last executing test programs: 3m0.267128153s ago: executing program 4 (id=279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664eac) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) tkill(0x0, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(0x0, 0x0) openat2(r3, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x4000, 0x0, 0x1e}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3m0.205963164s ago: executing program 4 (id=282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f00a005000008000300", @ANYRES32=r4], 0x2c}}, 0x0) 3m0.127712925s ago: executing program 4 (id=283): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x80, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118c00000000008510000002000000850000004c00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') r3 = accept4$bt_l2cap(r1, 0x0, &(0x7f0000000100), 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)) getdents(r2, 0xffffffffffffffff, 0x5a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002c8eecd0c000000002c00009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 3m0.098778265s ago: executing program 4 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000002c0)=0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x53a, &(0x7f0000001480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x0, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x9c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x9e9ed000) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44880) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000002000000080000000b"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) ptrace$setsig(0x4203, r4, 0x400, &(0x7f0000000140)={0xb, 0x8, 0x401}) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) 2m59.921890628s ago: executing program 4 (id=286): r0 = socket(0x3, 0x6, 0xfffffffb) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc5a4, 0x400009ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES8], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='timer_expire_entry\x00', r5, 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000035c0)=ANY=[@ANYBLOB="1239e8a51ed10a763aac07a3b7361629b3287e929b9e10dc9684dd6ec17e8076a6e39983386914cb1a5a8ea1c7c94d83715dc2a78bf0a2b451cd2156034a1898e72b7ba39b5c9f15ca6cc4a72d9c300b13d97af1565deb3babcf8f9a9c8f5aa39fa9bb382cb18dc79c01240b584d09493ea890a27218f42ff1f44bdd03d52f1f2f6bb23ad274e5ca48636705d9fcbc408b923f10c549bab5ed5c60000893b9696a3996330f8827a616eab07274f7c31ecee9ffbb92448310c39db25f746ba863e3037079eed91da499837068e4903040fc4d2b63c22d0ab2430ba9bd4d12d0ea91722e4e56e63aeb0c65b888d9336b8ad95cf86b1e587e7b3cff8ca922d4c2109558b7c8f49bca3cd8666e71ef834174f2ddfa3329e5f984c48aed7412ccd8a6fd66f0e61f76337ce2a5b44ff4ede50ce6cbe6d755292af71e1e13446f49e3f81b5abab63b5cc96526771a054af9997fdc6c854df6bcc37aa233a9ce89e5702bd11380ac70a5a974a3c869b7fc8bf196465953f53308d8c7767ac65d0f5e9756ff1145143c199ed59a47e33daeb18d6cc6e915d98c44590e26c5865c9a905867ca8c2b89947dc01bf37f66a4f3a4399e65b2f445c7f29eedf25ea5c4f85a66a0b2b4042a8bfa2fb68b1742174d679b593a90132b4f5c7333ef233130e76b0f227bd27a9addfeaace07f188f11300abdbc42c035cf4ad64e187d52796296e886fa8ddc6aca92e9c0df453154dd62595ca88edd0ed23966f525eb6f4619bd8859017bbb2729cf553f9ac78816ad382530d145b9df3b481e50d541d2f9ec5c0583fc71cceb35ed90029bf377d5904b08236e3e468c2d78a2be9f22e5f1e1e36f2acb9c512a31f0032fe27a9d761049f0f23534fa51c4a80823ff881372a367d029879e0dc8b5e47d3f221051c8e275de109b4c2b8d105dfcef0a3bc9ee688c74a7497418cb1352b59237bea6cb3f8ca9c6c40447e82e67fb96cea831a03344e48d84820eb21f755ba3bef1669fd1202a4a449425776427f2920aad6f446ec7c86cbc5edcae69f3427bb9657290b2da4ac9ab4bae240e497b3982b67f29085cc6916155a6012e51c547acb37489c8ded8d5759a79958f12c3e5faba7b289b97f8878cdf867bec7403b09d5ce1fd9f1cb1882de421f74a0a6a797055635ce7da46de47f42a9f3daef6cf1720da609d1314a329bc088ed0bdd553c284be0a02ec7c1178e9aad5c5da1c60350609f4fa260abe589b3f83b881885f688141de92edc460c894336c5937efd64e5add02c181b89e8635fb732b4893ef211354a8bd70a55fc636e79f42dcf44f567bec1e8df214726e11c8f836df9a5fc5725b8f69969f56d7fc1f0ef288ff35d35543a168e26e58f319c151f29d01c31b5b574795ba958a3b68e579390e155c4688e14a3f87ae94db4dac6572bf9434e811cb3c39c850b7727df4477bda5b3a718910ce535be6bcfc909a02705840a47d871fc40f6f48e400b5dd1245320e3c976eebefff055d9c209e124b61b3a742b2c07ff074400ee935559ddfc734a75ae898d4749ce287f3111829f9ea13ed0f4c69aa3cf7859a1f20f616c311ca7eb4a8f3d99b7c5c39149055e88d0f3cdf425ba44c13a2727f1c3a03c269430dc12316f097ef16c81e95b672737eb46788b5282154c96ec715a50053212160cb5b2fd298e8f4e3b594038e1cc31507e59b93623c7dcdf1fd2ce00ebf3c0af84a0f7cca52f86bd96a88d49bd24dd3b6faacfecde6d7f719491be5f6f0e277467fcc33e37d1439bd63db20d656e5f5d725fd1f98007759d6b42ee808f418cfc82851cbf38eed0ab8e38f24cbba6622bf676129d2b329540347e96b4efb52a987dbfbff95e416f0e439b98d78362d413a37d418ea06b34ab7c77209eafd3c8c4eb43f60a8255122cabf19ba24e3899c29327e2a0157b1ecc15383f948c729584bbf6b89c2b0f3631bc05b1fa99a9ba5d5e5b0696f142c752374d3c5f416c1d4f112fd6c9f3d91db30640aacf06bfb1c63bd8741787a4d7fb96d966699e111a12dab36afe60281f1dc836a3f6108e201ef361f1da490a2ebd15fd71cfd38f298ef2455d0996c3167e40cbb758b4e32f49c80a977fe0c318b49adcb5178df3e971b96d0fb59aaf99978c1d7a22bf2640dbfda6eed473815c1aa62b39167bde638d2db65439b741ef54bfb269cf9d1ec5f9f5288174e4f1e5691584a6710dac958abbe9d447f2664924661a0dc85005d454689af174afd2bacbb89c3e4f66dbf665f5f941aa1cb50f2c2566c4d479762bf4bd2e9178263519aeb2b768c38293af576747cffa322261548b8007099e2d9a9a09c53d910d27502d254b46bc586bcd0d7d41257d84b042b8a7111045406623388a855a03d0f3e162b4f4d3ff28e3bc2411b086fda5cfeea624150b78eb3db0bc51aba7319804f797776928b2577dc03cc6deab8118e2c2f480a746762e5b5f1c5ce66a184e58fe3ea6318e5794db786026da3b06885fb5853584381c3ec5df30e945c091cbe6468509e76e8054d23d4c90afa4186202cf9874e7641be2ac2fe2e6e6ed780093210f278db354c35dce4a9aecf427a36aaf7b11a2cd6395ebe805348bd6b2b471d7ddb525797cd677793b512bd82846f36e91086ba9a4bdc63868c4c6f2c1b191537a6f13e653160572ad7ad9edca66f7e1a7e7a403246ae4bea5ce79e4fa2dc76396d32235f7bec9c5175ac8be9bd37d3693c8be22c91f2c7f718abfcfc6e9b85bbe30c8afc019092a0e7c8090dc58e3208c544f972238c2a6504cf3509c79c49b03de64aa98ea81c26bb20a47d340ce36b49d2863c25c12da1e97cd759dc3e034f941bc0688e34caa714c32b05ef26c0c057e5100941745a2b3389af2c3ab605b4b5e9bedd62e59d7b9e4544320b9ea040ebcacdd7f0e75f031ae828aed2291bfe595e6b637aa0c3b222844ef843c171261dadee56838f2a79654316bd5ebbc1e4958c7ba5a577f5da173434070624e0963fb2f4738a3165377e240ff4ca9a30e14bd428125832153651f1900a903a0e6122cd8e38372dbff67d6fb4ed1bb4b60f62b8d1511d0ff6e798fa2c1d76076ebc9b0e0ea85fc931e2eb14b3d6d6e8e48ee30060d89a41592746acb69ec7bf8e58024f49c293644fde73c0df9b6117292d243bc1319b5e7190d971bed82beda182784e66d49c5841bcc30f09b55fb90fb5bffe3e5bb2e291f5860bc4af94d0598dc0a510147ee068434f7a6358152d3cec0f952512978d36ab364be989792990780616913d914de1528648c85dc24b1817b77e55f35fcceb1b7105a03a2cfe485408ddc5ce5930a299709925c3edd3a55b99268367943b152cd719038f435a04154cd90e3f81f36b046e733d40b56a8d4134a69af9c0be063e3268658624f783b82fb215e64d1b3033a4c0c91013d25b00d9fe02da7e141259a53ca23f13b6bc77299f9f0abfdb905a204655576493854a0ef295dc1fd76ce6f598a738361dc1f5159d9abcb4fdd7e573b5c8d1a7dce7254940b48b22fa8f177c129d75faef219797747e07dfd738de7877c161a4a2271eb49b9de2c138b9c7594ef8c6ed23124c41a22ac05e8ad9baa17308234b1a9c4c8a4ba111a50181400b587828e64725f2210907489ec1e23b6a6b55b115c2e9de6e40b02fe5ad74ac832ac5fc5ab5a651fa4daa7bb47d7ed498485f7c78204dec7fc936440313d7c75c9b9f14eaae940d40b93fc4ebfe5658a676354e35590eba0f0ba671251f7f0959b2b548df65ab790bf28e8be11fb111166b1737af30f5ed168b25908700cd52b7e3c91cd1950868aec8448669988d77acbbfa00eae5ab41f395354482b5a5b79e645d6b7c4539b4fd0366200d750eeb1af58d61c266ff1dc93dbfe2feda3439d703b0691bb63e19f2c788fbb8e2f10c7730ffb93ab0ee945068c58b17d6ced1d894953779135ec21cc343fdbbf31b94dc1d15dfafc1b2054ca28ab501a7a220676811cfe2c9629e9bd41e4485e4e00510eae3e9300f644a2df23aa2971052cbbd294371aec755521cc5255c78276a37ab8ce015b56a7b665028a96d6e5672f4e05cf7e45cc1be0e919fedb5246b672731bff3a432179a93a275cbd75222998c94900fbe67d5c114d0a04947bf0672054212007793f78d62e751f5de58dc2b2216b6953425f794febadc598ec1399a4debedb7a6e086f0919f223fe8c17ec55490a03b4d6afefae82b01d4c747edca142adba512c609866e6b980d26de03b34153707ba269562f2edfef23fd0e2f1dd8faa013d43b66b718080591f70fcb3c96492970137fe7281823ff738566a830ff182debf9cafe5d6db4b29f53d528ea012d73454bed71b6c792e76f4fa2e98d15d63039c9acd9feabef406f413f150c5c17be50eec861a6fbceac0a1a89dfeedb337e8af813c5d619fdbab7e68531eec376a453cd48c7a6bd188ae8f7e838011477e88032fee91e385a32b192b6b5bb727fa9d8d9fb5809cb9ca9be6a99346e03f7ea41157151a42f6580c02ee523b2f520081e6b3d4a4977b091ddaa5bc7a0b37a66331d6473d404c7f1106c92a8f0e6d98b0292457484315adef71bd717c77bdac5ee709669b909e3d172f9d6b6e713c6d014847871728250ea23fe469f24c9ac6aa82ae35f3335ba057faafddb71d5ccb3bcf56943df65e05c8bfb8f9d42d942433a5af91b392bbd6933f64b0c6fcf537599683ef4b35a712ae2acd8d403f4f6bae507b2dc8f800542da5e19d71364199699558fdae3f173683c18242011839d17679b9fb6f5f764942721f148a1b76fc8a5f40b7287e2dd31b863e990c6cad09c73f38f0acce36f933ffaaf9a58688c89a872fc6187aa1c7887378796cacc5d639318d95fa237bdd75c557afbf01b2d3b6bffecc6a3b0f48aed48565f6b6e82002dc3c5a8b0a99069ff3c00cecc8110624a8fef12826594b5a644d7f9c02296cd3f34a9e00826a726b6494e70a46c0bea845646578e89aa2d19320058cc3935c757b88bf5e459e446b87cca61c13b80419ede12885dfe12038440d498196db3745a9d8c59e57e8810454d7a54e1d3898d809559f403543d82208be405208a9b08886f61c5531ee27e51b0b08c255765726d4e6dd1fb6f6f294fd87d27b00e043d6ad4bc36f2ebf7156f4be360b66abd0d2ad772c7df29f6e8198dda2237c9e55bc270f268d03ca57c858d8cc391f44e15e8517545c26fcacee2e2d43ca03e98c653454cfb1d76fa7bb9b64c83f2d27abe425b8a805b60d3c7e1d63569c73389a8238fb5b2e0917bac71627a4512d202d5dd769b6c55c9248951e77401e33469a0954978fd5aeca846486d0a837c4fdc7fa72a9cb3ab94d065815f8dac749c565cf005a7ea86e41a6a5c0e65b35dec41443284f2c57da4fbb1f104446b253b91b35ef341e68d25ff326016f9d57ef2f8b616a002108b304d8f3c2c6541c0cca967fe270f02fde725a08c0742cb28e76abf9d00d0e457b3f9167c985fd555c1b20d9d50ada117a564eed44db3fefd8cb1b132c4189bacd3488310fed9363a08ade76823f2bbf38c833aee649a39f19b4f7ec40165a5c3416788195e6180b898bf232d9b2df4c5d7b2951cfcc9e790c9c5321bd32020ec90ef3693edd66e178ff9e249e2127077cff50ae9e32ee721370c2fac3ef23da5bdd324105af3410fe37e76d96c71684fc56c6483f171dc7a6fce121391bb00a767552f8dc003c55fc9a36f98808a4efb696c3ccb0c4b7db791d7b24cecdc4bab7b6ef7a2a25dc121effc6f17f83db37f0e0eeaedf1d", @ANYRES8, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="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"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000001500)=ANY=[@ANYRES32=r4, @ANYRESHEX=r6, @ANYRES32=r1, @ANYBLOB="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", @ANYRES8, @ANYRESOCT=r0, @ANYRES16, @ANYRES16], &(0x7f00000002c0)='GPL\x00', 0x2c0c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88242, 0x0) write$cgroup_int(r10, 0x0, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff76) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000280)=0x4) 2m59.457741445s ago: executing program 4 (id=294): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x9, 0x5, 0x4, 0x2, 0x0, 0x9, 0x20500, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x3, 0x1, 0x2, 0x4, 0xffffff37, 0xfffa, 0x0, 0x8000, 0x0, 0x401}, r1, 0x7, r0, 0x1) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r3 = memfd_secret(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b000000000005000000950000000000000095000000000000abc6b568ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) mkdir(0x0, 0x4) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000480), 0x0) 2m59.411172445s ago: executing program 32 (id=294): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x9, 0x5, 0x4, 0x2, 0x0, 0x9, 0x20500, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x10, 0x3, 0x1, 0x2, 0x4, 0xffffff37, 0xfffa, 0x0, 0x8000, 0x0, 0x401}, r1, 0x7, r0, 0x1) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) r3 = memfd_secret(0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000b000000000005000000950000000000000095000000000000abc6b568ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) mkdir(0x0, 0x4) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)='0', 0x1, r8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000480), 0x0) 1m37.262822188s ago: executing program 3 (id=510): ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) r0 = socket(0x23, 0x800, 0xd) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={r1, 0x880}, &(0x7f0000000340)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x8c9200268ef9770f, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) accept4$packet(r7, 0x0, &(0x7f0000000640), 0x180800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='mm_page_free\x00', r9}, 0x10) 1m35.125600649s ago: executing program 3 (id=523): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 1m34.954821382s ago: executing program 3 (id=526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000001000)={0x2, 0x4e61, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)}, 0x0) 1m34.867260003s ago: executing program 3 (id=528): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r1 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) 1m33.931384816s ago: executing program 3 (id=535): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000340)={&(0x7f00000002c0)=""/69, 0x45, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffff7a, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip_vti0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3, 0x41}, 0x6, 0x130, 0x198}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0xf, 0x0, 0x6], 0x5}, {0x0, [0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x367) (async) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="4d0910bc996c301c8107070400", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 1m33.549914582s ago: executing program 3 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) lsm_list_modules(0x0, 0x0, 0x1000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x36) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 1m33.491105823s ago: executing program 33 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) lsm_list_modules(0x0, 0x0, 0x1000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000001f) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x36) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) 44.011271191s ago: executing program 0 