, 0x429, 0xfc97, 0x8, 0xfffffff6, 0x1, 0x1fb, 0x2, 0x5, 0xd854, 0x1, 0x8001, 0xe2, 0x1f975c0, 0x1, 0x6, 0x2, 0x3ff, 0x7, 0xfffffff7, 0x5, 0x10, 0x2, 0x8001, 0x2, 0x7, 0x2, 0x8, 0xdc, 0x5, 0x8, 0x101, 0x16, 0x1, 0x7, 0x7, 0x5, 0x3, 0x6, 0x6, 0x7, 0x5, 0xe, 0x3000000, 0x7f, 0x9, 0x8, 0x1, 0xa7b, 0x9, 0x7, 0x6, 0x101, 0x0, 0x5, 0x6, 0x40, 0x6, 0x1000, 0xfebc, 0x4, 0xcb9, 0x3, 0x0, 0x2, 0x3, 0x8, 0x2, 0x5, 0x4, 0x0, 0x3, 0x4, 0xc, 0x9, 0x1dbcbfa2, 0x200, 0x9, 0x3, 0x8, 0x1, 0xfff, 0x0, 0x5, 0x1ba6, 0x9, 0xd, 0x0, 0x9, 0x4, 0x70be, 0x4, 0x2, 0x8, 0x7, 0x7f, 0xfffffffc, 0x80, 0x8b7d, 0x5, 0x9, 0x7ff, 0xbc, 0x7, 0x1, 0x7ff, 0x1000, 0x1604, 0x0, 0x3, 0x8, 0x7, 0x7, 0x1, 0x10, 0x2, 0xb9, 0xffff, 0x7f, 0x80000000, 0x3, 0x5, 0xd, 0x7, 0xac5, 0xe58e, 0x1, 0x8, 0x82f8, 0x5, 0x7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xc, 0x7, 0x1000, 0x4, {0x80, 0x1, 0x0, 0xcc, 0x4, 0x1ff}, {0x8, 0x2, 0xffff, 0x0, 0xff60, 0xffffffff}, 0x5, 0xfffffff3, 0xe3bc}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x7e, 0x6, "8e0a422f95f2ae20c4af7cfe7c2612f290b300dae77205ad5c955aa1de18e0ce79b23bc12d88c6a8f90132bca2432b7989657e1b824b58149df2b77ad561801bf482eb46e1f83f18ae6bda0a547f3e8eaf9b33b74217cb0c7c8593a6643c320483d09dea6edd6b61c4a58bacf33ded285bb66f415e2f2b143d9d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xa78dde06f3149b51, 0x1}}}}, @m_nat={0x168, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x97c, 0x4, 0x9, 0x1}, @dev={0xac, 0x14, 0x14, 0x11}, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x5, 0x39, 0x6}, @broadcast, @rand_addr=0x64010101, 0x4cb730e935a0f3a5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0xee7, 0x5, 0x7, 0x5}, @rand_addr=0x64010100, @multicast1, 0x0, 0x1}}]}, {0xc8, 0x6, "3e618a15ba554e327c3ee35e45c5dd126c2caf3f065a730bc2be994aac50b64a462be9aa4f64bb0cc3ea3f9190ca217178f0344589632e2aafb2cf723e4cb45d1373896741fcc14cd9a1b0a6ab242bed225eb704c97e38df9ccddd21f1c3e93504eced53489bde810d6ba37c8f9b694bb3e0c5a9adf2057ca57606454788f9593377693bbb6c5c960e897eec8a0a5b5f5ab669df49f5a21b303deafa092bb4c8f393cbd78d70321fcc8ca4830a6900c67119a3b710f48e1fc654ef551e92e045dac420f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x7c, 0x1c, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x27, 0x6, "a135eb89842735b29f2a4c6c0d248eaa60de293d4da38ddbe6a9f866ef98264ee1e11e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xb0, 0x1c, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1f, 0x6, "8a642967da419e3b35ee5e3becda26422e4e06cf146ea9bb064301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x30d, 0x8, 0x20000004, 0x101, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffe1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fffffff}]}, {0x9, 0x6, "2e4f1659f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbedit={0xe0, 0x1f, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xa3, 0x6, "80cf1b7d35487def679343645e1ebb75bedb93a396aefad14478dd2877e582a188056fae5d644cd63781ec99cdda446cdad703ee82a8a65363a02608491b5f2b751a65e383f57f07f073775631970fb311b8bb7ec3a0800eb8440a07ff8a8b4adf547da62ff03444807ff13a927c4607e9ae216389ac2f6b3ac701883d4ef5da357b5cd31b50cf12d347842edba6fbff19d1a17335c481e7da11f24d3bba0d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x110, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x5, 0x3, 0xa6}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x2, 0x10000000, 0x7908a38d, 0x3}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x20000000, 0x8, 0xfffffffb}, @multicast1, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xe488, 0x1, 0x7fffffff, 0x40}, @multicast2, @multicast2, 0xffffffff, 0x1}}]}, {0x47, 0x6, "43edbe05b3e7a252f69c61ed5dc30279ed9bd45a895e49ddef9aa089358ef75e1f2c96c6e4a664fa08fd84f0943271f7a0d1438a8c3aec793e8e900f942c27a9367ed2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x13c, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x4, 0x5, 0x7, 0xfffffffd}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xe0, 0x6, "884f95aef3b248cf8958ee6c0bfcd9f76e6ab6fbcf27baeaad1f3721dedc4438f422dcac97e8b84d8235643b553c681d9bc7d803d8e51f2e8872e82cd3c2e050701b29ab16cf1ae74a1ca8c9b1e441dfbf5dc5509dc22ffa32b810790ea23e6243ee26027e12a6e313c64ece46cec71102447052420a6a61132b8b206dfcefa8561e4cd50f051664379ec56e31aed95d7b2b1f8567b6781fc27e1c0981f362edaff399405b92e3fd805ab5a9d4e5894ba7e90662909a8f634ba2352cd89f3e5cfc9945814a560c551e010b3fa6fb7ba2dbb01e2a3d9cc96b980925f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x94, 0x13, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x10000, 0x10000000, 0x3, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0xfffff801, 0xe}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x17, 0x6, "194d421a2cc2abb51ef7c0ecb6944e11b4bd9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0xfffffffd}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1edf}]}}]}, 0x149c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109240, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='cachefiles_read\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$inet(0x2, 0x80000, 0xb8) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f0000000540)={[{@quota}]}, 0xfe, 0x253, &(0x7f0000000240)="$eJzs3T+II1UcB/DvTBLv9i7IqY0g/gER0YXl7ASbs1E4kOMQEVQ4EbFR7oTzDruLlY2F1ipX2Sxi52op2yw2imC16hZrI+hi4WKhQiSZjcRsRHcTM8fO5wOTvMm8N78ZMt+XNJMEaKxTSc4kaSVZTtJJUox3uKdaTu2tXl/auJD0+0/+XAz7VeuV0biTSXpJHk6yXhZ5uZ1cXXt2+9fNx+9/60rnvg/Wnlla6Enu2dneemL3/XNvfnz2oatffv3juSJn0v3bec1fMeW1dpHc+n8Uu0EU7bqPgP/i/OsffTPI/W1J7h3mv5My1Zv39uWb1jt58L1/GvvOT1/dschjBeav3+8MPgN7faBxyiTdFOVKkqpdlisr1Xf4b1snylcuXX5t+aVLVy6+WPdMBcxLN9l67NNjn5ycyP8PrSr/wNE1yP9T51e/G7R3W3UfDbAQd1ZPg/wvP3/tgcg/NI78Q3PJPzSX/EODTGRc/qG55B+aS/7hCOuMGr2pm+Ufmkv+obnkH5prPP8AQLP0j9V9BzJQl7rnHwAAAAAAAAAAAAAAAAAAYL/rSxsXRsuian7+brLzaJL2tPqt4f8RJ8eHjyd+KQbd/lJUw2by3N0z7mBGH9Z89/XN39db/4u76q1/7WLSeyPJ6XZ7//VX7F1/h3fLv2zvvDBjgQMqJtYfeXouu/3jsAN/X51L/YM6Pmqc3Uw+G8w/p6fNP2VuH+s+Of90x39i+ZBe/W3GHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAwfwYAAP//CLBu0w==") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001400), 0x208e24b) fdatasync(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000001c0)) 868.150906ms ago: executing program 6 (id=11320): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) 707.083099ms ago: executing program 6 (id=11322): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d0000001400038004"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 664.61828ms ago: executing program 4 (id=11324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30800c1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 647.60923ms ago: executing program 6 (id=11326): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402, 0xc0) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x89901) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c00010062"], 0x3c}}, 0x40000) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') preadv2(r5, &(0x7f0000000200)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, 0x0, 0xdf68, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800b0001006272cf64677500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpeername(r1, &(0x7f0000000380)=@ax25={{0x3, @rose}, [@bcast, @null, @remote, @bcast, @null, @default, @null, @rose]}, &(0x7f0000000400)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x7e1f, &(0x7f0000000240)={0x0, 0x3e24, 0x8000, 0xfffffffe, 0x3cb, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) io_uring_setup(0x1782, &(0x7f0000000480)={0x0, 0x3e7f, 0x20, 0x4, 0x80126, 0x0, r7}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0xf4ff, 0x0}, 0x0) r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x5) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, &(0x7f00000000c0)=""/154, 0x9a) lseek(r11, 0x8, 0x1) getdents64(r11, 0x0, 0x0) 545.682542ms ago: executing program 4 (id=11330): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x1002}, 0x4) pipe2(0x0, 0x1100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@noinit_itable}, {@init_itable}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x61b, &(0x7f0000001c80)="$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") inotify_init() write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(0xffffffffffffffff) umount2(0x0, 0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40d82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='virtio_transport_alloc_pkt\x00'}, 0xfffffcd1) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@setneightbl={0x38, 0x43, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7}, [@NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x100000000}, @NDTA_NAME={0x6, 0x1, '{\x00'}, @NDTA_NAME={0x6, 0x1, ']\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x400d0) 529.681131ms ago: executing program 3 (id=11331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800001e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000004000000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 526.147671ms ago: executing program 6 (id=11332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7fffffff, 0x448400) r5 = accept$inet(r1, 0x0, &(0x7f00000001c0)) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000200)={@multicast2, @multicast2, 0x1, 0x1, [@broadcast]}, 0x14) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x10001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1f9a, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) epoll_create(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 492.200653ms ago: executing program 2 (id=11334): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) 491.191352ms ago: executing program 5 (id=11335): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r2, 0x3a, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf2509000200", @ANYRES32, @ANYBLOB="050054"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) syz_read_part_table(0x1060, &(0x7f0000001180)="$eJzsz7GNwlAQBNCxLZ/s5KRLL6IUmiAB0QsOoAAyKICAFkjoiJTMyDIyHQDBe8HXH2l2pQ0fdWmHt0r+D0markmfa5EiKYecdM/iJl0xTR3T10n2SWanpkrqsZLlbv07tdpkXr7C+P3ZVsP6cvV3u2dxft+lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC9HgEAAP//uy8OZQ==") read$msr(r3, &(0x7f0000000480)=""/65, 0x41) r8 = io_uring_setup(0x2004074, &(0x7f00000002c0)={0x0, 0xb7ea, 0x10, 0x2, 0x5f}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000000c0)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000061b3000000000400000007000000"], 0x10}, 0x0) 403.771523ms ago: executing program 2 (id=11336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000040c0000002000018008000300020000001400020076657468315f746f5f7465616d0000001400038004"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 348.253584ms ago: executing program 2 (id=11337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 330.200915ms ago: executing program 3 (id=11338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmctl$SHM_LOCK(0x0, 0xb) 313.512505ms ago: executing program 5 (id=11339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x3a, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000061b3000000000400000007000000"], 0x10}, 0x0) 302.348445ms ago: executing program 6 (id=11340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30800c1, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 302.089465ms ago: executing program 2 (id=11341): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) 239.807516ms ago: executing program 5 (id=11342): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x402, 0xc0) r1 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x89901) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c00010062"], 0x3c}}, 0x40000) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') preadv2(r5, &(0x7f0000000200)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, 0x0, 0xdf68, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000140012800b0001006272cf64677500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getpeername(r1, &(0x7f0000000380)=@ax25={{0x3, @rose}, [@bcast, @null, @remote, @bcast, @null, @default, @null, @rose]}, &(0x7f0000000400)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) r7 = syz_io_uring_setup(0x7e1f, &(0x7f0000000240)={0x0, 0x3e24, 0x8000, 0xfffffffe, 0x3cb, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000300)) io_uring_setup(0x1782, &(0x7f0000000480)={0x0, 0x3e7f, 0x20, 0x4, 0x80126, 0x0, r7}) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0xf4ff, 0x0}, 0x0) r9 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x5) fchdir(r10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r11, &(0x7f00000000c0)=""/154, 0x9a) lseek(r11, 0x8, 0x1) getdents64(r11, 0x0, 0x0) 239.169056ms ago: executing program 3 (id=11343): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@delchain={0x149c, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xb}, {0x5, 0xb}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4cf}, @filter_kind_options=@f_matchall={{0xd}, {0x1430, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xc}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_MATCHALL_ACT={0x1400, 0x2, [@m_police={0xd28, 0x17, 0x0, 0x0, {{0xb}, {0xc80, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x8, 0x101, 0x7a, 0xa, 0x8, 0x10, 0x3, 0x5023bb58, 0x73, 0x0, 0xf604, 0xff, 0x9, 0x1, 0x3488, 0x8, 0xf3e898e, 0x8d, 0x1, 0x7f57, 0x25, 0xc6, 0x5, 0x6983, 0x0, 0x8, 0x3, 0x0, 0x1, 0x2, 0x8, 0x0, 0x14, 0x28b, 0x80000000, 0x6, 0x4, 0x9, 0x9, 0xffffffea, 0xe0000000, 0x4, 0xa7c, 0x3, 0x8, 0x8, 0x56ad, 0x2, 0xaa, 0x0, 0x7, 0x200, 0x0, 0x2, 0x8000, 0xd, 0x9d, 0xffff, 0x8001, 0x3, 0xf, 0x215, 0x1, 0xffffffff, 0x80, 0x9, 0x1, 0x40, 0x4, 0x9, 0x5, 0xfff, 0x7, 0x4, 0xa, 0x800000, 0x0, 0x8b, 0xae06, 0xfffffffb, 0x5e8, 0x2, 0x1, 0x5, 0xeef, 0x101, 0x6, 0x800, 0x1, 0xa89f, 0x1, 0x8, 0x1, 0xea7, 0x1ff, 0x1, 0x3, 0x8, 0x2fd80000, 0x9, 0xa, 0x2, 0xc, 0x1, 0x3, 0xb, 0xd, 0x4, 0x0, 0xfffffffb, 0x0, 0x1, 0xb, 0x5, 0x0, 0x1, 0x800, 0x6, 0x8, 0xc5f, 0x5, 0xb75, 0x4, 0x1, 0x1ff, 0x7f, 0x8, 0x2dad, 0x6, 0x80000000, 0x7ff, 0x1, 0x4, 0xe0000000, 0xf, 0x81, 0x1d15, 0xbd6, 0x1, 0xd3, 0x8, 0x6, 0x9, 0xc, 0x9, 0x12, 0x400, 0x2, 0x5, 0x9, 0xe, 0x6, 0x9, 0x6, 0x7, 0x220bfcf0, 0xc, 0x0, 0x9, 0xff, 0x8001, 0xfffffbff, 0xfffffff8, 0x3, 0x1, 0x0, 0x6, 0x8000, 0x5, 0x1, 0x7, 0xfffffff8, 0x1, 0x200, 0x9, 0x7ff, 0x3, 0x101, 0x7ff, 0x101, 0x6, 0xfffffffa, 0x1, 0xff, 0x2, 0x6, 0x5, 0x5, 0x9e, 0xfffffc01, 0x3ff, 0x237d7f9c, 0x308c9663, 0xffffffff, 0x8a2, 0x9, 0xbe4, 0x3, 0x7, 0x1, 0x1, 0x5, 0x1, 0x67b4, 0x756e6a33, 0x1, 0xfffffff6, 0x38, 0xd, 0x142e, 0x3, 0x582, 0xf, 0xd, 0x4b, 0xfffffffb, 0x8, 0xfdba, 0x89f3, 0x5, 0x77c, 0x80000000, 0x9, 0x9, 0x2, 0x0, 0x4e, 0x1, 0xf42, 0xa7f5, 0x9, 0xa, 0x2, 0xe, 0x27d48b2a, 0x6, 0x9, 0x2, 0x1, 0x5, 0x2, 0x1, 0x3, 0x4, 0x7, 0x9, 0x6, 0x2, 0x14000000, 0x7, 0x3ff, 0xc, 0xfffff001, 0xbf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1d19}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x619, 0xfffffff7, 0x10000, 0x5edb76d0, 0x5, 0x9, 0x200, 0x10, 0x0, 0x2, 0x5, 0x1, 0x3, 0x1, 0x1ff, 0xc0, 0x3, 0x2b, 0xfffffffd, 0x8, 0x3, 0xfffff63f, 0x0, 0xe597, 0x35, 0x8001, 0x5, 0x2, 0x18c4e, 0x3, 0x0, 0x8f8, 0xa0, 0x2, 0x10001, 0x0, 0xffff7fff, 0x7, 0x7, 0x1, 0x2, 0x7fffffff, 0x5, 0x8, 0x5, 0x39f, 0x7f, 0x2, 0x7, 0xfffffffb, 0x1, 0x9a0, 0x6, 0xd, 0xfd49, 0x3, 0x4, 0x2, 0x8, 0xff, 0x4, 0x400, 0x1c00, 0x2, 0x51a, 0x8, 0x2f64, 0x0, 0xffffffff, 0x3, 0x5, 0x5, 0x2, 0x0, 0x1, 0xf, 0xf2f, 0x7, 0x8, 0x9, 0x823e, 0x401, 0x101, 0x4, 0x7fffffff, 0x3ff, 0x10, 0x9, 0x4, 0x7ff, 0x7, 0x100, 0x1, 0xd, 0x588a, 0xbc, 0x9, 0x4, 0xc, 0x10000, 0xda, 0xffff, 0x6, 0x4d, 0x6, 0x200, 0x2, 0x4, 0x1, 0x6, 0x80, 0x7bb9d348, 0x2, 0x7, 0x8000, 0x6, 0x0, 0x8, 0xc, 0x64af, 0x8, 0x6, 0x81, 0x2, 0x7, 0x9, 0x401, 0x4, 0x237b9051, 0x616a, 0x7, 0x9, 0x6, 0x10, 0x80000000, 0x1dc, 0x3b, 0x5, 0x3, 0x9, 0x4, 0x7, 0xf, 0x1, 0x6, 0x1, 0x1, 0x2, 0x6, 0x5, 0x8, 0x5, 0xffffffff, 0x0, 0x8000, 0x401, 0x7, 0x1, 0x100, 0x7, 0x5, 0x7fff, 0xb1b2, 0x0, 0x8, 0x800, 0x3448a12b, 0xfffff1ce, 0x1, 0x8, 0x7f, 0x5, 0x1, 0x6, 0x6, 0xffffffff, 0xfd5e, 0x10000, 0x8, 0xfffffffe, 0xa, 0x8, 0x2, 0x80000000, 0x7fff, 0x10, 0x79b, 0x40be, 0x80000001, 