last executing test programs: 4m50.037675569s ago: executing program 3 (id=985): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r1, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f0000000500)={[{@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@block_validity}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") write$UHID_INPUT2(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000009e003df7e67a2bd6564d66faccfe304d000e2e23516885ebfdd5111d7946d4f4b70fad61f9910a5020e674e9a49a10c356fb7f5bb27158bbd810bd331802458c9f9be5fa115e6108cff44f2dc8b54e322a3d585f565e9db6ad854152cb9b9513892ee233970b91e92853c2966ff8e2dc19213af2928e7e294a016d59268ca16c511d6ade7c00a131cf9cbb8e6cd2ee4dbb292efa637aee856e2fc403fe8cdee5b90d58aa1bab"], 0xa4) 4m49.840054612s ago: executing program 3 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='skip_task_reaping\x00', r1, 0x0, 0x200c}, 0x18) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r2, 0x0, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000380)={0x13be, {{0xa, 0x4e22, 0x6, @empty}}}, 0x88) sendmmsg$inet6(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0ef9924e4889dfaf3ca3a0bb9872df4c6620f3f0a6cab24cd70cd7d405e011862129f8b7e3f1358e733afcf38acda8c65f80d3b837ee1896d13f4f7e15feec49", 0x40}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000000)={[{@nobarrier}, {@barrier}, {@oldalloc}, {@sb={'sb', 0x3d, 0x10000}}, {@acl}, {@grpjquota_path={'grpjquota', 0x3d, './file3'}}, {@jqfmt_vfsv0}, {@nouser_xattr}]}, 0x2, 0xbd2, &(0x7f0000000540)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x3, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001140)={0x0, 0xc257, 0x5, 0x8}, &(0x7f0000001180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x4, 0x4, 0x0, r7}) 4m49.807802652s ago: executing program 3 (id=988): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffc}) 4m49.792215672s ago: executing program 3 (id=989): r0 = socket$kcm(0x11, 0x2, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000200)=0x3f2, 0x4) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=any,noxattr,nodevmap,dfltuid=', @ANYRESOCT=0x0]) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r9 = syz_io_uring_setup(0x24fa, &(0x7f0000000600)={0x0, 0x0, 0x10100, 0x7, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x334, 0x0, r9}, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x100}) io_uring_enter(r9, 0x2d3c, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='svcrdma_decode_short_err\x00', r3}, 0x18) mlockall(0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r1, @ANYBLOB='$'], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 4m33.11693583s ago: executing program 32 (id=1016): r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000040)=0x80, 0x80800) getsockname$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private0}, &(0x7f00000001c0)=0x20) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4, 0x0, 0xfffffffffffffff9}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',access=any,noxattr,nodevmap,dfltuid=', @ANYRESOCT=0x0]) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socket$can_j1939(0x1d, 0x2, 0x7) r9 = syz_io_uring_setup(0x24fa, &(0x7f0000000600)={0x0, 0x0, 0x10100, 0x7, 0x1d9}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x334, 0x0, r9}, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f0000000300)=ANY=[@ANYBLOB='\a'], 0x118) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x100}) io_uring_enter(r9, 0x2d3c, 0x0, 0x0, 0x0, 0x0) mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='svcrdma_decode_short_err\x00', r3}, 0x18) mlockall(0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRESOCT=r8, @ANYRESHEX=r1, @ANYBLOB='$'], 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 1m37.55842572s ago: executing program 1 (id=4805): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@jqfmt_vfsv1}]}, 0x1, 0x508, &(0x7f0000000b40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000000004a6775ca1e48cf886053973bfd1d3c988ab1198e451c2ff8f6615c7f1a3c59bd57a1d31884b94b759fcf42e955502dcbda7791d601aa7ce72724be0ad8af2e66dd8baa3bb76a2d051647d094ba26b255fc1dea02c95db3afcbc94e8ea2b36"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) dup(r3) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x4, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x2) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) bind$tipc(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m37.451777241s ago: executing program 1 (id=4800): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0), &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) ioprio_get$uid(0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[], 0xe4}}, 0x841) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r7, 0x2007ff3) 1m37.406396682s ago: executing program 1 (id=4803): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0), &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) ioprio_get$uid(0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[], 0xe4}}, 0x841) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r7, 0x2007ff3) 1m37.355233913s ago: executing program 1 (id=4807): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m37.246359145s ago: executing program 1 (id=4811): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400d}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="00000000001b0000b703000800000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r6, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) r7 = syz_io_uring_setup(0x513f, &(0x7f0000000a80)={0x0, 0xa396, 0x400, 0x0, 0x1a8}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r7, 0x47f8, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r10) 1m36.883723961s ago: executing program 1 (id=4818): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0), &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) ioprio_get$uid(0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[], 0xe4}}, 0x841) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r7, 0x2007ff3) 1m21.827148826s ago: executing program 33 (id=4818): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0), &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) ioprio_get$uid(0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[], 0xe4}}, 0x841) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r7, 0x2007ff3) 1.761857322s ago: executing program 5 (id=7017): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x138, 0x5, 0x148, 0x138, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x0, 0x65}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x581b, 0x0, 0x3, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {0xff}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x3, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'batadv0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffd, 0x0, 0xffff, 0x1, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x10000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.665330293s ago: executing program 5 (id=7018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x138, 0x5, 0x148, 0x138, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x0, 0x65}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x581b, 0x0, 0x3, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {0xff}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x3, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'batadv0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffd, 0x0, 0xffff, 0x1, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 1.592401094s ago: executing program 5 (id=7021): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x408, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bc}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000001080)="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", 0x1000, 0x24004880, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x89c3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='sys_enter\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) fsync(r0) utimes(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) 1.471538126s ago: executing program 5 (id=7026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000d30000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) ioprio_get$uid(0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x0, 0x230, 0xffffffff, 0x300, 0x300, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x52}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x7, 0x4, 0xc, 0x0, 0x4], 0x3, 0x7}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010101, @multicast1, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x0, 0x0, 0x2}}, @common=@ttl={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7f, 0xc, [0xe, 0x22, 0x3e, 0x11, 0x1b, 0x7, 0x15, 0x31, 0x12, 0xe, 0x27, 0x18, 0x26, 0x38, 0x2a, 0x33], 0x0, 0x7fffffff, 0x81}}}, {{@ip={@loopback, @local, 0xffffffff, 0x0, 'caif0\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x64, @gre_key=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x78195242f88d37ad, @rand_addr=0x64010100, @broadcast, @icmp_id=0x67, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000280)=""/6) r4 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x587, &(0x7f0000002480)="$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") fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='mm_page_alloc\x00', r0}, 0x18) unshare(0x6a040000) unshare(0x8020000) 1.24165922s ago: executing program 6 (id=7033): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000230040000000000000004d02000000000000f6ffffff000038000100fdff7f000800030000000400000007000000000000b1f200000000000000010100000000000006"], 0x78) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) (async) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) fcntl$setstatus(r3, 0x4, 0x42800) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x404, &(0x7f0000000380)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) write$UHID_CREATE(r6, &(0x7f00000009c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x1, 0xfffffff8, 0xfff, 0xfffffff5, 0x2}}, 0x120) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="0100000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r3], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r9, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)=r8}, 0x20) (async) read(r7, &(0x7f0000001400)=""/4096, 0x1000) (async) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0xff, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) sched_setscheduler(r11, 0x0, &(0x7f00000004c0)=0x9) (async) accept4(r0, &(0x7f0000000280)=@phonet, &(0x7f0000000040)=0x80, 0x0) close(r0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.2229354s ago: executing program 5 (id=7034): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) creat(&(0x7f0000000280)='./bus\x00', 0x1) lsetxattr$security_selinux(&(0x7f00000019c0)='./bus\x00', &(0x7f0000001a00), &(0x7f0000001a40)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001600)={[{@dax_inode}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@sysvgroups}, {@norecovery}, {@orlov}, {@commit={'commit', 0x3d, 0xfff}}, {@journal_async_commit}, {@noauto_da_alloc}, {@journal_path={'journal_path', 0x3d, './file1'}}], [{@appraise_type}, {@uid_gt}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x30}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'nobh'}}, {@fsname={'fsname', 0x3d, 'journal_path'}}]}, 0x3, 0x571, &(0x7f0000001b40)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESHEX, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x498, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f7d3cf958c6f839d2c1317af07ebff5b0b08883a8714efbeffcfabbde874d4a932fa05412a071cd9ec4687", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) socket(0x0, 0x800, 0x7) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) 1.137612482s ago: executing program 6 (id=7037): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a888dd86004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.058675383s ago: executing program 6 (id=7038): r0 = open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a3000000000090002007379"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r3, &(0x7f0000000040), 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4f33}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r6, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x8, r8}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000600)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) ftruncate(r0, 0x200002) r10 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000080)={{{@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x7, 0x0, 0x0, 0x80000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r11, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r11, r10, 0x0, 0x80001d00c0d0) 964.641764ms ago: executing program 6 (id=7042): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 927.615845ms ago: executing program 2 (id=7044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x531880, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) pwritev2(r3, &(0x7f0000000a80)=[{&(0x7f0000000b80)='/', 0x1}], 0x1, 0xe7b, 0x2a, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) process_mrelease(0xffffffffffffffff, 0x0) 578.245931ms ago: executing program 2 (id=7048): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00'/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8820000000300012800b000100697036677265000020000280050016000900000006000300a10000000400120008001500c72f0f00"], 0x50}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20009091) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000180)) r4 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000001c0)=0x101, 0x7) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYRES64=r4, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000d018a2b457226300", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf250200000008000a0107000000080069000700000005003d000800000008004000ff010000"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40850) open(&(0x7f0000000840)='./bus/file0\x00', 0x604000, 0xa) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000bb54aeda3ab19940a37a339eebe6b54202a3e76571f6ac433e03d8", @ANYRES16=r5, @ANYBLOB="000028bd7000fedbdf25090000000800090001ac0f000500080000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000008100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000c00100000002000040000100005f1075394a529216"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4044) sendmsg$can_bcm(r0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@i_version}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='./bus\x00', 0x3348403, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 530.724692ms ago: executing program 6 (id=7049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x28, r1, 0x1, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x4004000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c1}, 0x80030) 529.652132ms ago: executing program 2 (id=7050): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_fc_commit_start\x00', r0, 0x0, 0x797}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") (async) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) (async) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) (async) open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x86) (async) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_fc_commit_start\x00', r0, 0x0, 0x797}, 0x18) (async) 511.116982ms ago: executing program 0 (id=7051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) socket$kcm(0x10, 0x2, 0x10) 418.839583ms ago: executing program 4 (id=7053): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_pts(r2, 0x333003) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x2, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x1fe}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) (async) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000240)={'dvmrp0\x00', 0xffff, 0x81}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x3, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) (async) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) (async) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@newtfilter={0x294, 0x28, 0xd27, 0x1004001, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0xffff, 0x9}, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x264, 0x2, [@TCA_CGROUP_ACT={0x260, 0x1, [@m_csum={0x110, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0xe1, 