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x2, 0x0, 0x2}}, 0x18) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) connect$can_j1939(r4, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 43.137604764s ago: executing program 0 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 43.107366654s ago: executing program 0 (id=1200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 42.648213471s ago: executing program 0 (id=1207): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x8, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x18) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 42.327518506s ago: executing program 0 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 41.99944078s ago: executing program 0 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000010014002303006272696467655f736c6176655f300000080025e82432861893dc0400d4001700000016801400018010000200f9fffff2890a000067000000"], 0x54}}, 0x0) r1 = socket(0x28, 0x800, 0x89) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000080)=0xf0, 0x4) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x6, 0x4}, {0xfff3, 0x5}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x4, 0x10001, 0x5902, 0x7f, 0x400, 0x800, 0x2, 0xffff214f}}}}]}, 0x58}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$unix(r1, &(0x7f0000000280)="b1000504600000000000800007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037281802000000000000000000000081ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008effffeffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x0, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf257f000001000000000000000000000000fe80000000000000000000000000003100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000001f00000000000000000000000000000000000000000000000000ffffffffffffffffff00000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0xe, 0x7, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9, 0xfffffff8}}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000002540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c13, &(0x7f0000001440)=ANY=[@ANYBLOB='showassoc,check=relaxed,nojoliet,block=0x0000000000000400,sbsector=0x0000000000000000,hide,check=relaxed,unhide,check=relaxed,map=off,uid=', @ANYRESHEX, @ANYBLOB="2c696f636861727365743d69596f383835392d352c004a7065000000000000000054ddfeb8d602a9427d29b1118c5cb0683cd26662a95057ac9d1737ff9bc3c0ddbd55c67c6116f1786920eb91ebba6dea8b4943ce13c9a1ba8ecd528297ba52b3d5289c7f2e672a89c1a9c0469b5e73f0ab1a01c6ffd0a9828bbe31cd5f46ff6544474be71c0ffe4f61"], 0x0, 0xa03, &(0x7f0000004600)="$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") r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r11, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$rfkill(r7, &(0x7f0000000140)={0xfffffff7, 0x4, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff) 41.99804043s ago: executing program 34 (id=1219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000010014002303006272696467655f736c6176655f300000080025e82432861893dc0400d4001700000016801400018010000200f9fffff2890a000067000000"], 0x54}}, 0x0) r1 = socket(0x28, 0x800, 0x89) setsockopt$sock_int(r0, 0xffff, 0x20, &(0x7f0000000080)=0xf0, 0x4) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a80)=@deltfilter={0x24, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0x6, 0x4}, {0xfff3, 0x5}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x4, 0x10001, 0x5902, 0x7f, 0x400, 0x800, 0x2, 0xffff214f}}}}]}, 0x58}}, 0x8000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x2613a1b406814a86}}}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendto$unix(r1, &(0x7f0000000280)="b1000504600000000000800007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037281802000000000000000000000081ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008effffeffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x0, 0x0, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fedbdf257f000001000000000000000000000000fe80000000000000000000000000003100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000001f00000000000000000000000000000000000000000000000000ffffffffffffffffff00000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0xe, 0x7, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x40, 0x9, 0xfffffff8}}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000002540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c13, &(0x7f0000001440)=ANY=[@ANYBLOB='showassoc,check=relaxed,nojoliet,block=0x0000000000000400,sbsector=0x0000000000000000,hide,check=relaxed,unhide,check=relaxed,map=off,uid=', @ANYRESHEX, @ANYBLOB="2c696f636861727365743d69596f383835392d352c004a7065000000000000000054ddfeb8d602a9427d29b1118c5cb0683cd26662a95057ac9d1737ff9bc3c0ddbd55c67c6116f1786920eb91ebba6dea8b4943ce13c9a1ba8ecd528297ba52b3d5289c7f2e672a89c1a9c0469b5e73f0ab1a01c6ffd0a9828bbe31cd5f46ff6544474be71c0ffe4f61"], 0x0, 0xa03, &(0x7f0000004600)="$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") r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r11, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="47000e"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) write$rfkill(r7, &(0x7f0000000140)={0xfffffff7, 0x4, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff) 2.127222639s ago: executing program 6 (id=1846): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 2.04478054s ago: executing program 2 (id=1850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) io_uring_setup(0x1694, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000000c0)={'system_u:object_r:dhcpc_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x6}, 0x65) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143441, 0x98) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") 1.939535981s ago: executing program 2 (id=1853): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x25, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0f0b"], 0x7) perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r6 = getuid() mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@access_uid={'access', 0x3d, r6}}, {@directio}, {@access_any}, {@cache_loose}, {@afid={'afid', 0x3d, 0x700}}, {@nodevmap}, {@cache_mmap}, {@noextend}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}]}}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 1.40868203s ago: executing program 7 (id=1858): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1.253988612s ago: executing program 1 (id=1860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) getrlimit(0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async) syz_emit_ethernet(0x63e, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x608, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x4, "d429145c793e823829b4376332b2c98aee2dae3e1cb11adb2b381eb30650ac6c45f9"}, {0x0, 0xa2, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b8e16186a2e51e277f8c78df609ca44a83914e8f7a8b053210573941b560ff8b114326678c6851c74596300b1c2a1ddc0af5b4cb5f15fa61e42214341368152275070973f3063f35fded9eeb535a0837783921dc2b705e0a0ceacca1882ff23813bc9199a9be39559c9f82a7452ce6113780cd7d26f532b72603afbfe994f5baf7257c9a33b9ac1ecd0b69da263daa9ac7e6a8d4400341926ed1f0c0e9086009c7945c0b255716f5b0dac45a9af480dc1f17beba2a2cddeafed29ecc91ce704895e28d0c46e639591c667a7f34500ea98ef557801dccf733fa61f3cf6740e40418745a42a738440ba9fc2ec415ba0fbf34800e6987b902302d552cf869eb350a9a862cd946f8285b03f03067dc9bae653dc701d97c7e6f7c1f0767624ac9e48b041c51697968b1e1733921270e569ac0b1ac7c25d00936ad05f14d67d3225d6a8cecd9fb63205ab14131e2e742977860e4a38ec056cda185aa357a059d0180056816a7902bdc0951253005099039bd945a6a4e525123cd4fcb8c5b335626464707fc21e92039b9190020eb9ef84c61cddede466a4c3ea2572927153997c33433ce9de0a7d2ed0b5fb0dce9cc6630bd0635a66be0cb490689169618184e896233d49b8f0e0717ae5d557333d54887ed8d983ee01091326af86e76583131104c66753efd58c32e499be23a05249b98e505c4c0237e2e70506fed29a33169d02b74ba5cbefad267e1107f4468e1144ece9656d35b88e405405fbb1438510f0395752c61e57e760de178a58a8da65040946656220817732fa0cd36189027287597cc5ebe709ca9d9a507babd39f1e56a37657326c7ffb654ce5e2773e92e99783e3152562a21a574f521022314da92315c13a6a696122b211e29a85e81ba7a8fb4dee770d1cacaa2fb02d5fb97676d6402513cccc770ff1a9b9d3b1454ff071d6ed6c4e84249607b64a034b8127893a00aac7ce06a0c2820f7084a8d8e61fc6868c0c2c74005af049ea328a94d5d4534aa99c49208a5f339dec460f5231d6a3e42e4b314c913da4d4127f3d8407e7edbbb044d2e034d6c14c0b86de30afe2d0b92bcaa10cb48c54576114ab1844e25eabc3a8c7906e917b052dfe31e110aaf94876488e3ef926f2d6e6cb635836cb11dbd146a83e2034b7d41ebdaa959f4f74444aceab064af4fb73b5ac964eca5e12834cc5c6d280855bc19c25ce7a5a3dd1a64c1fba0001ee7eebfd25e67ebb5ca47dd6c08543f96a01"}]}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) (async) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) (async) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x24, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) (async) getrlimit(0x6, 0x0) (async) 1.093932534s ago: executing program 7 (id=1861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000300)={'nicvf0\x00', 0x7, 0x4c51}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000002c0)={0x2c, 0x4, r5}, 0x10) 943.601846ms ago: executing program 1 (id=1862): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 920.101326ms ago: executing program 7 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a00000005"], 0x5c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), 0x0}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x4b66, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000002380)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000800)=[{0xc, 0x51, 0x0, 0x5}]}) 874.250167ms ago: executing program 5 (id=1866): io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="0d8440c166b010df9376ef0fb89bbf2420f35c64323f8a5c36ca1e9da474599946d17d70efd894359be34ff95a0a736d2a4ab3fc829f2d995a612abbb471e2b10171d21efd7700b2300b81f6df53ea7d252bbdee34504fa72d965746db718b78656c2459827e5b629040bc5ae89b09e622dfbd76165f6321cc96529c708de1cfb15168e486b096e966b0e0d14835b12ab02953e8379e4e80b2b73d83fd922e87ef379931262b6cf935", 0xa9) socket$inet6(0xa, 0x6, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fchown(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 850.454698ms ago: executing program 6 (id=1867): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5643, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r5, &(0x7f0000000300)="5af9", 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x110, r2, 0x2ecfd000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) socket$inet6(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 835.856028ms ago: executing program 5 (id=1868): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000180)='kfree\x00', r6}, 0xd) sendmsg$key(0xffffffffffffffff, 0x0, 0x2) r7 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r7, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000f703010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 675.68105ms ago: executing program 1 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa05aaaaaaaabb88a8000081"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 674.84259ms ago: executing program 6 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 657.592851ms ago: executing program 5 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x74, r1, 0x1, 0x0, 0x25dfdbfd, {0x1a}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x0) 619.909841ms ago: executing program 6 (id=1872): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 619.521491ms ago: executing program 2 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4, 0x3, '\x00', 0x0, r3, 0x3, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}, 0x1, 0x0, 0x0, 0x40042}, 0x0) 595.873412ms ago: executing program 5 (id=1874): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 586.779332ms ago: executing program 6 (id=1875): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 538.547272ms ago: executing program 2 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 538.085912ms ago: executing program 5 (id=1877): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000a50000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 534.664402ms ago: executing program 6 (id=1878): io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000000)="0d8440c166b010df9376ef0fb89bbf2420f35c64323f8a5c36ca1e9da474599946d17d70efd894359be34ff95a0a736d2a4ab3fc829f2d995a612abbb471e2b10171d21efd7700b2300b81f6df53ea7d252bbdee34504fa72d965746db718b78656c2459827e5b629040bc5ae89b09e622dfbd76165f6321cc96529c708de1cfb15168e486b096e966b0e0d14835b12ab02953e8379e4e80b2b73d83fd922e87ef379931262b6cf935", 0xa9) socket$inet6(0xa, 0x6, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000140)=@id, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fchown(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 485.606183ms ago: executing program 7 (id=1879): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r2 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x76, 0x8, 0x2, 0xb2, 0x0, 0x100000000, 0x40000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x2}, 0x8, 0x7f, 0x40, 0x6, 0x5, 0xc5, 0xd7f, 0x0, 0x2, 0x0, 0x8000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xd) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) fgetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c250000000007"], 0x0, 0x380, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x220, 0x0, 0x19, 0x0, 0x140, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x0, 0xffffffffa0028000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 485.291623ms ago: executing program 2 (id=1880): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (fail_nth: 8) 479.186003ms ago: executing program 1 (id=1881): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='ext4_evict_inode\x00', r2, 0x0, 0x2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x1, 0x0, 0x4000) read$hiddev(r2, &(0x7f0000000100)=""/145, 0x91) 473.228303ms ago: executing program 5 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x2, 0x0) 39.328699ms ago: executing program 2 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4be, &(0x7f0000000540)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r1, 0xa, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x100, 0x70bd29, 0x25cfdbfc, {0xa, 0x0, 0x10, 0x0, 0x0, 0xffffffff}, [@IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 38.984869ms ago: executing program 1 (id=1884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)={0x74, r1, 0x1, 0x0, 0x25dfdbfd, {0x1a}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x0) 38.414549ms ago: executing program 7 (id=1885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 35.7073ms ago: executing program 1 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=-||!') 