0xfffffffa, 0x40, 0xf0, 0x2, 0x2, 0x10, 0x4, 0x80000000, 0x2, 0x7, 0xffff, 0x3, 0x6, 0x9, 0x7, 0x5, 0xfb1c, 0x5, 0xae3, 0x1, 0x6, 0xfffffffe, 0xfffffff0, 0xe, 0x7, 0x2, 0x4, 0x4, 0x4, 0x3, 0x6, 0x2, 0x9, 0x9, 0x8000, 0x3, 0x1, 0x1, 0x3, 0x1e, 0x7fff, 0x5, 0x5b0, 0xb, 0x9, 0x6, 0x4, 0x2, 0x9, 0x157, 0x3, 0x2, 0x3, 0xe, 0x2, 0xffffffff, 0x80, 0xffffffff, 0x8, 0x287, 0xd, 0x4a79, 0xc0000000, 0x9, 0x2, 0x543c, 0xce6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x67, 0x8, 0x2, 0x1ff, 0x4, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, 0xa, 0xff, 0x10000, 0x9, 0x0, 0x0, 0x5, 0x4, 0xa, 0x7, 0x40, 0xf, 0xfff, 0x7f, 0x7ff, 0x4, 0x40, 0x1ff, 0x2, 0x8, 0xdde, 0x9, 0x8, 0x48ef10b0, 0x2, 0x9, 0x3, 0x8, 0x2, 0x8, 0x4, 0x8, 0x7, 0x4, 0x5, 0x0, 0xf, 0x6, 0x1000, 0x9, 0x200, 0x2c69000, 0x2, 0x10, 0x6, 0x0, 0x2, 0x8, 0xed13, 0x5, 0x3, 0x7ff, 0x6, 0x3, 0x10, 0x5, 0x200, 0x708, 0x0, 0x4, 0x1, 0x4, 0x8, 0xff, 0x80, 0xffff11be, 0x1, 0xffff8885, 0x80, 0x2, 0x401, 0x8, 0x0, 0xae, 0x3, 0x3, 0x5a2e, 0xd496, 0x5147, 0x4, 0x6, 0x1, 0x4fe, 0x7f2, 0x7f, 0x7bd70000, 0x6, 0xce6f, 0x0, 0x600, 0x7fffffff, 0x4, 0x4, 0x7, 0x80000000, 0xfffffffb, 0x4, 0x81, 0x6, 0x1000, 0x1, 0x4548d22b, 0x26b, 0x9, 0xa, 0x2, 0x81, 0x3, 0x8, 0x5, 0xc3, 0x4, 0x1dae39cb, 0x429, 0xfc97, 0x8, 0xfffffff6, 0x1, 0x1fb, 0x2, 0x5, 0xd854, 0x1, 0x8001, 0xe2, 0x1f975c0, 0x1, 0x6, 0x2, 0x3ff, 0x7, 0xfffffff7, 0x5, 0x10, 0x2, 0x8001, 0x2, 0x7, 0x2, 0x8, 0xdc, 0x5, 0x8, 0x101, 0x16, 0x1, 0x7, 0x7, 0x5, 0x3, 0x6, 0x6, 0x7, 0x5, 0xe, 0x3000000, 0x7f, 0x9, 0x8, 0x1, 0xa7b, 0x9, 0x7, 0x6, 0x101, 0x0, 0x5, 0x6, 0x40, 0x6, 0x1000, 0xfebc, 0x4, 0xcb9, 0x3, 0x0, 0x2, 0x3, 0x8, 0x2, 0x5, 0x4, 0x0, 0x3, 0x4, 0xc, 0x9, 0x1dbcbfa2, 0x200, 0x9, 0x3, 0x8, 0x1, 0xfff, 0x0, 0x5, 0x1ba6, 0x9, 0xd, 0x0, 0x9, 0x4, 0x70be, 0x4, 0x2, 0x8, 0x7, 0x7f, 0xfffffffc, 0x80, 0x8b7d, 0x5, 0x9, 0x7ff, 0xbc, 0x7, 0x1, 0x7ff, 0x1000, 0x1604, 0x0, 0x3, 0x8, 0x7, 0x7, 0x1, 0x10, 0x2, 0xb9, 0xffff, 0x7f, 0x80000000, 0x3, 0x5, 0xd, 0x7, 0xac5, 0xe58e, 0x1, 0x8, 0x82f8, 0x5, 0x7, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xc, 0x7, 0x1000, 0x4, {0x80, 0x1, 0x0, 0xcc, 0x4, 0x1ff}, {0x8, 0x2, 0xffff, 0x0, 0xff60, 0xffffffff}, 0x5, 0xfffffff3, 0xe3bc}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]]}, {0x7e, 0x6, "8e0a422f95f2ae20c4af7cfe7c2612f290b300dae77205ad5c955aa1de18e0ce79b23bc12d88c6a8f90132bca2432b7989657e1b824b58149df2b77ad561801bf482eb46e1f83f18ae6bda0a547f3e8eaf9b33b74217cb0c7c8593a6643c320483d09dea6edd6b61c4a58bacf33ded285bb66f415e2f2b143d9d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xa78dde06f3149b51, 0x1}}}}, @m_nat={0x168, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x97c, 0x4, 0x9, 0x1}, @dev={0xac, 0x14, 0x14, 0x11}, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4, 0x5, 0x39, 0x6}, @broadcast, @rand_addr=0x64010101, 0x4cb730e935a0f3a5}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0xee7, 0x5, 0x7, 0x5}, @rand_addr=0x64010100, @multicast1, 0x0, 0x1}}]}, {0xc8, 0x6, "3e618a15ba554e327c3ee35e45c5dd126c2caf3f065a730bc2be994aac50b64a462be9aa4f64bb0cc3ea3f9190ca217178f0344589632e2aafb2cf723e4cb45d1373896741fcc14cd9a1b0a6ab242bed225eb704c97e38df9ccddd21f1c3e93504eced53489bde810d6ba37c8f9b694bb3e0c5a9adf2057ca57606454788f9593377693bbb6c5c960e897eec8a0a5b5f5ab669df49f5a21b303deafa092bb4c8f393cbd78d70321fcc8ca4830a6900c67119a3b710f48e1fc654ef551e92e045dac420f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x7c, 0x1c, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x27, 0x6, "a135eb89842735b29f2a4c6c0d248eaa60de293d4da38ddbe6a9f866ef98264ee1e11e"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0xb0, 0x1c, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x1f, 0x6, "8a642967da419e3b35ee5e3becda26422e4e06cf146ea9bb064301"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x30d, 0x8, 0x20000004, 0x101, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffe1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffffc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7fffffff}]}, {0x9, 0x6, "2e4f1659f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbedit={0xe0, 0x1f, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0xa3, 0x6, "80cf1b7d35487def679343645e1ebb75bedb93a396aefad14478dd2877e582a188056fae5d644cd63781ec99cdda446cdad703ee82a8a65363a02608491b5f2b751a65e383f57f07f073775631970fb311b8bb7ec3a0800eb8440a07ff8a8b4adf547da62ff03444807ff13a927c4607e9ae216389ac2f6b3ac701883d4ef5da357b5cd31b50cf12d347842edba6fbff19d1a17335c481e7da11f24d3bba0d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_nat={0x110, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x5, 0x3, 0xa6}, @empty, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0x2, 0x10000000, 0x7908a38d, 0x3}, @remote, @local, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x20000000, 0x8, 0xfffffffb}, @multicast1, @multicast2, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xe488, 0x1, 0x7fffffff, 0x40}, @multicast2, @multicast2, 0xffffffff, 0x1}}]}, {0x47, 0x6, "43edbe05b3e7a252f69c61ed5dc30279ed9bd45a895e49ddef9aa089358ef75e1f2c96c6e4a664fa08fd84f0943271f7a0d1438a8c3aec793e8e900f942c27a9367ed2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x13c, 0xc, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x4, 0x5, 0x7, 0xfffffffd}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}]}, {0xe0, 0x6, "884f95aef3b248cf8958ee6c0bfcd9f76e6ab6fbcf27baeaad1f3721dedc4438f422dcac97e8b84d8235643b553c681d9bc7d803d8e51f2e8872e82cd3c2e050701b29ab16cf1ae74a1ca8c9b1e441dfbf5dc5509dc22ffa32b810790ea23e6243ee26027e12a6e313c64ece46cec71102447052420a6a61132b8b206dfcefa8561e4cd50f051664379ec56e31aed95d7b2b1f8567b6781fc27e1c0981f362edaff399405b92e3fd805ab5a9d4e5894ba7e90662909a8f634ba2352cd89f3e5cfc9945814a560c551e010b3fa6fb7ba2dbb01e2a3d9cc96b980925f8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x94, 0x13, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x10000, 0x10000000, 0x3, 0x5}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0xfffff801, 0xe}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}]}, {0x17, 0x6, "194d421a2cc2abb51ef7c0ecb6944e11b4bd9e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0xfffffffd}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x4}]}}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1edf}]}}]}, 0x149c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109240, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='cachefiles_read\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$inet(0x2, 0x80000, 0xb8) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f0000000540)={[{@quota}]}, 0xfe, 0x253, &(0x7f0000000240)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001400), 0x208e24b) fdatasync(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) bind$pptp(r8, &(0x7f0000000040)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xfdef}], 0x1, 0x0, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000001c0)) 223.736826ms ago: executing program 2 (id=11344): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @remote}}}}, 0x0) 180.254287ms ago: executing program 2 (id=11345): gettid() mq_open(&(0x7f0000000180)='^&{{-&*.\x00', 0x1, 0x8, &(0x7f0000000200)={0x4, 0x100000001, 0x1, 0x6f710ea}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r0}], 0x2c, 0xffffffffffbffff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) 131.981958ms ago: executing program 5 (id=11346): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) 130.336038ms ago: executing program 6 (id=11347): socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x111000, 0x42) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0xfffffffe, 0xff, "0062ba7d82000000000000000000f7ffffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x400, 0x5, 0x0, 0x0, 0x18, "b40f58e14354484fcce34fe10cb81aca035a5f"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 108.406508ms ago: executing program 4 (id=11348): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) acct(&(0x7f00000001c0)='./file0\x00') (fail_nth: 7) 83.679859ms ago: executing program 5 (id=11349): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x90) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886400004000633377fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu<\"0\t&&') 27.248329ms ago: executing program 4 (id=11350): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00', 0x6, r1) 21.08439ms ago: executing program 4 (id=11351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 19.43055ms ago: executing program 5 (id=11352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) socket$igmp6(0xa, 0x3, 0x3a) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000061b3000000000400000007000000"], 0x10}, 0x0) 0s ago: executing program 4 (id=11353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmctl$SHM_LOCK(0x0, 0xb) kernel console output (not intermixed with test programs): "syz.3.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 406.249889][T28822] audit: out of memory in audit_log_start [ 406.315182][T28825] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 406.316635][ T29] audit: type=1326 audit(2000000310.350:34250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 406.538809][ T29] audit: type=1326 audit(2000000310.350:34251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 406.562894][ T29] audit: type=1326 audit(2000000310.350:34252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 406.564882][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 406.586603][ T29] audit: type=1326 audit(2000000310.350:34253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28821 comm="syz.3.10014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 406.642283][T28823] macvlan1: entered promiscuous mode [ 406.767953][T28823] ipvlan0: entered promiscuous mode [ 406.783450][T28823] ipvlan0: left promiscuous mode [ 406.795208][T28823] macvlan1: left promiscuous mode [ 406.795960][T28853] SELinux: ebitmap: truncated map [ 406.810134][T28853] SELinux: failed to load policy [ 406.884552][T28833] bond6: entered promiscuous mode [ 406.889823][T28833] 8021q: adding VLAN 0 to HW filter on device bond6 [ 406.921590][T28849] bond15: entered promiscuous mode [ 406.942910][T28849] 8021q: adding VLAN 0 to HW filter on device bond15 [ 407.070064][T28872] SELinux: ebitmap: truncated map [ 407.075934][T28872] SELinux: failed to load policy [ 407.085638][T28876] validate_nla: 3 callbacks suppressed [ 407.085652][T28876] netlink: 'syz.6.10033': attribute type 10 has an invalid length. [ 407.172115][T28888] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 407.181729][T28889] netlink: 'syz.4.10039': attribute type 1 has an invalid length. [ 407.232980][T28889] bond7: entered promiscuous mode [ 407.240865][T28889] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.392191][T13491] Process accounting resumed [ 407.405015][T28911] vlan2: entered allmulticast mode [ 407.535844][T28922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10052'. [ 407.550737][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10052'. [ 407.604865][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 407.630451][T28930] bpf: Bad value for 'mode' [ 407.794278][T13480] Process accounting resumed [ 407.913806][T28955] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10065'. [ 407.923396][T28955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10065'. [ 407.940186][T28956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10062'. [ 407.950435][T28958] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 408.073883][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10071'. [ 408.154725][T28980] tipc: Enabling of bearer rejected, failed to enable media [ 408.213169][T28983] SELinux: ebitmap: truncated map [ 408.219521][T28983] SELinux: failed to load policy [ 408.507684][T28997] SELinux: ebitmap: truncated map [ 408.513374][T28997] SELinux: failed to load policy [ 408.603133][T29005] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 408.645294][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 408.666652][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10084'. [ 409.249967][T29054] netlink: 'syz.5.10105': attribute type 1 has an invalid length. [ 409.270206][T29054] bond1: entered promiscuous mode [ 409.281776][T29054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.674916][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 409.776015][T29082] ALSA: seq fatal error: cannot create timer (-19) [ 409.822541][T29085] macvlan1: entered promiscuous mode [ 409.850277][T29085] ipvlan0: entered promiscuous mode [ 409.868939][T29094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10118'. [ 409.884242][T29085] ipvlan0: left promiscuous mode [ 409.892034][T29085] macvlan1: left promiscuous mode [ 409.935157][T29089] vlan2: entered allmulticast mode [ 410.051964][T29096] tipc: Enabling of bearer rejected, failed to enable media [ 410.091279][T29102] netlink: 'syz.6.10121': attribute type 1 has an invalid length. [ 410.099337][T29102] netlink: 'syz.6.10121': attribute type 2 has an invalid length. [ 410.113858][T29104] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.166834][T29104] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.247829][T29104] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.306618][T29104] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.321613][T29121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10129'. [ 410.373272][T29104] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.385767][T29104] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.399476][T29104] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.412359][T29104] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.474277][T29125] netlink: 'syz.6.10131': attribute type 10 has an invalid length. [ 410.508571][T29130] vlan2: entered allmulticast mode [ 410.590740][T29142] bpf: Bad value for 'mode' [ 410.724868][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 410.739230][T29154] netlink: 'syz.6.10144': attribute type 10 has an invalid length. [ 410.755818][T29152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10143'. [ 410.815181][T29167] FAULT_INJECTION: forcing a failure. [ 410.815181][T29167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.828436][T29167] CPU: 1 UID: 0 PID: 29167 Comm: syz.2.10147 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 410.828481][T29167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 410.828496][T29167] Call Trace: [ 410.828503][T29167] [ 410.828512][T29167] dump_stack_lvl+0xf6/0x150 [ 410.828540][T29167] dump_stack+0x15/0x1a [ 410.828561][T29167] should_fail_ex+0x261/0x270 [ 410.828639][T29167] should_fail+0xb/0x10 [ 410.828667][T29167] should_fail_usercopy+0x1a/0x20 [ 410.828762][T29167] _copy_from_user+0x1c/0xa0 [ 410.828795][T29167] snd_seq_event_dup+0x346/0x4c0 [ 410.828819][T29167] snd_seq_client_enqueue_event+0x1f3/0x2b0 [ 410.828872][T29167] snd_seq_write+0x408/0x530 [ 410.828909][T29167] ? __pfx_snd_seq_write+0x10/0x10 [ 410.829007][T29167] vfs_write+0x295/0x950 [ 410.829035][T29167] ? putname+0xe1/0x100 [ 410.829056][T29167] ? __fget_files+0x186/0x1c0 [ 410.829086][T29167] ksys_write+0xeb/0x1b0 [ 410.829158][T29167] __x64_sys_write+0x42/0x50 [ 410.829192][T29167] x64_sys_call+0x2a45/0x2e10 [ 410.829219][T29167] do_syscall_64+0xc9/0x1c0 [ 410.829254][T29167] ? clear_bhb_loop+0x25/0x80 [ 410.829315][T29167] ? clear_bhb_loop+0x25/0x80 [ 410.829401][T29167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.829441][T29167] RIP: 0033:0x7fac9cbad169 [ 410.829459][T29167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.829481][T29167] RSP: 002b:00007fac9b20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.829503][T29167] RAX: ffffffffffffffda RBX: 00007fac9cdc5fa0 RCX: 00007fac9cbad169 [ 410.829518][T29167] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 410.829532][T29167] RBP: 00007fac9b20f090 R08: 0000000000000000 R09: 0000000000000000 [ 410.829599][T29167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.829614][T29167] R13: 0000000000000000 