0x6, "4cc1895ee50037b3db843491b1b1ac1cc67052388b1cbf0b154bbd543adaa8b175dcb3a214598c182335a4725cd3b7c95cd651d58f97ea43f43c65e838282d3b770eb234427a247b0b4c8eb822742c8173856da62b3b2868d971d3380a7fef1c4ecea9f7014ecfbae8e5d5b3d8d6a4b63287d9d35f8f00222262fc55dbdc94ca832e2003b54b5160dfe2aed701515f9f035cd8f42fe048b123117011f4840150b654352f15d1142421c2fa96c442cf8f820dd807ee07618406a5491f1a04f4097b9430c87782602dc9514beb17e7aaa161f17d9a8ae86ec685f53f1139"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_gact={0x60, 0x4, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x6, 0x7, 0x61, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xffff1199, 0x1ff, 0x10000000, 0x5, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xec, 0x1a, 0x0, 0x0, {{0xc}, {0x4}, {0xbd, 0x6, "0026d5f12525db9527d6e8d9238da85362908c631876cd16cdf637eb8e3308ad397ff22328f0dd2c0e9466cb976a13b071c0fc8882b1f76124eeb7620ca3d579f4f6c9e3367bf8da0aa883dcbab58193f7e48e5d049e69172124e97c591c112303132b2218d8e0180f0d58d8e819faf32196414026b50754bd373bb517f7f3f17c2cc95339ce4c60c077c1ba6aff863eb298082ae5bee3fe8be007bbda612e122f97ff79be2ba86e71a85a2e2a2a599e9357ca66b68db61a2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 418.200854ms ago: executing program 6 (id=7054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004990b2d89a0041d9600000009654b7f61183fc4a47c4eb600000000186afef031b297414ae844d3ae680ff7ab3c241938b8d0e42f4d5ce9203dec7aa00013241df59fde67b0e523c1da25a01780cc1ac23414078166cd7faae692f20d6eeb969db5902fecd26c4e890106cb2decfde8cc09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800010000ffffffff0000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x28000000, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x34, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb}]}, 0x34}}, 0x0) 417.951654ms ago: executing program 4 (id=7055): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x40020005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) flistxattr(r1, &(0x7f0000000400)=""/178, 0xb2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 417.225123ms ago: executing program 0 (id=7056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0x40086610, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9a, 0x80000000}, 0x80, 0x8, 0x2800, 0x1, 0x8, 0x20805, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xc, r2, 0x2) openat$snapshot(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[], 0x65) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x54, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10000, 0x10001, 0xe, 0x1, 0x8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x3681, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 361.929064ms ago: executing program 2 (id=7057): syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0), &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) ioprio_get$uid(0x3, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000e80)={0xbfcb, 0x6, 0x7f, 0x80000000, 0x1b, "8feee51eb5219b035c5e971e53786f65ddc426", 0x100, 0xf}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[], 0xe4}}, 0x841) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r5, 0x2007ff3) 361.104164ms ago: executing program 2 (id=7058): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x408, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9bc}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000001080)="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", 0x1000, 0x24004880, &(0x7f0000000340)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x89c3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='sys_enter\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) fsync(r0) utimes(0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x4, 0x20, 0x0, "0000e5ff0100"}) 335.915275ms ago: executing program 4 (id=7059): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x40020005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 334.880025ms ago: executing program 2 (id=7060): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x40020005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd2b, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) (fail_nth: 1) 120.178388ms ago: executing program 4 (id=7061): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x10) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="a1ab0000ef883b57f81d01"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 113.435158ms ago: executing program 0 (id=7062): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000140)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x9, 0x4, 0x4, 0x2, 0x80, r6, 0x6, '\x00', r10, r5, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000400000004000000ffffffff00000000", @ANYRES32=r11, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000300"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3200010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x2, 0x512, &(0x7f0000000380)="$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") 50.739239ms ago: executing program 4 (id=7063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x138, 0x5, 0x148, 0x138, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xffffffff, 0xffffffff, 'macvlan0\x00', 'bond_slave_0\x00', {}, {}, 0x8, 0x0, 0x65}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x581b, 0x0, 0x3, {0x4}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {0xff}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x3, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0x0, 0xffffff00, 'batadv0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557", 0x0, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffd, 0x0, 0xffff, 0x1, 0x0, 0x26]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x10000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 50.179059ms ago: executing program 0 (id=7064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xc}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x200000000000000) 49.646909ms ago: executing program 0 (id=7065): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x740, 0x140) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x1], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x28) r5 = socket$kcm(0x10, 0x100000000002, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 24.30499ms ago: executing program 0 (id=7066): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYRES16=r0], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, 0x0, 0x0}, 0x20) r7 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x200000, 0x100, 0x27}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r8, @ANYRES16=r8, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES32, @ANYRES8=r8, @ANYRESHEX=r0, @ANYRES8=r8], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)=ANY=[], 0x50) 9.94766ms ago: executing program 5 (id=7067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x1}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000014c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2043db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) socket$kcm(0x10, 0x2, 0x10) 0s ago: executing program 4 (id=7068): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001d80)=ANY=[], 0x50) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): match mine (8,7) [ 338.218810][T18746] SELinux: failed to load policy [ 338.364874][T18757] FAULT_INJECTION: forcing a failure. [ 338.364874][T18757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.378027][T18757] CPU: 1 UID: 0 PID: 18757 Comm: syz.5.5635 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 338.378055][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.378067][T18757] Call Trace: [ 338.378145][T18757] [ 338.378153][T18757] __dump_stack+0x1d/0x30 [ 338.378172][T18757] dump_stack_lvl+0xe8/0x140 [ 338.378190][T18757] dump_stack+0x15/0x1b [ 338.378204][T18757] should_fail_ex+0x265/0x280 [ 338.378231][T18757] should_fail+0xb/0x20 [ 338.378278][T18757] should_fail_usercopy+0x1a/0x20 [ 338.378313][T18757] _copy_from_user+0x1c/0xb0 [ 338.378331][T18757] __sys_bpf+0x178/0x790 [ 338.378400][T18757] __x64_sys_bpf+0x41/0x50 [ 338.378423][T18757] x64_sys_call+0x2478/0x2fb0 [ 338.378442][T18757] do_syscall_64+0xd2/0x200 [ 338.378525][T18757] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.378555][T18757] ? clear_bhb_loop+0x40/0x90 [ 338.378579][T18757] ? clear_bhb_loop+0x40/0x90 [ 338.378600][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.378641][T18757] RIP: 0033:0x7fa066e9e9a9 [ 338.378659][T18757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.378759][T18757] RSP: 002b:00007fa065507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.378776][T18757] RAX: ffffffffffffffda RBX: 00007fa0670c5fa0 RCX: 00007fa066e9e9a9 [ 338.378787][T18757] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000006 [ 338.378798][T18757] RBP: 00007fa065507090 R08: 0000000000000000 R09: 0000000000000000 [ 338.378853][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.378864][T18757] R13: 0000000000000000 R14: 00007fa0670c5fa0 R15: 00007ffcc332c5e8 [ 338.378882][T18757] [ 338.626023][T18763] FAULT_INJECTION: forcing a failure. [ 338.626023][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 338.638816][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.5.5638 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 338.638905][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.638917][T18763] Call Trace: [ 338.638923][T18763] [ 338.639008][T18763] __dump_stack+0x1d/0x30 [ 338.639028][T18763] dump_stack_lvl+0xe8/0x140 [ 338.639045][T18763] dump_stack+0x15/0x1b [ 338.639098][T18763] should_fail_ex+0x265/0x280 [ 338.639167][T18763] ? seq_create_client1+0x37/0x320 [ 338.639197][T18763] should_failslab+0x8c/0xb0 [ 338.639232][T18763] __kmalloc_cache_noprof+0x4c/0x320 [ 338.639328][T18763] ? __pfx_snd_seq_open+0x10/0x10 [ 338.639348][T18763] seq_create_client1+0x37/0x320 [ 338.639380][T18763] ? __pfx_snd_seq_open+0x10/0x10 [ 338.639443][T18763] snd_seq_open+0x50/0x320 [ 338.639464][T18763] ? __pfx_snd_seq_open+0x10/0x10 [ 338.639484][T18763] snd_open+0x237/0x2a0 [ 338.639529][T18763] chrdev_open+0x2eb/0x3a0 [ 338.639603][T18763] do_dentry_open+0x646/0xa20 [ 338.639623][T18763] ? __pfx_chrdev_open+0x10/0x10 [ 338.639642][T18763] vfs_open+0x37/0x1e0 [ 338.639663][T18763] path_openat+0x1c5e/0x2170 [ 338.639761][T18763] do_filp_open+0x109/0x230 [ 338.639896][T18763] do_sys_openat2+0xa6/0x110 [ 338.639952][T18763] __x64_sys_openat+0xf2/0x120 [ 338.639977][T18763] x64_sys_call+0x1af/0x2fb0 [ 338.640034][T18763] do_syscall_64+0xd2/0x200 [ 338.640115][T18763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.640140][T18763] ? clear_bhb_loop+0x40/0x90 [ 338.640159][T18763] ? clear_bhb_loop+0x40/0x90 [ 338.640180][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.640270][T18763] RIP: 0033:0x7fa066e9e9a9 [ 338.640284][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.640362][T18763] RSP: 002b:00007fa065507038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.640380][T18763] RAX: ffffffffffffffda RBX: 00007fa0670c5fa0 RCX: 00007fa066e9e9a9 [ 338.640391][T18763] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: ffffffffffffff9c [ 338.640402][T18763] RBP: 00007fa065507090 R08: 0000000000000000 R09: 0000000000000000 [ 338.640480][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.640491][T18763] R13: 0000000000000000 R14: 00007fa0670c5fa0 R15: 00007ffcc332c5e8 [ 338.640550][T18763] [ 338.995668][T18772] lo speed is unknown, defaulting to 1000 [ 339.009625][T18774] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 339.017769][T18774] SELinux: failed to load policy [ 339.198230][T18790] IPVS: Error joining to the multicast group [ 339.356363][T18805] IPVS: Error joining to the multicast group [ 339.394634][T18807] lo speed is unknown, defaulting to 1000 [ 339.524328][T18813] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 339.532011][T18813] SELinux: failed to load policy [ 339.834969][T18819] lo speed is unknown, defaulting to 1000 [ 339.955983][T18819] chnl_net:caif_netlink_parms(): no params data found [ 339.993490][T18819] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.000779][T18819] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.008227][T18819] bridge_slave_0: entered allmulticast mode [ 340.014675][T18819] bridge_slave_0: entered promiscuous mode [ 340.021515][T18819] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.028706][T18819] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.036054][T18819] bridge_slave_1: entered allmulticast mode [ 340.042890][T18819] bridge_slave_1: entered promiscuous mode [ 340.060912][T18819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.071706][T18819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.092975][T18819] team0: Port device team_slave_0 added [ 340.100481][T18819] team0: Port device team_slave_1 added [ 340.118986][T18844] __nla_validate_parse: 12 callbacks suppressed [ 340.119001][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5667'. [ 340.135535][T18819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.142536][T18819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.168726][T18819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.180797][T18842] ªªªªªª: renamed from vlan0 [ 340.187335][T18844] IPVS: Error joining to the multicast group [ 340.193934][T18819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.200971][T18819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.227077][T18819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.279042][T18819] hsr_slave_0: entered promiscuous mode [ 340.285910][T18819] hsr_slave_1: entered promiscuous mode [ 340.291990][T18819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.299824][T18819] Cannot create hsr debugfs directory [ 340.309330][T18852] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 340.318811][T18852] SELinux: failed to load policy [ 340.406634][T18819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.439669][T18865] lo speed is unknown, defaulting to 1000 [ 340.457604][T18819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.530298][T18819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.577767][T18819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.670126][ T6678] bridge_slave_1: left allmulticast mode [ 340.675915][ T6678] bridge_slave_1: left promiscuous mode [ 340.681761][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.689657][ T6678] bridge_slave_0: left allmulticast mode [ 340.695411][ T6678] bridge_slave_0: left promiscuous mode [ 340.701188][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.710396][ T6678] tipc: Resetting bearer [ 340.752115][ T6678] dvmrp0 (unregistering): left allmulticast mode [ 340.795021][ T6678] tipc: Disabling bearer [ 340.845939][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.857329][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.866948][ T6678] bond0 (unregistering): Released all slaves [ 340.876098][ T3394] syz2: Port: 1 Link DOWN [ 340.889038][T18819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.898140][T18819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.907304][ T6678] tipc: Left network mode [ 340.907524][T18819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.920937][T18819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.966733][ T6678] hsr_slave_0: left promiscuous mode [ 340.973161][ T6678] hsr_slave_1: left promiscuous mode [ 340.982798][ T6678] veth1_macvtap: left promiscuous mode [ 340.991744][ T6678] veth0_macvtap: left promiscuous mode [ 340.997458][ T6678] veth1_vlan: left promiscuous mode [ 341.002980][ T6678] veth0_vlan: left promiscuous mode [ 341.084728][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 341.094690][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 341.102442][ T6665] smc: removing ib device syz! [ 341.109334][ T6667] smc: removing ib device syz2 [ 341.124285][ T6678] team0 (unregistering): Port device dummy0 removed [ 341.143641][T18900] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 341.165945][T18900] SELinux: failed to load policy [ 341.189069][T18819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.225176][T18819] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.251355][ T6666] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.258625][ T6666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.278386][ T6666] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.285618][ T6666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.419482][T18911] lo speed is unknown, defaulting to 1000 [ 341.456803][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 341.456823][ T29] audit: type=1326 audit(1753690876.548:32222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.486879][ T29] audit: type=1326 audit(1753690876.548:32223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.510751][ T29] audit: type=1326 audit(1753690876.548:32224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.520516][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5690'. [ 341.534381][ T29] audit: type=1326 audit(1753690876.548:32225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.566943][ T29] audit: type=1326 audit(1753690876.548:32226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.593450][ T29] audit: type=1326 audit(1753690876.548:32227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.617215][ T29] audit: type=1326 audit(1753690876.548:32228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.641242][T18922] IPVS: Error joining to the multicast group [ 341.647975][ T29] audit: type=1326 audit(1753690876.548:32229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.671670][ T29] audit: type=1326 audit(1753690876.548:32230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.695372][ T29] audit: type=1326 audit(1753690876.548:32231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18918 comm="syz.5.5689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 341.732167][T18819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.852582][T18936] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 341.861848][T18936] SELinux: failed to load policy [ 341.948325][T18819] veth0_vlan: entered promiscuous mode [ 341.962445][T18949] netlink: 'syz.5.5700': attribute type 4 has an invalid length. [ 341.964534][T18819] veth1_vlan: entered promiscuous mode [ 341.989173][T18819] veth0_macvtap: entered promiscuous mode [ 341.998447][T18819] veth1_macvtap: entered promiscuous mode [ 342.012012][T18819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.023150][T18819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.034597][T18819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.043611][T18819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.052404][T18819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.061334][T18819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.124822][T18956] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 342.132608][T18956] SELinux: failed to load policy [ 342.252282][T18960] lo speed is unknown, defaulting to 1000 [ 342.552793][T18983] lo speed is unknown, defaulting to 1000 [ 342.892035][T19017] lo speed is unknown, defaulting to 1000 [ 343.276855][T19075] lo speed is unknown, defaulting to 1000 [ 343.375956][T19085] netlink: 'syz.4.5753': attribute type 4 has an invalid length. [ 343.448875][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5755'. [ 343.459574][T19091] IPVS: Error joining to the multicast group [ 344.252054][T19121] lo speed is unknown, defaulting to 1000 [ 344.332702][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5773'. [ 344.341896][T19134] IPVS: Error joining to the multicast group [ 344.398746][T19139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5784'. [ 344.408101][T19139] IPVS: Error joining to the multicast group [ 344.638177][T19162] lo speed is unknown, defaulting to 1000 [ 344.897148][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5789'. [ 344.906395][T19180] IPVS: Error joining to the multicast group [ 345.441790][T19201] lo speed is unknown, defaulting to 1000 [ 345.536066][T19215] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 345.551580][T19215] SELinux: failed to load policy [ 346.478615][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5817'. [ 346.487788][T19256] IPVS: Error joining to the multicast group [ 346.737768][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 346.737783][ T29] audit: type=1326 audit(1753690881.728:32901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.768159][ T29] audit: type=1326 audit(1753690881.728:32902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.791836][ T29] audit: type=1326 audit(1753690881.728:32903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.815539][ T29] audit: type=1326 audit(1753690881.728:32904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.839235][ T29] audit: type=1326 audit(1753690881.728:32905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.863011][ T29] audit: type=1326 audit(1753690881.728:32906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.886628][ T29] audit: type=1326 audit(1753690881.728:32907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.910333][ T29] audit: type=1326 audit(1753690881.728:32908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.934050][ T29] audit: type=1326 audit(1753690881.728:32909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 346.957654][ T29] audit: type=1326 audit(1753690881.728:32910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19268 comm="syz.5.5823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 347.608490][T19308] FAULT_INJECTION: forcing a failure. [ 347.608490][T19308] name failslab, interval 1, probability 0, space 0, times 0 [ 347.621312][T19308] CPU: 0 UID: 0 PID: 19308 Comm: syz.0.5841 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 347.621368][T19308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.621384][T19308] Call Trace: [ 347.621390][T19308] [ 347.621398][T19308] __dump_stack+0x1d/0x30 [ 347.621419][T19308] dump_stack_lvl+0xe8/0x140 [ 347.621437][T19308] dump_stack+0x15/0x1b [ 347.621513][T19308] should_fail_ex+0x265/0x280 [ 347.621546][T19308] should_failslab+0x8c/0xb0 [ 347.621580][T19308] __kmalloc_node_noprof+0xa9/0x410 [ 347.621614][T19308] ? x64_sys_call+0x2999/0x2fb0 [ 347.621660][T19308] ? qdisc_alloc+0x65/0x440 [ 347.621701][T19308] qdisc_alloc+0x65/0x440 [ 347.621772][T19308] qdisc_create_dflt+0x7f/0x2d0 [ 347.621806][T19308] taprio_init+0x286/0x5f0 [ 347.621837][T19308] ? __pfx_taprio_init+0x10/0x10 [ 347.621865][T19308] qdisc_create+0x591/0x9e0 [ 347.621961][T19308] tc_modify_qdisc+0xf2e/0x1420 [ 347.621995][T19308] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 347.622019][T19308] rtnetlink_rcv_msg+0x65a/0x6d0 [ 347.622072][T19308] netlink_rcv_skb+0x123/0x220 [ 347.622129][T19308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.622157][T19308] rtnetlink_rcv+0x1c/0x30 [ 347.622182][T19308] netlink_unicast+0x5a8/0x680 [ 347.622224][T19308] netlink_sendmsg+0x58b/0x6b0 [ 347.622333][T19308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.622361][T19308] __sock_sendmsg+0x142/0x180 [ 347.622386][T19308] ____sys_sendmsg+0x31e/0x4e0 [ 347.622482][T19308] ___sys_sendmsg+0x17b/0x1d0 [ 347.622523][T19308] __x64_sys_sendmsg+0xd4/0x160 [ 347.622544][T19308] x64_sys_call+0x2999/0x2fb0 [ 347.622569][T19308] do_syscall_64+0xd2/0x200 [ 347.622586][T19308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.622675][T19308] ? clear_bhb_loop+0x40/0x90 [ 347.622694][T19308] ? clear_bhb_loop+0x40/0x90 [ 347.622721][T19308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.622817][T19308] RIP: 0033:0x7fb2f645e9a9 [ 347.622830][T19308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.622847][T19308] RSP: 002b:00007fb2f4ac7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.622864][T19308] RAX: ffffffffffffffda RBX: 00007fb2f6685fa0 RCX: 00007fb2f645e9a9 [ 347.622875][T19308] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 347.622886][T19308] RBP: 00007fb2f4ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 347.622896][T19308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.622910][T19308] R13: 0000000000000000 R14: 00007fb2f6685fa0 R15: 00007ffc789a1258 [ 347.622927][T19308] [ 347.958608][T19311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5842'. [ 347.968016][T19311] IPVS: Error joining to the multicast group [ 349.019013][T19351] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.028776][T19351] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.157002][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5860'. [ 349.246130][T19351] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.256007][T19351] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.346154][T19351] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.356000][T19351] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.375001][T19364] lo speed is unknown, defaulting to 1000 [ 349.405772][T19351] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 349.415559][T19351] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 349.429753][T19368] netlink: 'syz.6.5865': attribute type 4 has an invalid length. [ 349.440087][T19368] netlink: 'syz.6.5865': attribute type 4 has an invalid length. [ 349.513149][T19372] netlink: 'syz.2.5876': attribute type 4 has an invalid length. [ 349.527554][T19372] netlink: 'syz.2.5876': attribute type 4 has an invalid length. [ 349.537914][T19351] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 349.546189][T19351] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.567539][T19351] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 349.575745][T19351] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.601721][T19351] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 349.610063][T19351] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.622270][T19351] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 349.630546][T19351] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.756378][T19379] siw: device registration error -23 [ 349.834159][T19395] lo speed is unknown, defaulting to 1000 [ 349.900845][T19404] netlink: 'syz.6.5879': attribute type 4 has an invalid length. [ 349.910384][T19404] netlink: 'syz.6.5879': attribute type 4 has an invalid length. [ 350.105926][T19425] lo speed is unknown, defaulting to 1000 [ 350.161815][T19433] netlink: 'syz.5.5892': attribute type 4 has an invalid length. [ 350.169979][T19433] netlink: 'syz.5.5892': attribute type 4 has an invalid length. [ 350.174720][T19434] siw: device registration error -23 [ 350.486548][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 350.598331][T19462] lo speed is unknown, defaulting to 1000 [ 350.691455][T19467] netlink: 'syz.6.5906': attribute type 4 has an invalid length. [ 350.701151][T19467] netlink: 'syz.6.5906': attribute type 4 has an invalid length. [ 350.817025][T19473] siw: device registration error -23 [ 350.931694][T19490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19490 comm=syz.4.5914 [ 351.174120][T19508] lo speed is unknown, defaulting to 1000 [ 351.228997][T19508] chnl_net:caif_netlink_parms(): no params data found [ 351.264381][T19508] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.271477][T19508] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.278833][T19508] bridge_slave_0: entered allmulticast mode [ 351.285464][T19508] bridge_slave_0: entered promiscuous mode [ 351.292859][T19508] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.300024][T19508] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.307319][T19508] bridge_slave_1: entered allmulticast mode [ 351.313990][T19508] bridge_slave_1: entered promiscuous mode [ 351.333017][T19508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.344073][T19508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.372875][T19508] team0: Port device team_slave_0 added [ 351.381009][T19508] team0: Port device team_slave_1 added [ 351.400581][T19508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.400601][T19508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.400740][T19508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.401348][T19508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.401359][T19508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.401515][T19508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.486679][T19508] hsr_slave_0: entered promiscuous mode [ 351.487133][T19508] hsr_slave_1: entered promiscuous mode [ 351.487390][T19508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.487407][T19508] Cannot create hsr debugfs directory [ 351.589424][T19508] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 351.599237][T19508] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.646880][T19508] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 351.656710][T19508] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.715736][T19508] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 351.725581][T19508] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 351.780861][T19548] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5934'. [ 351.789977][T19548] FAULT_INJECTION: forcing a failure. [ 351.789977][T19548] name failslab, interval 1, probability 0, space 0, times 0 [ 351.804448][T19548] CPU: 1 UID: 0 PID: 19548 Comm: syz.6.5934 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 351.804473][T19548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.804484][T19548] Call Trace: [ 351.804490][T19548] [ 351.804497][T19548] __dump_stack+0x1d/0x30 [ 351.804597][T19548] dump_stack_lvl+0xe8/0x140 [ 351.804615][T19548] dump_stack+0x15/0x1b [ 351.804629][T19548] should_fail_ex+0x265/0x280 [ 351.804657][T19548] should_failslab+0x8c/0xb0 [ 351.804677][T19548] __kmalloc_noprof+0xa5/0x3e0 [ 351.804791][T19548] ? nla_strdup+0x78/0xc0 [ 351.804816][T19548] nla_strdup+0x78/0xc0 [ 351.804839][T19548] nf_tables_newchain+0x1145/0x17d0 [ 351.804928][T19548] ? __account_obj_stock+0x211/0x350 [ 351.805035][T19548] ? __nla_parse+0x40/0x60 [ 351.805052][T19548] nfnetlink_rcv+0xb99/0x1690 [ 351.805098][T19548] ? netlink_unicast+0x31c/0x680 [ 351.805148][T19548] netlink_unicast+0x5a8/0x680 [ 351.805177][T19548] netlink_sendmsg+0x58b/0x6b0 [ 351.805219][T19548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.805318][T19548] __sock_sendmsg+0x142/0x180 [ 351.805340][T19548] ____sys_sendmsg+0x31e/0x4e0 [ 351.805374][T19548] ___sys_sendmsg+0x17b/0x1d0 [ 351.805403][T19548] __x64_sys_sendmsg+0xd4/0x160 [ 351.805423][T19548] x64_sys_call+0x2999/0x2fb0 [ 351.805443][T19548] do_syscall_64+0xd2/0x200 [ 351.805504][T19548] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 351.805528][T19548] ? clear_bhb_loop+0x40/0x90 [ 351.805589][T19548] ? clear_bhb_loop+0x40/0x90 [ 351.805608][T19548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.805627][T19548] RIP: 0033:0x7f567e8ee9a9 [ 351.805649][T19548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.805666][T19548] RSP: 002b:00007f567cf57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.805721][T19548] RAX: ffffffffffffffda RBX: 00007f567eb15fa0 RCX: 00007f567e8ee9a9 [ 351.805732][T19548] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000005 [ 351.805743][T19548] RBP: 00007f567cf57090 R08: 0000000000000000 R09: 0000000000000000 [ 351.805754][T19548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.805816][T19548] R13: 0000000000000000 R14: 00007f567eb15fa0 R15: 00007ffef1e21c68 [ 351.805833][T19548] [ 352.046545][T19508] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 352.056384][T19508] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 352.627035][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 352.627050][ T29] audit: type=1400 audit(1753690887.718:33339): avc: denied { ioctl } for pid=19575 comm="syz.5.5943" path="socket:[72632]" dev="sockfs" ino=72632 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.658180][ T29] audit: type=1400 audit(1753690887.718:33340): avc: denied { bind } for pid=19575 comm="syz.5.5943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 352.720885][T19583] lo speed is unknown, defaulting to 1000 [ 352.967465][ T29] audit: type=1326 audit(1753690888.058:33341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.024398][ T29] audit: type=1326 audit(1753690888.078:33342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.048177][ T29] audit: type=1326 audit(1753690888.078:33343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.071817][ T29] audit: type=1326 audit(1753690888.078:33344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.095514][ T29] audit: type=1326 audit(1753690888.078:33345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.119204][ T29] audit: type=1326 audit(1753690888.078:33346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.142869][ T29] audit: type=1326 audit(1753690888.078:33347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.166550][ T29] audit: type=1326 audit(1753690888.078:33348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19597 comm="syz.0.