0s ago: executing program 7 (id=1887): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, r4, 0x0, 0x46) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') read$msr(r6, &(0x7f0000000040)=""/59, 0xffb5) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000101401002cad7000fedbdf2508000300010000000800"], 0x28}, 0x1, 0x0, 0x0, 0x2404c836}, 0x0) eventfd2(0x7a67, 0x80000) ftruncate(r5, 0x7fffffff) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0x10000, 0x4) close(r4) kernel console output (not intermixed with test programs): ption [ 176.177695][ T6716] EXT4-fs: Ignoring removed nobh option [ 176.186092][ T6716] EXT4-fs: Ignoring removed bh option [ 176.237753][ T6716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.324058][ T5497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.377141][ T6732] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 176.388466][ T6737] syz.5.889 (6737): /proc/6733/oom_adj is deprecated, please use /proc/6733/oom_score_adj instead. [ 176.567420][ T6753] netlink: 'syz.2.897': attribute type 6 has an invalid length. [ 176.642252][ T6753] ALSA: seq fatal error: cannot create timer (-19) [ 176.734023][ T6759] syzkaller1: entered promiscuous mode [ 176.741388][ T6759] syzkaller1: entered allmulticast mode [ 177.053049][ T6768] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 177.142649][ T6765] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 177.163855][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 177.361007][ T6775] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 177.481545][ T6784] xt_hashlimit: max too large, truncated to 1048576 [ 177.492785][ T6784] xt_hashlimit: overflow, try lower: 0/0 [ 177.657817][ T6791] sch_tbf: burst 3298 is lower than device lo mtu (65499) ! [ 177.678191][ T6794] loop5: detected capacity change from 0 to 512 [ 177.691742][ T6794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.730820][ T6794] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.915: invalid block [ 177.734939][ T6800] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.917'. [ 177.774239][ T6794] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.915: invalid indirect mapped block 4294967295 (level 1) [ 177.803903][ T6794] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.915: invalid indirect mapped block 4294967295 (level 1) [ 177.831360][ T6794] EXT4-fs (loop5): 2 truncates cleaned up [ 177.840914][ T6794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.905367][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.955985][ T6813] FAULT_INJECTION: forcing a failure. [ 177.955985][ T6813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.975170][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.2.923 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 177.975284][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.975300][ T6813] Call Trace: [ 177.975307][ T6813] [ 177.975316][ T6813] __dump_stack+0x1d/0x30 [ 177.975342][ T6813] dump_stack_lvl+0xe8/0x140 [ 177.975444][ T6813] dump_stack+0x15/0x1b [ 177.975492][ T6813] should_fail_ex+0x265/0x280 [ 177.975585][ T6813] should_fail+0xb/0x20 [ 177.975694][ T6813] should_fail_usercopy+0x1a/0x20 [ 177.975799][ T6813] _copy_from_user+0x1c/0xb0 [ 177.975846][ T6813] ___sys_sendmsg+0xc1/0x1d0 [ 177.975893][ T6813] __x64_sys_sendmsg+0xd4/0x160 [ 177.975918][ T6813] x64_sys_call+0x2999/0x2fb0 [ 177.975966][ T6813] do_syscall_64+0xd0/0x1a0 [ 177.975989][ T6813] ? clear_bhb_loop+0x40/0x90 [ 177.976011][ T6813] ? clear_bhb_loop+0x40/0x90 [ 177.976038][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.976063][ T6813] RIP: 0033:0x7f354492e969 [ 177.976113][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.976135][ T6813] RSP: 002b:00007f3542f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.976158][ T6813] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492e969 [ 177.976174][ T6813] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 177.976189][ T6813] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 177.976204][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.976215][ T6813] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 177.976289][ T6813] [ 178.298640][ T6816] syzkaller1: entered promiscuous mode [ 178.308125][ T6816] syzkaller1: entered allmulticast mode [ 178.327163][ T6814] loop5: detected capacity change from 0 to 512 [ 178.363324][ T6814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.390236][ T6814] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.411370][ T6814] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.922: bg 0: block 18: invalid block bitmap [ 178.443691][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.462889][ T6814] netlink: 96 bytes leftover after parsing attributes in process `syz.5.922'. [ 178.511122][ T6814] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(18) [ 178.518267][ T6814] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 178.533954][ T6814] vhci_hcd vhci_hcd.0: Device attached [ 178.561261][ T6824] vhci_hcd: connection closed [ 178.561626][ T3596] vhci_hcd: stop threads [ 178.578942][ T3596] vhci_hcd: release socket [ 178.591828][ T3596] vhci_hcd: disconnect device [ 178.628179][ T6830] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.929'. [ 178.939199][ T6849] loop0: detected capacity change from 0 to 764 [ 178.976473][ T6849] Symlink component flag not implemented [ 178.985034][ T6849] Symlink component flag not implemented (7) [ 179.074616][ T6852] tap0: tun_chr_ioctl cmd 1074025672 [ 179.083763][ T6852] tap0: ignored: set checksum disabled [ 179.094506][ T6852] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.127017][ T6852] FAULT_INJECTION: forcing a failure. [ 179.127017][ T6852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.151657][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.6.937 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 179.151697][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 179.151762][ T6852] Call Trace: [ 179.151772][ T6852] [ 179.151783][ T6852] __dump_stack+0x1d/0x30 [ 179.151806][ T6852] dump_stack_lvl+0xe8/0x140 [ 179.151828][ T6852] dump_stack+0x15/0x1b [ 179.151845][ T6852] should_fail_ex+0x265/0x280 [ 179.151960][ T6852] should_fail+0xb/0x20 [ 179.152004][ T6852] should_fail_usercopy+0x1a/0x20 [ 179.152036][ T6852] copy_fpstate_to_sigframe+0x62b/0x7d0 [ 179.152083][ T6852] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 179.152169][ T6852] get_sigframe+0x34d/0x490 [ 179.152215][ T6852] ? get_signal+0xdc8/0xf70 [ 179.152310][ T6852] x64_setup_rt_frame+0xa8/0x580 [ 179.153495][ T6852] arch_do_signal_or_restart+0x26e/0x480 [ 179.153542][ T6852] syscall_exit_to_user_mode+0x68/0xb0 [ 179.153602][ T6852] do_syscall_64+0xdd/0x1a0 [ 179.153644][ T6852] ? clear_bhb_loop+0x40/0x90 [ 179.153668][ T6852] ? clear_bhb_loop+0x40/0x90 [ 179.153769][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.153793][ T6852] RIP: 0033:0x7fc1cfe6e967 [ 179.153810][ T6852] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 179.153830][ T6852] RSP: 002b:00007fc1ce4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.153973][ T6852] RAX: 0000000000000000 RBX: 00007fc1d0095fa0 RCX: 00007fc1cfe6e969 [ 179.154001][ T6852] RDX: 0000000000000ff9 RSI: 00002000000013c0 RDI: 0000000000000007 [ 179.154014][ T6852] RBP: 00007fc1ce4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.154027][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.154039][ T6852] R13: 0000000000000000 R14: 00007fc1d0095fa0 R15: 00007ffe6ee514a8 [ 179.154065][ T6852] [ 179.534170][ T6854] syzkaller1: entered promiscuous mode [ 179.546918][ T6854] syzkaller1: entered allmulticast mode [ 179.558394][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.594280][ T6856] tipc: Started in network mode [ 179.600810][ T6856] tipc: Node identity 4, cluster identity 4711 [ 179.614573][ T6856] tipc: Node number set to 4 [ 179.658586][ T6858] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.741148][ T6822] syz.2.926 (6822) used greatest stack depth: 7048 bytes left [ 179.856101][ T6873] netlink: 'syz.1.947': attribute type 6 has an invalid length. [ 179.969235][ T6877] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 179.977378][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 179.977399][ T29] audit: type=1326 audit(1747419679.454:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.039312][ T29] audit: type=1326 audit(1747419679.454:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.082350][ T29] audit: type=1326 audit(1747419679.454:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.123883][ T29] audit: type=1326 audit(1747419679.454:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.172614][ T29] audit: type=1326 audit(1747419679.454:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.214357][ T29] audit: type=1326 audit(1747419679.454:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.251514][ T29] audit: type=1326 audit(1747419679.454:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.295895][ T29] audit: type=1326 audit(1747419679.454:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.344872][ T29] audit: type=1326 audit(1747419679.454:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.390549][ T29] audit: type=1326 audit(1747419679.454:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6878 comm="syz.1.949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 180.560599][ T6885] syzkaller1: entered promiscuous mode [ 180.573658][ T6885] syzkaller1: entered allmulticast mode [ 180.941063][ T6902] usb usb8: usbfs: process 6902 (syz.6.957) did not claim interface 0 before use [ 181.028637][ T6883] program syz.2.950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.054036][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.950'. [ 181.282971][ T6917] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.354888][ T6919] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 181.938530][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.977'. [ 181.956454][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.977'. [ 182.094183][ T6962] loop0: detected capacity change from 0 to 128 [ 182.113890][ T6962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 182.134377][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 182.180303][ T6967] loop6: detected capacity change from 0 to 128 [ 182.197237][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.982'. [ 183.060687][ T6996] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 183.204807][ T7009] netlink: 'syz.0.1000': attribute type 6 has an invalid length. [ 183.254837][ T7009] ALSA: seq fatal error: cannot create timer (-19) [ 183.319524][ T7018] __nla_validate_parse: 3 callbacks suppressed [ 183.319539][ T7018] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.1003'. [ 183.360825][ T7019] loop0: detected capacity change from 0 to 128 [ 183.377713][ T7020] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 183.394665][ T7019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1001'. [ 183.410876][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 183.819758][ T7048] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.1014'. [ 183.843513][ T7049] loop9: detected capacity change from 0 to 16384 [ 184.413870][ T7077] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 184.535685][ T7088] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.622132][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 184.662001][ T7090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.699344][ T7092] loop6: detected capacity change from 0 to 512 [ 184.728522][ T7092] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 184.742633][ T7090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.756836][ T7092] EXT4-fs: error: could not find journal device path [ 184.896641][ T7099] netlink: 4156 bytes leftover after parsing attributes in process `syz.5.1033'. [ 185.040649][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 185.058436][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1036'. [ 185.058758][ T7108] loop0: detected capacity change from 0 to 2048 [ 185.081433][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1036'. [ 185.121544][ T7104] random: crng reseeded on system resumption [ 185.172680][ T7108] loop0: p1 < > p4 [ 185.236136][ T7108] loop0: p4 size 8388608 extends beyond EOD, truncated [ 185.274705][ T7111] loop6: detected capacity change from 0 to 512 [ 185.296245][ T7111] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.312434][ T7111] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 185.321597][ T7108] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 185.331414][ T7111] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 185.358470][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 185.358489][ T29] audit: type=1400 audit(1747419684.496:4969): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 185.383060][ T7111] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 185.401819][ T29] audit: type=1326 audit(1747419684.515:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.419930][ T7111] System zones: [ 185.450398][ T29] audit: type=1326 audit(1747419684.515:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.450437][ T29] audit: type=1326 audit(1747419684.515:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.450473][ T29] audit: type=1326 audit(1747419684.515:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.450501][ T29] audit: type=1326 audit(1747419684.515:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.455628][ T7111] 0-2, 18-18 [ 185.494944][ T29] audit: type=1326 audit(1747419684.515:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.540906][ T7111] , 34-34 [ 185.585003][ T29] audit: type=1326 audit(1747419684.515:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.624424][ T7111] [ 185.631490][ T29] audit: type=1326 audit(1747419684.515:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.763095][ T29] audit: type=1326 audit(1747419684.515:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.5.