R14: 00007fac9cdc5fa0 R15: 00007ffcf5c19978 [ 410.829634][T29167] [ 411.064111][T29172] tipc: Enabling of bearer rejected, failed to enable media [ 411.106126][T29146] chnl_net:caif_netlink_parms(): no params data found [ 411.206214][T29177] macvlan1: entered promiscuous mode [ 411.217020][T29177] ipvlan0: entered promiscuous mode [ 411.229263][T29177] ipvlan0: left promiscuous mode [ 411.234890][T29177] macvlan1: left promiscuous mode [ 411.302850][T29146] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.310101][T29146] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.317483][T29146] bridge_slave_0: entered allmulticast mode [ 411.325820][T29146] bridge_slave_0: entered promiscuous mode [ 411.327976][T29146] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.328013][T29146] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.328308][T29146] bridge_slave_1: entered allmulticast mode [ 411.328974][T29146] bridge_slave_1: entered promiscuous mode [ 411.411926][T29201] netlink: 'syz.2.10158': attribute type 10 has an invalid length. [ 411.423130][T29146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.462960][T29146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.492595][T29146] team0: Port device team_slave_0 added [ 411.511067][T29146] team0: Port device team_slave_1 added [ 411.545719][T29146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.552703][T29146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.578671][T29146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.584881][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 411.584901][ T29] audit: type=1326 audit(2000000315.720:34548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.590460][T29146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.595395][ T29] audit: type=1326 audit(2000000315.720:34549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.595431][ T29] audit: type=1326 audit(2000000315.720:34550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.595519][ T29] audit: type=1326 audit(2000000315.720:34551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.595549][ T29] audit: type=1326 audit(2000000315.720:34552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.619217][T29146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.626169][ T29] audit: type=1326 audit(2000000315.720:34553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.649866][T29146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.724213][T29217] netlink: 'syz.2.10165': attribute type 1 has an invalid length. [ 411.747210][ T29] audit: type=1326 audit(2000000315.720:34554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29211 comm="syz.4.10163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.774849][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 411.839202][T29146] hsr_slave_0: entered promiscuous mode [ 411.849452][T29146] hsr_slave_1: entered promiscuous mode [ 411.853458][ T29] audit: type=1326 audit(2000000316.020:34555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.4.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.857730][T29146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.884256][ T29] audit: type=1326 audit(2000000316.060:34556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.4.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.910262][ T29] audit: type=1326 audit(2000000316.060:34557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.4.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 411.942848][T29146] Cannot create hsr debugfs directory [ 411.966309][T29217] bond5: entered promiscuous mode [ 411.971633][T29217] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.362388][T29146] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.521204][T29249] bpf: Bad value for 'mode' [ 412.558381][T29146] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.572501][T29251] tipc: Enabling of bearer rejected, failed to enable media [ 412.607255][T29146] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.649576][T29263] netlink: 'syz.4.10181': attribute type 1 has an invalid length. [ 412.679623][T29266] __nla_validate_parse: 2 callbacks suppressed [ 412.679649][T29266] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10179'. [ 412.684814][T29263] bond8: entered promiscuous mode [ 412.700168][T29263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 412.722159][T29146] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.794922][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 412.862984][T29285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10186'. [ 412.923905][T29298] netlink: 'syz.3.10191': attribute type 1 has an invalid length. [ 412.955251][T29298] bond8: entered promiscuous mode [ 412.960538][T29298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 412.963014][T29303] netlink: 'syz.2.10193': attribute type 1 has an invalid length. [ 412.991468][T29303] bond6: entered promiscuous mode [ 412.996788][T29303] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.500234][T29319] tipc: Enabling of bearer rejected, failed to enable media [ 413.645321][T29324] SELinux: ebitmap: truncated map [ 413.651410][T29324] SELinux: failed to load policy [ 413.743640][T29341] netlink: 'syz.4.10205': attribute type 1 has an invalid length. [ 413.764818][T29341] bond9: entered promiscuous mode [ 413.770085][T29341] 8021q: adding VLAN 0 to HW filter on device bond9 [ 413.834884][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 413.880299][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10206'. [ 414.025423][T29355] bpf: Bad value for 'mode' [ 414.138560][T29371] tipc: Enabling of bearer rejected, failed to enable media [ 414.182267][T29377] netlink: 'syz.2.10220': attribute type 1 has an invalid length. [ 414.220119][T29377] bond7: entered promiscuous mode [ 414.225452][T29377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.228033][T29382] bpf: Bad value for 'mode' [ 414.295306][T29388] vlan2: entered allmulticast mode [ 414.427769][T29399] tipc: Enabling of bearer rejected, failed to enable media [ 414.621160][T29406] netlink: 'syz.6.10232': attribute type 10 has an invalid length. [ 414.742001][T29408] netlink: 'syz.4.10233': attribute type 1 has an invalid length. [ 414.763893][T29410] bpf: Bad value for 'mode' [ 414.791968][T29408] bond10: entered promiscuous mode [ 414.801285][T29408] 8021q: adding VLAN 0 to HW filter on device bond10 [ 414.865735][T29417] vlan2: entered allmulticast mode [ 414.884886][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 414.930301][T29426] tipc: Enabling of bearer rejected, failed to enable media [ 415.023596][T29441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10242'. [ 415.041147][T29443] netlink: 'syz.3.10248': attribute type 1 has an invalid length. [ 415.056188][T29443] bond9: entered promiscuous mode [ 415.061569][T29443] 8021q: adding VLAN 0 to HW filter on device bond9 [ 415.131463][T29452] vlan2: entered allmulticast mode [ 415.325450][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10255'. [ 415.352503][T13471] Process accounting resumed [ 415.820166][T29475] netlink: 132 bytes leftover after parsing attributes in process `syz.6.10260'. [ 415.914865][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 416.223282][T29488] FAULT_INJECTION: forcing a failure. [ 416.223282][T29488] name failslab, interval 1, probability 0, space 0, times 0 [ 416.235972][T29488] CPU: 1 UID: 0 PID: 29488 Comm: syz.3.10265 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 416.236070][T29488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 416.236086][T29488] Call Trace: [ 416.236095][T29488] [ 416.236105][T29488] dump_stack_lvl+0xf6/0x150 [ 416.236135][T29488] dump_stack+0x15/0x1a [ 416.236156][T29488] should_fail_ex+0x261/0x270 [ 416.236194][T29488] should_failslab+0x8f/0xb0 [ 416.236233][T29488] __kmalloc_cache_noprof+0x55/0x320 [ 416.236262][T29488] ? sel_netport_sid+0x1e0/0x420 [ 416.236300][T29488] sel_netport_sid+0x1e0/0x420 [ 416.236394][T29488] selinux_socket_connect_helper+0x38b/0x4c0 [ 416.236431][T29488] selinux_sctp_bind_connect+0x1b8/0x270 [ 416.236492][T29488] security_sctp_bind_connect+0x51/0x90 [ 416.236525][T29488] sctp_getsockopt_connectx3+0x210/0x350 [ 416.236567][T29488] sctp_getsockopt+0x805/0xab0 [ 416.236589][T29488] sock_common_getsockopt+0x5b/0x70 [ 416.236609][T29488] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 416.236635][T29488] do_sock_getsockopt+0x1fc/0x290 [ 416.236728][T29488] __x64_sys_getsockopt+0x191/0x210 [ 416.236764][T29488] x64_sys_call+0x128f/0x2e10 [ 416.236792][T29488] do_syscall_64+0xc9/0x1c0 [ 416.236891][T29488] ? clear_bhb_loop+0x25/0x80 [ 416.236915][T29488] ? clear_bhb_loop+0x25/0x80 [ 416.237058][T29488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.237079][T29488] RIP: 0033:0x7f1a3ea0d169 [ 416.237095][T29488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.237117][T29488] RSP: 002b:00007f1a3d077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 416.237136][T29488] RAX: ffffffffffffffda RBX: 00007f1a3ec25fa0 RCX: 00007f1a3ea0d169 [ 416.237149][T29488] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 416.237160][T29488] RBP: 00007f1a3d077090 R08: 0000200000000180 R09: 0000000000000000 [ 416.237172][T29488] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.237225][T29488] R13: 0000000000000000 R14: 00007f1a3ec25fa0 R15: 00007ffde7aea248 [ 416.237247][T29488] [ 416.501175][T29146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.517998][T29146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.534905][T29146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.545330][T29146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.564007][T29500] netlink: 'syz.2.10271': attribute type 10 has an invalid length. [ 416.579489][T29502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10269'. [ 416.640140][T29146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.662704][T29146] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.676828][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.683925][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.755193][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.762411][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.788215][T29146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 416.798701][T29146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.815764][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10274'. [ 416.866961][T29146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.954869][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 417.003249][T29146] veth0_vlan: entered promiscuous mode [ 417.012327][T29146] veth1_vlan: entered promiscuous mode [ 417.038237][T29146] veth0_macvtap: entered promiscuous mode [ 417.047894][T29146] veth1_macvtap: entered promiscuous mode [ 417.059527][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.070041][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.080591][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.091060][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.101042][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.111533][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.121502][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.132022][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.141899][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.152488][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.162350][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.172885][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.182826][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.193292][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.203310][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.213864][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.223767][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.234268][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.244147][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.254639][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.264517][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.275024][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.284864][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.295367][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.305338][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.315795][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.325643][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.336110][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.346025][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.356861][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.366830][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.377292][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.387136][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.397605][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.412918][T29146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.441596][T29539] netlink: 'syz.6.10277': attribute type 1 has an invalid length. [ 417.480106][T29539] bond18: entered promiscuous mode [ 417.488639][T29539] 8021q: adding VLAN 0 to HW filter on device bond18 [ 417.513571][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.524210][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.534108][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.544593][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.554482][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.564939][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.574842][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.585455][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.595550][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.606075][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.616092][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.626584][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.636421][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.646865][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.656774][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.667265][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.677125][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.687641][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.697473][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.707951][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.717901][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.728367][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.738277][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.748757][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.758629][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.769118][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.778994][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.789456][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.799368][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.809857][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.819752][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.830287][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.840163][T29146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.850623][T29146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.863675][T29146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.864371][T29542] netlink: 45 bytes leftover after parsing attributes in process `syz.2.10278'. [ 417.917750][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 417.917770][ T29] audit: type=1400 audit(2000000322.090:34897): avc: denied { create } for pid=29541 comm="syz.2.10278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.943900][ T29] audit: type=1400 audit(2000000322.090:34898): avc: denied { bind } for pid=29541 comm="syz.2.10278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.963529][ T29] audit: type=1400 audit(2000000322.090:34899): avc: denied { write } for pid=29541 