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 353.261810][T19604] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 353.269675][T19604] SELinux: failed to load policy [ 353.731087][T19615] lo speed is unknown, defaulting to 1000 [ 353.842449][T19629] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 353.851966][T19629] SELinux: failed to load policy [ 354.015806][T19648] lo speed is unknown, defaulting to 1000 [ 354.175072][T19656] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 354.182775][T19656] SELinux: failed to load policy [ 354.193107][T19508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.202452][T19508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.213620][T19508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.261713][T19508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.441660][T19508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.462666][T19508] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.478918][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.486127][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.515192][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.522367][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.548733][T19508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.559202][T19508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.577839][ T6666] batadv1: left allmulticast mode [ 354.582974][ T6666] batadv1: left promiscuous mode [ 354.588134][ T6666] bridge0: port 3(batadv1) entered disabled state [ 354.633452][ T6666] bridge_slave_1: left allmulticast mode [ 354.639205][ T6666] bridge_slave_1: left promiscuous mode [ 354.644994][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.655095][ T6666] bridge_slave_0: left allmulticast mode [ 354.660898][ T6666] bridge_slave_0: left promiscuous mode [ 354.666729][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.680686][ T6666] tipc: Resetting bearer [ 354.845233][ T6666] tipc: Disabling bearer [ 354.883983][T19688] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 354.892766][T19688] SELinux: failed to load policy [ 354.908139][ T6666] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.923721][ T6666] bond_slave_0: left promiscuous mode [ 354.931213][ T6666] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.942173][ T6666] bond_slave_1: left promiscuous mode [ 354.948723][ T6666] $Hÿ (unregistering): Released all slaves [ 355.006828][ T6666] tipc: Left network mode [ 355.017400][ T6666] hsr_slave_0: left promiscuous mode [ 355.023244][ T6666] hsr_slave_1: left promiscuous mode [ 355.029371][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.036989][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.048818][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.056308][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.074771][ T6666] veth1_macvtap: left promiscuous mode [ 355.080952][ T6666] veth0_macvtap: left promiscuous mode [ 355.086858][ T6666] veth1_vlan: left promiscuous mode [ 355.092210][ T6666] veth0_vlan: left promiscuous mode [ 355.187043][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 355.197617][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 355.241421][ T6666] team0 (unregistering): Port device dummy0 removed [ 355.268068][T19508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.406678][T19508] veth0_vlan: entered promiscuous mode [ 355.416278][T19508] veth1_vlan: entered promiscuous mode [ 355.431463][T19508] veth0_macvtap: entered promiscuous mode [ 355.441433][T19508] veth1_macvtap: entered promiscuous mode [ 355.453958][T19508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.466856][T19508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.476412][T19508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.485180][T19508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.493920][T19508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.502769][T19508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.927638][T19744] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 355.936020][T19744] SELinux: failed to load policy [ 356.462239][T19775] validate_nla: 5 callbacks suppressed [ 356.462255][T19775] netlink: 'syz.0.6018': attribute type 4 has an invalid length. [ 356.490973][T19775] netlink: 'syz.0.6018': attribute type 4 has an invalid length. [ 357.317628][T19818] netlink: 'syz.2.6038': attribute type 4 has an invalid length. [ 357.333498][T19818] netlink: 'syz.2.6038': attribute type 4 has an invalid length. [ 357.714401][T19835] netlink: 'syz.0.6044': attribute type 4 has an invalid length. [ 357.962527][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 357.962553][ T29] audit: type=1326 audit(1753690893.048:33843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.004274][T19851] netlink: 'syz.6.6052': attribute type 4 has an invalid length. [ 358.006770][ T29] audit: type=1326 audit(1753690893.048:33844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.035797][ T29] audit: type=1326 audit(1753690893.048:33845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.038019][T19851] netlink: 'syz.6.6052': attribute type 4 has an invalid length. [ 358.059440][ T29] audit: type=1326 audit(1753690893.048:33846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059501][ T29] audit: type=1326 audit(1753690893.048:33847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059534][ T29] audit: type=1326 audit(1753690893.048:33848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059564][ T29] audit: type=1326 audit(1753690893.048:33849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059650][ T29] audit: type=1326 audit(1753690893.048:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059702][ T29] audit: type=1326 audit(1753690893.048:33851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.059734][ T29] audit: type=1326 audit(1753690893.058:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19846 comm="syz.6.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 358.587065][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6057'. [ 358.872743][T19887] netlink: 'syz.6.6066': attribute type 4 has an invalid length. [ 358.883959][T19887] netlink: 'syz.6.6066': attribute type 4 has an invalid length. [ 358.911284][T19891] netlink: 'syz.6.6068': attribute type 4 has an invalid length. [ 360.142746][T19956] FAULT_INJECTION: forcing a failure. [ 360.142746][T19956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.156162][T19956] CPU: 0 UID: 0 PID: 19956 Comm: syz.2.6098 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 360.156269][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.156283][T19956] Call Trace: [ 360.156290][T19956] [ 360.156298][T19956] __dump_stack+0x1d/0x30 [ 360.156401][T19956] dump_stack_lvl+0xe8/0x140 [ 360.156420][T19956] dump_stack+0x15/0x1b [ 360.156442][T19956] should_fail_ex+0x265/0x280 [ 360.156482][T19956] should_fail_alloc_page+0xf2/0x100 [ 360.156583][T19956] __alloc_frozen_pages_noprof+0xff/0x360 [ 360.156629][T19956] alloc_pages_mpol+0xb3/0x250 [ 360.156672][T19956] alloc_pages_noprof+0x90/0x130 [ 360.156711][T19956] pte_alloc_one+0x2d/0x120 [ 360.156736][T19956] __pte_alloc+0x32/0x2b0 [ 360.156769][T19956] handle_mm_fault+0x1c16/0x2be0 [ 360.156800][T19956] ? __rcu_read_lock+0x37/0x50 [ 360.156834][T19956] __get_user_pages+0x1036/0x1fb0 [ 360.156865][T19956] __gup_longterm_locked+0x9c9/0x1010 [ 360.156894][T19956] ? exc_page_fault+0x62/0xa0 [ 360.156924][T19956] ? ___slab_alloc+0x11b/0x900 [ 360.156994][T19956] ? should_fail_ex+0xdb/0x280 [ 360.157035][T19956] pin_user_pages_remote+0x7e/0xb0 [ 360.157065][T19956] process_vm_rw+0x484/0x950 [ 360.157156][T19956] __x64_sys_process_vm_readv+0x78/0x90 [ 360.157182][T19956] x64_sys_call+0x2978/0x2fb0 [ 360.157265][T19956] do_syscall_64+0xd2/0x200 [ 360.157342][T19956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 360.157365][T19956] ? clear_bhb_loop+0x40/0x90 [ 360.157389][T19956] ? clear_bhb_loop+0x40/0x90 [ 360.157409][T19956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.157439][T19956] RIP: 0033:0x7f6deaa9e9a9 [ 360.157452][T19956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.157469][T19956] RSP: 002b:00007f6de90ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 360.157558][T19956] RAX: ffffffffffffffda RBX: 00007f6deacc5fa0 RCX: 00007f6deaa9e9a9 [ 360.157569][T19956] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000005a8 [ 360.157580][T19956] RBP: 00007f6de90ff090 R08: 0000000000000286 R09: 0000000000000000 [ 360.157591][T19956] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 360.157601][T19956] R13: 0000000000000000 R14: 00007f6deacc5fa0 R15: 00007ffc6dca5258 [ 360.157619][T19956] [ 360.499709][T19965] bond1: entered allmulticast mode [ 360.505684][T19965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.513520][T19965] bridge0: port 3(bond1) entered blocking state [ 360.519949][T19965] bridge0: port 3(bond1) entered disabled state [ 360.529372][T19965] bond1: entered promiscuous mode [ 360.661286][T19977] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 360.669454][T19977] tipc: Enabled bearer , priority 10 [ 361.276445][T20000] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.393145][T20004] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 361.401106][T20004] SELinux: failed to load policy [ 361.567647][T20008] validate_nla: 10 callbacks suppressed [ 361.567668][T20008] netlink: 'syz.4.6119': attribute type 4 has an invalid length. [ 361.584446][T20008] netlink: 'syz.4.6119': attribute type 4 has an invalid length. [ 361.748403][T20026] netlink: 'syz.0.6127': attribute type 4 has an invalid length. [ 361.784555][ T3387] tipc: Node number set to 2414375235 [ 362.341413][T20039] lo speed is unknown, defaulting to 1000 [ 362.385989][T20042] __vm_enough_memory: pid: 20042, comm: syz.0.6133, bytes: 21199666024448 not enough memory for the allocation [ 362.556121][T11539] syz_tun (unregistering): left allmulticast mode [ 362.581628][T20051] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6138'. [ 362.769829][T20072] lo speed is unknown, defaulting to 1000 [ 362.810743][T20054] lo speed is unknown, defaulting to 1000 [ 362.817720][T20061] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6136'. [ 362.944254][T20054] chnl_net:caif_netlink_parms(): no params data found [ 362.954366][ T6666] bridge_slave_1: left allmulticast mode [ 362.960063][ T6666] bridge_slave_1: left promiscuous mode [ 362.965813][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.973698][ T6666] bridge_slave_0: left allmulticast mode [ 362.979405][ T6666] bridge_slave_0: left promiscuous mode [ 362.985279][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.047558][ T6666] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.058635][ T6666] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.067923][ T6666] $Hÿ (unregistering): Released all slaves [ 363.078060][ T6666] bond1 (unregistering): Released all slaves [ 363.122358][ T6666] tipc: Left network mode [ 363.127591][T20054] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.134807][T20054] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.145222][T20054] bridge_slave_0: entered allmulticast mode [ 363.151894][T20054] bridge_slave_0: entered promiscuous mode [ 363.163423][ T6666] hsr_slave_0: left promiscuous mode [ 363.169518][ T6666] hsr_slave_1: left promiscuous mode [ 363.176665][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.184699][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.224769][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 363.241596][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 363.279550][ T6666] team0 (unregistering): Port device dummy0 removed [ 363.296912][T20054] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.304388][T20054] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.314567][T20054] bridge_slave_1: entered allmulticast mode [ 363.321349][T20054] bridge_slave_1: entered promiscuous mode [ 363.342362][T20054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.352832][T20054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.378790][T20054] team0: Port device team_slave_0 added [ 363.386654][T20054] team0: Port device team_slave_1 added [ 363.406841][T20054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.413906][T20054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.440071][T20054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.453410][T20054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.460451][T20054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.486627][T20054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.521046][T20054] hsr_slave_0: entered promiscuous mode [ 363.527276][T20054] hsr_slave_1: entered promiscuous mode [ 363.635164][T20093] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6150'. [ 363.675507][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 363.675521][ T29] audit: type=1326 audit(1753690898.768:34590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.760840][ T29] audit: type=1326 audit(1753690898.798:34591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.784540][ T29] audit: type=1326 audit(1753690898.798:34592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.808341][ T29] audit: type=1326 audit(1753690898.798:34593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.832063][ T29] audit: type=1326 audit(1753690898.798:34594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.855736][ T29] audit: type=1326 audit(1753690898.798:34595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.879485][ T29] audit: type=1326 audit(1753690898.798:34596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.903229][ T29] audit: type=1326 audit(1753690898.798:34597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.903258][ T29] audit: type=1326 audit(1753690898.798:34598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 363.903289][ T29] audit: type=1326 audit(1753690898.798:34599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20094 comm="syz.4.6151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 364.224643][T20054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 364.269602][T20054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 364.308559][T20054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 364.343497][T20054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 364.372077][T20124] lo speed is unknown, defaulting to 1000 [ 364.437849][T20135] netlink: 'syz.4.6162': attribute type 4 has an invalid length. [ 364.514583][T20054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.572757][T20054] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.607350][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6164'. [ 364.641630][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.648843][ T6665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.698778][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.705931][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.736904][T20142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 364.743483][T20142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 364.751072][T20142] vhci_hcd vhci_hcd.0: Device attached [ 364.764287][T20144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6166'. [ 364.795727][T20145] vhci_hcd: connection closed [ 364.798178][ T6666] vhci_hcd: stop threads [ 364.807240][ T6666] vhci_hcd: release socket [ 364.811672][ T6666] vhci_hcd: disconnect device [ 364.836250][T20054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.846820][T20054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.893821][T20150] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6168'. [ 364.993119][T20054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.075946][T20054] veth0_vlan: entered promiscuous mode [ 365.102203][T20054] veth1_vlan: entered promiscuous mode [ 365.138514][T20054] veth0_macvtap: entered promiscuous mode [ 365.150508][T20169] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6172'. [ 365.161805][T20054] veth1_macvtap: entered promiscuous mode [ 365.176537][T20054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.199153][T20054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.217231][T20054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.226162][T20054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.234993][T20054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.243818][T20054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.271571][T20171] lo speed is unknown, defaulting to 1000 [ 365.436366][T20179] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 365.453809][T20179] SELinux: failed to load policy [ 365.593234][T20189] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6179'. [ 365.906257][T20207] netlink: 