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 185.820053][ T7111] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 185.862993][ T7111] EXT4-fs (loop6): 1 truncate cleaned up [ 185.863004][ T7118] syzkaller1: entered promiscuous mode [ 185.863024][ T7118] syzkaller1: entered allmulticast mode [ 185.878873][ T7111] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.049027][ T7111] netlink: 'syz.6.1039': attribute type 1 has an invalid length. [ 186.128399][ T5497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.201770][ T7132] netlink: 4156 bytes leftover after parsing attributes in process `syz.6.1046'. [ 186.295172][ T7134] loop0: detected capacity change from 0 to 512 [ 186.324659][ T7139] syzkaller1: entered promiscuous mode [ 186.338464][ T7139] syzkaller1: entered allmulticast mode [ 186.381569][ T7134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.400827][ T7134] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.480898][ T7134] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1048: bg 0: block 18: invalid block bitmap [ 186.545864][ T7149] netlink: 'syz.1.1054': attribute type 6 has an invalid length. [ 186.614068][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.627692][ T7149] ALSA: seq fatal error: cannot create timer (-19) [ 186.700624][ T7160] netlink: 'syz.0.1056': attribute type 6 has an invalid length. [ 186.748017][ T7160] ALSA: seq fatal error: cannot create timer (-19) [ 186.819867][ T7166] loop5: detected capacity change from 0 to 512 [ 186.888557][ T7166] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 186.938933][ T7166] EXT4-fs (loop5): 1 truncate cleaned up [ 186.948267][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.018284][ T7166] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 187.075547][ T7166] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.1060: Logical block already allocated [ 187.101259][ T7166] EXT4-fs (loop5): Remounting filesystem read-only [ 187.219147][ T7166] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 187.250118][ T7166] SELinux: failed to load policy [ 187.345781][ T4365] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.056927][ T7196] loop6: detected capacity change from 0 to 512 [ 188.081708][ T7197] openvswitch: netlink: Message has 6 unknown bytes. [ 188.098672][ T7196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.124394][ T7203] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.196582][ T7196] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.241618][ T7196] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1071: bg 0: block 18: invalid block bitmap [ 188.378714][ T7211] loop0: detected capacity change from 0 to 512 [ 188.393313][ T7213] ALSA: seq fatal error: cannot create timer (-19) [ 188.427003][ T5497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.471058][ T7211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.512309][ T7211] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.542736][ T7211] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1078: bg 0: block 18: invalid block bitmap [ 188.572853][ T7216] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 188.674668][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.901119][ T7234] __nla_validate_parse: 5 callbacks suppressed [ 188.901137][ T7234] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1086'. [ 188.925956][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1086'. [ 189.280189][ T7245] loop0: detected capacity change from 0 to 512 [ 189.344137][ T7245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.372195][ T7245] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.399105][ T7243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1088: bg 0: block 18: invalid block bitmap [ 189.430185][ T7206] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1076'. [ 189.443865][ T7243] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1088'. [ 189.502245][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.557765][ T7254] ALSA: seq fatal error: cannot create timer (-19) [ 189.645460][ T7259] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 189.759921][ T7261] netlink: 4156 bytes leftover after parsing attributes in process `syz.2.1094'. [ 189.957271][ T7274] loop6: detected capacity change from 0 to 128 [ 189.975957][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1097'. [ 189.993749][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1097'. [ 190.331291][ T7286] loop0: detected capacity change from 0 to 764 [ 190.349886][ T7286] Symlink component flag not implemented [ 190.361677][ T7286] Symlink component flag not implemented (7) [ 190.413948][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'. [ 190.430669][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 190.453978][ T7291] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 190.832455][ T7295] FAULT_INJECTION: forcing a failure. [ 190.832455][ T7295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.853793][ T7295] CPU: 0 UID: 0 PID: 7295 Comm: syz.6.1107 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 190.853878][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.853895][ T7295] Call Trace: [ 190.853903][ T7295] [ 190.853911][ T7295] __dump_stack+0x1d/0x30 [ 190.853935][ T7295] dump_stack_lvl+0xe8/0x140 [ 190.853983][ T7295] dump_stack+0x15/0x1b [ 190.854004][ T7295] should_fail_ex+0x265/0x280 [ 190.854037][ T7295] should_fail+0xb/0x20 [ 190.854074][ T7295] should_fail_usercopy+0x1a/0x20 [ 190.854118][ T7295] _copy_to_user+0x20/0xa0 [ 190.854142][ T7295] simple_read_from_buffer+0xb5/0x130 [ 190.854172][ T7295] proc_fail_nth_read+0x100/0x140 [ 190.854207][ T7295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.854284][ T7295] vfs_read+0x19d/0x6f0 [ 190.854312][ T7295] ? __rcu_read_unlock+0x4f/0x70 [ 190.854350][ T7295] ? __rcu_read_unlock+0x4f/0x70 [ 190.854370][ T7295] ? __fget_files+0x184/0x1c0 [ 190.854448][ T7295] ksys_read+0xda/0x1a0 [ 190.854596][ T7295] __x64_sys_read+0x40/0x50 [ 190.854624][ T7295] x64_sys_call+0x2d77/0x2fb0 [ 190.854655][ T7295] do_syscall_64+0xd0/0x1a0 [ 190.854734][ T7295] ? clear_bhb_loop+0x40/0x90 [ 190.854761][ T7295] ? clear_bhb_loop+0x40/0x90 [ 190.854782][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.854802][ T7295] RIP: 0033:0x7fc1cfe6d37c [ 190.854859][ T7295] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.854882][ T7295] RSP: 002b:00007fc1ce4d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.854906][ T7295] RAX: ffffffffffffffda RBX: 00007fc1d0095fa0 RCX: 00007fc1cfe6d37c [ 190.854921][ T7295] RDX: 000000000000000f RSI: 00007fc1ce4d70a0 RDI: 0000000000000004 [ 190.854936][ T7295] RBP: 00007fc1ce4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.854983][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.854998][ T7295] R13: 0000000000000000 R14: 00007fc1d0095fa0 R15: 00007ffe6ee514a8 [ 190.855022][ T7295] [ 191.233850][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 191.233898][ T29] audit: type=1400 audit(1747419689.996:5258): avc: denied { read write } for pid=7296 comm="syz.2.1108" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 191.293319][ T29] audit: type=1400 audit(1747419690.052:5259): avc: denied { open } for pid=7296 comm="syz.2.1108" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 191.335154][ T29] audit: type=1326 audit(1747419690.052:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.374233][ T29] audit: type=1326 audit(1747419690.052:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.416044][ T29] audit: type=1326 audit(1747419690.052:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.453820][ T29] audit: type=1326 audit(1747419690.052:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.453882][ T29] audit: type=1326 audit(1747419690.052:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.453980][ T29] audit: type=1326 audit(1747419690.052:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.454085][ T29] audit: type=1326 audit(1747419690.052:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.454179][ T29] audit: type=1326 audit(1747419690.052:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7298 comm="syz.5.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 191.587246][ T7307] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.1112'. [ 191.598569][ T7302] bridge_slave_0: left allmulticast mode [ 191.598596][ T7302] bridge_slave_0: left promiscuous mode [ 191.598701][ T7302] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.645600][ T7302] bridge_slave_1: left allmulticast mode [ 191.645627][ T7302] bridge_slave_1: left promiscuous mode [ 191.645712][ T7302] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.657115][ T7302] pu_sys: (slave bond_slave_0): Releasing backup interface [ 191.659958][ T7302] pu_sys: (slave bond_slave_1): Releasing backup interface [ 191.678962][ T7302] team0: Port device team_slave_0 removed [ 191.683287][ T7302] team0: Port device team_slave_1 removed [ 191.740823][ T7314] loop0: detected capacity change from 0 to 512 [ 191.883731][ T7314] EXT4-fs: Ignoring removed bh option [ 191.894054][ T7314] ext4: Unknown parameter 'noacl' [ 192.224883][ T7335] loop0: detected capacity change from 0 to 2048 [ 192.247756][ T7338] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 192.275352][ T7335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.306080][ T7337] netlink: 'syz.1.1125': attribute type 58 has an invalid length. [ 192.334964][ T7337] netlink: 'syz.1.1125': attribute type 4 has an invalid length. [ 192.517275][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.741207][ T7356] ALSA: seq fatal error: cannot create timer (-19) [ 192.777505][ T7362] ALSA: seq fatal error: cannot create timer (-19) [ 193.076444][ T7377] loop6: detected capacity change from 0 to 764 [ 193.095144][ T7377] Symlink component flag not implemented [ 193.101562][ T7377] Symlink component flag not implemented (7) [ 193.632921][ T7404] loop6: detected capacity change from 0 to 256 [ 193.693775][ T7406] loop6: detected capacity change from 0 to 764 [ 193.711390][ T7406] Symlink component flag not implemented [ 193.727803][ T7406] Symlink component flag not implemented (7) [ 194.541111][ T7440] FAULT_INJECTION: forcing a failure. [ 194.541111][ T7440] name failslab, interval 1, probability 0, space 0, times 0 [ 194.562910][ T7440] CPU: 1 UID: 0 PID: 7440 Comm: syz.1.1166 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 194.562937][ T7440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.562989][ T7440] Call Trace: [ 194.563033][ T7440] [ 194.563044][ T7440] __dump_stack+0x1d/0x30 [ 194.563071][ T7440] dump_stack_lvl+0xe8/0x140 [ 194.563103][ T7440] dump_stack+0x15/0x1b [ 194.563122][ T7440] should_fail_ex+0x265/0x280 [ 194.563188][ T7440] should_failslab+0x8c/0xb0 [ 194.563216][ T7440] kmem_cache_alloc_node_noprof+0x57/0x320 [ 194.563269][ T7440] ? __alloc_skb+0x101/0x320 [ 194.563298][ T7440] __alloc_skb+0x101/0x320 [ 194.563342][ T7440] ? audit_log_start+0x365/0x6c0 [ 194.563371][ T7440] audit_log_start+0x380/0x6c0 [ 194.563429][ T7440] ? avc_has_perm+0xd3/0x150 [ 194.563448][ T7440] audit_seccomp+0x48/0x100 [ 194.563470][ T7440] ? __seccomp_filter+0x68c/0x10d0 [ 194.563624][ T7440] __seccomp_filter+0x69d/0x10d0 [ 194.563684][ T7440] ? save_fpregs_to_fpstate+0x100/0x160 [ 194.563710][ T7440] ? _raw_spin_unlock+0x26/0x50 [ 194.563735][ T7440] ? finish_task_switch+0xad/0x2b0 [ 194.563797][ T7440] __secure_computing+0x82/0x150 [ 194.563815][ T7440] syscall_trace_enter+0xcf/0x1e0 [ 194.563860][ T7440] do_syscall_64+0xaa/0x1a0 [ 194.563881][ T7440] ? clear_bhb_loop+0x40/0x90 [ 194.563900][ T7440] ? clear_bhb_loop+0x40/0x90 [ 194.563919][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.563946][ T7440] RIP: 0033:0x7f06c1e5d37c [ 194.563966][ T7440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 194.563990][ T7440] RSP: 002b:00007f06c04c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.564008][ T7440] RAX: ffffffffffffffda RBX: 00007f06c2085fa0 RCX: 00007f06c1e5d37c [ 194.566537][ T7440] RDX: 000000000000000f RSI: 00007f06c04c70a0 RDI: 0000000000000003 [ 194.566563][ T7440] RBP: 00007f06c04c7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.566578][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.566607][ T7440] R13: 0000000000000000 R14: 00007f06c2085fa0 R15: 00007ffdd4fc7f08 [ 194.566633][ T7440] [ 194.962031][ T7442] loop0: detected capacity change from 0 to 512 [ 194.985332][ T7442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 195.004273][ T7442] EXT4-fs (loop0): 1 truncate cleaned up [ 195.018494][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.173289][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.240024][ T7450] loop0: detected capacity change from 0 to 2048 [ 195.313105][ T7450] loop0: p1 < > p4 [ 195.321995][ T7450] loop0: p4 size 8388608 extends beyond EOD, truncated [ 195.341902][ T7450] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 195.674182][ T7465] loop0: detected capacity change from 0 to 1024 [ 195.685379][ T7465] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.698313][ T7465] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.723805][ T7465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.817605][ T7471] ALSA: seq fatal error: cannot create timer (-19) [ 195.948587][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.095114][ T7488] __nla_validate_parse: 10 callbacks suppressed [ 196.095133][ T7488] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1183'. [ 196.122156][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1183'. [ 196.320597][ T7499] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 196.321143][ T7496] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 196.525554][ T7504] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 196.704745][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 196.704763][ T29] audit: type=1400 audit(1747419695.103:5593): avc: denied { create } for pid=7508 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.780022][ T29] audit: type=1400 audit(1747419695.103:5594): avc: denied { connect } for pid=7508 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.815202][ T29] audit: type=1400 audit(1747419695.103:5595): avc: denied { setopt } for pid=7508 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.843498][ T29] audit: type=1400 audit(1747419695.103:5596): avc: denied { bind } for pid=7508 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.878371][ T29] audit: type=1400 audit(1747419695.103:5597): avc: denied { write } for pid=7508 comm="syz.2.