comm="syz.2.10278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 417.994841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 418.003214][T29546] vlan2: entered allmulticast mode [ 418.021802][T29146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.030704][T29146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.039542][T29146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.048351][T29146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.107602][T29542] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10278'. [ 418.133044][ T29] audit: type=1400 audit(2000000322.300:34900): avc: denied { mounton } for pid=29146 comm="syz-executor" path="/root/syzkaller.34nhJ8/syz-tmp" dev="sda1" ino=1980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 418.157693][ T29] audit: type=1400 audit(2000000322.300:34901): avc: denied { mount } for pid=29146 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.262867][ T29] audit: type=1400 audit(2000000322.380:34902): avc: denied { mount } for pid=29146 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 418.285180][ T29] audit: type=1400 audit(2000000322.380:34903): avc: denied { mounton } for pid=29146 comm="syz-executor" path="/root/syzkaller.34nhJ8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 418.312397][ T29] audit: type=1400 audit(2000000322.380:34904): avc: denied { mounton } for pid=29146 comm="syz-executor" path="/root/syzkaller.34nhJ8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=104599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 418.324500][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10285'. [ 418.340394][ T29] audit: type=1400 audit(2000000322.380:34905): avc: denied { unmount } for pid=29146 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 418.340429][ T29] audit: type=1400 audit(2000000322.400:34906): avc: denied { mounton } for pid=29146 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 418.367271][T29566] ALSA: seq fatal error: cannot create timer (-19) [ 418.465824][T29574] netlink: 'syz.5.10287': attribute type 10 has an invalid length. [ 418.474150][T29574] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.479480][T29578] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10289'. [ 418.481380][T29574] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.506239][T29574] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.513356][T29574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.520654][T29574] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.527766][T29574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.535231][T29578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10289'. [ 418.571551][T29574] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 418.696631][T29606] ALSA: seq fatal error: cannot create timer (-19) [ 418.809472][T29613] vlan2: entered allmulticast mode [ 418.815570][T29613] bond0: entered allmulticast mode [ 418.821423][T29613] bond_slave_0: entered allmulticast mode [ 418.828393][T29613] bond_slave_1: entered allmulticast mode [ 418.835432][T29613] bridge0: entered allmulticast mode [ 418.910144][T29622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10307'. [ 418.925388][T29622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10307'. [ 419.032356][T29632] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.032972][T29634] netlink: 'syz.3.10312': attribute type 1 has an invalid length. [ 419.042782][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 419.077855][T29634] bond10: entered promiscuous mode [ 419.083817][T29634] 8021q: adding VLAN 0 to HW filter on device bond10 [ 419.099368][T29632] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.119513][T29639] ALSA: seq fatal error: cannot create timer (-19) [ 419.157333][T29645] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 419.185467][T29632] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.260389][T29632] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.319699][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10320'. [ 419.330918][T29632] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.361210][T29660] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 419.371571][T29632] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.392539][T29632] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.416677][T29632] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.490990][T29670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10324'. [ 419.536342][T29676] netlink: 'syz.6.10327': attribute type 1 has an invalid length. [ 419.570618][T29676] bond19: entered promiscuous mode [ 419.576810][T29676] 8021q: adding VLAN 0 to HW filter on device bond19 [ 419.825421][T29691] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 420.074871][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 420.142849][T29709] vlan2: entered allmulticast mode [ 420.514705][T29731] tipc: Enabling of bearer rejected, failed to enable media [ 420.563203][T29734] ref_ctr_offset mismatch. inode: 0x4e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 420.577144][T29733] SELinux: ebitmap: truncated map [ 420.585923][T29733] SELinux: failed to load policy [ 420.659386][T29746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10352'. [ 421.114841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 422.154867][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 422.254215][T29833] chnl_net:caif_netlink_parms(): no params data found [ 422.384504][T29883] netlink: 'syz.4.10397': attribute type 1 has an invalid length. [ 422.418163][T29833] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.425456][T29833] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.438518][T29833] bridge_slave_0: entered allmulticast mode [ 422.448876][T29833] bridge_slave_0: entered promiscuous mode [ 422.452900][ T3383] Process accounting resumed [ 422.456299][T29833] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.466564][T29833] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.491529][T29833] bridge_slave_1: entered allmulticast mode [ 422.505172][T29833] bridge_slave_1: entered promiscuous mode [ 422.527949][T29883] bond11: entered promiscuous mode [ 422.533273][T29883] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.564375][T29833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.587784][T29833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.634939][T29833] team0: Port device team_slave_0 added [ 422.654269][T29833] team0: Port device team_slave_1 added [ 422.719469][T29833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.726540][T29833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.752584][T29833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.766797][T29833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.773785][T29833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.799953][T29833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.853710][T29833] hsr_slave_0: entered promiscuous mode [ 422.860701][T29833] hsr_slave_1: entered promiscuous mode [ 422.867514][T29833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.884937][T29833] Cannot create hsr debugfs directory [ 422.903391][T29912] netlink: 'syz.4.10407': attribute type 10 has an invalid length. [ 422.938723][T29912] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.950254][T29916] SELinux: ebitmap: truncated map [ 422.954712][T13471] Process accounting resumed [ 422.966363][T29916] SELinux: failed to load policy [ 422.980279][T29912] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.987473][T29912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.021665][T29926] ALSA: seq fatal error: cannot create timer (-19) [ 423.063428][T29912] bridge0: entered allmulticast mode [ 423.069911][T29912] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 423.097844][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 423.097934][ T29] audit: type=1326 audit(2000000327.270:35132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29924 comm="syz.2.10412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 423.127861][ T29] audit: type=1326 audit(2000000327.270:35133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29924 comm="syz.2.10412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 423.152158][ T29] audit: type=1326 audit(2000000327.270:35134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29924 comm="syz.2.10412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 423.176056][ T29] audit: type=1326 audit(2000000327.270:35135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29924 comm="syz.2.10412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 423.194858][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 423.261075][T29934] __nla_validate_parse: 8 callbacks suppressed [ 423.261092][T29934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10416'. [ 423.277737][T29833] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.290324][T29942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10418'. [ 423.352089][T13480] Process accounting resumed [ 423.369521][T29833] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.383603][T29948] SELinux: ebitmap: truncated map [ 423.405233][T29948] SELinux: failed to load policy [ 423.411465][T29833] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.437910][ T29] audit: type=1326 audit(2000000327.610:35136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29955 comm="syz.4.10425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.461839][ T29] audit: type=1326 audit(2000000327.610:35137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29955 comm="syz.4.10425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.486410][ T29] audit: type=1326 audit(2000000327.610:35138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29955 comm="syz.4.10425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.512543][T29833] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.609948][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10429'. [ 423.685904][T29978] wg2: entered promiscuous mode [ 423.690844][T29978] wg2: entered allmulticast mode [ 423.722325][ T29] audit: type=1326 audit(2000000327.890:35139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.4.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.753066][ T29] audit: type=1326 audit(2000000327.920:35140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.4.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.777425][ T29] audit: type=1326 audit(2000000327.920:35141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29981 comm="syz.4.10434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 423.785374][T29986] netlink: 'syz.2.10436': attribute type 10 has an invalid length. [ 423.837929][T29989] netlink: 'syz.2.10437': attribute type 1 has an invalid length. [ 424.025126][T30012] netlink: 'syz.5.10447': attribute type 10 has an invalid length. [ 424.033660][T30012] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.040940][T30012] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.046432][T30014] netlink: 'syz.2.10448': attribute type 1 has an invalid length. [ 424.056403][ T2165] bond0: (slave bridge0): link status definitely down, disabling slave [ 424.114928][T30018] ALSA: seq fatal error: cannot create timer (-19) [ 424.162730][T29833] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 424.171896][T30027] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.194869][T29833] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 424.206638][T29833] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 424.215937][T29833] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 424.234860][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 424.248568][T30032] SELinux: ebitmap: truncated map [ 424.251266][T13480] Process accounting resumed [ 424.271414][T30032] SELinux: failed to load policy [ 424.332177][T30040] netlink: 'syz.4.10458': attribute type 1 has an invalid length. [ 424.454533][T30046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10460'. [ 424.477014][T29833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.499465][T29833] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.547555][ T2165] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.554674][ T2165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.572809][T30053] netlink: 'syz.4.10462': attribute type 1 has an invalid length. [ 424.653309][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.660529][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.720539][T30062] vlan2: entered allmulticast mode [ 424.769440][T13491] Process accounting resumed [ 424.840473][T30071] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.887425][T29833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.906661][T30071] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.948345][T30071] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.022129][T30071] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.038049][T30092] ALSA: seq fatal error: cannot create timer (-19) [ 425.093099][T30071] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.137299][T30071] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.160718][T30071] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.196879][T30071] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.200411][T13491] Process accounting resumed [ 425.271254][T30109] tipc: Enabling of bearer rejected, failed to enable media [ 425.280259][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 425.292061][T29833] veth0_vlan: entered promiscuous mode [ 425.348816][T29833] veth1_vlan: entered promiscuous mode [ 425.404284][T29833] veth0_macvtap: entered promiscuous mode [ 425.426925][T29833] veth1_macvtap: entered promiscuous mode [ 425.460707][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.471380][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.481380][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.491960][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.502003][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.512488][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.522503][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.533041][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.542932][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.553389][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.563608][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.567117][T30126] netlink: 'syz.4.10484': attribute type 10 has an invalid length. [ 425.574082][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.591839][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.602563][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.612419][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.622902][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.632786][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.643387][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.653259][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.663733][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.673751][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.674307][T13471] Process accounting resumed [ 