'syz.6.6187': attribute type 4 has an invalid length. [ 365.924731][T20207] netlink: 'syz.6.6187': attribute type 4 has an invalid length. [ 365.999636][T20210] lo speed is unknown, defaulting to 1000 [ 366.055950][T20215] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6190'. [ 366.117428][T20218] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 366.133903][T20218] SELinux: failed to load policy [ 366.485167][T20238] netlink: 'syz.2.6199': attribute type 4 has an invalid length. [ 366.498579][T20238] netlink: 'syz.2.6199': attribute type 4 has an invalid length. [ 366.513548][T20240] netlink: 'syz.4.6200': attribute type 4 has an invalid length. [ 366.688575][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6206'. [ 366.698951][T20254] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 366.785185][T20264] lo speed is unknown, defaulting to 1000 [ 366.828957][T20267] netlink: 'syz.2.6213': attribute type 4 has an invalid length. [ 366.829184][T20269] netlink: 'syz.0.6212': attribute type 4 has an invalid length. [ 366.850501][T20269] netlink: 'syz.0.6212': attribute type 4 has an invalid length. [ 366.995562][T20279] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 367.003239][T20279] SELinux: failed to load policy [ 367.100886][T20283] netlink: 'syz.5.6219': attribute type 4 has an invalid length. [ 367.109265][T20284] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6221'. [ 367.122300][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6220'. [ 367.163177][T20291] netlink: 'syz.5.6224': attribute type 4 has an invalid length. [ 367.220581][T20298] netlink: 'syz.0.6227': attribute type 4 has an invalid length. [ 367.294797][T20306] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 367.302545][T20306] SELinux: failed to load policy [ 367.311204][T20302] bridge: RTM_NEWNEIGH with invalid ether address [ 367.516754][T20333] netlink: 'syz.6.6242': attribute type 4 has an invalid length. [ 367.568609][T20338] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 367.583251][T20338] SELinux: failed to load policy [ 367.780560][T20362] netlink: 'syz.6.6255': attribute type 4 has an invalid length. [ 367.974558][T20384] netlink: 'syz.6.6266': attribute type 4 has an invalid length. [ 367.985891][T20378] netlink: 'syz.2.6263': attribute type 3 has an invalid length. [ 368.678179][T20448] __nla_validate_parse: 10 callbacks suppressed [ 368.678198][T20448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6296'. [ 368.849055][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 368.849069][ T29] audit: type=1326 audit(1753690903.938:35344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.879670][ T29] audit: type=1326 audit(1753690903.938:35345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.903360][ T29] audit: type=1326 audit(1753690903.938:35346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.927024][ T29] audit: type=1326 audit(1753690903.938:35347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.950683][ T29] audit: type=1326 audit(1753690903.938:35348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.974295][ T29] audit: type=1326 audit(1753690903.938:35349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 368.997919][ T29] audit: type=1326 audit(1753690903.938:35350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 369.021673][ T29] audit: type=1326 audit(1753690903.938:35351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 369.045329][ T29] audit: type=1326 audit(1753690903.938:35352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 369.069111][ T29] audit: type=1326 audit(1753690903.938:35353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20453 comm="syz.4.6299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5374e4e9a9 code=0x7ffc0000 [ 369.191095][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6305'. [ 369.252484][T20474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6308'. [ 369.437293][T20478] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.6310'. [ 369.488403][T20488] FAULT_INJECTION: forcing a failure. [ 369.488403][T20488] name failslab, interval 1, probability 0, space 0, times 0 [ 369.501341][T20488] CPU: 0 UID: 0 PID: 20488 Comm: syz.6.6315 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 369.501371][T20488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.501391][T20488] Call Trace: [ 369.501398][T20488] [ 369.501407][T20488] __dump_stack+0x1d/0x30 [ 369.501434][T20488] dump_stack_lvl+0xe8/0x140 [ 369.501457][T20488] dump_stack+0x15/0x1b [ 369.501473][T20488] should_fail_ex+0x265/0x280 [ 369.501541][T20488] ? alloc_mnt_ns+0x72/0x270 [ 369.501647][T20488] should_failslab+0x8c/0xb0 [ 369.501675][T20488] __kmalloc_cache_noprof+0x4c/0x320 [ 369.501706][T20488] ? inc_ucount+0xcb/0x140 [ 369.501806][T20488] alloc_mnt_ns+0x72/0x270 [ 369.501923][T20488] __se_sys_fsmount+0x398/0x580 [ 369.501969][T20488] __x64_sys_fsmount+0x43/0x50 [ 369.502035][T20488] x64_sys_call+0x2a6a/0x2fb0 [ 369.502064][T20488] do_syscall_64+0xd2/0x200 [ 369.502088][T20488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 369.502122][T20488] ? clear_bhb_loop+0x40/0x90 [ 369.502185][T20488] ? clear_bhb_loop+0x40/0x90 [ 369.502214][T20488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.502242][T20488] RIP: 0033:0x7f567e8ee9a9 [ 369.502262][T20488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.502286][T20488] RSP: 002b:00007f567cf57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 369.502328][T20488] RAX: ffffffffffffffda RBX: 00007f567eb15fa0 RCX: 00007f567e8ee9a9 [ 369.502379][T20488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 369.502428][T20488] RBP: 00007f567cf57090 R08: 0000000000000000 R09: 0000000000000000 [ 369.502445][T20488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.502508][T20488] R13: 0000000000000000 R14: 00007f567eb15fa0 R15: 00007ffef1e21c68 [ 369.502577][T20488] [ 369.827197][T20504] lo speed is unknown, defaulting to 1000 [ 369.841353][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6322'. [ 370.304071][T20546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6340'. [ 370.446340][T20555] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 370.492489][T20559] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6347'. [ 370.557532][T20565] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 370.570505][T20565] SELinux: failed to load policy [ 370.798664][T20581] lo speed is unknown, defaulting to 1000 [ 370.848932][T20586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6357'. [ 371.311856][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6373'. [ 371.344189][T20620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6373'. [ 371.463734][T20630] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 371.472010][T20630] SELinux: failed to load policy [ 371.676948][T20647] lo speed is unknown, defaulting to 1000 [ 371.899490][T20664] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 371.908947][T20664] SELinux: failed to load policy [ 372.039951][T20674] validate_nla: 16 callbacks suppressed [ 372.039966][T20674] netlink: 'syz.4.6397': attribute type 4 has an invalid length. [ 372.292490][T20699] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 372.301549][T20699] SELinux: failed to load policy [ 372.364068][T20705] netlink: 'syz.6.6413': attribute type 4 has an invalid length. [ 372.701312][T20729] batadv_slave_0: entered promiscuous mode [ 372.728955][T20728] batadv_slave_0: left promiscuous mode [ 372.837742][T20738] netlink: 'syz.0.6426': attribute type 4 has an invalid length. [ 372.916600][T20746] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 372.925176][T20746] SELinux: failed to load policy [ 373.077786][T20763] FAULT_INJECTION: forcing a failure. [ 373.077786][T20763] name failslab, interval 1, probability 0, space 0, times 0 [ 373.090661][T20763] CPU: 1 UID: 0 PID: 20763 Comm: syz.2.6439 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 373.090689][T20763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.090702][T20763] Call Trace: [ 373.090707][T20763] [ 373.090714][T20763] __dump_stack+0x1d/0x30 [ 373.090739][T20763] dump_stack_lvl+0xe8/0x140 [ 373.090764][T20763] dump_stack+0x15/0x1b [ 373.090827][T20763] should_fail_ex+0x265/0x280 [ 373.090860][T20763] should_failslab+0x8c/0xb0 [ 373.090881][T20763] kmem_cache_alloc_noprof+0x50/0x310 [ 373.090909][T20763] ? audit_log_start+0x365/0x6c0 [ 373.091007][T20763] audit_log_start+0x365/0x6c0 [ 373.091102][T20763] audit_seccomp+0x48/0x100 [ 373.091136][T20763] ? __seccomp_filter+0x68c/0x10d0 [ 373.091166][T20763] __seccomp_filter+0x69d/0x10d0 [ 373.091271][T20763] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 373.091402][T20763] ? vfs_write+0x75e/0x8e0 [ 373.091442][T20763] ? __rcu_read_unlock+0x4f/0x70 [ 373.091476][T20763] ? __fget_files+0x184/0x1c0 [ 373.091501][T20763] ? 0xffffffffff600000 [ 373.091521][T20763] __secure_computing+0x82/0x150 [ 373.091549][T20763] syscall_trace_enter+0xcf/0x1e0 [ 373.091630][T20763] do_syscall_64+0xac/0x200 [ 373.091653][T20763] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 373.091712][T20763] ? clear_bhb_loop+0x40/0x90 [ 373.091736][T20763] ? clear_bhb_loop+0x40/0x90 [ 373.091758][T20763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.091817][T20763] RIP: 0033:0x7fd3fd62e9a9 [ 373.091899][T20763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.091917][T20763] RSP: 002b:00007fd3fbc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 373.091936][T20763] RAX: ffffffffffffffda RBX: 00007fd3fd855fa0 RCX: 00007fd3fd62e9a9 [ 373.091952][T20763] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.092046][T20763] RBP: 00007fd3fbc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 373.092058][T20763] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 373.092070][T20763] R13: 0000000000000000 R14: 00007fd3fd855fa0 R15: 00007ffd679dbdc8 [ 373.092086][T20763] ? 0xffffffffff600000 [ 373.092107][T20763] [ 373.315694][T20757] netlink: 'syz.4.6436': attribute type 3 has an invalid length. [ 373.768256][T20808] netlink: 'syz.4.6458': attribute type 3 has an invalid length. [ 373.776145][T20808] __nla_validate_parse: 12 callbacks suppressed [ 373.776162][T20808] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6458'. [ 374.127795][T20833] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 374.135874][T20833] SELinux: failed to load policy [ 374.229032][T20837] FAULT_INJECTION: forcing a failure. [ 374.229032][T20837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.242200][T20837] CPU: 1 UID: 0 PID: 20837 Comm: syz.5.6469 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 374.242268][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.242284][T20837] Call Trace: [ 374.242292][T20837] [ 374.242351][T20837] __dump_stack+0x1d/0x30 [ 374.242385][T20837] dump_stack_lvl+0xe8/0x140 [ 374.242417][T20837] dump_stack+0x15/0x1b [ 374.242438][T20837] should_fail_ex+0x265/0x280 [ 374.242539][T20837] should_fail+0xb/0x20 [ 374.242575][T20837] should_fail_usercopy+0x1a/0x20 [ 374.242614][T20837] _copy_from_user+0x1c/0xb0 [ 374.242684][T20837] get_itimerspec64+0x4c/0x1a0 [ 374.242714][T20837] __x64_sys_timerfd_settime+0x89/0x140 [ 374.242755][T20837] x64_sys_call+0x44c/0x2fb0 [ 374.242782][T20837] do_syscall_64+0xd2/0x200 [ 374.242821][T20837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 374.242894][T20837] ? clear_bhb_loop+0x40/0x90 [ 374.242922][T20837] ? clear_bhb_loop+0x40/0x90 [ 374.242952][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.243035][T20837] RIP: 0033:0x7fa066e9e9a9 [ 374.243051][T20837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.243135][T20837] RSP: 002b:00007fa065507038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 374.243156][T20837] RAX: ffffffffffffffda RBX: 00007fa0670c5fa0 RCX: 00007fa066e9e9a9 [ 374.243169][T20837] RDX: 00002000000001c0 RSI: 0000000000000002 RDI: 0000000000000006 [ 374.243236][T20837] RBP: 00007fa065507090 R08: 0000000000000000 R09: 0000000000000000 [ 374.243248][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.243261][T20837] R13: 0000000000000000 R14: 00007fa0670c5fa0 R15: 00007ffcc332c5e8 [ 374.243281][T20837] [ 374.485034][ T29] kauditd_printk_skb: 1268 callbacks suppressed [ 374.485049][ T29] audit: type=1326 audit(1753690909.578:36620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.515959][ T29] audit: type=1326 audit(1753690909.578:36621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.539726][ T29] audit: type=1326 audit(1753690909.578:36622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.563439][ T29] audit: type=1326 audit(1753690909.578:36623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.587460][ T29] audit: type=1326 audit(1753690909.578:36624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.611116][ T29] audit: type=1326 audit(1753690909.578:36625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.634879][ T29] audit: type=1326 audit(1753690909.578:36626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.658700][ T29] audit: type=1326 audit(1753690909.578:36627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.682329][ T29] audit: type=1326 audit(1753690909.578:36628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.706177][ T29] audit: type=1326 audit(1753690909.578:36629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20845 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2f645e9a9 code=0x7ffc0000 [ 374.775780][T20861] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 374.783500][T20861] SELinux: failed to load policy [ 374.919599][T20877] gretap0: entered promiscuous mode [ 374.926226][T20877] vlan2: entered promiscuous mode [ 374.975106][T20877] 9pnet_fd: Insufficient options for proto=fd [ 375.144498][T20897] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 375.152256][T20897] SELinux: failed to load policy [ 375.254177][T20909] netlink: 'syz.4.6501': attribute type 3 has an invalid length. [ 375.262033][T20909] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6501'. [ 375.396436][T20912] netlink: 'syz.4.6502': attribute type 3 has an invalid length. [ 375.404290][T20912] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6502'. [ 375.432341][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6503'. [ 375.615360][T20927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6507'. [ 376.099031][T20985] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 376.108447][T20985] SELinux: failed to load policy [ 376.121095][T20988] netlink: 'syz.6.6530': attribute type 4 has an invalid length. [ 376.122054][T20991] netlink: 'syz.5.6531': attribute type 3 has an invalid length. [ 376.136819][T20991] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.6531'. [ 376.188869][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6534'. [ 376.286778][T21015] netlink: 'syz.6.6542': attribute type 11 has an invalid length. [ 376.308740][T21016] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6543'. [ 376.325734][T21015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6542'. [ 376.400042][T21025] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6546'. [ 376.474319][T21037] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 376.482120][T21037] SELinux: failed to load policy [ 376.763798][T21077] lo speed is unknown, defaulting to 1000 [ 377.140557][T21123] validate_nla: 11 callbacks suppressed [ 377.140573][T21123] netlink: 'syz.2.6587': attribute type 3 has an invalid length. [ 377.258060][T21143] netlink: 'syz.6.6595': attribute type 4 has an invalid length. [ 377.373776][T21153] netlink: 'syz.5.6601': attribute type 4 has an invalid length. [ 377.396636][T21153] netlink: 'syz.5.6601': attribute type 4 has an invalid length. [ 377.537998][T21171] netlink: 'syz.6.6611': attribute type 3 has an invalid length. [ 377.560318][T21176] lo speed is unknown, defaulting to 1000 [ 377.689992][T21193] netlink: 'syz.5.6619': attribute type 4 has an invalid length. [ 377.700116][T21193] netlink: 'syz.5.6619': attribute type 4 has an invalid length. [ 377.777904][T21199] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 377.789263][T21199] SELinux: failed to load policy [ 377.881048][T21209] netlink: 'syz.4.6625': attribute type 3 has an invalid length. [ 377.928291][T21211] lo speed is unknown, defaulting to 1000 [ 378.003045][T21222] netlink: 'syz.4.6630': attribute type 4 has an invalid length. [ 378.014463][T21222] netlink: 'syz.4.6630': attribute type 4 has an invalid length. [ 378.045994][T21225] FAULT_INJECTION: forcing a failure. [ 