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 196.965860][ T7517] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1195'. [ 197.040840][ T7521] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.061929][ T29] audit: type=1326 audit(1747419695.450:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.1.1198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06c1e5e969 code=0x0 [ 197.198217][ T7528] loop6: detected capacity change from 0 to 2048 [ 197.250476][ T7528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.361426][ T29] audit: type=1400 audit(1747419695.730:5599): avc: denied { setopt } for pid=7535 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.479480][ T29] audit: type=1400 audit(1747419695.833:5600): avc: denied { connect } for pid=7535 comm="syz.5.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.642129][ T5497] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.678192][ T7547] loop0: detected capacity change from 0 to 2048 [ 197.707734][ T7551] ALSA: seq fatal error: cannot create timer (-19) [ 197.718884][ T7547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.767092][ T7559] syzkaller1: entered promiscuous mode [ 197.776696][ T7559] syzkaller1: entered allmulticast mode [ 197.797950][ T29] audit: type=1400 audit(1747419696.132:5601): avc: denied { setcheckreqprot } for pid=7557 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 197.872703][ T7564] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1214'. [ 197.913740][ T29] audit: type=1400 audit(1747419696.235:5602): avc: denied { rmdir } for pid=3319 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.026488][ T7561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.121188][ T7568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.137857][ T7568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.181009][ T7576] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1218'. [ 198.197832][ T7572] sch_tbf: burst 3298 is lower than device lo mtu (65499) ! [ 198.304350][ T7582] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1222'. [ 198.461178][ T89] bridge_slave_1: left allmulticast mode [ 198.467944][ T89] bridge_slave_1: left promiscuous mode [ 198.481434][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.511985][ T89] bridge_slave_0: left allmulticast mode [ 198.520760][ T89] bridge_slave_0: left promiscuous mode [ 198.534777][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.538003][ T7591] ALSA: seq fatal error: cannot create timer (-19) [ 198.598602][ T7602] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.625932][ T7568] xt_hashlimit: size too large, truncated to 1048576 [ 198.831516][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.843487][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.873628][ T89] bond0 (unregistering): Released all slaves [ 198.901640][ T7596] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1226'. [ 198.917374][ T7560] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1212'. [ 198.971851][ T89] tipc: Disabling bearer [ 198.977909][ T89] tipc: Left network mode [ 199.057048][ T89] hsr_slave_0: left promiscuous mode [ 199.065043][ T89] hsr_slave_1: left promiscuous mode [ 199.079926][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.097028][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.202860][ T89] team0 (unregistering): Port device team_slave_1 removed [ 199.226809][ T89] team0 (unregistering): Port device team_slave_0 removed [ 199.405685][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 199.483423][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.493700][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.504007][ T7585] bridge_slave_0: entered allmulticast mode [ 199.514687][ T7585] bridge_slave_0: entered promiscuous mode [ 199.529072][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.544381][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.554860][ T7585] bridge_slave_1: entered allmulticast mode [ 199.563609][ T7585] bridge_slave_1: entered promiscuous mode [ 199.639939][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.657057][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.693142][ T7585] team0: Port device team_slave_0 added [ 199.868272][ T7585] team0: Port device team_slave_1 added [ 199.896542][ T7632] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1236'. [ 199.909806][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.916014][ T7637] ALSA: seq fatal error: cannot create timer (-19) [ 199.918796][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.969914][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.003537][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.015534][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.056140][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.374833][ T7585] hsr_slave_0: entered promiscuous mode [ 200.399177][ T7585] hsr_slave_1: entered promiscuous mode [ 200.476043][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.512385][ T7585] Cannot create hsr debugfs directory [ 201.253697][ T7655] FAULT_INJECTION: forcing a failure. [ 201.253697][ T7655] name failslab, interval 1, probability 0, space 0, times 0 [ 201.275207][ T7655] CPU: 1 UID: 0 PID: 7655 Comm: syz.2.1244 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 201.275235][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.275251][ T7655] Call Trace: [ 201.275260][ T7655] [ 201.275270][ T7655] __dump_stack+0x1d/0x30 [ 201.275363][ T7655] dump_stack_lvl+0xe8/0x140 [ 201.275388][ T7655] dump_stack+0x15/0x1b [ 201.275409][ T7655] should_fail_ex+0x265/0x280 [ 201.275447][ T7655] ? audit_log_d_path+0x8d/0x150 [ 201.275583][ T7655] should_failslab+0x8c/0xb0 [ 201.275622][ T7655] __kmalloc_cache_noprof+0x4c/0x320 [ 201.275646][ T7655] audit_log_d_path+0x8d/0x150 [ 201.275723][ T7655] audit_log_d_path_exe+0x42/0x70 [ 201.275838][ T7655] audit_log_task+0x1e9/0x250 [ 201.275873][ T7655] audit_seccomp+0x61/0x100 [ 201.275898][ T7655] ? __seccomp_filter+0x68c/0x10d0 [ 201.275919][ T7655] __seccomp_filter+0x69d/0x10d0 [ 201.276048][ T7655] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 201.276082][ T7655] ? vfs_write+0x75e/0x8d0 [ 201.276175][ T7655] ? __rcu_read_unlock+0x4f/0x70 [ 201.276196][ T7655] ? __fget_files+0x184/0x1c0 [ 201.276232][ T7655] __secure_computing+0x82/0x150 [ 201.276259][ T7655] syscall_trace_enter+0xcf/0x1e0 [ 201.276310][ T7655] do_syscall_64+0xaa/0x1a0 [ 201.276364][ T7655] ? clear_bhb_loop+0x40/0x90 [ 201.276419][ T7655] ? clear_bhb_loop+0x40/0x90 [ 201.276440][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.276460][ T7655] RIP: 0033:0x7f354492e969 [ 201.276479][ T7655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.276547][ T7655] RSP: 002b:00007f3542f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 201.276565][ T7655] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492e969 [ 201.276577][ T7655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.276588][ T7655] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 201.276599][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.276614][ T7655] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 201.276636][ T7655] [ 201.760312][ T7585] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 201.947570][ T7585] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 201.985622][ T7585] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.023518][ T7585] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.147935][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 202.147950][ T29] audit: type=1326 audit(1747419700.211:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.2.1247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f354492e969 code=0x0 [ 202.237880][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.425635][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'. [ 202.439122][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 202.461047][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.496459][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.508770][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.579966][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.594245][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.620410][ T7647] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1241'. [ 202.859480][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.178120][ T29] audit: type=1326 audit(1747419701.165:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.213803][ T29] audit: type=1326 audit(1747419701.165:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.251772][ T29] audit: type=1326 audit(1747419701.165:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.293752][ T29] audit: type=1326 audit(1747419701.240:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.333607][ T29] audit: type=1326 audit(1747419701.240:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.373713][ T29] audit: type=1326 audit(1747419701.240:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.417228][ T29] audit: type=1326 audit(1747419701.240:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.453226][ T29] audit: type=1326 audit(1747419701.240:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.483574][ T29] audit: type=1326 audit(1747419701.240:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7681 comm="syz.1.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06c1e5e969 code=0x7ffc0000 [ 203.833007][ T7712] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1258'. [ 203.923933][ T7585] veth0_vlan: entered promiscuous mode [ 203.939068][ T7718] ALSA: seq fatal error: cannot create timer (-19) [ 203.969587][ T7585] veth1_vlan: entered promiscuous mode [ 204.015666][ T7585] veth0_macvtap: entered promiscuous mode [ 204.037885][ T7585] veth1_macvtap: entered promiscuous mode [ 204.076001][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.117097][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.155496][ T7585] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.170879][ T7585] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.181940][ T7585] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.199353][ T7585] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.340522][ T7737] openvswitch: netlink: Message has 6 unknown bytes. [ 204.439299][ T7745] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.471340][ T7743] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 204.497951][ T7743] netlink: 'syz.5.1270': attribute type 1 has an invalid length. [ 205.056574][ T7755] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1274'. [ 205.448918][ T7771] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1279'. [ 205.561453][ T7775] FAULT_INJECTION: forcing a failure. [ 205.561453][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 205.582449][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.2.1281 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 205.582505][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.582517][ T7775] Call Trace: [ 205.582524][ T7775] [ 205.582532][ T7775] __dump_stack+0x1d/0x30 [ 205.582554][ T7775] dump_stack_lvl+0xe8/0x140 [ 205.582648][ T7775] dump_stack+0x15/0x1b [ 205.582729][ T7775] should_fail_ex+0x265/0x280 [ 205.582771][ T7775] should_failslab+0x8c/0xb0 [ 205.582808][ T7775] kmem_cache_alloc_noprof+0x50/0x310 [ 205.582874][ T7775] ? skb_clone+0x151/0x1f0 [ 205.582903][ T7775] skb_clone+0x151/0x1f0 [ 205.582924][ T7775] __netlink_deliver_tap+0x2c9/0x500 [ 205.582948][ T7775] netlink_unicast+0x64c/0x670 [ 205.583035][ T7775] netlink_sendmsg+0x58b/0x6b0 [ 205.583060][ T7775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.583112][ T7775] __sock_sendmsg+0x145/0x180 [ 205.583146][ T7775] ____sys_sendmsg+0x31e/0x4e0 [ 205.583175][ T7775] ___sys_sendmsg+0x17b/0x1d0 [ 205.583270][ T7775] __x64_sys_sendmsg+0xd4/0x160 [ 205.583327][ T7775] x64_sys_call+0x2999/0x2fb0 [ 205.586917][ T7775] do_syscall_64+0xd0/0x1a0 [ 205.586946][ T7775] ? clear_bhb_loop+0x40/0x90 [ 205.586972][ T7775] ? clear_bhb_loop+0x40/0x90 [ 205.587020][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.587045][ T7775] RIP: 0033:0x7f354492e969 [ 205.587062][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.587084][ T7775] RSP: 002b:00007f3542f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.587107][ T7775] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492e969 [ 205.587121][ T7775] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 205.587205][ T7775] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 205.587287][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.587302][ T7775] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 205.587325][ T7775] [ 205.645283][ T7775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1281'. [ 205.941444][ T7784] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1286'. [ 206.817472][ T7781] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1284'. [ 207.535409][ T7844] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1309'. [ 207.594431][ T7849] netlink: 'syz.5.1312': attribute type 21 has an invalid length. [ 207.609946][ T7849] netlink: 'syz.5.1312': attribute type 20 has an invalid length. [ 207.621513][ T7849] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.694825][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 207.694844][ T29] audit: type=1400 audit(1747419705.394:5797): avc: denied { read } for pid=7847 comm="syz.5.1312" path="socket:[19580]" dev="sockfs" ino=19580 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.761794][ T7852] FAULT_INJECTION: forcing a failure. [ 207.761794][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 207.782474][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.7.1313 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 207.782502][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 207.782531][ T7852] Call Trace: [ 207.782538][ T7852] [ 207.782547][ T7852] __dump_stack+0x1d/0x30 [ 207.782574][ T7852] dump_stack_lvl+0xe8/0x140 [ 207.782652][ T7852] dump_stack+0x15/0x1b [ 