425.684325][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.684348][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.684366][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.684386][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.684402][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.684417][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.750083][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.760156][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.770703][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.780560][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.791023][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.801023][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.811555][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.821518][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.832057][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.845444][T29833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.855470][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.865950][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.875851][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.886384][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.896272][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.906933][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.916799][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.927255][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.937150][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.947655][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.957577][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.968029][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.977934][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.988465][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.998382][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.008820][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.018671][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.029217][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.039106][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.049607][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.059656][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.070111][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.080067][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.090531][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.100392][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.110852][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.120702][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.131219][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.141113][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.151625][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.161632][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.172218][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.182120][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.192649][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.202557][T29833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.213099][T29833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.225378][T29833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.233033][T30126] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.252341][T30138] tipc: Enabling of bearer rejected, failed to enable media [ 426.269087][ T176] bond0: (slave bridge0): link status definitely down, disabling slave [ 426.314894][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 426.345185][T29833] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.353958][T29833] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.362787][T29833] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.371570][T29833] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.591800][T30159] macvlan1: entered promiscuous mode [ 426.645237][T30159] ipvlan0: entered promiscuous mode [ 426.685992][T30159] ipvlan0: left promiscuous mode [ 426.699159][T30169] SELinux: Context Ü is not valid (left unmapped). [ 426.699186][T30159] macvlan1: left promiscuous mode [ 426.916782][T30185] netlink: 'syz.6.10507': attribute type 1 has an invalid length. [ 427.034189][T30195] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.086788][T30199] ALSA: seq fatal error: cannot create timer (-19) [ 427.141917][T30205] macvlan1: entered promiscuous mode [ 427.152865][T30205] ipvlan0: entered promiscuous mode [ 427.161758][T30205] ipvlan0: left promiscuous mode [ 427.168402][T30205] macvlan1: left promiscuous mode [ 427.328090][T30225] netlink: 'syz.5.10522': attribute type 1 has an invalid length. [ 427.354839][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 427.384595][T30229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10518'. [ 427.411779][T30229] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 427.452268][T30233] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.500565][T30239] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.606916][T30239] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.646957][T30239] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.740035][T30239] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.992071][T30258] netlink: 'syz.6.10535': attribute type 1 has an invalid length. [ 428.001366][T13471] page_pool_release_retry() stalled pool shutdown: id 138, 1 inflight 60 sec [ 428.053584][T30261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10536'. [ 428.166249][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 428.166279][ T29] audit: type=1400 audit(2000000332.340:35335): avc: denied { accept } for pid=30273 comm="syz.3.10542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 428.304206][T13491] Process accounting resumed [ 428.356461][T30286] tipc: Enabling of bearer rejected, failed to enable media [ 428.390660][T30288] ALSA: seq fatal error: cannot create timer (-19) [ 428.397384][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 428.981191][T30307] tipc: Started in network mode [ 428.986226][T30307] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 429.001834][T30307] tipc: Enabled bearer , priority 10 [ 429.058936][T13494] Process accounting resumed [ 429.134469][ T29] audit: type=1326 audit(2000000333.300:35336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.160915][ T29] audit: type=1326 audit(2000000333.300:35337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.184742][ T29] audit: type=1326 audit(2000000333.300:35338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.208542][ T29] audit: type=1326 audit(2000000333.300:35339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.232455][ T29] audit: type=1326 audit(2000000333.300:35340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.256421][ T29] audit: type=1326 audit(2000000333.300:35341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.280228][ T29] audit: type=1326 audit(2000000333.300:35342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.304172][ T29] audit: type=1326 audit(2000000333.300:35343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.327920][ T29] audit: type=1326 audit(2000000333.300:35344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30310 comm="syz.5.10558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c921d169 code=0x7ffc0000 [ 429.415309][T30319] ALSA: seq fatal error: cannot create timer (-19) [ 429.415641][T30313] macvlan1: entered promiscuous mode [ 429.434844][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 429.461921][T30313] ipvlan0: entered promiscuous mode [ 429.493565][T30313] ipvlan0: left promiscuous mode [ 429.502285][T30313] macvlan1: left promiscuous mode [ 429.579808][T30328] netlink: 'syz.5.10564': attribute type 10 has an invalid length. [ 429.681512][T30340] ALSA: seq fatal error: cannot create timer (-19) [ 429.716887][T30347] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.871149][T30356] macvlan1: entered promiscuous mode [ 429.883955][T30356] ipvlan0: entered promiscuous mode [ 429.901719][T30356] ipvlan0: left promiscuous mode [ 429.910337][T30356] macvlan1: left promiscuous mode [ 429.973411][T30361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10578'. [ 430.015364][T13493] tipc: Node number set to 4269801488 [ 430.045353][T30239] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.067348][T30369] FAULT_INJECTION: forcing a failure. [ 430.067348][T30369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.068425][T30239] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.080813][T30369] CPU: 1 UID: 0 PID: 30369 Comm: syz.6.10581 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 430.080841][T30369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.080861][T30369] Call Trace: [ 430.080868][T30369] [ 430.080878][T30369] dump_stack_lvl+0xf6/0x150 [ 430.080957][T30369] dump_stack+0x15/0x1a [ 430.080980][T30369] should_fail_ex+0x261/0x270 [ 430.081014][T30369] should_fail+0xb/0x10 [ 430.081046][T30369] should_fail_usercopy+0x1a/0x20 [ 430.081136][T30369] _copy_from_user+0x1c/0xa0 [ 430.081178][T30369] move_addr_to_kernel+0x8c/0x130 [ 430.081235][T30369] __sys_sendto+0x130/0x230 [ 430.081277][T30369] __x64_sys_sendto+0x78/0x90 [ 430.081305][T30369] x64_sys_call+0x2bcb/0x2e10 [ 430.081330][T30369] do_syscall_64+0xc9/0x1c0 [ 430.081442][T30369] ? clear_bhb_loop+0x25/0x80 [ 430.081478][T30369] ? clear_bhb_loop+0x25/0x80 [ 430.081507][T30369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.081610][T30369] RIP: 0033:0x7f33e238d169 [ 430.081631][T30369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.081675][T30369] RSP: 002b:00007f33e09ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.081699][T30369] RAX: ffffffffffffffda RBX: 00007f33e25a5fa0 RCX: 00007f33e238d169 [ 430.081715][T30369] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 430.081732][T30369] RBP: 00007f33e09ef090 R08: 0000200000000140 R09: 000000000000001c [ 430.081766][T30369] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 430.081783][T30369] R13: 0000000000000000 R14: 00007f33e25a5fa0 R15: 00007fffe5970ef8 [ 430.081807][T30369] [ 430.139059][T30372] netlink: 'syz.6.10582': attribute type 1 has an invalid length. [ 430.154997][T30239] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.158721][T30239] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.332793][T30379] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 430.343182][T30382] FAULT_INJECTION: forcing a failure. [ 430.343182][T30382] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.356483][T30382] CPU: 0 UID: 0 PID: 30382 Comm: syz.4.10583 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 430.356528][T30382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.356563][T30382] Call Trace: [ 430.356571][T30382] [ 430.356579][T30382] dump_stack_lvl+0xf6/0x150 [ 430.356631][T30382] dump_stack+0x15/0x1a [ 430.356652][T30382] should_fail_ex+0x261/0x270 [ 430.356683][T30382] should_fail_alloc_page+0xfd/0x110 [ 430.356718][T30382] __alloc_frozen_pages_noprof+0x11d/0x360 [ 430.356783][T30382] alloc_pages_mpol+0xb6/0x260 [ 430.356812][T30382] vma_alloc_folio_noprof+0x19c/0x300 [ 430.356840][T30382] handle_mm_fault+0xdda/0x2e80 [ 430.356874][T30382] ? mas_walk+0x204/0x320 [ 430.356923][T30382] ? __rcu_read_unlock+0x4e/0x70 [ 430.357033][T30382] exc_page_fault+0x3b9/0x6a0 [ 430.357062][T30382] asm_exc_page_fault+0x26/0x30 [ 430.357083][T30382] RIP: 0033:0x7fd90c32fbe3 [ 430.357098][T30382] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 430.357117][T30382] RSP: 002b:00007fd90aace4a0 EFLAGS: 00010202 [ 430.357171][T30382] RAX: 0000000000004000 RBX: 00007fd90aace540 RCX: 00007fd9026af000 [ 430.357185][T30382] RDX: 00007fd90aace6e0 RSI: 0000000000000001 RDI: 00007fd90aace5e0 [ 430.357197][T30382] RBP: 00000000000000a4 R08: 0000000000000008 R09: 00000000000000ba [ 430.357209][T30382] R10: 00000000000000c6 R11: 00007fd90aace540 R12: 0000000000000001 [ 430.357221][T30382] R13: 00007fd90c5093e0 R14: 00000000000000f8 R15: 00007fd90aace5e0 [ 430.357239][T30382] [ 430.357250][T30382] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 430.378732][T30379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10584'. [ 430.413182][T30384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10586'. [ 430.474847][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 430.510307][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10588'. [ 430.602027][T30390] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10588'. [ 430.657756][T30406] netlink: 'syz.4.10594': attribute type 1 has an invalid length. [ 430.671971][T30406] bond12: entered promiscuous mode [ 430.677579][T30406] 8021q: adding VLAN 0 to HW filter on device bond12 [ 430.717428][T30403] vlan2: entered allmulticast mode [ 430.766434][T30411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10589'. [ 430.832275][T30411] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 430.850274][T30419] FAULT_INJECTION: forcing a failure. [ 430.850274][T30419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.863465][T30419] CPU: 0 UID: 0 PID: 30419 Comm: syz.3.10597 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 430.863498][T30419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 430.863514][T30419] Call Trace: [ 430.863521][T30419] [ 430.863528][T30419] dump_stack_lvl+0xf6/0x150 [ 430.863615][T30419] dump_stack+0x15/0x1a [ 430.863634][T30419] should_fail_ex+0x261/0x270 [ 430.863661][T30419] should_fail+0xb/0x10 [ 430.863690][T30419] should_fail_usercopy+0x1a/0x20 [ 430.863792][T30419] strncpy_from_user+0x25/0x230 [ 430.863817][T30419] ? getname_flags+0x81/0x3b0 [ 430.863847][T30419] getname_flags+0xb0/0x3b0 [ 430.863941][T30419] user_path_at+0x26/0x140 [ 430.863965][T30419] __se_sys_mount+0x25e/0x2e0 [ 430.864003][T30419] __x64_sys_mount+0x67/0x80 [ 430.864036][T30419] x64_sys_call+0xd11/0x2e10 [ 430.864116][T30419] do_syscall_64+0xc9/0x1c0 [ 430.864152][T30419] ? clear_bhb_loop+0x25/0x80 [ 430.864176][T30419] ? clear_bhb_loop+0x25/0x80 [ 430.864199][T30419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.864243][T30419] RIP: 0033:0x7f1a3ea0d169 [ 430.864262][T30419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.864281][T30419] RSP: 002b:00007f1a3d077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.864299][T30419] RAX: ffffffffffffffda RBX: 00007f1a3ec25fa0 RCX: 00007f1a3ea0d169 [ 430.864311][T30419] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 430.864323][T30419] RBP: 00007f1a3d077090 R08: 0000200000000a40 R09: 0000000000000000 [ 430.864353][T30419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.864367][T30419] R13: 0000000000000000 R14: 00007f1a3ec25fa0 R15: 00007ffde7aea248 [ 430.864386][T30419] [ 431.082442][T30421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 431.515088][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 431.541350][T30447] vlan2: entered allmulticast mode [ 431.612493][T30454] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10611'. [ 431.623335][T30457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10610'. [ 431.633093][T30454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10611'. [ 431.639494][T30456] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.656342][T30456] bridge_slave_1 (unregistering): left allmulticast mode [ 431.663443][T30456] bridge_slave_1 (unregistering): left promiscuous mode [ 431.670472][T30456] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.731010][T30459] macvlan1: entered promiscuous mode [ 431.741837][T30459] ipvlan0: entered promiscuous mode [ 431.765914][T30459] ipvlan0: left promiscuous mode [ 431.779603][T30465] netlink: 'syz.6.10615': attribute type 1 has an invalid length. [ 431.786278][T30459] macvlan1: left promiscuous mode [ 431.814669][T30465] bond1: entered promiscuous mode [ 431.819983][T30465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.142460][T30497] netlink: 'syz.3.10626': attribute type 1 has an invalid length. [ 432.164142][T30497] bond11: entered promiscuous mode [ 432.169690][T30497] 8021q: adding VLAN 0 to HW filter on device bond11 [ 432.288337][T30506] macvlan1: entered promiscuous mode [ 432.301406][T30506] ipvlan0: entered promiscuous mode [ 432.312028][T30506] ipvlan0: left promiscuous mode [ 432.321870][T30506] macvlan1: left promiscuous mode [ 432.424962][T13491] Process accounting resumed [ 432.554840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 432.562714][T30528] netlink: 'syz.5.10637': attribute type 10 has an invalid length. [ 432.602500][T30532] netlink: 'syz.5.10639': attribute type 1 has an invalid length. [ 432.620455][T30532] bond1: entered promiscuous mode [ 432.625835][T30532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.713373][T30547] ALSA: seq fatal error: cannot create timer (-19) [ 432.977979][T30574] FAULT_INJECTION: forcing a failure. [ 432.977979][T30574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.991159][T30574] CPU: 0 UID: 0 PID: 30574 Comm: syz.6.10654 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 432.991193][T30574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.991206][T30574] Call Trace: [ 432.991213][T30574] [ 432.991221][T30574] dump_stack_lvl+0xf6/0x150 [ 432.991314][T30574] dump_stack+0x15/0x1a [ 432.991338][T30574] should_fail_ex+0x261/0x270 [ 432.991370][T30574] should_fail+0xb/0x10 [ 432.991399][T30574] should_fail_usercopy+0x1a/0x20 [ 432.991476][T30574] _copy_to_user+0x20/0xa0 [ 432.991514][T30574] copy_regset_to_user+0xfe/0x180 [ 432.991547][T30574] ptrace_regset+0x1b6/0x270 [ 432.991639][T30574] ptrace_request+0xd6a/0x1560 [ 432.991667][T30574] ? proc_fail_nth_write+0x12d/0x160 [ 432.991723][T30574] ? task_rq_lock+0x48/0xd0 [ 432.991760][T30574] ? wait_task_inactive+0x104/0x220 [ 432.991839][T30574] arch_ptrace+0x2ce/0x400 [ 432.991864][T30574] __se_sys_ptrace+0xf7/0x2b0 [ 432.991894][T30574] __x64_sys_ptrace+0x55/0x70 [ 432.991921][T30574] x64_sys_call+0x1fd0/0x2e10 [ 432.991954][T30574] do_syscall_64+0xc9/0x1c0 [ 432.991987][T30574] ? clear_bhb_loop+0x25/0x80 [ 432.992010][T30574] ? clear_bhb_loop+0x25/0x80 [ 432.992065][T30574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.992092][T30574] RIP: 0033:0x7f33e238d169 [ 432.992108][T30574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.992126][T30574] RSP: 002b:00007f33e09ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 432.992145][T30574] RAX: ffffffffffffffda RBX: 00007f33e25a5fa0 RCX: 00007f33e238d169 [ 432.992157][T30574] RDX: 0000000000000002 RSI: 0000000000000076 RDI: 0000000000004204 [ 432.992170][T30574] RBP: 00007f33e09ef090 R08: 0000000000000000 R09: 0000000000000000 [ 432.992191][T30574] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 432.992204][T30574] R13: 0000000000000000 R14: 00007f33e25a5fa0 R15: 00007fffe5970ef8 [ 432.992223][T30574] [ 433.214050][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 433.214066][ T29] audit: type=1326 audit(2000000337.380:35742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.244209][ T29] audit: type=1326 audit(2000000337.380:35743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.288276][ T29] audit: type=1326 audit(2000000337.400:35744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.312075][ T29] audit: type=1326 audit(2000000337.400:35745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.335919][ T29] audit: type=1326 audit(2000000337.400:35746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.359671][ T29] audit: type=1326 audit(2000000337.400:35747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.383351][ T29] audit: type=1326 audit(2000000337.400:35748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.407142][ T29] audit: type=1326 audit(2000000337.400:35749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.430916][ T29] audit: type=1326 audit(2000000337.400:35750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.454498][ T29] audit: type=1326 audit(2000000337.400:35751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30569 comm="syz.4.10653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 433.500915][T30578] bridge_slave_1 (unregistering): left allmulticast mode [ 433.508051][T30578] bridge_slave_1 (unregistering): left promiscuous mode [ 433.515197][T30578] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.595751][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 433.619697][T30598] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.082757][T30630] netlink: 'syz.3.10675': attribute type 10 has an invalid length. [ 434.091177][T30630] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.124448][ T37] bond0: (slave bridge0): link status definitely down, disabling slave [ 434.145666][T30635] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.154862][ T31] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 434.326882][T30643] tipc: Enabling of bearer rejected, failed to enable media [ 434.357806][T30648] vlan2: entered allmulticast mode [ 434.569768][T30664] netlink: 'syz.3.10689': attribute type 1 has an invalid length. [ 434.599735][T30664] bond12: entered promiscuous mode [ 434.605359][T30664] 8021q: adding VLAN 0 to HW filter on device bond12 [ 434.634840][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.720146][T30671] tipc: Enabling of bearer rejected, failed to enable media [ 434.743545][T30681] FAULT_INJECTION: forcing a failure. [ 434.743545][T30681] name failslab, interval 1, probability 0, space 0, times 0 [ 434.756280][T30681] CPU: 0 UID: 0 PID: 30681 Comm: syz.5.10695 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 434.756311][T30681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.756327][T30681] Call Trace: [ 434.756352][T30681] [ 434.756360][T30681] dump_stack_lvl+0xf6/0x150 [ 434.756383][T30681] dump_stack+0x15/0x1a [ 434.756401][T30681] should_fail_ex+0x261/0x270 [ 434.756433][T30681] should_failslab+0x8f/0xb0 [ 434.756469][T30681] __kmalloc_cache_noprof+0x55/0x320 [ 434.756537][T30681] ? v9fs_mount+0x56/0x580 [ 434.756570][T30681] v9fs_mount+0x56/0x580 [ 434.756636][T30681] ? __pfx_v9fs_mount+0x10/0x10 [ 434.756667][T30681] legacy_get_tree+0x77/0xd0 [ 434.756708][T30681] vfs_get_tree+0x56/0x1e0 [ 434.756760][T30681] do_new_mount+0x246/0x6b0 [ 434.756812][T30681] path_mount+0x49b/0xb30 [ 434.756861][T30681] __se_sys_mount+0x28f/0x2e0 [ 434.756923][T30681] __x64_sys_mount+0x67/0x80 [ 434.756957][T30681] x64_sys_call+0xd11/0x2e10 [ 434.756979][T30681] do_syscall_64+0xc9/0x1c0 [ 434.757089][T30681] ? clear_bhb_loop+0x25/0x80 [ 434.757116][T30681] ? clear_bhb_loop+0x25/0x80 [ 434.757143][T30681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.757235][T30681] RIP: 0033:0x7f67c921d169 [ 434.757305][T30681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.757327][T30681] RSP: 002b:00007f67c787f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.757351][T30681] RAX: ffffffffffffffda RBX: 00007f67c9435fa0 RCX: 00007f67c921d169 [ 434.757366][T30681] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 434.757381][T30681] RBP: 00007f67c787f090 R08: 0000200000000400 R09: 0000000000000000 [ 434.757429][T30681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.757441][T30681] R13: 0000000000000000 R14: 00007f67c9435fa0 R15: 00007ffe99af4838 [ 434.757463][T30681] [ 435.121010][T30689] macvlan1: entered promiscuous mode [ 435.175424][T30695] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 435.189703][T30689] ipvlan0: entered promiscuous mode [ 435.243743][T30689] ipvlan0: left promiscuous mode [ 435.263554][T30689] macvlan1: left promiscuous mode [ 435.295453][T30702] vlan2: entered allmulticast mode [ 435.468695][T30720] netlink: 'syz.6.10709': attribute type 10 has an invalid length. [ 435.480392][T30720] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.491006][T30720] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.498097][T30720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.509358][T30720] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 435.563547][T30725] ALSA: seq fatal error: cannot create timer (-19) [ 435.674830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 435.875343][T30755] netlink: 'syz.3.10723': attribute type 10 has an invalid length. [ 436.191391][T30761] __nla_validate_parse: 9 callbacks suppressed [ 436.191412][T30761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10725'. [ 436.304540][T30761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.714888][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 436.919017][T30809] vlan2: entered allmulticast mode [ 436.956768][T30806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10744'. [ 437.208081][T30838] netlink: 'syz.6.10756': attribute type 10 has an invalid length. [ 437.231153][T30838] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.275884][ T176] bond0: (slave bridge0): link status definitely down, disabling slave [ 437.334417][T30855] netlink: 'syz.6.10762': attribute type 1 has an invalid length. [ 437.358557][T30855] bond2: entered promiscuous mode [ 437.363960][T30855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 437.473907][T30864] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.531501][T30873] netlink: 'syz.6.10768': attribute type 1 has an invalid length. [ 437.558164][T30873] bond3: entered promiscuous mode [ 437.563448][T30873] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.754825][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 437.772272][T30898] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.814842][T30901] ALSA: seq fatal error: cannot create timer (-19) [ 437.899908][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10782'. [ 438.013888][T30926] ALSA: seq fatal error: cannot create timer (-19) [ 438.023020][T30929] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 438.096422][T30938] netlink: 'syz.5.10793': attribute type 10 has an invalid length. [ 438.125352][T30943] tipc: Enabling of bearer rejected, failed to enable media [ 438.247323][T30950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10798'. [ 438.300049][T30967] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 438.307703][T30972] netlink: 'syz.4.10807': attribute type 10 has an invalid length. [ 438.329575][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 438.329595][ T29] audit: type=1326 audit(2000000342.500:36023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30965 comm="syz.6.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e238d169 code=0x7ffc0000 [ 438.372020][T30975] FAULT_INJECTION: forcing a failure. [ 438.372020][T30975] name failslab, interval 1, probability 0, space 0, times 0 [ 438.382701][ T29] audit: type=1326 audit(2000000342.500:36024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30965 comm="syz.6.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e238d169 code=0x7ffc0000 [ 438.384835][T30975] CPU: 0 UID: 0 PID: 30975 Comm: syz.5.10808 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 438.384871][T30975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.384886][T30975] Call Trace: [ 438.384896][T30975] [ 438.384905][T30975] dump_stack_lvl+0xf6/0x150 [ 438.384936][T30975] dump_stack+0x15/0x1a [ 438.384959][T30975] should_fail_ex+0x261/0x270 [ 438.385063][T30975] should_failslab+0x8f/0xb0 [ 438.385114][T30975] kmem_cache_alloc_noprof+0x59/0x340 [ 438.385142][T30975] ? getname_flags+0x81/0x3b0 [ 438.385171][T30975] getname_flags+0x81/0x3b0 [ 438.385196][T30975] __se_sys_newstat+0x4c/0x280 [ 438.385307][T30975] ? fput+0x99/0xd0 [ 438.385334][T30975] ? ksys_write+0x180/0x1b0 [ 438.385373][T30975] __x64_sys_newstat+0x31/0x40 [ 438.385400][T30975] x64_sys_call+0x6f3/0x2e10 [ 438.385428][T30975] do_syscall_64+0xc9/0x1c0 [ 438.385568][T30975] ? clear_bhb_loop+0x25/0x80 [ 438.385646][T30975] ? clear_bhb_loop+0x25/0x80 [ 438.385674][T30975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.385701][T30975] RIP: 0033:0x7f67c921d169 [ 438.385720][T30975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.385743][T30975] RSP: 002b:00007f67c787f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 438.385768][T30975] RAX: ffffffffffffffda RBX: 00007f67c9435fa0 RCX: 00007f67c921d169 [ 438.385784][T30975] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000000 [ 438.385872][T30975] RBP: 00007f67c787f090 R08: 0000000000000000 R09: 0000000000000000 [ 438.385887][T30975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.385903][T30975] R13: 0000000000000000 R14: 00007f67c9435fa0 R15: 00007ffe99af4838 [ 438.385926][T30975] [ 438.445638][T30979] tipc: Enabling of bearer rejected, failed to enable media [ 438.446268][ T29] audit: type=1326 audit(2000000342.500:36025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30965 comm="syz.6.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f33e238d169 code=0x7ffc0000 [ 438.621780][ T29] audit: type=1326 audit(2000000342.500:36026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30965 comm="syz.6.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e238d169 code=0x7ffc0000 [ 438.621817][ T29] audit: type=1326 audit(2000000342.500:36027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30965 comm="syz.6.10806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33e238d169 code=0x7ffc0000 [ 438.673190][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10809'. [ 438.794821][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 438.825953][T30986] macvlan1: entered promiscuous mode [ 438.839073][ T29] audit: type=1326 audit(2000000343.010:36028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.10815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 438.862873][ T29] audit: type=1326 audit(2000000343.010:36029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.10815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 438.890840][ T29] audit: type=1326 audit(2000000343.070:36030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.10815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 438.907670][T30986] ipvlan0: entered promiscuous mode [ 438.914487][ T29] audit: type=1326 audit(2000000343.070:36031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.10815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 438.914653][ T29] audit: type=1326 audit(2000000343.070:36032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30991 comm="syz.2.10815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 438.923686][T13479] Process accounting resumed [ 438.986901][T30986] ipvlan0: left promiscuous mode [ 439.000402][T30986] macvlan1: left promiscuous mode [ 439.036544][T31000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10818'. [ 439.065003][T31004] netlink: 'syz.3.10819': attribute type 10 has an invalid length. [ 439.109626][T31008] tipc: Enabling of bearer rejected, failed to enable media [ 439.306152][T13491] Process accounting resumed [ 439.397577][T31036] ALSA: seq fatal error: cannot create timer (-19) [ 439.640775][T31050] FAULT_INJECTION: forcing a failure. [ 439.640775][T31050] name failslab, interval 1, probability 0, space 0, times 0 [ 439.654593][T31050] CPU: 1 UID: 0 PID: 31050 Comm: syz.2.10839 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 439.654627][T31050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 439.654696][T31050] Call Trace: [ 439.654702][T31050] [ 439.654709][T31050] dump_stack_lvl+0xf6/0x150 [ 439.654733][T31050] dump_stack+0x15/0x1a [ 439.654818][T31050] should_fail_ex+0x261/0x270 [ 439.654945][T31050] should_failslab+0x8f/0xb0 [ 439.655042][T31050] kmem_cache_alloc_noprof+0x59/0x340 [ 439.655066][T31050] ? security_inode_alloc+0x37/0x100 [ 439.655143][T31050] security_inode_alloc+0x37/0x100 [ 439.655174][T31050] inode_init_always_gfp+0x4a2/0x4f0 [ 439.655210][T31050] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 439.655232][T31050] alloc_inode+0x86/0x170 [ 439.655273][T31050] new_inode+0x1e/0xe0 [ 439.655293][T31050] shmem_get_inode+0x24e/0x730 [ 439.655331][T31050] __shmem_file_setup+0x127/0x1f0 [ 439.655364][T31050] shmem_file_setup+0x3b/0x50 [ 439.655418][T31050] __se_sys_memfd_create+0x2e1/0x5a0 [ 439.655448][T31050] __x64_sys_memfd_create+0x31/0x40 [ 439.655480][T31050] x64_sys_call+0x1163/0x2e10 [ 439.655503][T31050] do_syscall_64+0xc9/0x1c0 [ 439.655534][T31050] ? clear_bhb_loop+0x25/0x80 [ 439.655608][T31050] ? clear_bhb_loop+0x25/0x80 [ 439.655630][T31050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.655653][T31050] RIP: 0033:0x7fac9cbad169 [ 439.655670][T31050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.655689][T31050] RSP: 002b:00007fac9b20ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 439.655709][T31050] RAX: ffffffffffffffda RBX: 00000000000005e2 RCX: 00007fac9cbad169 [ 439.655723][T31050] RDX: 00007fac9b20edec RSI: 0000000000000000 RDI: 00007fac9cc2ec3c [ 439.655752][T31050] RBP: 0000200000000b00 R08: 00007fac9b20eb07 R09: 0000000000000000 [ 