378.045994][T21225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.059384][T21225] CPU: 1 UID: 0 PID: 21225 Comm: syz.4.6631 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 378.059420][T21225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.059433][T21225] Call Trace: [ 378.059457][T21225] [ 378.059467][T21225] __dump_stack+0x1d/0x30 [ 378.059493][T21225] dump_stack_lvl+0xe8/0x140 [ 378.059513][T21225] dump_stack+0x15/0x1b [ 378.059529][T21225] should_fail_ex+0x265/0x280 [ 378.059560][T21225] should_fail+0xb/0x20 [ 378.059630][T21225] should_fail_usercopy+0x1a/0x20 [ 378.059661][T21225] _copy_from_iter+0xcf/0xe40 [ 378.059781][T21225] ? alloc_pages_mpol+0x201/0x250 [ 378.059857][T21225] copy_page_from_iter+0x178/0x2a0 [ 378.059891][T21225] tun_get_user+0x5f0/0x2500 [ 378.059990][T21225] ? ref_tracker_alloc+0x1f2/0x2f0 [ 378.060029][T21225] tun_chr_write_iter+0x15e/0x210 [ 378.060056][T21225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 378.060118][T21225] vfs_write+0x4a0/0x8e0 [ 378.060155][T21225] ksys_write+0xda/0x1a0 [ 378.060193][T21225] __x64_sys_write+0x40/0x50 [ 378.060272][T21225] x64_sys_call+0x2cdd/0x2fb0 [ 378.060301][T21225] do_syscall_64+0xd2/0x200 [ 378.060325][T21225] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 378.060353][T21225] ? clear_bhb_loop+0x40/0x90 [ 378.060432][T21225] ? clear_bhb_loop+0x40/0x90 [ 378.060488][T21225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.060535][T21225] RIP: 0033:0x7f5374e4d45f [ 378.060554][T21225] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 378.060574][T21225] RSP: 002b:00007f53734b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 378.060595][T21225] RAX: ffffffffffffffda RBX: 00007f5375075fa0 RCX: 00007f5374e4d45f [ 378.060666][T21225] RDX: 0000000000000036 RSI: 0000200000000580 RDI: 00000000000000c8 [ 378.060678][T21225] RBP: 00007f53734b7090 R08: 0000000000000000 R09: 0000000000000000 [ 378.060690][T21225] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 378.060706][T21225] R13: 0000000000000001 R14: 00007f5375075fa0 R15: 00007ffd63996068 [ 378.060732][T21225] [ 378.350174][T21235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.407454][T21235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.428856][T21245] lo speed is unknown, defaulting to 1000 [ 378.479120][T21235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.549762][T21235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.626428][T21235] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.639071][T21235] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.702465][T21235] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.727123][T21235] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.887840][T21283] lo speed is unknown, defaulting to 1000 [ 379.005191][T21299] __nla_validate_parse: 8 callbacks suppressed [ 379.005209][T21299] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.6659'. [ 379.345289][T21325] lo speed is unknown, defaulting to 1000 [ 379.462102][T21338] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 379.495421][ T29] kauditd_printk_skb: 1588 callbacks suppressed [ 379.495440][ T29] audit: type=1326 audit(1753690914.588:38218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.534018][T21338] SELinux: failed to load policy [ 379.556697][ T29] audit: type=1326 audit(1753690914.588:38219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.580577][ T29] audit: type=1326 audit(1753690914.588:38220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.604338][ T29] audit: type=1326 audit(1753690914.588:38221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.628055][ T29] audit: type=1326 audit(1753690914.588:38222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.651605][ T29] audit: type=1326 audit(1753690914.588:38223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.675208][ T29] audit: type=1326 audit(1753690914.588:38224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.698746][ T29] audit: type=1326 audit(1753690914.588:38225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.722442][ T29] audit: type=1326 audit(1753690914.588:38226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.746077][ T29] audit: type=1326 audit(1753690914.588:38227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21342 comm="syz.5.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa066e9e9a9 code=0x7ffc0000 [ 379.803549][T21349] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 379.841901][T21349] SELinux: failed to load policy [ 380.050792][T21371] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 380.062800][T21371] SELinux: failed to load policy [ 380.064977][T21367] lo speed is unknown, defaulting to 1000 [ 380.210601][T21385] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 380.219736][T21385] SELinux: failed to load policy [ 380.347647][T21399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21399 comm=syz.4.6702 [ 380.443114][T21409] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 380.454481][T21409] SELinux: failed to load policy [ 380.548701][T21404] lo speed is unknown, defaulting to 1000 [ 380.627572][T21414] lo speed is unknown, defaulting to 1000 [ 380.679193][T21416] lo speed is unknown, defaulting to 1000 [ 380.801835][T21436] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 380.811014][T21436] SELinux: failed to load policy [ 380.907180][T21446] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 380.923720][T21446] SELinux: failed to load policy [ 381.044776][T21460] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 381.100677][T21464] lo speed is unknown, defaulting to 1000 [ 381.114888][T21470] sch_tbf: peakrate 5 is lower than or equals to rate 16 ! [ 381.209750][T21466] lo speed is unknown, defaulting to 1000 [ 381.313314][T21488] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 381.327790][T21488] SELinux: failed to load policy [ 381.340425][T21491] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 381.358503][T21491] SELinux: failed to load policy [ 381.369436][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6741'. [ 381.501333][T21508] lo speed is unknown, defaulting to 1000 [ 381.590898][T21517] FAULT_INJECTION: forcing a failure. [ 381.590898][T21517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.604233][T21517] CPU: 1 UID: 0 PID: 21517 Comm: syz.0.6752 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 381.604265][T21517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.604279][T21517] Call Trace: [ 381.604287][T21517] [ 381.604345][T21517] __dump_stack+0x1d/0x30 [ 381.604368][T21517] dump_stack_lvl+0xe8/0x140 [ 381.604389][T21517] dump_stack+0x15/0x1b [ 381.604489][T21517] should_fail_ex+0x265/0x280 [ 381.604528][T21517] should_fail+0xb/0x20 [ 381.604560][T21517] should_fail_usercopy+0x1a/0x20 [ 381.604676][T21517] _copy_to_user+0x20/0xa0 [ 381.604701][T21517] copy_siginfo_to_user+0x22/0xb0 [ 381.604726][T21517] x64_setup_rt_frame+0x2b5/0x580 [ 381.604781][T21517] arch_do_signal_or_restart+0x27c/0x480 [ 381.604819][T21517] exit_to_user_mode_loop+0x7a/0x100 [ 381.604851][T21517] do_syscall_64+0x1d6/0x200 [ 381.604875][T21517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 381.604918][T21517] ? clear_bhb_loop+0x40/0x90 [ 381.604943][T21517] ? clear_bhb_loop+0x40/0x90 [ 381.604977][T21517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.605001][T21517] RIP: 0033:0x7fb2f645d30e [ 381.605019][T21517] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 [ 381.605041][T21517] RSP: 002b:00007fb2f4ac6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 381.605134][T21517] RAX: 0000000000000101 RBX: 0000000000022081 RCX: 00007fb2f645d310 [ 381.605148][T21517] RDX: 0000000000022081 RSI: 00007fb2f4ac6c10 RDI: 00000000ffffff9c [ 381.605231][T21517] RBP: 00007fb2f4ac6c10 R08: 0000000000000000 R09: 002367732f766564 [ 381.605246][T21517] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 381.605295][T21517] R13: 0000000000000000 R14: 00007fb2f6685fa0 R15: 00007ffc789a1258 [ 381.605316][T21517] [ 381.888920][T21537] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 381.949461][T21533] syz_tun: entered allmulticast mode [ 382.026089][T21532] syz_tun: left allmulticast mode [ 382.064490][T21555] lo speed is unknown, defaulting to 1000 [ 382.154140][T21564] validate_nla: 31 callbacks suppressed [ 382.154155][T21564] netlink: 'syz.4.6772': attribute type 4 has an invalid length. [ 382.202869][T21564] netlink: 'syz.4.6772': attribute type 4 has an invalid length. [ 382.261415][T21569] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 382.315489][T21576] netlink: 'syz.4.6778': attribute type 4 has an invalid length. [ 382.439368][T21586] netlink: 'syz.0.6784': attribute type 4 has an invalid length. [ 382.449120][T21586] netlink: 'syz.0.6784': attribute type 4 has an invalid length. [ 382.478905][T21588] lo speed is unknown, defaulting to 1000 [ 382.551657][T21602] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 382.608908][T21607] netlink: 'syz.4.6791': attribute type 4 has an invalid length. [ 382.640899][T21613] FAULT_INJECTION: forcing a failure. [ 382.640899][T21613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.654193][T21613] CPU: 0 UID: 0 PID: 21613 Comm: syz.4.6793 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 382.654285][T21613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.654302][T21613] Call Trace: [ 382.654311][T21613] [ 382.654321][T21613] __dump_stack+0x1d/0x30 [ 382.654396][T21613] dump_stack_lvl+0xe8/0x140 [ 382.654421][T21613] dump_stack+0x15/0x1b [ 382.654442][T21613] should_fail_ex+0x265/0x280 [ 382.654522][T21613] should_fail+0xb/0x20 [ 382.654549][T21613] should_fail_usercopy+0x1a/0x20 [ 382.654612][T21613] _copy_from_user+0x1c/0xb0 [ 382.654639][T21613] vt_do_kdsk_ioctl+0x54/0x720 [ 382.654682][T21613] ? security_capable+0x83/0x90 [ 382.654719][T21613] vt_ioctl+0x8e8/0x1880 [ 382.654745][T21613] ? tty_jobctrl_ioctl+0x29e/0x810 [ 382.654770][T21613] tty_ioctl+0x7db/0xb80 [ 382.654840][T21613] ? __pfx_tty_ioctl+0x10/0x10 [ 382.654877][T21613] __se_sys_ioctl+0xce/0x140 [ 382.654911][T21613] __x64_sys_ioctl+0x43/0x50 [ 382.655007][T21613] x64_sys_call+0x19a8/0x2fb0 [ 382.655033][T21613] do_syscall_64+0xd2/0x200 [ 382.655067][T21613] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 382.655187][T21613] ? clear_bhb_loop+0x40/0x90 [ 382.655212][T21613] ? clear_bhb_loop+0x40/0x90 [ 382.655239][T21613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.655265][T21613] RIP: 0033:0x7f5374e4e9a9 [ 382.655282][T21613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.655325][T21613] RSP: 002b:00007f53734b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.655347][T21613] RAX: ffffffffffffffda RBX: 00007f5375075fa0 RCX: 00007f5374e4e9a9 [ 382.655363][T21613] RDX: 00002000000000c0 RSI: 0000000000004b46 RDI: 0000000000000003 [ 382.655379][T21613] RBP: 00007f53734b7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.655438][T21613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.655524][T21613] R13: 0000000000000000 R14: 00007f5375075fa0 R15: 00007ffd63996068 [ 382.655548][T21613] [ 382.916686][T21622] netlink: 'syz.5.6797': attribute type 4 has an invalid length. [ 382.927247][T21625] random: crng reseeded on system resumption [ 382.936662][T21626] IPv4: Oversized IP packet from 127.202.26.0 [ 382.949835][T21622] netlink: 'syz.5.6797': attribute type 4 has an invalid length. [ 382.971918][T21627] lo speed is unknown, defaulting to 1000 [ 383.075087][T21639] netlink: 'syz.4.6804': attribute type 4 has an invalid length. [ 383.102027][T21643] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 383.123100][T21643] sel_write_load: 3 callbacks suppressed [ 383.123155][T21643] SELinux: failed to load policy [ 383.198857][T21656] netlink: 'syz.5.6812': attribute type 4 has an invalid length. [ 383.335705][T21665] lo speed is unknown, defaulting to 1000 [ 383.417245][T21677] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 383.438255][T21677] SELinux: failed to load policy [ 383.459862][T21688] FAULT_INJECTION: forcing a failure. [ 383.459862][T21688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.473108][T21688] CPU: 0 UID: 0 PID: 21688 Comm: syz.2.6825 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 383.473212][T21688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.473228][T21688] Call Trace: [ 383.473236][T21688] [ 383.473243][T21688] __dump_stack+0x1d/0x30 [ 383.473293][T21688] dump_stack_lvl+0xe8/0x140 [ 383.473316][T21688] dump_stack+0x15/0x1b [ 383.473336][T21688] should_fail_ex+0x265/0x280 [ 383.473389][T21688] should_fail+0xb/0x20 [ 383.473422][T21688] should_fail_usercopy+0x1a/0x20 [ 383.473461][T21688] _copy_from_user+0x1c/0xb0 [ 383.473513][T21688] __sys_bpf+0x178/0x790 [ 383.473555][T21688] __x64_sys_bpf+0x41/0x50 [ 383.473581][T21688] x64_sys_call+0x2478/0x2fb0 [ 383.473607][T21688] do_syscall_64+0xd2/0x200 [ 383.473693][T21688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.473726][T21688] ? clear_bhb_loop+0x40/0x90 [ 383.473750][T21688] ? clear_bhb_loop+0x40/0x90 [ 383.473775][T21688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.473802][T21688] RIP: 0033:0x7fd3fd62e9a9 [ 383.473840][T21688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.473863][T21688] RSP: 002b:00007fd3fbc8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.473953][T21688] RAX: ffffffffffffffda RBX: 00007fd3fd855fa0 RCX: 00007fd3fd62e9a9 [ 383.473998][T21688] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000006 [ 383.474010][T21688] RBP: 00007fd3fbc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 383.474025][T21688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.474039][T21688] R13: 0000000000000000 R14: 00007fd3fd855fa0 R15: 00007ffd679dbdc8 [ 383.474059][T21688] [ 383.791327][T21705] lo speed is unknown, defaulting to 1000 [ 383.815418][T21712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.822881][T21712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.833640][T21712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.841145][T21712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.859732][T21715] FAULT_INJECTION: forcing a failure. [ 383.859732][T21715] name failslab, interval 1, probability 0, space 0, times 0 [ 383.872704][T21715] CPU: 0 UID: 0 PID: 21715 Comm: syz.4.6837 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 383.872736][T21715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.872752][T21715] Call Trace: [ 383.872760][T21715] [ 383.872770][T21715] __dump_stack+0x1d/0x30 [ 383.872798][T21715] dump_stack_lvl+0xe8/0x140 [ 383.872823][T21715] dump_stack+0x15/0x1b [ 383.872860][T21715] should_fail_ex+0x265/0x280 [ 383.872899][T21715] should_failslab+0x8c/0xb0 [ 383.872926][T21715] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 383.872962][T21715] ? should_fail_ex+0xdb/0x280 [ 383.873067][T21715] ? sidtab_sid2str_get+0xa0/0x130 [ 383.873091][T21715] kmemdup_noprof+0x2b/0x70 [ 383.873113][T21715] sidtab_sid2str_get+0xa0/0x130 [ 383.873137][T21715] security_sid_to_context_core+0x1eb/0x2e0 [ 383.873196][T21715] security_sid_to_context_force+0x2a/0x40 [ 383.873220][T21715] selinux_inode_init_security+0x31f/0x3c0 [ 383.873275][T21715] security_inode_init_security+0x146/0x330 [ 383.873307][T21715] ? __pfx_shmem_initxattrs+0x10/0x10 [ 383.873330][T21715] shmem_symlink+0xc9/0x3d0 [ 383.873407][T21715] ? selinux_inode_symlink+0x22/0x30 [ 383.873427][T21715] vfs_symlink+0xd1/0x1e0 [ 383.873478][T21715] do_symlinkat+0xc7/0x3c0 [ 383.873519][T21715] __x64_sys_symlink+0x50/0x60 [ 383.873550][T21715] x64_sys_call+0x2d8d/0x2fb0 [ 383.873572][T21715] do_syscall_64+0xd2/0x200 [ 383.873638][T21715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.873673][T21715] ? clear_bhb_loop+0x40/0x90 [ 383.873698][T21715] ? clear_bhb_loop+0x40/0x90 [ 383.873802][T21715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.873831][T21715] RIP: 0033:0x7f5374e4e9a9 [ 383.873851][T21715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.873874][T21715] RSP: 002b:00007f53734b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 383.873898][T21715] RAX: ffffffffffffffda RBX: 00007f5375075fa0 RCX: 00007f5374e4e9a9 [ 383.873931][T21715] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000001640 [ 383.873944][T21715] RBP: 00007f53734b7090 R08: 0000000000000000 R09: 0000000000000000 [ 383.873967][T21715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.873982][T21715] R13: 0000000000000000 R14: 00007f5375075fa0 R15: 00007ffd63996068 [ 383.874006][T21715] [ 383.914532][T21716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6836'. [ 384.190866][T21732] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 384.198541][T21732] SELinux: failed to load policy [ 384.396405][T21747] lo speed is unknown, defaulting to 1000 [ 384.517168][ T29] kauditd_printk_skb: 1349 callbacks suppressed [ 384.517213][ T29] audit: type=1400 audit(1753690919.608:39577): avc: denied { create } for pid=21757 comm="syz.2.