207.782668][ T7852] should_fail_ex+0x265/0x280 [ 207.782701][ T7852] should_failslab+0x8c/0xb0 [ 207.782737][ T7852] kmem_cache_alloc_node_noprof+0x57/0x320 [ 207.782803][ T7852] ? __alloc_skb+0x101/0x320 [ 207.782875][ T7852] __alloc_skb+0x101/0x320 [ 207.782916][ T7852] netlink_alloc_large_skb+0xba/0xf0 [ 207.782956][ T7852] netlink_sendmsg+0x3cf/0x6b0 [ 207.783062][ T7852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.783088][ T7852] __sock_sendmsg+0x145/0x180 [ 207.783175][ T7852] ____sys_sendmsg+0x31e/0x4e0 [ 207.783273][ T7852] ___sys_sendmsg+0x17b/0x1d0 [ 207.783317][ T7852] __x64_sys_sendmsg+0xd4/0x160 [ 207.783349][ T7852] x64_sys_call+0x2999/0x2fb0 [ 207.783376][ T7852] do_syscall_64+0xd0/0x1a0 [ 207.783406][ T7852] ? clear_bhb_loop+0x40/0x90 [ 207.783486][ T7852] ? clear_bhb_loop+0x40/0x90 [ 207.783507][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.783533][ T7852] RIP: 0033:0x7fd3f260e969 [ 207.783554][ T7852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.783576][ T7852] RSP: 002b:00007fd3f0c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.783663][ T7852] RAX: ffffffffffffffda RBX: 00007fd3f2835fa0 RCX: 00007fd3f260e969 [ 207.783678][ T7852] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 207.783704][ T7852] RBP: 00007fd3f0c77090 R08: 0000000000000000 R09: 0000000000000000 [ 207.783717][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.783733][ T7852] R13: 0000000000000000 R14: 00007fd3f2835fa0 R15: 00007ffd89353ea8 [ 207.783757][ T7852] [ 208.177123][ T7860] __nla_validate_parse: 1 callbacks suppressed [ 208.177143][ T7860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1312'. [ 208.240034][ T7849] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 208.294496][ T29] audit: type=1326 audit(1747419705.918:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1cfe65927 code=0x7ffc0000 [ 208.336516][ T29] audit: type=1326 audit(1747419705.918:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cfe0ab39 code=0x7ffc0000 [ 208.374959][ T29] audit: type=1326 audit(1747419705.918:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc1cfe65927 code=0x7ffc0000 [ 208.412550][ T29] audit: type=1326 audit(1747419705.918:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc1cfe0ab39 code=0x7ffc0000 [ 208.451841][ T29] audit: type=1326 audit(1747419705.918:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 208.492344][ T29] audit: type=1326 audit(1747419705.918:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 208.500108][ T7876] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1318'. [ 208.539487][ T29] audit: type=1326 audit(1747419705.918:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 208.558651][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1318'. [ 208.614822][ T29] audit: type=1326 audit(1747419705.918:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 208.662613][ T29] audit: type=1326 audit(1747419705.918:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7861 comm="syz.6.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 209.044211][ T7892] FAULT_INJECTION: forcing a failure. [ 209.044211][ T7892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.075817][ T7892] CPU: 1 UID: 0 PID: 7892 Comm: +}[@ Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 209.075885][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 209.075898][ T7892] Call Trace: [ 209.075903][ T7892] [ 209.075911][ T7892] __dump_stack+0x1d/0x30 [ 209.075934][ T7892] dump_stack_lvl+0xe8/0x140 [ 209.075999][ T7892] dump_stack+0x15/0x1b [ 209.076021][ T7892] should_fail_ex+0x265/0x280 [ 209.076063][ T7892] should_fail+0xb/0x20 [ 209.076091][ T7892] should_fail_usercopy+0x1a/0x20 [ 209.076152][ T7892] _copy_to_user+0x20/0xa0 [ 209.076186][ T7892] simple_read_from_buffer+0xb5/0x130 [ 209.076271][ T7892] proc_fail_nth_read+0x100/0x140 [ 209.076306][ T7892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.076413][ T7892] vfs_read+0x19d/0x6f0 [ 209.076441][ T7892] ? __rcu_read_unlock+0x4f/0x70 [ 209.076469][ T7892] ? __fget_files+0x184/0x1c0 [ 209.076507][ T7892] ksys_read+0xda/0x1a0 [ 209.076614][ T7892] __x64_sys_read+0x40/0x50 [ 209.076692][ T7892] x64_sys_call+0x2d77/0x2fb0 [ 209.076781][ T7892] do_syscall_64+0xd0/0x1a0 [ 209.076812][ T7892] ? clear_bhb_loop+0x40/0x90 [ 209.076839][ T7892] ? clear_bhb_loop+0x40/0x90 [ 209.076865][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.076890][ T7892] RIP: 0033:0x7f4b3d4ed37c [ 209.076987][ T7892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.077034][ T7892] RSP: 002b:00007f4b3bb57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.077129][ T7892] RAX: ffffffffffffffda RBX: 00007f4b3d715fa0 RCX: 00007f4b3d4ed37c [ 209.077145][ T7892] RDX: 000000000000000f RSI: 00007f4b3bb570a0 RDI: 0000000000000004 [ 209.077191][ T7892] RBP: 00007f4b3bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 209.077207][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.077223][ T7892] R13: 0000000000000000 R14: 00007f4b3d715fa0 R15: 00007ffcd94a9cf8 [ 209.077244][ T7892] [ 209.162277][ T7893] ALSA: seq fatal error: cannot create timer (-19) [ 209.175662][ T7897] loop7: detected capacity change from 0 to 164 [ 209.514801][ T7897] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.533433][ T7897] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 209.554247][ T7899] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 209.612477][ T7897] Symlink component flag not implemented [ 209.619883][ T7897] Symlink component flag not implemented [ 209.641438][ T7897] Symlink component flag not implemented (7) [ 209.655715][ T7897] Symlink component flag not implemented (116) [ 209.801158][ T7910] ALSA: seq fatal error: cannot create timer (-19) [ 209.964079][ T7916] 9pnet_fd: Insufficient options for proto=fd [ 210.054636][ T7918] FAULT_INJECTION: forcing a failure. [ 210.054636][ T7918] name failslab, interval 1, probability 0, space 0, times 0 [ 210.073849][ T7918] CPU: 1 UID: 0 PID: 7918 Comm: syz.5.1333 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 210.073881][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.073990][ T7918] Call Trace: [ 210.073998][ T7918] [ 210.074006][ T7918] __dump_stack+0x1d/0x30 [ 210.074027][ T7918] dump_stack_lvl+0xe8/0x140 [ 210.074046][ T7918] dump_stack+0x15/0x1b [ 210.074062][ T7918] should_fail_ex+0x265/0x280 [ 210.074136][ T7918] ? __se_sys_fsopen+0x10d/0x1e0 [ 210.074167][ T7918] should_failslab+0x8c/0xb0 [ 210.074239][ T7918] __kmalloc_cache_noprof+0x4c/0x320 [ 210.074264][ T7918] __se_sys_fsopen+0x10d/0x1e0 [ 210.074298][ T7918] __x64_sys_fsopen+0x31/0x40 [ 210.074413][ T7918] x64_sys_call+0x2a54/0x2fb0 [ 210.074440][ T7918] do_syscall_64+0xd0/0x1a0 [ 210.074533][ T7918] ? clear_bhb_loop+0x40/0x90 [ 210.074601][ T7918] ? clear_bhb_loop+0x40/0x90 [ 210.074628][ T7918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.074654][ T7918] RIP: 0033:0x7f4b3d4ee969 [ 210.074716][ T7918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.074736][ T7918] RSP: 002b:00007f4b3bb57038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 210.074817][ T7918] RAX: ffffffffffffffda RBX: 00007f4b3d715fa0 RCX: 00007f4b3d4ee969 [ 210.074841][ T7918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 210.074854][ T7918] RBP: 00007f4b3bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 210.074866][ T7918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.074878][ T7918] R13: 0000000000000000 R14: 00007f4b3d715fa0 R15: 00007ffcd94a9cf8 [ 210.074896][ T7918] [ 210.538162][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'. [ 211.016166][ T7941] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1344'. [ 212.321688][ T7968] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1353'. [ 212.441317][ T7974] ALSA: seq fatal error: cannot create timer (-19) [ 212.692386][ T8003] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1368'. [ 212.820394][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1372'. [ 212.903033][ T8015] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1374'. [ 213.059995][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 213.060031][ T29] audit: type=1326 audit(1747419710.408:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8025 comm="syz.1.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06c1e5e969 code=0x0 [ 213.146662][ T29] audit: type=1400 audit(1747419710.492:5944): avc: denied { write } for pid=8028 comm="syz.5.1380" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 213.222328][ T8032] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1381'. [ 213.377539][ T8037] ip6t_rpfilter: unknown options [ 213.434475][ T29] audit: type=1326 audit(1747419710.764:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.469976][ T29] audit: type=1326 audit(1747419710.764:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.572933][ T29] audit: type=1326 audit(1747419710.764:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.614911][ T29] audit: type=1326 audit(1747419710.764:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.615015][ T1048] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 213.656572][ T29] audit: type=1326 audit(1747419710.764:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.714167][ T29] audit: type=1326 audit(1747419710.782:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.754972][ T29] audit: type=1326 audit(1747419710.782:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 213.774950][ T1048] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.802043][ T29] audit: type=1326 audit(1747419710.782:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.6.1385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 214.093561][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1379'. [ 214.217603][ T8060] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.443179][ T8020] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1375'. [ 214.581929][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 214.715219][ T8072] hub 9-0:1.0: USB hub found [ 214.736550][ T8072] hub 9-0:1.0: 8 ports detected [ 214.973488][ T8089] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1400'. [ 216.135719][ T8117] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1412'. [ 216.201233][ T8125] ALSA: seq fatal error: cannot create timer (-19) [ 216.505806][ T8146] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.616022][ T8151] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1425'. [ 216.751614][ T8157] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1428'. [ 216.774144][ T8157] gretap0: entered promiscuous mode [ 216.786542][ T8157] gretap0: left promiscuous mode [ 217.290711][ T8179] program syz.1.1439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.348742][ T8185] FAULT_INJECTION: forcing a failure. [ 217.348742][ T8185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.372372][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.2.1442 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 217.372407][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.372492][ T8185] Call Trace: [ 217.372500][ T8185] [ 217.372508][ T8185] __dump_stack+0x1d/0x30 [ 217.372544][ T8185] dump_stack_lvl+0xe8/0x140 [ 217.372582][ T8185] dump_stack+0x15/0x1b [ 217.372655][ T8185] should_fail_ex+0x265/0x280 [ 217.372744][ T8185] should_fail+0xb/0x20 [ 217.372772][ T8185] should_fail_usercopy+0x1a/0x20 [ 217.372791][ T8185] _copy_to_user+0x20/0xa0 [ 217.372813][ T8185] simple_read_from_buffer+0xb5/0x130 [ 217.372869][ T8185] proc_fail_nth_read+0x100/0x140 [ 217.372904][ T8185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.372964][ T8185] vfs_read+0x19d/0x6f0 [ 217.372988][ T8185] ? __rcu_read_unlock+0x4f/0x70 [ 217.373015][ T8185] ? __fget_files+0x184/0x1c0 [ 217.373081][ T8185] ksys_read+0xda/0x1a0 [ 217.373107][ T8185] __x64_sys_read+0x40/0x50 [ 217.373132][ T8185] x64_sys_call+0x2d77/0x2fb0 [ 217.373155][ T8185] do_syscall_64+0xd0/0x1a0 [ 217.373245][ T8185] ? clear_bhb_loop+0x40/0x90 [ 217.373272][ T8185] ? clear_bhb_loop+0x40/0x90 [ 217.373308][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.373333][ T8185] RIP: 0033:0x7f354492d37c [ 217.373370][ T8185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.374895][ T8185] RSP: 002b:00007f3542f97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.375309][ T8185] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492d37c [ 217.375326][ T8185] RDX: 000000000000000f RSI: 00007f3542f970a0 RDI: 0000000000000004 [ 217.375339][ T8185] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 217.377099][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.377120][ T8185] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 217.377145][ T8185] [ 217.383683][ T8187] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1443'. [ 217.664840][ T8194] xt_hashlimit: max too large, truncated to 1048576 [ 218.015069][ T8216] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 218.114963][ T8228] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.138336][ T8228] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 218.138336][ T8228] program syz.5.1460 not setting count and/or reply_len properly [ 218.212940][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1456'. [ 218.225271][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 219.189590][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 219.189608][ T29] audit: type=1326 audit(1747419716.152:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.214061][ T8254] cgroup: none used incorrectly [ 219.262847][ T29] audit: type=1326 audit(1747419716.171:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.299781][ T29] audit: type=1326 audit(1747419716.171:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.339833][ T29] audit: type=1326 audit(1747419716.171:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.380865][ T29] audit: type=1326 audit(1747419716.171:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.421108][ T29] audit: type=1326 audit(1747419716.171:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.459446][ T29] audit: type=1326 audit(1747419716.171:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.492852][ T8260] __nla_validate_parse: 1 callbacks suppressed [ 219.492877][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1470'. [ 219.497419][ T29] audit: type=1326 audit(1747419716.171:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.553117][ T29] audit: type=1326 audit(1747419716.171:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.589480][ T29] audit: type=1326 audit(1747419716.171:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.7.