439.655765][T31050] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 439.655778][T31050] R13: 00007fac9b20edec R14: 00007fac9b20edf0 R15: 00007ffcf5c19978 [ 439.655878][T31050] [ 439.862818][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 439.949407][T13491] Process accounting resumed [ 440.032099][T31063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10843'. [ 440.057392][T31065] ALSA: seq fatal error: cannot create timer (-19) [ 440.148904][T31072] netlink: 'syz.2.10848': attribute type 3 has an invalid length. [ 440.292127][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10852'. [ 440.329344][T31091] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10854'. [ 440.345018][T31091] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10854'. [ 440.345448][T31088] netlink: 'syz.3.10855': attribute type 1 has an invalid length. [ 440.431945][T31088] bond13: entered promiscuous mode [ 440.442422][T31088] 8021q: adding VLAN 0 to HW filter on device bond13 [ 440.482882][T31103] ALSA: seq fatal error: cannot create timer (-19) [ 440.578352][T31123] vlan2: entered allmulticast mode [ 440.875170][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.024654][T13480] Process accounting resumed [ 441.200905][T31158] netlink: 'syz.5.10877': attribute type 1 has an invalid length. [ 441.243107][T31162] vlan2: entered allmulticast mode [ 441.354935][T31168] netlink: 'syz.5.10881': attribute type 1 has an invalid length. [ 441.369160][T31168] bond2: entered promiscuous mode [ 441.374366][T31168] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.451051][T31177] tipc: Enabling of bearer rejected, failed to enable media [ 441.452828][T31180] __nla_validate_parse: 3 callbacks suppressed [ 441.452846][T31180] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10885'. [ 441.475550][T31180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10885'. [ 441.543987][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10887'. [ 441.574496][T31189] netlink: 'syz.4.10888': attribute type 1 has an invalid length. [ 441.656722][T13494] Process accounting resumed [ 441.743890][T31204] netlink: 'syz.6.10893': attribute type 1 has an invalid length. [ 441.793471][T31205] macvlan1: entered promiscuous mode [ 441.839847][T31205] ipvlan0: entered promiscuous mode [ 441.870844][T31205] ipvlan0: left promiscuous mode [ 441.881523][T31205] macvlan1: left promiscuous mode [ 441.925257][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 441.971027][T31204] bond4: entered promiscuous mode [ 441.977722][T31204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.087777][T31215] tipc: Enabling of bearer rejected, failed to enable media [ 442.195594][T31227] tipc: Enabling of bearer rejected, failed to enable media [ 442.222621][T31229] netlink: 'syz.5.10901': attribute type 1 has an invalid length. [ 442.628311][T31245] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 442.641002][T31248] netlink: 'syz.5.10907': attribute type 1 has an invalid length. [ 442.655698][T31248] bond3: entered promiscuous mode [ 442.661002][T31248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.808799][T31261] netlink: 'syz.3.10911': attribute type 10 has an invalid length. [ 442.861453][T31264] netlink: 'syz.3.10912': attribute type 10 has an invalid length. [ 442.955073][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 442.977534][T31278] netlink: 'syz.5.10915': attribute type 1 has an invalid length. [ 443.051157][T31288] netlink: 'syz.6.10920': attribute type 1 has an invalid length. [ 443.122346][T31288] bond5: entered promiscuous mode [ 443.127946][T31288] 8021q: adding VLAN 0 to HW filter on device bond5 [ 443.762434][T31332] vlan2: entered allmulticast mode [ 443.802731][T31336] tipc: Enabling of bearer rejected, failed to enable media [ 443.986186][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 443.986250][ T29] audit: type=1326 audit(2000000348.160:36282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 444.016353][ T29] audit: type=1326 audit(2000000348.160:36283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 444.025135][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.040046][ T29] audit: type=1326 audit(2000000348.160:36284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 444.070597][ T29] audit: type=1326 audit(2000000348.160:36285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.034829][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 445.063123][ T29] audit: type=1326 audit(2000000349.190:36286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.142943][ T29] audit: type=1326 audit(2000000349.280:36287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.166891][ T29] audit: type=1326 audit(2000000349.280:36288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.190782][ T29] audit: type=1326 audit(2000000349.280:36289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.214849][ T29] audit: type=1326 audit(2000000349.280:36290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.238647][ T29] audit: type=1326 audit(2000000349.280:36291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31342 comm="syz.2.10940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 445.441243][T31360] macvlan1: entered promiscuous mode [ 445.471970][T31360] ipvlan0: entered promiscuous mode [ 445.495735][T31360] ipvlan0: left promiscuous mode [ 445.507574][T31360] macvlan1: left promiscuous mode [ 445.715060][T31367] netlink: 60 bytes leftover after parsing attributes in process `syz.6.10947'. [ 445.742723][T31373] FAULT_INJECTION: forcing a failure. [ 445.742723][T31373] name failslab, interval 1, probability 0, space 0, times 0 [ 445.756088][T31373] CPU: 0 UID: 0 PID: 31373 Comm: syz.3.10951 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 445.756119][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.756132][T31373] Call Trace: [ 445.756137][T31373] [ 445.756145][T31373] dump_stack_lvl+0xf6/0x150 [ 445.756168][T31373] dump_stack+0x15/0x1a [ 445.756210][T31373] should_fail_ex+0x261/0x270 [ 445.756244][T31373] should_failslab+0x8f/0xb0 [ 445.756282][T31373] kmem_cache_alloc_noprof+0x59/0x340 [ 445.756312][T31373] ? copy_mm+0xe7/0x1360 [ 445.756389][T31373] copy_mm+0xe7/0x1360 [ 445.756420][T31373] ? __pfx_it_real_fn+0x10/0x10 [ 445.756462][T31373] ? hrtimer_setup+0x37/0x120 [ 445.756525][T31373] ? __init_rwsem+0x5d/0x70 [ 445.756552][T31373] ? copy_signal+0x316/0x340 [ 445.756612][T31373] copy_process+0xcfc/0x1f60 [ 445.756650][T31373] kernel_clone+0x168/0x5d0 [ 445.756742][T31373] __x64_sys_clone+0xe9/0x120 [ 445.756856][T31373] x64_sys_call+0x2dc9/0x2e10 [ 445.756906][T31373] do_syscall_64+0xc9/0x1c0 [ 445.756936][T31373] ? clear_bhb_loop+0x25/0x80 [ 445.756962][T31373] ? clear_bhb_loop+0x25/0x80 [ 445.756989][T31373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.757019][T31373] RIP: 0033:0x7f1a3ea0d169 [ 445.757036][T31373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.757054][T31373] RSP: 002b:00007f1a3d076fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 445.757073][T31373] RAX: ffffffffffffffda RBX: 00007f1a3ec25fa0 RCX: 00007f1a3ea0d169 [ 445.757119][T31373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 445.757198][T31373] RBP: 00007f1a3d077090 R08: 0000000000000000 R09: 0000000000000000 [ 445.757212][T31373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 445.757226][T31373] R13: 0000000000000000 R14: 00007f1a3ec25fa0 R15: 00007ffde7aea248 [ 445.757259][T31373] [ 445.972202][T31375] block device autoloading is deprecated and will be removed. [ 446.074872][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 446.152379][T31386] macvlan1: entered promiscuous mode [ 446.181793][T31386] ipvlan0: entered promiscuous mode [ 446.199097][T31386] ipvlan0: left promiscuous mode [ 446.208036][T31386] macvlan1: left promiscuous mode [ 446.456782][T13480] Process accounting resumed [ 447.084453][T31442] macvlan1: entered promiscuous mode [ 447.114265][T31442] ipvlan0: entered promiscuous mode [ 447.126029][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 447.143622][T31442] ipvlan0: left promiscuous mode [ 447.154876][T31442] macvlan1: left promiscuous mode [ 447.225160][T31450] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10973'. [ 447.234501][T31450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10973'. [ 447.376296][T31461] tipc: Enabling of bearer rejected, failed to enable media [ 447.684116][T31483] macvlan1: entered promiscuous mode [ 447.714365][T31483] ipvlan0: entered promiscuous mode [ 447.732395][T31483] ipvlan0: left promiscuous mode [ 447.739203][T31483] macvlan1: left promiscuous mode [ 448.155200][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 448.405172][T31537] validate_nla: 1 callbacks suppressed [ 448.405193][T31537] netlink: 'syz.6.11005': attribute type 10 has an invalid length. [ 448.508042][T31540] tipc: Enabling of bearer rejected, failed to enable media [ 448.633715][T31547] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.642671][T31547] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.651564][T31547] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.660633][T31547] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.670075][T31547] vxlan0: entered promiscuous mode [ 448.675278][T31547] vxlan0: entered allmulticast mode [ 448.682578][T31547] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.691540][T31547] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.700519][T31547] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.709495][T31547] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.838570][T31568] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11017'. [ 448.852492][T31568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11017'. [ 448.873025][T31571] netlink: 'syz.3.11019': attribute type 10 has an invalid length. [ 448.928939][T31578] netlink: 'syz.6.11022': attribute type 1 has an invalid length. [ 449.053200][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 449.053216][ T29] audit: type=1326 audit(2000000353.220:36597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.2.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.122107][ T29] audit: type=1326 audit(2000000353.260:36598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.2.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.145979][ T29] audit: type=1326 audit(2000000353.280:36599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.2.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.169734][ T29] audit: type=1326 audit(2000000353.280:36600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31584 comm="syz.2.11024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.195198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 449.249765][T13493] Process accounting resumed [ 449.264444][ T29] audit: type=1326 audit(2000000353.430:36601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.288337][ T29] audit: type=1326 audit(2000000353.430:36602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.312320][ T29] audit: type=1326 audit(2000000353.430:36603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.336056][ T29] audit: type=1326 audit(2000000353.430:36604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.359957][ T29] audit: type=1326 audit(2000000353.430:36605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.497863][ T29] audit: type=1326 audit(2000000353.570:36606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31596 comm="syz.2.11031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9cbad169 code=0x7ffc0000 [ 449.730909][T31622] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31622 comm=+}[@ [ 449.807001][T31629] FAULT_INJECTION: forcing a failure. [ 449.807001][T31629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.820187][T31629] CPU: 0 UID: 0 PID: 31629 Comm: syz.2.11042 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 449.820222][T31629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.820237][T31629] Call Trace: [ 449.820245][T31629] [ 449.820255][T31629] dump_stack_lvl+0xf6/0x150 [ 449.820304][T31629] dump_stack+0x15/0x1a [ 449.820324][T31629] should_fail_ex+0x261/0x270 [ 449.820358][T31629] should_fail+0xb/0x10 [ 449.820387][T31629] should_fail_usercopy+0x1a/0x20 [ 449.820447][T31629] _copy_from_user+0x1c/0xa0 [ 449.820511][T31629] copy_msghdr_from_user+0x54/0x2b0 [ 449.820549][T31629] ? __fget_files+0x186/0x1c0 [ 449.820627][T31629] __sys_sendmsg+0x141/0x240 [ 449.820681][T31629] __x64_sys_sendmsg+0x46/0x50 [ 449.820714][T31629] x64_sys_call+0x26f3/0x2e10 [ 449.820741][T31629] do_syscall_64+0xc9/0x1c0 [ 449.820777][T31629] ? clear_bhb_loop+0x25/0x80 [ 449.820863][T31629] ? clear_bhb_loop+0x25/0x80 [ 449.820951][T31629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.820977][T31629] RIP: 0033:0x7fac9cbad169 [ 449.821062][T31629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.821083][T31629] RSP: 002b:00007fac9b20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.821106][T31629] RAX: ffffffffffffffda RBX: 00007fac9cdc5fa0 RCX: 00007fac9cbad169 [ 449.821121][T31629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 449.821135][T31629] RBP: 00007fac9b20f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.821150][T31629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.821238][T31629] R13: 0000000000000000 R14: 00007fac9cdc5fa0 R15: 00007ffcf5c19978 [ 449.821262][T31629] [ 450.007341][T31631] netlink: 'syz.4.11043': attribute type 10 has an invalid length. [ 450.212635][T31649] vlan2: entered allmulticast mode [ 450.245430][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 450.372567][T31665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11054'. [ 450.478900][T31674] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11061'. [ 450.488385][T31674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11061'. [ 450.565493][T31681] vlan2: entered allmulticast mode [ 450.598418][T13494] IPVS: starting estimator thread 0... [ 450.704855][T31688] IPVS: using max 2256 ests per chain, 112800 per kthread [ 451.125011][T31717] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11076'. [ 451.134311][T31717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11076'. [ 451.259297][T13491] Process accounting resumed [ 451.285145][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 451.323482][T31739] tipc: Enabling of bearer rejected, failed to enable media [ 451.449966][T31749] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11089'. [ 451.544482][T13491] Process accounting resumed [ 451.719576][T13496] Process accounting resumed [ 451.979492][T31826] tipc: Enabling of bearer rejected, failed to enable media [ 452.015483][T13496] Process accounting resumed [ 452.151251][T31850] tipc: Enabling of bearer rejected, failed to enable media [ 452.185925][T31855] tipc: Enabling of bearer rejected, failed to enable media [ 452.315122][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 452.367597][T31874] __nla_validate_parse: 1 callbacks suppressed [ 452.367616][T31874] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11143'. [ 452.541729][T31894] tipc: Enabling of bearer rejected, failed to enable media [ 452.598042][T13479] Process accounting resumed [ 452.613790][T31904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11156'. [ 452.739132][T31912] macvlan1: entered promiscuous mode [ 452.777148][T31912] ipvlan0: entered promiscuous mode [ 452.813761][T31912] ipvlan0: left promiscuous mode [ 452.819579][T31912] macvlan1: left promiscuous mode [ 452.832222][T31929] netlink: 'syz.5.11165': attribute type 10 has an invalid length. [ 453.035399][T31934] tipc: Enabling of bearer rejected, failed to enable media [ 453.072494][T13496] Process accounting resumed [ 453.094844][T31946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11172'. [ 453.147685][T31948] FAULT_INJECTION: forcing a failure. [ 453.147685][T31948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.160988][T31948] CPU: 0 UID: 0 PID: 31948 Comm: syz.4.11174 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 