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.534086][T21761] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 384.553022][T21761] SELinux: failed to load policy [ 384.579504][ T29] audit: type=1400 audit(1753690919.608:39578): avc: denied { write } for pid=21757 comm="syz.2.6854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.589187][T21758] lo speed is unknown, defaulting to 1000 [ 384.599177][ T29] audit: type=1400 audit(1753690919.648:39579): avc: denied { read write } for pid=21756 comm="syz.4.6853" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 384.630687][ T29] audit: type=1400 audit(1753690919.648:39580): avc: denied { open } for pid=21756 comm="syz.4.6853" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 384.723508][ T29] audit: type=1326 audit(1753690919.808:39581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fd62e9a9 code=0x7ffc0000 [ 384.747240][ T29] audit: type=1326 audit(1753690919.808:39582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd3fd62e9a9 code=0x7ffc0000 [ 384.770943][ T29] audit: type=1326 audit(1753690919.808:39583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fd62e9a9 code=0x7ffc0000 [ 384.794544][ T29] audit: type=1326 audit(1753690919.808:39584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3fd62e9a9 code=0x7ffc0000 [ 384.818080][ T29] audit: type=1326 audit(1753690919.808:39585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3fd62e9a9 code=0x7ffc0000 [ 384.842255][ T29] audit: type=1326 audit(1753690919.808:39586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21766 comm="syz.2.6857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3fd62d310 code=0x7ffc0000 [ 384.962704][T21781] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 385.095011][T21795] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 385.102744][T21795] SELinux: failed to load policy [ 385.111740][T21791] lo speed is unknown, defaulting to 1000 [ 385.233877][T21805] hsr0: entered promiscuous mode [ 385.241105][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6875'. [ 385.280094][T21805] hsr_slave_0: left promiscuous mode [ 385.291585][T21805] hsr_slave_1: left promiscuous mode [ 385.308608][T21805] hsr0 (unregistering): left promiscuous mode [ 385.323264][T21820] team0: Device dummy0 is up. Set it down before adding it as a team port [ 385.342135][T21820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6882'. [ 385.381302][T21824] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 385.385202][T21805] netem: change failed [ 385.391103][T21824] SELinux: failed to load policy [ 385.427921][T21829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 385.489403][T21831] lo speed is unknown, defaulting to 1000 [ 385.613224][T21854] FAULT_INJECTION: forcing a failure. [ 385.613224][T21854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.626555][T21854] CPU: 1 UID: 0 PID: 21854 Comm: syz.5.6897 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 385.626584][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.626597][T21854] Call Trace: [ 385.626602][T21854] [ 385.626610][T21854] __dump_stack+0x1d/0x30 [ 385.626693][T21854] dump_stack_lvl+0xe8/0x140 [ 385.626718][T21854] dump_stack+0x15/0x1b [ 385.626739][T21854] should_fail_ex+0x265/0x280 [ 385.626773][T21854] should_fail+0xb/0x20 [ 385.626803][T21854] should_fail_usercopy+0x1a/0x20 [ 385.626891][T21854] _copy_to_user+0x20/0xa0 [ 385.626911][T21854] simple_read_from_buffer+0xb5/0x130 [ 385.626950][T21854] proc_fail_nth_read+0x100/0x140 [ 385.627015][T21854] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.627049][T21854] vfs_read+0x1a0/0x6f0 [ 385.627115][T21854] ? __rcu_read_unlock+0x4f/0x70 [ 385.627143][T21854] ? __fget_files+0x184/0x1c0 [ 385.627183][T21854] ksys_read+0xda/0x1a0 [ 385.627272][T21854] __x64_sys_read+0x40/0x50 [ 385.627312][T21854] x64_sys_call+0x2d77/0x2fb0 [ 385.627339][T21854] do_syscall_64+0xd2/0x200 [ 385.627408][T21854] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 385.627441][T21854] ? clear_bhb_loop+0x40/0x90 [ 385.627469][T21854] ? clear_bhb_loop+0x40/0x90 [ 385.627500][T21854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.627548][T21854] RIP: 0033:0x7fa066e9d3bc [ 385.627622][T21854] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 385.627643][T21854] RSP: 002b:00007fa065507030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.627667][T21854] RAX: ffffffffffffffda RBX: 00007fa0670c5fa0 RCX: 00007fa066e9d3bc [ 385.627682][T21854] RDX: 000000000000000f RSI: 00007fa0655070a0 RDI: 0000000000000007 [ 385.627695][T21854] RBP: 00007fa065507090 R08: 0000000000000000 R09: 0000000000000000 [ 385.627779][T21854] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 385.627794][T21854] R13: 0000000000000000 R14: 00007fa0670c5fa0 R15: 00007ffcc332c5e8 [ 385.627814][T21854] [ 385.843054][T21856] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 385.850939][T21856] SELinux: failed to load policy [ 386.001188][T21872] lo speed is unknown, defaulting to 1000 [ 386.188367][T21882] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.237767][T21882] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.297393][T21882] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.367900][T21882] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.430742][T21906] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 386.438654][T21906] SELinux: failed to load policy [ 386.473881][T21882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.485549][T21882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.502869][T21882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.511560][T21905] lo speed is unknown, defaulting to 1000 [ 386.515346][T21882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.624216][T21910] lo speed is unknown, defaulting to 1000 [ 386.700007][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'. [ 386.708953][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'. [ 386.805653][T21935] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 386.838781][T21935] SELinux: failed to load policy [ 387.041552][T21956] lo speed is unknown, defaulting to 1000 [ 387.228342][T21976] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 387.249656][T21979] validate_nla: 19 callbacks suppressed [ 387.249722][T21979] netlink: 'syz.5.6949': attribute type 4 has an invalid length. [ 387.263665][T21976] lo speed is unknown, defaulting to 1000 [ 387.297181][T21979] netlink: 'syz.5.6949': attribute type 4 has an invalid length. [ 387.314850][T21984] futex_wake_op: syz.6.6951 tries to shift op by -1; fix this program [ 387.332641][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6951'. [ 387.435625][T21988] lo speed is unknown, defaulting to 1000 [ 387.488156][T21997] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 387.582628][T22007] lo speed is unknown, defaulting to 1000 [ 387.592270][T22015] FAULT_INJECTION: forcing a failure. [ 387.592270][T22015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.605430][T22015] CPU: 1 UID: 0 PID: 22015 Comm: syz.4.6960 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 387.605458][T22015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.605474][T22015] Call Trace: [ 387.605535][T22015] [ 387.605579][T22015] __dump_stack+0x1d/0x30 [ 387.605606][T22015] dump_stack_lvl+0xe8/0x140 [ 387.605663][T22015] dump_stack+0x15/0x1b [ 387.605686][T22015] should_fail_ex+0x265/0x280 [ 387.605723][T22015] should_fail+0xb/0x20 [ 387.605757][T22015] should_fail_usercopy+0x1a/0x20 [ 387.605915][T22015] _copy_from_user+0x1c/0xb0 [ 387.605935][T22015] sctp_setsockopt+0x154/0xe30 [ 387.605999][T22015] sock_common_setsockopt+0x66/0x80 [ 387.606031][T22015] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 387.606102][T22015] __sys_setsockopt+0x181/0x200 [ 387.606143][T22015] __x64_sys_setsockopt+0x64/0x80 [ 387.606207][T22015] x64_sys_call+0x2bd5/0x2fb0 [ 387.606286][T22015] do_syscall_64+0xd2/0x200 [ 387.606309][T22015] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.606346][T22015] ? clear_bhb_loop+0x40/0x90 [ 387.606407][T22015] ? clear_bhb_loop+0x40/0x90 [ 387.606429][T22015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.606449][T22015] RIP: 0033:0x7f5374e4e9a9 [ 387.606463][T22015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.606481][T22015] RSP: 002b:00007f53734b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 387.606580][T22015] RAX: ffffffffffffffda RBX: 00007f5375075fa0 RCX: 00007f5374e4e9a9 [ 387.606593][T22015] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 387.606609][T22015] RBP: 00007f53734b7090 R08: 0000000000000090 R09: 0000000000000000 [ 387.606669][T22015] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 387.606758][T22015] R13: 0000000000000000 R14: 00007f5375075fa0 R15: 00007ffd63996068 [ 387.606777][T22015] [ 387.900424][T22025] netlink: 'syz.5.6964': attribute type 4 has an invalid length. [ 387.910295][T22025] netlink: 'syz.5.6964': attribute type 4 has an invalid length. [ 387.976836][T22039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6968'. [ 388.322803][T22056] netlink: 'syz.4.6976': attribute type 4 has an invalid length. [ 388.342727][T22056] netlink: 'syz.4.6976': attribute type 4 has an invalid length. [ 388.413437][T22064] FAULT_INJECTION: forcing a failure. [ 388.413437][T22064] name failslab, interval 1, probability 0, space 0, times 0 [ 388.426398][T22064] CPU: 0 UID: 0 PID: 22064 Comm: syz.4.6979 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 388.426431][T22064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.426443][T22064] Call Trace: [ 388.426481][T22064] [ 388.426490][T22064] __dump_stack+0x1d/0x30 [ 388.426517][T22064] dump_stack_lvl+0xe8/0x140 [ 388.426608][T22064] dump_stack+0x15/0x1b [ 388.426669][T22064] should_fail_ex+0x265/0x280 [ 388.426700][T22064] should_failslab+0x8c/0xb0 [ 388.426722][T22064] kmem_cache_alloc_node_noprof+0x57/0x320 [ 388.426828][T22064] ? __alloc_skb+0x101/0x320 [ 388.426871][T22064] __alloc_skb+0x101/0x320 [ 388.426900][T22064] netlink_alloc_large_skb+0xba/0xf0 [ 388.426933][T22064] netlink_sendmsg+0x3cf/0x6b0 [ 388.426988][T22064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.427014][T22064] __sock_sendmsg+0x142/0x180 [ 388.427040][T22064] ____sys_sendmsg+0x31e/0x4e0 [ 388.427064][T22064] ___sys_sendmsg+0x17b/0x1d0 [ 388.427083][T22064] ? prepare_signal+0x413/0x670 [ 388.427172][T22064] __x64_sys_sendmsg+0xd4/0x160 [ 388.427259][T22064] x64_sys_call+0x2999/0x2fb0 [ 388.427285][T22064] do_syscall_64+0xd2/0x200 [ 388.427316][T22064] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 388.427355][T22064] ? clear_bhb_loop+0x40/0x90 [ 388.427375][T22064] ? clear_bhb_loop+0x40/0x90 [ 388.427501][T22064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.427529][T22064] RIP: 0033:0x7f5374e4e9a9 [ 388.427548][T22064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.427569][T22064] RSP: 002b:00007f53734b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.427587][T22064] RAX: ffffffffffffffda RBX: 00007f5375075fa0 RCX: 00007f5374e4e9a9 [ 388.427599][T22064] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000007 [ 388.427611][T22064] RBP: 00007f53734b7090 R08: 0000000000000000 R09: 0000000000000000 [ 388.427704][T22064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.427720][T22064] R13: 0000000000000000 R14: 00007f5375075fa0 R15: 00007ffd63996068 [ 388.427739][T22064] [ 388.713502][T22080] FAULT_INJECTION: forcing a failure. [ 388.713502][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 388.726341][T22080] CPU: 0 UID: 0 PID: 22080 Comm: syz.6.6987 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 388.726493][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.726553][T22080] Call Trace: [ 388.726561][T22080] [ 388.726570][T22080] __dump_stack+0x1d/0x30 [ 388.726627][T22080] dump_stack_lvl+0xe8/0x140 [ 388.726650][T22080] dump_stack+0x15/0x1b [ 388.726671][T22080] should_fail_ex+0x265/0x280 [ 388.726701][T22080] should_failslab+0x8c/0xb0 [ 388.726722][T22080] __kmalloc_noprof+0xa5/0x3e0 [ 388.726802][T22080] ? tcf_idr_create+0x41/0x4a0 [ 388.726834][T22080] tcf_idr_create+0x41/0x4a0 [ 388.726924][T22080] tcf_idr_create_from_flags+0x60/0x80 [ 388.727050][T22080] tcf_pedit_init+0x27b/0x970 [ 388.727077][T22080] ? should_fail_ex+0xdb/0x280 [ 388.727175][T22080] tcf_action_init_1+0x36a/0x4a0 [ 388.727218][T22080] tcf_action_init+0x267/0x6d0 [ 388.727247][T22080] ? mark_reg_read+0x59/0x340 [ 388.727344][T22080] tc_ctl_action+0x291/0x830 [ 388.727394][T22080] ? __pfx_tc_ctl_action+0x10/0x10 [ 388.727426][T22080] rtnetlink_rcv_msg+0x65a/0x6d0 [ 388.727456][T22080] ? avc_has_perm_noaudit+0x1b1/0x200 [ 388.727512][T22080] netlink_rcv_skb+0x123/0x220 [ 388.727549][T22080] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.727652][T22080] rtnetlink_rcv+0x1c/0x30 [ 388.727685][T22080] netlink_unicast+0x5a8/0x680 [ 388.727724][T22080] netlink_sendmsg+0x58b/0x6b0 [ 388.727752][T22080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.727777][T22080] __sock_sendmsg+0x142/0x180 [ 388.727856][T22080] ____sys_sendmsg+0x31e/0x4e0 [ 388.727889][T22080] ___sys_sendmsg+0x17b/0x1d0 [ 388.727947][T22080] __x64_sys_sendmsg+0xd4/0x160 [ 388.727990][T22080] x64_sys_call+0x2999/0x2fb0 [ 388.728018][T22080] do_syscall_64+0xd2/0x200 [ 388.728115][T22080] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 388.728187][T22080] ? clear_bhb_loop+0x40/0x90 [ 388.728210][T22080] ? clear_bhb_loop+0x40/0x90 [ 388.728262][T22080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.728282][T22080] RIP: 0033:0x7f567e8ee9a9 [ 388.728299][T22080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.728317][T22080] RSP: 002b:00007f567cf57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.728342][T22080] RAX: ffffffffffffffda RBX: 00007f567eb15fa0 RCX: 00007f567e8ee9a9 [ 388.728358][T22080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 388.728442][T22080] RBP: 00007f567cf57090 R08: 0000000000000000 R09: 0000000000000000 [ 388.728513][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.728524][T22080] R13: 0000000000000000 R14: 00007f567eb15fa0 R15: 00007ffef1e21c68 [ 388.728547][T22080] [ 389.135564][T22102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=22102 comm=syz.5.6994 [ 389.285007][T22120] FAULT_INJECTION: forcing a failure. [ 389.285007][T22120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.285366][T22119] netlink: 'syz.5.7003': attribute type 4 has an invalid length. [ 389.298249][T22120] CPU: 1 UID: 0 PID: 22120 Comm: +}[@ Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 389.298284][T22120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.298331][T22120] Call Trace: [ 389.298342][T22120] [ 389.298352][T22120] __dump_stack+0x1d/0x30 [ 389.298387][T22120] dump_stack_lvl+0xe8/0x140 [ 389.298415][T22120] dump_stack+0x15/0x1b [ 389.298487][T22120] should_fail_ex+0x265/0x280 [ 389.298518][T22120] should_fail+0xb/0x20 [ 389.298552][T22120] should_fail_usercopy+0x1a/0x20 [ 389.298652][T22120] copy_folio_from_iter_atomic+0x278/0x1170 [ 389.298689][T22120] ? shmem_write_begin+0xa8/0x190 [ 389.298730][T22120] ? shmem_write_begin+0xe1/0x190 [ 389.298825][T22120] generic_perform_write+0x2c2/0x490 [ 389.298860][T22120] shmem_file_write_iter+0xc5/0xf0 [ 389.298963][T22120] do_iter_readv_writev+0x421/0x4c0 [ 389.299018][T22120] vfs_writev+0x2df/0x8b0 [ 389.299064][T22120] __se_sys_pwritev2+0xfc/0x1c0 [ 389.299142][T22120] __x64_sys_pwritev2+0x67/0x80 [ 389.299210][T22120] x64_sys_call+0x1cea/0x2fb0 [ 389.299240][T22120] do_syscall_64+0xd2/0x200 [ 389.299266][T22120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 389.299379][T22120] ? clear_bhb_loop+0x40/0x90 [ 389.299476][T22120] ? clear_bhb_loop+0x40/0x90 [ 389.299506][T22120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.299543][T22120] RIP: 0033:0x7f567e8ee9a9 [ 389.299566][T22120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.299592][T22120] RSP: 002b:00007f567cf57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 389.299619][T22120] RAX: ffffffffffffffda RBX: 00007f567eb15fa0 RCX: 00007f567e8ee9a9 [ 389.299696][T22120] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 389.299714][T22120] RBP: 