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f260e969 code=0x7ffc0000 [ 219.597703][ T8264] ALSA: seq fatal error: cannot create timer (-19) [ 219.635190][ T8254] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1467'. [ 219.713077][ T8271] futex_wake_op: syz.2.1474 tries to shift op by -1; fix this program [ 219.763912][ T8273] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 219.801647][ T8278] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1476'. [ 219.830711][ T8284] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 4096, id = 0 [ 219.858199][ T8282] block device autoloading is deprecated and will be removed. [ 220.315724][ T8305] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1486'. [ 220.355057][ T8301] SELinux: Context system_u:object_r:iptables_initrc_exec_t:s0 is not valid (left unmapped). [ 220.419747][ T8307] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 220.459699][ T8312] sch_tbf: burst 3298 is lower than device lo mtu (65499) ! [ 220.514524][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1490'. [ 220.559923][ T8317] ALSA: seq fatal error: cannot create timer (-19) [ 220.677959][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1499'. [ 220.711296][ T8331] FAULT_INJECTION: forcing a failure. [ 220.711296][ T8331] name failslab, interval 1, probability 0, space 0, times 0 [ 220.722181][ T8335] ALSA: seq fatal error: cannot create timer (-19) [ 220.728416][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.6.1497 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 220.728521][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 220.728539][ T8331] Call Trace: [ 220.728546][ T8331] [ 220.728557][ T8331] __dump_stack+0x1d/0x30 [ 220.728587][ T8331] dump_stack_lvl+0xe8/0x140 [ 220.728684][ T8331] dump_stack+0x15/0x1b [ 220.728706][ T8331] should_fail_ex+0x265/0x280 [ 220.728749][ T8331] should_failslab+0x8c/0xb0 [ 220.728790][ T8331] kmem_cache_alloc_node_noprof+0x57/0x320 [ 220.728833][ T8331] ? __alloc_skb+0x101/0x320 [ 220.731929][ T8331] ? _raw_spin_unlock_bh+0x36/0x40 [ 220.731981][ T8331] __alloc_skb+0x101/0x320 [ 220.732107][ T8331] wg_packet_send_keepalive+0x49/0x100 [ 220.732163][ T8331] wg_open+0x16c/0x1b0 [ 220.732193][ T8331] __dev_open+0x2d2/0x530 [ 220.732253][ T8331] __dev_change_flags+0x163/0x400 [ 220.732331][ T8331] netif_change_flags+0x5a/0xd0 [ 220.732366][ T8331] dev_change_flags+0xce/0x180 [ 220.732415][ T8331] dev_ifsioc+0x44b/0xaa0 [ 220.732442][ T8331] ? __rcu_read_unlock+0x4f/0x70 [ 220.732476][ T8331] dev_ioctl+0x70a/0x960 [ 220.732527][ T8331] sock_do_ioctl+0x197/0x220 [ 220.732564][ T8331] sock_ioctl+0x41b/0x610 [ 220.732597][ T8331] ? __pfx_sock_ioctl+0x10/0x10 [ 220.732758][ T8331] __se_sys_ioctl+0xcb/0x140 [ 220.732790][ T8331] __x64_sys_ioctl+0x43/0x50 [ 220.732818][ T8331] x64_sys_call+0x19a8/0x2fb0 [ 220.732848][ T8331] do_syscall_64+0xd0/0x1a0 [ 220.733011][ T8331] ? clear_bhb_loop+0x40/0x90 [ 220.733094][ T8331] ? clear_bhb_loop+0x40/0x90 [ 220.733329][ T8331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.733370][ T8331] RIP: 0033:0x7fc1cfe6e969 [ 220.733389][ T8331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.733413][ T8331] RSP: 002b:00007fc1ce4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.733438][ T8331] RAX: ffffffffffffffda RBX: 00007fc1d0095fa0 RCX: 00007fc1cfe6e969 [ 220.733530][ T8331] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 220.733547][ T8331] RBP: 00007fc1ce4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 220.733562][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.733579][ T8331] R13: 0000000000000000 R14: 00007fc1d0095fa0 R15: 00007ffe6ee514a8 [ 220.733605][ T8331] [ 220.741094][ T8331] wg2: entered promiscuous mode [ 221.084932][ T8331] wg2: entered allmulticast mode [ 221.268527][ T8351] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1507'. [ 221.358763][ T8355] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 221.456776][ T8361] ALSA: seq fatal error: cannot create timer (-19) [ 221.517395][ T8368] tmpfs: Bad value for 'mpol' [ 221.619832][ T8375] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1518'. [ 221.912240][ T8397] ALSA: seq fatal error: cannot create timer (-19) [ 222.052610][ T8406] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 222.052610][ T8406] The task syz.6.1529 (8406) triggered the difference, watch for misbehavior. [ 222.220050][ T8414] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 222.252903][ T8413] netlink: 8 bytes leftover after parsing attributes in process `\'. [ 222.393706][ T8422] ALSA: seq fatal error: cannot create timer (-19) [ 222.477054][ T8429] syzkaller1: entered allmulticast mode [ 222.516015][ T8431] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1543'. [ 222.568549][ T8433] atomic_op ffff88811ae20d28 conn xmit_atomic 0000000000000000 [ 222.699589][ T8436] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 223.078222][ T8448] FAULT_INJECTION: forcing a failure. [ 223.078222][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 223.094446][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.6.1547 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 223.094484][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.094551][ T8448] Call Trace: [ 223.094561][ T8448] [ 223.094572][ T8448] __dump_stack+0x1d/0x30 [ 223.094601][ T8448] dump_stack_lvl+0xe8/0x140 [ 223.094621][ T8448] dump_stack+0x15/0x1b [ 223.094640][ T8448] should_fail_ex+0x265/0x280 [ 223.094729][ T8448] should_failslab+0x8c/0xb0 [ 223.094810][ T8448] kmem_cache_alloc_noprof+0x50/0x310 [ 223.094835][ T8448] ? audit_log_start+0x365/0x6c0 [ 223.094870][ T8448] audit_log_start+0x365/0x6c0 [ 223.094954][ T8448] audit_seccomp+0x48/0x100 [ 223.095061][ T8448] ? __seccomp_filter+0x68c/0x10d0 [ 223.095090][ T8448] __seccomp_filter+0x69d/0x10d0 [ 223.095174][ T8448] ? _raw_spin_unlock+0x26/0x50 [ 223.095298][ T8448] ? finish_task_switch+0xad/0x2b0 [ 223.095329][ T8448] __secure_computing+0x82/0x150 [ 223.095352][ T8448] syscall_trace_enter+0xcf/0x1e0 [ 223.095500][ T8448] do_syscall_64+0xaa/0x1a0 [ 223.095526][ T8448] ? clear_bhb_loop+0x40/0x90 [ 223.095611][ T8448] ? clear_bhb_loop+0x40/0x90 [ 223.095638][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.095742][ T8448] RIP: 0033:0x7fc1cfe6e969 [ 223.095762][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.095781][ T8448] RSP: 002b:00007fc1ce4d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c0 [ 223.095800][ T8448] RAX: ffffffffffffffda RBX: 00007fc1d0095fa0 RCX: 00007fc1cfe6e969 [ 223.095817][ T8448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 223.095833][ T8448] RBP: 00007fc1ce4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 223.095875][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.095888][ T8448] R13: 0000000000000000 R14: 00007fc1d0095fa0 R15: 00007ffe6ee514a8 [ 223.095915][ T8448] [ 223.497554][ T8458] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 223.903138][ T8506] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 223.916028][ T8506] sd 0:0:1:0: device reset [ 224.178505][ T8521] FAULT_INJECTION: forcing a failure. [ 224.178505][ T8521] name failslab, interval 1, probability 0, space 0, times 0 [ 224.195293][ T8521] CPU: 1 UID: 0 PID: 8521 Comm: syz.5.1578 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 224.195403][ T8521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.195416][ T8521] Call Trace: [ 224.195423][ T8521] [ 224.195433][ T8521] __dump_stack+0x1d/0x30 [ 224.195460][ T8521] dump_stack_lvl+0xe8/0x140 [ 224.195485][ T8521] dump_stack+0x15/0x1b [ 224.195504][ T8521] should_fail_ex+0x265/0x280 [ 224.195566][ T8521] should_failslab+0x8c/0xb0 [ 224.195629][ T8521] kmem_cache_alloc_noprof+0x50/0x310 [ 224.195649][ T8521] ? security_file_alloc+0x32/0x100 [ 224.195680][ T8521] security_file_alloc+0x32/0x100 [ 224.195708][ T8521] init_file+0x5c/0x1d0 [ 224.195741][ T8521] alloc_empty_file+0x8b/0x200 [ 224.195825][ T8521] path_openat+0x68/0x2170 [ 224.195845][ T8521] ? __rcu_read_unlock+0x34/0x70 [ 224.195873][ T8521] ? filemap_map_pages+0x9be/0xab0 [ 224.195901][ T8521] ? _parse_integer_limit+0x170/0x190 [ 224.195956][ T8521] ? cgroup_rstat_updated+0xa3/0x510 [ 224.195995][ T8521] ? kstrtoull+0x111/0x140 [ 224.196035][ T8521] do_filp_open+0x109/0x230 [ 224.196086][ T8521] do_sys_openat2+0xa6/0x110 [ 224.196111][ T8521] __x64_sys_openat+0xf2/0x120 [ 224.196132][ T8521] x64_sys_call+0x1af/0x2fb0 [ 224.196154][ T8521] do_syscall_64+0xd0/0x1a0 [ 224.196183][ T8521] ? clear_bhb_loop+0x40/0x90 [ 224.196211][ T8521] ? clear_bhb_loop+0x40/0x90 [ 224.196332][ T8521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.196351][ T8521] RIP: 0033:0x7f4b3d4ed2d0 [ 224.196365][ T8521] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 224.196382][ T8521] RSP: 002b:00007f4b3bb56b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 224.196434][ T8521] RAX: ffffffffffffffda RBX: 0000000000002581 RCX: 00007f4b3d4ed2d0 [ 224.196454][ T8521] RDX: 0000000000002581 RSI: 00007f4b3bb56c10 RDI: 00000000ffffff9c [ 224.196465][ T8521] RBP: 00007f4b3bb56c10 R08: 0000000000000000 R09: 0000000000000000 [ 224.196476][ T8521] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 224.196492][ T8521] R13: 0000000000000000 R14: 00007f4b3d715fa0 R15: 00007ffcd94a9cf8 [ 224.196515][ T8521] [ 224.775539][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 224.775556][ T29] audit: type=1400 audit(1747419721.363:6462): avc: denied { mounton } for pid=8545 comm="syz.5.1588" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 224.852341][ T8546] FAULT_INJECTION: forcing a failure. [ 224.852341][ T8546] name failslab, interval 1, probability 0, space 0, times 0 [ 224.856459][ T8550] __nla_validate_parse: 6 callbacks suppressed [ 224.856486][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1590'. [ 224.870113][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.5.1588 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 224.870156][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 224.870178][ T8546] Call Trace: [ 224.870192][ T8546] [ 224.870207][ T8546] __dump_stack+0x1d/0x30 [ 224.870262][ T8546] dump_stack_lvl+0xe8/0x140 [ 224.870383][ T8546] dump_stack+0x15/0x1b [ 224.870405][ T8546] should_fail_ex+0x265/0x280 [ 224.870450][ T8546] ? sctp_add_bind_addr+0x71/0x1e0 [ 224.870492][ T8546] should_failslab+0x8c/0xb0 [ 224.870580][ T8546] __kmalloc_cache_noprof+0x4c/0x320 [ 224.870654][ T8546] sctp_add_bind_addr+0x71/0x1e0 [ 224.870692][ T8546] sctp_copy_local_addr_list+0x199/0x220 [ 224.870733][ T8546] sctp_copy_one_addr+0x7f/0x280 [ 224.872954][ T8546] sctp_bind_addr_copy+0x11b/0x290 [ 224.872995][ T8546] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 224.873140][ T8546] sctp_connect_new_asoc+0x1c3/0x3a0 [ 224.873174][ T8546] sctp_sendmsg+0xf10/0x18d0 [ 224.873225][ T8546] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.873300][ T8546] inet_sendmsg+0xc5/0xd0 [ 224.873358][ T8546] __sock_sendmsg+0x102/0x180 [ 224.873396][ T8546] ____sys_sendmsg+0x345/0x4e0 [ 224.873433][ T8546] ___sys_sendmsg+0x17b/0x1d0 [ 224.873501][ T8546] __sys_sendmmsg+0x178/0x300 [ 224.873551][ T8546] __x64_sys_sendmmsg+0x57/0x70 [ 224.873651][ T8546] x64_sys_call+0x2f2f/0x2fb0 [ 224.873732][ T8546] do_syscall_64+0xd0/0x1a0 [ 224.873768][ T8546] ? clear_bhb_loop+0x40/0x90 [ 224.873798][ T8546] ? clear_bhb_loop+0x40/0x90 [ 224.873841][ T8546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.873879][ T8546] RIP: 0033:0x7f4b3d4ee969 [ 224.873903][ T8546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.874008][ T8546] RSP: 002b:00007f4b3bb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 224.874035][ T8546] RAX: ffffffffffffffda RBX: 00007f4b3d715fa0 RCX: 00007f4b3d4ee969 [ 224.874113][ T8546] RDX: 0000000000000001 RSI: 0000200000000b80 RDI: 0000000000000006 [ 224.874130][ T8546] RBP: 00007f4b3bb57090 R08: 0000000000000000 R09: 0000000000000000 [ 224.874173][ T8546] R10: 0000000024000001 R11: 0000000000000246 R12: 0000000000000002 [ 224.874190][ T8546] R13: 0000000000000000 R14: 00007f4b3d715fa0 R15: 00007ffcd94a9cf8 [ 224.874216][ T8546] [ 224.898664][ T29] audit: type=1326 audit(1747419721.485:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f354492e969 code=0x0 [ 224.997047][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1591'. [ 225.026216][ T29] audit: type=1326 audit(1747419721.560:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.034758][ T8559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 225.270019][ T8573] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 225.286659][ T29] audit: type=1326 audit(1747419721.560:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.302534][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.303880][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 225.337221][ T29] audit: type=1326 audit(1747419721.560:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.337294][ T29] audit: type=1326 audit(1747419721.560:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.337325][ T29] audit: type=1326 audit(1747419721.560:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.429601][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.451859][ T29] audit: type=1326 audit(1747419721.560:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.485547][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.513746][ T29] audit: type=1326 audit(1747419721.560:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.541934][ T8574] vhci_hcd: connection closed [ 225.564594][ T29] audit: type=1326 audit(1747419721.560:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8556 comm="syz.2.