453.161052][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.161068][T31948] Call Trace: [ 453.161076][T31948] [ 453.161086][T31948] dump_stack_lvl+0xf6/0x150 [ 453.161116][T31948] dump_stack+0x15/0x1a [ 453.161177][T31948] should_fail_ex+0x261/0x270 [ 453.161211][T31948] should_fail+0xb/0x10 [ 453.161237][T31948] should_fail_usercopy+0x1a/0x20 [ 453.161266][T31948] _copy_from_user+0x1c/0xa0 [ 453.161379][T31948] move_addr_to_kernel+0x8c/0x130 [ 453.161419][T31948] __sys_sendto+0x130/0x230 [ 453.161458][T31948] __x64_sys_sendto+0x78/0x90 [ 453.161556][T31948] x64_sys_call+0x2bcb/0x2e10 [ 453.161582][T31948] do_syscall_64+0xc9/0x1c0 [ 453.161617][T31948] ? clear_bhb_loop+0x25/0x80 [ 453.161717][T31948] ? clear_bhb_loop+0x25/0x80 [ 453.161743][T31948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.161769][T31948] RIP: 0033:0x7fd90c46d169 [ 453.161788][T31948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.161810][T31948] RSP: 002b:00007fd90aacf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 453.161833][T31948] RAX: ffffffffffffffda RBX: 00007fd90c685fa0 RCX: 00007fd90c46d169 [ 453.161849][T31948] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 453.161879][T31948] RBP: 00007fd90aacf090 R08: 0000200000000140 R09: 000000000000001c [ 453.161893][T31948] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 453.161907][T31948] R13: 0000000000000000 R14: 00007fd90c685fa0 R15: 00007ffcda7278d8 [ 453.161928][T31948] [ 453.355235][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 453.496174][T31971] FAULT_INJECTION: forcing a failure. [ 453.496174][T31971] name failslab, interval 1, probability 0, space 0, times 0 [ 453.508865][T31971] CPU: 1 UID: 0 PID: 31971 Comm: syz.4.11181 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 453.508894][T31971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.508909][T31971] Call Trace: [ 453.508916][T31971] [ 453.508924][T31971] dump_stack_lvl+0xf6/0x150 [ 453.508947][T31971] dump_stack+0x15/0x1a [ 453.508964][T31971] should_fail_ex+0x261/0x270 [ 453.508991][T31971] should_failslab+0x8f/0xb0 [ 453.509024][T31971] __kmalloc_cache_noprof+0x55/0x320 [ 453.509047][T31971] ? hugetlb_reserve_pages+0x1b0/0xba0 [ 453.509080][T31971] hugetlb_reserve_pages+0x1b0/0xba0 [ 453.509120][T31971] hugetlbfs_file_mmap+0x278/0x320 [ 453.509161][T31971] mmap_region+0xcce/0x1490 [ 453.509209][T31971] do_mmap+0x9ef/0xc80 [ 453.509242][T31971] __se_sys_remap_file_pages+0x767/0x800 [ 453.509279][T31971] ? fput+0x99/0xd0 [ 453.509302][T31971] ? ksys_write+0x180/0x1b0 [ 453.509336][T31971] __x64_sys_remap_file_pages+0x67/0x80 [ 453.509368][T31971] x64_sys_call+0x29b9/0x2e10 [ 453.509393][T31971] do_syscall_64+0xc9/0x1c0 [ 453.509423][T31971] ? clear_bhb_loop+0x25/0x80 [ 453.509444][T31971] ? clear_bhb_loop+0x25/0x80 [ 453.509468][T31971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.509494][T31971] RIP: 0033:0x7fd90c46d169 [ 453.509511][T31971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.509529][T31971] RSP: 002b:00007fd90aacf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 453.509546][T31971] RAX: ffffffffffffffda RBX: 00007fd90c685fa0 RCX: 00007fd90c46d169 [ 453.509558][T31971] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 453.509573][T31971] RBP: 00007fd90aacf090 R08: 0000000000000000 R09: 0000000000000000 [ 453.509593][T31971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.509607][T31971] R13: 0000000000000000 R14: 00007fd90c685fa0 R15: 00007ffcda7278d8 [ 453.509629][T31971] [ 453.509637][T31971] HugeTLB: unable to allocate vma specific lock [ 453.731322][T13480] Process accounting resumed [ 454.099961][T13471] Process accounting resumed [ 454.104889][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 454.104906][ T29] audit: type=1400 audit(2000000358.280:36777): avc: denied { ioctl } for pid=32011 comm="syz.5.11197" path="socket:[114431]" dev="sockfs" ino=114431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 454.172619][T32014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11197'. [ 454.224004][ T29] audit: type=1326 audit(2000000358.340:36778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.247871][ T29] audit: type=1326 audit(2000000358.340:36779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.271774][ T29] audit: type=1326 audit(2000000358.340:36780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.295582][ T29] audit: type=1326 audit(2000000358.340:36781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.319364][ T29] audit: type=1326 audit(2000000358.340:36782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.343131][ T29] audit: type=1326 audit(2000000358.340:36783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.366867][ T29] audit: type=1326 audit(2000000358.340:36784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.390579][ T29] audit: type=1326 audit(2000000358.340:36785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.414578][ T29] audit: type=1326 audit(2000000358.340:36786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32021 comm="syz.3.11199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3ea0d169 code=0x7ffc0000 [ 454.415189][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 454.719871][T32049] FAULT_INJECTION: forcing a failure. [ 454.719871][T32049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.726760][T13479] Process accounting resumed [ 454.732986][T32049] CPU: 0 UID: 0 PID: 32049 Comm: syz.4.11210 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 454.733025][T32049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 454.733043][T32049] Call Trace: [ 454.733053][T32049] [ 454.733113][T32049] dump_stack_lvl+0xf6/0x150 [ 454.733144][T32049] dump_stack+0x15/0x1a [ 454.733166][T32049] should_fail_ex+0x261/0x270 [ 454.733202][T32049] should_fail+0xb/0x10 [ 454.733305][T32049] should_fail_usercopy+0x1a/0x20 [ 454.733342][T32049] _copy_to_user+0x20/0xa0 [ 454.733391][T32049] simple_read_from_buffer+0xb2/0x130 [ 454.733493][T32049] proc_fail_nth_read+0x103/0x140 [ 454.733519][T32049] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.733563][T32049] vfs_read+0x1b2/0x710 [ 454.733597][T32049] ? __rcu_read_unlock+0x4e/0x70 [ 454.733653][T32049] ? __fget_files+0x186/0x1c0 [ 454.733722][T32049] ksys_read+0xeb/0x1b0 [ 454.733760][T32049] __x64_sys_read+0x42/0x50 [ 454.733795][T32049] x64_sys_call+0x2a3b/0x2e10 [ 454.733893][T32049] do_syscall_64+0xc9/0x1c0 [ 454.733931][T32049] ? clear_bhb_loop+0x25/0x80 [ 454.733959][T32049] ? clear_bhb_loop+0x25/0x80 [ 454.733987][T32049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.734015][T32049] RIP: 0033:0x7fd90c46bb7c [ 454.734034][T32049] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.734134][T32049] RSP: 002b:00007fd90aacf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.734159][T32049] RAX: ffffffffffffffda RBX: 00007fd90c685fa0 RCX: 00007fd90c46bb7c [ 454.734176][T32049] RDX: 000000000000000f RSI: 00007fd90aacf0a0 RDI: 0000000000000007 [ 454.734191][T32049] RBP: 00007fd90aacf090 R08: 0000000000000000 R09: 0000000000000000 [ 454.734206][T32049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.734221][T32049] R13: 0000000000000000 R14: 00007fd90c685fa0 R15: 00007ffcda7278d8 [ 454.734245][T32049] [ 454.760927][T32051] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.11208'. [ 455.030645][T32068] tipc: Enabling of bearer rejected, failed to enable media [ 455.116493][T32080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11222'. [ 455.140377][T32080] hsr_slave_1 (unregistering): left promiscuous mode [ 455.321572][T32103] FAULT_INJECTION: forcing a failure. [ 455.321572][T32103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.334820][T32103] CPU: 1 UID: 0 PID: 32103 Comm: syz.6.11231 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 455.334854][T32103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.334870][T32103] Call Trace: [ 455.334879][T32103] [ 455.334888][T32103] dump_stack_lvl+0xf6/0x150 [ 455.334918][T32103] dump_stack+0x15/0x1a [ 455.335010][T32103] should_fail_ex+0x261/0x270 [ 455.335038][T32103] should_fail+0xb/0x10 [ 455.335067][T32103] should_fail_usercopy+0x1a/0x20 [ 455.335142][T32103] _copy_from_iter+0xd8/0xd10 [ 455.335208][T32103] ? alloc_pages_mpol+0x215/0x260 [ 455.335304][T32103] copy_page_from_iter+0x14f/0x280 [ 455.335337][T32103] tun_get_user+0x69d/0x2640 [ 455.335367][T32103] ? setup_sgl+0x90/0x310 [ 455.335419][T32103] ? ref_tracker_alloc+0x1ff/0x310 [ 455.335457][T32103] tun_chr_write_iter+0x188/0x240 [ 455.335486][T32103] vfs_write+0x79b/0x950 [ 455.335546][T32103] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 455.335576][T32103] ksys_write+0xeb/0x1b0 [ 455.335612][T32103] __x64_sys_write+0x42/0x50 [ 455.335646][T32103] x64_sys_call+0x2a45/0x2e10 [ 455.335710][T32103] do_syscall_64+0xc9/0x1c0 [ 455.335757][T32103] ? clear_bhb_loop+0x25/0x80 [ 455.335783][T32103] ? clear_bhb_loop+0x25/0x80 [ 455.335810][T32103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.335881][T32103] RIP: 0033:0x7f33e238bc1f [ 455.335897][T32103] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 455.335916][T32103] RSP: 002b:00007f33e09ef000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 455.335943][T32103] RAX: ffffffffffffffda RBX: 00007f33e25a5fa0 RCX: 00007f33e238bc1f [ 455.335958][T32103] RDX: 000000000000004a RSI: 0000200000000080 RDI: 00000000000000c8 [ 455.335972][T32103] RBP: 00007f33e09ef090 R08: 0000000000000000 R09: 0000000000000000 [ 455.335985][T32103] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 455.335996][T32103] R13: 0000000000000000 R14: 00007f33e25a5fa0 R15: 00007fffe5970ef8 [ 455.336015][T32103] [ 455.540000][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 455.692146][T32115] netlink: 'syz.6.11236': attribute type 4 has an invalid length. [ 455.867394][T32138] tipc: Enabling of bearer rejected, failed to enable media [ 456.091724][T32146] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11249'. [ 456.101083][T32146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11249'. [ 456.222001][T32154] netlink: 'syz.6.11252': attribute type 10 has an invalid length. [ 456.363023][T32169] tipc: Enabling of bearer rejected, failed to enable media [ 456.555479][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.725730][T32188] macvlan1: entered promiscuous mode [ 456.777102][T32188] ipvlan0: entered promiscuous mode [ 456.803817][T32188] ipvlan0: left promiscuous mode [ 456.811925][T32188] macvlan1: left promiscuous mode [ 456.854439][T32205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11273'. [ 457.141703][T32219] netlink: 'syz.6.11276': attribute type 10 has an invalid length. [ 457.208701][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11277'. [ 457.238531][T32225] macvlan1: entered promiscuous mode [ 457.280960][T32238] ALSA: seq fatal error: cannot create timer (-19) [ 457.300081][T32225] ipvlan0: entered promiscuous mode [ 457.316097][T32225] ipvlan0: left promiscuous mode [ 457.341508][T32225] macvlan1: left promiscuous mode [ 457.434240][T32254] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11291'. [ 457.443452][T32254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11291'. [ 457.595170][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 457.662632][T32276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11300'. [ 457.745266][T32282] bond8: entered promiscuous mode [ 457.750518][T32282] 8021q: adding VLAN 0 to HW filter on device bond8 [ 457.824280][T32288] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11302'. [ 457.833572][T32288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11302'. [ 458.014025][T32303] tipc: Enabling of bearer rejected, failed to enable media [ 458.053368][T32307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11311'. [ 458.341136][T32329] macvlan1: entered promiscuous mode [ 458.367244][T32329] ipvlan0: entered promiscuous mode [ 458.385722][T32329] ipvlan0: left promiscuous mode [ 458.393118][T32329] macvlan1: left promiscuous mode [ 458.433455][T32333] tipc: Enabling of bearer rejected, failed to enable media [ 458.532817][T32350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11326'. [ 458.532951][T32346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11325'. [ 458.645198][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 458.708916][T32368] tipc: Enabling of bearer rejected, failed to enable media [ 458.933985][T32393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11342'. [ 459.061928][T32408] tipc: Enabling of bearer rejected, failed to enable media [ 459.173974][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 459.174042][ T29] audit: type=1326 audit(2000000363.340:37337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.4.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 459.210635][ T12] ================================================================== [ 459.218854][ T12] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 459.227379][ T12] [ 459.229707][ T12] write to 0xffff888172d85122 of 1 bytes by task 32423 on cpu 1: [ 459.237424][ T12] tty_set_termios+0x4c9/0x8b0 [ 459.242213][ T12] set_termios+0x364/0x4f0 [ 459.246636][ T12] tty_mode_ioctl+0x394/0x5d0 [ 459.251313][ T12] n_tty_ioctl_helper+0x8d/0x240 [ 459.256255][ T12] n_tty_ioctl+0xfd/0x210 [ 459.260597][ T12] tty_ioctl+0x878/0xbd0 [ 459.264843][ T12] __se_sys_ioctl+0xc9/0x140 [ 459.269446][ T12] __x64_sys_ioctl+0x43/0x50 [ 459.274044][ T12] x64_sys_call+0x168d/0x2e10 [ 459.278738][ T12] do_syscall_64+0xc9/0x1c0 [ 459.283291][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.289189][ T12] [ 459.291510][ T12] read to 0xffff888172d85122 of 1 bytes by task 12 on cpu 0: [ 459.298877][ T12] n_tty_receive_char_flow_ctrl+0x58/0x1a0 [ 459.304704][ T12] n_tty_lookahead_flow_ctrl+0xee/0x130 [ 459.310287][ T12] tty_port_default_lookahead_buf+0x8a/0xc0 [ 459.316194][ T12] flush_to_ldisc+0x322/0x410 [ 459.320878][ T12] process_scheduled_works+0x4de/0xa20 [ 459.326358][ T12] worker_thread+0x52c/0x710 [ 459.330950][ T12] kthread+0x4b7/0x540 [ 459.335027][ T12] ret_from_fork+0x4b/0x60 [ 459.339449][ T12] ret_from_fork_asm+0x1a/0x30 [ 459.344246][ T12] [ 459.346585][ T12] value changed: 0x13 -> 0xe3 [ 459.351255][ T12] [ 459.353576][ T12] Reported by Kernel Concurrency Sanitizer on: [ 459.359731][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc1-syzkaller-00060-ga24588245776 #0 PREEMPT(voluntary) [ 459.372150][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.382210][ T12] Workqueue: events_unbound flush_to_ldisc [ 459.388041][ T12] ================================================================== [ 459.408336][ T29] audit: type=1326 audit(2000000363.580:37338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.4.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 459.432337][ T29] audit: type=1326 audit(2000000363.580:37339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.4.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 459.456102][ T29] audit: type=1326 audit(2000000363.580:37340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.4.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 459.479818][ T29] audit: type=1326 audit(2000000363.580:37341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32421 comm="syz.4.11353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90c46d169 code=0x7ffc0000 [ 459.684834][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 460.714902][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 461.754853][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 462.794830][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 463.834841][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 464.874832][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.914857][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 466.954872][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 467.994845][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 469.034828][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available