00007f567cf57090 R08: 0000000000000000 R09: 0000000000000003 [ 389.299732][T22120] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000002 [ 389.299750][T22120] R13: 0000000000000000 R14: 00007f567eb15fa0 R15: 00007ffef1e21c68 [ 389.299778][T22120] [ 389.333445][T22122] netlink: 'syz.6.7004': attribute type 4 has an invalid length. [ 389.358558][T22123] netlink: 'syz.5.7003': attribute type 4 has an invalid length. [ 389.366064][T22122] netlink: 'syz.6.7004': attribute type 4 has an invalid length. [ 389.610833][T22141] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7011'. [ 389.701816][T22138] lo speed is unknown, defaulting to 1000 [ 389.752761][ T29] kauditd_printk_skb: 1236 callbacks suppressed [ 389.752779][ T29] audit: type=1400 audit(1753690924.635:40819): avc: denied { read } for pid=22149 comm="syz.6.7013" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.786818][T22150] FAULT_INJECTION: forcing a failure. [ 389.786818][T22150] name failslab, interval 1, probability 0, space 0, times 0 [ 389.799569][T22150] CPU: 0 UID: 0 PID: 22150 Comm: syz.6.7013 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 389.799634][T22150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.799651][T22150] Call Trace: [ 389.799659][T22150] [ 389.799670][T22150] __dump_stack+0x1d/0x30 [ 389.799696][T22150] dump_stack_lvl+0xe8/0x140 [ 389.799714][T22150] dump_stack+0x15/0x1b [ 389.799732][T22150] should_fail_ex+0x265/0x280 [ 389.799813][T22150] should_failslab+0x8c/0xb0 [ 389.799835][T22150] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 389.799863][T22150] ? parse_opts+0xb0/0x2d0 [ 389.799943][T22150] kstrdup+0x3e/0xd0 [ 389.799967][T22150] parse_opts+0xb0/0x2d0 [ 389.799986][T22150] ? __rcu_read_unlock+0x4f/0x70 [ 389.800007][T22150] ? should_fail_ex+0xdb/0x280 [ 389.800054][T22150] p9_fd_create+0x37/0x280 [ 389.800127][T22150] ? strsep+0x1d/0x100 [ 389.800157][T22150] p9_client_create+0x608/0xbc0 [ 389.800198][T22150] v9fs_session_init+0xf7/0xde0 [ 389.800296][T22150] ? obj_cgroup_charge_account+0x122/0x1a0 [ 389.800383][T22150] ? __rcu_read_unlock+0x4f/0x70 [ 389.800410][T22150] ? should_fail_ex+0xdb/0x280 [ 389.800441][T22150] ? v9fs_mount+0x51/0x590 [ 389.800502][T22150] ? should_failslab+0x8c/0xb0 [ 389.800551][T22150] ? __kmalloc_cache_noprof+0x189/0x320 [ 389.800584][T22150] v9fs_mount+0x67/0x590 [ 389.800656][T22150] ? __pfx_v9fs_mount+0x10/0x10 [ 389.800687][T22150] legacy_get_tree+0x78/0xd0 [ 389.800732][T22150] vfs_get_tree+0x54/0x1d0 [ 389.800859][T22150] do_new_mount+0x207/0x680 [ 389.800892][T22150] path_mount+0x4a4/0xb20 [ 389.800926][T22150] ? user_path_at+0x109/0x130 [ 389.801009][T22150] __se_sys_mount+0x28f/0x2e0 [ 389.801132][T22150] ? fput+0x8f/0xc0 [ 389.801165][T22150] __x64_sys_mount+0x67/0x80 [ 389.801226][T22150] x64_sys_call+0xd36/0x2fb0 [ 389.801256][T22150] do_syscall_64+0xd2/0x200 [ 389.801339][T22150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 389.801373][T22150] ? clear_bhb_loop+0x40/0x90 [ 389.801401][T22150] ? clear_bhb_loop+0x40/0x90 [ 389.801492][T22150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.801513][T22150] RIP: 0033:0x7f567e8ee9a9 [ 389.801528][T22150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.801547][T22150] RSP: 002b:00007f567cf57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.801619][T22150] RAX: ffffffffffffffda RBX: 00007f567eb15fa0 RCX: 00007f567e8ee9a9 [ 389.801631][T22150] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 389.801679][T22150] RBP: 00007f567cf57090 R08: 0000200000000640 R09: 0000000000000000 [ 389.801691][T22150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.801703][T22150] R13: 0000000000000000 R14: 00007f567eb15fa0 R15: 00007ffef1e21c68 [ 389.801723][T22150] [ 390.124665][T22159] lo speed is unknown, defaulting to 1000 [ 390.166937][ T29] audit: type=1400 audit(1753690925.019:40820): avc: denied { kexec_image_load } for pid=22165 comm="syz.6.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 390.188673][ T29] audit: type=1400 audit(1753690925.019:40821): avc: denied { read } for pid=22165 comm="syz.6.7016" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 390.213210][ T29] audit: type=1400 audit(1753690925.019:40822): avc: denied { open } for pid=22165 comm="syz.6.7016" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 390.238105][ T29] audit: type=1400 audit(1753690925.019:40823): avc: denied { ioctl } for pid=22165 comm="syz.6.7016" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 390.368812][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7022'. [ 390.393611][ T29] audit: type=1400 audit(1753690925.234:40824): avc: denied { create } for pid=22178 comm="syz.2.7022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 390.413807][ T29] audit: type=1400 audit(1753690925.234:40825): avc: denied { sys_admin } for pid=22178 comm="syz.2.7022" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 390.469727][ T29] audit: type=1326 audit(1753690925.299:40826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22184 comm="syz.6.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 390.493403][ T29] audit: type=1326 audit(1753690925.299:40827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22184 comm="syz.6.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 390.517147][ T29] audit: type=1326 audit(1753690925.299:40828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22184 comm="syz.6.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567e8ee9a9 code=0x7ffc0000 [ 390.607177][T22191] lo speed is unknown, defaulting to 1000 [ 390.711162][T22218] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 390.763481][T22218] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 390.770050][T22218] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 390.777557][T22218] vhci_hcd vhci_hcd.0: Device attached [ 390.797355][T22218] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 390.804050][T22218] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 390.811745][T22218] vhci_hcd vhci_hcd.0: Device attached [ 390.886415][T22218] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 390.893074][T22218] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.900777][T22218] vhci_hcd vhci_hcd.0: Device attached [ 390.935364][T22233] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 390.942019][T22233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 390.949610][T22233] vhci_hcd vhci_hcd.0: Device attached [ 390.975506][ T23] vhci_hcd: vhci_device speed not set [ 390.993435][T22218] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 391.000092][T22218] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 391.007796][T22218] vhci_hcd vhci_hcd.0: Device attached [ 391.021145][T22248] program syz.6.7042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.036782][T22248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 391.045291][T22224] vhci_hcd: connection closed [ 391.045511][T22245] vhci_hcd: connection closed [ 391.046780][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7041'. [ 391.050556][T22239] vhci_hcd: connection closed [ 391.055013][ T37] vhci_hcd: stop threads [ 391.055023][ T37] vhci_hcd: release socket [ 391.055093][ T37] vhci_hcd: disconnect device [ 391.064185][T22221] vhci_hcd: connection closed [ 391.069852][ T23] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 391.094922][T22251] vhci_hcd: connection closed [ 391.098162][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.100486][ T37] vhci_hcd: stop threads [ 391.102947][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.111823][ T37] vhci_hcd: release socket [ 391.111844][ T37] vhci_hcd: disconnect device [ 391.112210][ T37] vhci_hcd: stop threads [ 391.138523][ T37] vhci_hcd: release socket [ 391.142975][ T37] vhci_hcd: disconnect device [ 391.146583][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.150237][T22222] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 391.181642][T22244] team0 (unregistering): Port device team_slave_0 removed [ 391.195838][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.204846][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.216761][T22244] team0 (unregistering): Port device team_slave_1 removed [ 391.217939][ T37] vhci_hcd: stop threads [ 391.228694][ T37] vhci_hcd: release socket [ 391.233173][ T37] vhci_hcd: disconnect device [ 391.238404][ T37] vhci_hcd: stop threads [ 391.242791][ T37] vhci_hcd: release socket [ 391.247236][ T37] vhci_hcd: disconnect device [ 391.268446][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.357142][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.366251][T22256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7046'. [ 391.520108][T22300] SELinux: policydb magic number 0x11 does not match expected magic number 0xf97cff8c [ 391.530119][T22300] SELinux: failed to load policy [ 391.613896][T22316] FAULT_INJECTION: forcing a failure. [ 391.613896][T22316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.627110][T22316] CPU: 1 UID: 0 PID: 22316 Comm: syz.2.7060 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 391.627171][T22316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.627183][T22316] Call Trace: [ 391.627189][T22316] [ 391.627197][T22316] __dump_stack+0x1d/0x30 [ 391.627217][T22316] dump_stack_lvl+0xe8/0x140 [ 391.627272][T22316] dump_stack+0x15/0x1b [ 391.627294][T22316] should_fail_ex+0x265/0x280 [ 391.627385][T22316] should_fail+0xb/0x20 [ 391.627423][T22316] should_fail_usercopy+0x1a/0x20 [ 391.627468][T22316] _copy_from_user+0x1c/0xb0 [ 391.627505][T22316] ___sys_sendmsg+0xc1/0x1d0 [ 391.627593][T22316] __x64_sys_sendmsg+0xd4/0x160 [ 391.627623][T22316] x64_sys_call+0x2999/0x2fb0 [ 391.627650][T22316] do_syscall_64+0xd2/0x200 [ 391.627673][T22316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 391.627755][T22316] ? clear_bhb_loop+0x40/0x90 [ 391.627801][T22316] ? clear_bhb_loop+0x40/0x90 [ 391.627823][T22316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.627852][T22316] RIP: 0033:0x7fd3fd62e9a9 [ 391.627877][T22316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.627900][T22316] RSP: 002b:00007fd3fbc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.627923][T22316] RAX: ffffffffffffffda RBX: 00007fd3fd855fa0 RCX: 00007fd3fd62e9a9 [ 391.627937][T22316] RDX: 000000000404c0c0 RSI: 0000200000000040 RDI: 0000000000000004 [ 391.627949][T22316] RBP: 00007fd3fbc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 391.627961][T22316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.628004][T22316] R13: 0000000000000000 R14: 00007fd3fd855fa0 R15: 00007ffd679dbdc8 [ 391.628029][T22316] [ 391.951354][T22345] binfmt_misc: register: failed to install interpreter file ./file2 [ 391.965018][T15556] ================================================================== [ 391.973147][T15556] BUG: KCSAN: data-race in pollwake / pollwake [ 391.979469][T15556] [ 391.981798][T15556] write to 0xffffc900016179e0 of 4 bytes by task 20054 on cpu 0: [ 391.989516][T15556] pollwake+0xb6/0x100 [ 391.993589][T15556] __wake_up_sync_key+0x52/0x80 [ 391.998454][T15556] anon_pipe_write+0x8ba/0xaa0 [ 392.003222][T15556] vfs_write+0x4a0/0x8e0 [ 392.007475][T15556] ksys_write+0xda/0x1a0 [ 392.011728][T15556] __x64_sys_write+0x40/0x50 [ 392.016334][T15556] x64_sys_call+0x2cdd/0x2fb0 [ 392.021017][T15556] do_syscall_64+0xd2/0x200 [ 392.025519][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.031415][T15556] [ 392.033736][T15556] write to 0xffffc900016179e0 of 4 bytes by task 15556 on cpu 1: [ 392.041451][T15556] pollwake+0xb6/0x100 [ 392.045523][T15556] __wake_up_sync_key+0x52/0x80 [ 392.050377][T15556] anon_pipe_write+0x8ba/0xaa0 [ 392.055143][T15556] vfs_write+0x4a0/0x8e0 [ 392.059394][T15556] ksys_write+0xda/0x1a0 [ 392.063648][T15556] __x64_sys_write+0x40/0x50 [ 392.068248][T15556] x64_sys_call+0x2cdd/0x2fb0 [ 392.072927][T15556] do_syscall_64+0xd2/0x200 [ 392.077433][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.083327][T15556] [ 392.085649][T15556] value changed: 0x00000000 -> 0x00000001 [ 392.091365][T15556] [ 392.093685][T15556] Reported by Kernel Concurrency Sanitizer on: [ 392.099833][T15556] CPU: 1 UID: 0 PID: 15556 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 392.112505][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.122564][T15556] ================================================================== SYZFAIL: failed to send rpc fd=3 want=1808 sent=0 n=-1 (errno 32: Broken pipe) [ 392.539434][ T6673] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.602762][ T6673] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.699588][ T6673] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.752326][ T6673] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.839340][ T6673] bridge_slave_1: left allmulticast mode [ 392.845019][ T6673] bridge_slave_1: left promiscuous mode [ 392.850737][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.858536][ T6673] bridge_slave_0: left allmulticast mode [ 392.864264][ T6673] bridge_slave_0: left promiscuous mode [ 392.870120][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.966195][ T6673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.976054][ T6673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.985585][ T6673] bond0 (unregistering): Released all slaves [ 393.063508][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.071006][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.078655][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.086155][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.096544][ T6673] veth1_macvtap: left promiscuous mode [ 393.102164][ T6673] veth0_macvtap: left promiscuous mode [ 393.107730][ T6673] veth1_vlan: left promiscuous mode [ 393.113074][ T6673] veth0_vlan: left promiscuous mode [ 393.468954][ T6673] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.521101][ T6673] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.574410][ T6673] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.617186][ T6673] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.907518][ T6673] bridge_slave_1: left allmulticast mode [ 393.913204][ T6673] bridge_slave_1: left promiscuous mode [ 393.918941][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.926834][ T6673] bridge_slave_0: left allmulticast mode [ 393.932528][ T6673] bridge_slave_0: left promiscuous mode [ 393.938342][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.946717][ T6673] bridge_slave_1: left allmulticast mode [ 393.952736][ T6673] bridge_slave_1: left promiscuous mode [ 393.958451][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.966515][ T6673] bridge_slave_0: left allmulticast mode [ 393.972296][ T6673] bridge_slave_0: left promiscuous mode [ 393.978054][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.077601][ T6673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.088259][ T6673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.098543][ T6673] bond0 (unregistering): Released all slaves [ 394.152542][ T6673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.161868][ T6673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.170919][ T6673] bond0 (unregistering): Released all slaves [ 394.216159][ T6673] tipc: Left network mode [ 394.221498][ T6673] IPVS: stopping backup sync thread 20254 ... [ 394.230110][ T6673] hsr_slave_0: left promiscuous mode [ 394.235919][ T6673] hsr_slave_1: left promiscuous mode [ 394.241518][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.249105][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.256738][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.264267][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.273315][ T6673] hsr_slave_1: left promiscuous mode [ 394.279132][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.286713][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.297103][ T6673] veth1_macvtap: left promiscuous mode [ 394.302648][ T6673] veth0_macvtap: left promiscuous mode [ 394.308199][ T6673] veth1_vlan: left promiscuous mode [ 394.313532][ T6673] veth0_vlan: left promiscuous mode [ 394.378161][ T6673] team0 (unregistering): Port device team_slave_1 removed [ 394.388051][ T6673] team0 (unregistering): Port device team_slave_0 removed [ 394.439964][ T6673] team0 (unregistering): Port device team_slave_1 removed [ 394.449320][ T6673] team0 (unregistering): Port device team_slave_0 removed [ 396.512560][ T23] usb 11-1: enqueue for inactive port 0 [ 396.518344][ T23] usb 11-1: enqueue for inactive port 0 [ 396.598018][ T23] vhci_hcd: vhci_device speed not set