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f354492e969 code=0x7ffc0000 [ 225.653641][ T10] vhci_hcd: vhci_device speed not set [ 225.687397][ T37] vhci_hcd: stop threads [ 225.694201][ T37] vhci_hcd: release socket [ 225.700244][ T37] vhci_hcd: disconnect device [ 225.718083][ T8579] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1599'. [ 225.738779][ T10] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 225.750808][ T10] usb 11-1: enqueue for inactive port 0 [ 225.757774][ T8580] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1592'. [ 225.758186][ T10] usb 11-1: enqueue for inactive port 0 [ 225.774915][ T10] usb 11-1: enqueue for inactive port 0 [ 225.880457][ T10] vhci_hcd: vhci_device speed not set [ 226.155042][ T8604] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1609'. [ 226.167000][ T8606] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1610'. [ 226.225125][ T8613] netlink: 'syz.7.1613': attribute type 27 has an invalid length. [ 226.274620][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1611'. [ 226.285499][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1611'. [ 226.311502][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.318962][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.498000][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.550963][ T8613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.622875][ T8613] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.635057][ T8613] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.649325][ T8613] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.661011][ T8613] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.138540][ T8631] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 227.287703][ T8645] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1622'. [ 227.473036][ T8662] pim6reg1: entered promiscuous mode [ 227.478973][ T8662] pim6reg1: entered allmulticast mode [ 227.578520][ T8667] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 227.626925][ T8670] netlink: 'syz.2.1633': attribute type 13 has an invalid length. [ 227.846801][ T8670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.859758][ T8670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.872956][ T8670] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.886289][ T8670] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.905715][ T8671] sch_tbf: burst 3298 is lower than device lo mtu (65499) ! [ 228.147549][ T8697] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 228.301473][ T8712] ALSA: seq fatal error: cannot create timer (-19) [ 228.329060][ T8714] SELinux: policydb version 0 does not match my version range 15-34 [ 228.347612][ T8714] SELinux: failed to load policy [ 228.415574][ T8720] Cannot find del_set index 4 as target [ 229.154555][ T8739] infiniband ˆyz!: set down [ 229.159288][ T8739] infiniband ˆyz!: added team_slave_0 [ 229.193823][ T8739] RDS/IB: ˆyz!: added [ 229.199046][ T8739] smc: adding ib device ˆyz! with port count 1 [ 229.207219][ T8739] smc: ib device ˆyz! port 1 has pnetid [ 229.345942][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.381759][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.542368][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.553010][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.793892][ T8764] vhci_hcd: invalid port number 9 [ 229.801474][ T8764] vhci_hcd: default hub control req: 0000 vfffc i0009 l0 [ 230.073814][ T8782] FAULT_INJECTION: forcing a failure. [ 230.073814][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 230.092120][ T8782] CPU: 1 UID: 0 PID: 8782 Comm: syz.1.1672 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 230.092167][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 230.092241][ T8782] Call Trace: [ 230.092249][ T8782] [ 230.092259][ T8782] __dump_stack+0x1d/0x30 [ 230.092288][ T8782] dump_stack_lvl+0xe8/0x140 [ 230.092310][ T8782] dump_stack+0x15/0x1b [ 230.092326][ T8782] should_fail_ex+0x265/0x280 [ 230.092711][ T8782] should_failslab+0x8c/0xb0 [ 230.092750][ T8782] kmem_cache_alloc_noprof+0x50/0x310 [ 230.092772][ T8782] ? skb_clone+0x151/0x1f0 [ 230.092795][ T8782] skb_clone+0x151/0x1f0 [ 230.092846][ T8782] __netlink_deliver_tap+0x2c9/0x500 [ 230.092901][ T8782] netlink_sendskb+0x126/0x150 [ 230.092936][ T8782] netlink_unicast+0x28a/0x670 [ 230.092974][ T8782] netlink_ack+0x4c8/0x500 [ 230.093012][ T8782] netlink_rcv_skb+0x192/0x220 [ 230.093104][ T8782] ? __pfx_genl_rcv_msg+0x10/0x10 [ 230.093134][ T8782] genl_rcv+0x28/0x40 [ 230.093157][ T8782] netlink_unicast+0x5a1/0x670 [ 230.093198][ T8782] netlink_sendmsg+0x58b/0x6b0 [ 230.093258][ T8782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.093278][ T8782] __sock_sendmsg+0x145/0x180 [ 230.093309][ T8782] ____sys_sendmsg+0x31e/0x4e0 [ 230.093442][ T8782] ___sys_sendmsg+0x17b/0x1d0 [ 230.093494][ T8782] __x64_sys_sendmsg+0xd4/0x160 [ 230.093706][ T8782] x64_sys_call+0x2999/0x2fb0 [ 230.093729][ T8782] do_syscall_64+0xd0/0x1a0 [ 230.093761][ T8782] ? clear_bhb_loop+0x40/0x90 [ 230.093789][ T8782] ? clear_bhb_loop+0x40/0x90 [ 230.093815][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.093846][ T8782] RIP: 0033:0x7f06c1e5e969 [ 230.093861][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.093953][ T8782] RSP: 002b:00007f06c04c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.093976][ T8782] RAX: ffffffffffffffda RBX: 00007f06c2085fa0 RCX: 00007f06c1e5e969 [ 230.093992][ T8782] RDX: 0000000000005004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 230.094005][ T8782] RBP: 00007f06c04c7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.094016][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.094028][ T8782] R13: 0000000000000000 R14: 00007f06c2085fa0 R15: 00007ffdd4fc7f08 [ 230.094045][ T8782] [ 230.471892][ T8786] ALSA: seq fatal error: cannot create timer (-19) [ 230.502170][ T8793] __nla_validate_parse: 6 callbacks suppressed [ 230.502196][ T8793] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1676'. [ 230.542018][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 230.542033][ T29] audit: type=1326 audit(1747419726.770:6600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.627457][ T29] audit: type=1326 audit(1747419726.808:6601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.634975][ T8799] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 230.660592][ T29] audit: type=1326 audit(1747419726.808:6602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.705889][ T29] audit: type=1326 audit(1747419726.808:6603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.738841][ T29] audit: type=1326 audit(1747419726.808:6604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.770307][ T29] audit: type=1326 audit(1747419726.808:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.802177][ T29] audit: type=1326 audit(1747419726.808:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.834453][ T29] audit: type=1326 audit(1747419726.808:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.867395][ T29] audit: type=1326 audit(1747419726.808:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.903554][ T29] audit: type=1326 audit(1747419726.808:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.6.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1cfe6e969 code=0x7ffc0000 [ 230.926214][ T8801] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 230.980719][ T8807] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8807 comm=syz.5.1683 [ 231.021108][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1681'. [ 231.076008][ T8801] blktrace: Concurrent blktraces are not allowed on sg0 [ 231.217734][ T8823] netlink: 'syz.5.1689': attribute type 2 has an invalid length. [ 231.230108][ T8823] netlink: 'syz.5.1689': attribute type 1 has an invalid length. [ 231.240710][ T8823] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.1689'. [ 231.262904][ T8827] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1690'. [ 231.355596][ T8842] FAULT_INJECTION: forcing a failure. [ 231.355596][ T8842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.375573][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.5.1696 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 231.375612][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.375671][ T8842] Call Trace: [ 231.375678][ T8842] [ 231.375685][ T8842] __dump_stack+0x1d/0x30 [ 231.375709][ T8842] dump_stack_lvl+0xe8/0x140 [ 231.375729][ T8842] dump_stack+0x15/0x1b [ 231.375747][ T8842] should_fail_ex+0x265/0x280 [ 231.375808][ T8842] should_fail_alloc_page+0xf2/0x100 [ 231.375850][ T8842] __alloc_frozen_pages_noprof+0xff/0x360 [ 231.375886][ T8842] alloc_pages_mpol+0xb3/0x250 [ 231.375939][ T8842] vma_alloc_folio_noprof+0x1aa/0x300 [ 231.375970][ T8842] do_wp_page+0x673/0x23e0 [ 231.375999][ T8842] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 231.376099][ T8842] ? __rcu_read_lock+0x37/0x50 [ 231.376130][ T8842] handle_mm_fault+0x6dc/0x2ae0 [ 231.376237][ T8842] ? mas_walk+0xf2/0x120 [ 231.376307][ T8842] do_user_addr_fault+0x636/0x1090 [ 231.376348][ T8842] ? fpregs_assert_state_consistent+0x84/0xa0 [ 231.376399][ T8842] exc_page_fault+0x54/0xc0 [ 231.376424][ T8842] asm_exc_page_fault+0x26/0x30 [ 231.376452][ T8842] RIP: 0033:0x7f4b3d3b0cc3 [ 231.376473][ T8842] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 231.376496][ T8842] RSP: 002b:00007f4b3bb564a0 EFLAGS: 00010202 [ 231.376517][ T8842] RAX: 0000000000000400 RBX: 00007f4b3bb56540 RCX: 00007f4b33737000 [ 231.376633][ T8842] RDX: 00007f4b3bb566e0 RSI: 0000000000000019 RDI: 00007f4b3bb565e0 [ 231.376650][ T8842] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000b0 [ 231.376663][ T8842] R10: 00000000000000c2 R11: 00007f4b3bb56540 R12: 0000000000000001 [ 231.376679][ T8842] R13: 00007f4b3d58bfc0 R14: 0000000000000020 R15: 00007f4b3bb565e0 [ 231.376705][ T8842] [ 231.376723][ T8842] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 231.507156][ T8845] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1697'. [ 231.819682][ T8864] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1706'. [ 231.877239][ T8872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1709'. [ 231.939283][ T8876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 232.137075][ T8894] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1719'. [ 232.174953][ T8898] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1721'. [ 232.257194][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1724'. [ 232.275376][ T8910] FAULT_INJECTION: forcing a failure. [ 232.275376][ T8910] name failslab, interval 1, probability 0, space 0, times 0 [ 232.297651][ T8910] CPU: 1 UID: 0 PID: 8910 Comm: syz.7.1724 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 232.297678][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.297691][ T8910] Call Trace: [ 232.297698][ T8910] [ 232.297768][ T8910] __dump_stack+0x1d/0x30 [ 232.297790][ T8910] dump_stack_lvl+0xe8/0x140 [ 232.297852][ T8910] dump_stack+0x15/0x1b [ 232.297941][ T8910] should_fail_ex+0x265/0x280 [ 232.298039][ T8910] should_failslab+0x8c/0xb0 [ 232.298091][ T8910] kmem_cache_alloc_node_noprof+0x57/0x320 [ 232.298110][ T8910] ? alloc_workqueue+0x86a/0x1330 [ 232.298135][ T8910] alloc_workqueue+0x86a/0x1330 [ 232.298200][ T8910] wg_newlink+0x173/0x470 [ 232.298231][ T8910] ? rtnl_create_link+0x6b6/0x710 [ 232.298332][ T8910] ? __pfx_wg_newlink+0x10/0x10 [ 232.298351][ T8910] rtnl_newlink_create+0x1bf/0x630 [ 232.298378][ T8910] ? __schedule+0x6a2/0xb20 [ 232.298456][ T8910] rtnl_newlink+0xf29/0x12d0 [ 232.298536][ T8910] ? bsearch+0x95/0xc0 [ 232.298576][ T8910] ? __pfx_cmp_ex_search+0x10/0x10 [ 232.298603][ T8910] ? strncpy_from_kernel_nofault+0x78/0x130 [ 232.298642][ T8910] ? search_extable+0x53/0x80 [ 232.298680][ T8910] ? strncpy_from_kernel_nofault+0x78/0x130 [ 232.298708][ T8910] ? strncpy_from_kernel_nofault+0x78/0x130 [ 232.298737][ T8910] ? fixup_exception+0x771/0xce0 [ 232.298845][ T8910] ? __rcu_read_unlock+0x4f/0x70 [ 232.298874][ T8910] ? avc_has_perm_noaudit+0x1b1/0x200 [ 232.298902][ T8910] ? selinux_capable+0x1f9/0x270 [ 232.298933][ T8910] ? security_capable+0x83/0x90 [ 232.299131][ T8910] ? ns_capable+0x7d/0xb0 [ 232.301195][ T8910] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.301613][ T8910] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 232.302024][ T8910] ? avc_has_perm_noaudit+0x1b1/0x200 [ 232.302059][ T8910] netlink_rcv_skb+0x120/0x220 [ 232.302532][ T8910] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.302567][ T8910] rtnetlink_rcv+0x1c/0x30 [ 232.302617][ T8910] netlink_unicast+0x5a1/0x670 [ 232.302679][ T8910] netlink_sendmsg+0x58b/0x6b0 [ 232.302701][ T8910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.302943][ T8910] __sock_sendmsg+0x145/0x180 [ 232.302999][ T8910] ____sys_sendmsg+0x31e/0x4e0 [ 232.303024][ T8910] ___sys_sendmsg+0x17b/0x1d0 [ 232.303058][ T8910] __x64_sys_sendmsg+0xd4/0x160 [ 232.303081][ T8910] x64_sys_call+0x2999/0x2fb0 [ 232.303198][ T8910] do_syscall_64+0xd0/0x1a0 [ 232.303291][ T8910] ? clear_bhb_loop+0x40/0x90 [ 232.303319][ T8910] ? clear_bhb_loop+0x40/0x90 [ 232.303338][ T8910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.303357][ T8910] RIP: 0033:0x7fd3f260e969 [ 232.303371][ T8910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.303403][ T8910] RSP: 002b:00007fd3f0c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.303420][ T8910] RAX: ffffffffffffffda RBX: 00007fd3f2835fa0 RCX: 00007fd3f260e969 [ 232.303431][ T8910] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 232.303442][ T8910] RBP: 00007fd3f0c77090 R08: 0000000000000000 R09: 0000000000000000 [ 232.303484][ T8910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.303495][ T8910] R13: 0000000000000000 R14: 00007fd3f2835fa0 R15: 00007ffd89353ea8 [ 232.303512][ T8910] [ 232.754694][ T8914] SELinux: ebitmap: truncated map [ 232.763123][ T8914] SELinux: failed to load policy [ 232.808971][ T8909] FAULT_INJECTION: forcing a failure. [ 232.808971][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 232.823304][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.6.1725 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 232.823336][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 232.823351][ T8909] Call Trace: [ 232.823358][ T8909] [ 232.823396][ T8909] __dump_stack+0x1d/0x30 [ 232.823422][ T8909] dump_stack_lvl+0xe8/0x140 [ 232.823446][ T8909] dump_stack+0x15/0x1b [ 232.823539][ T8909] should_fail_ex+0x265/0x280 [ 232.823622][ T8909] ? rdma_create_trans+0x37f/0x9e0 [ 232.823675][ T8909] should_failslab+0x8c/0xb0 [ 232.823708][ T8909] __kmalloc_cache_noprof+0x4c/0x320 [ 232.823761][ T8909] rdma_create_trans+0x37f/0x9e0 [ 232.823804][ T8909] p9_client_create+0x608/0xbc0 [ 232.823864][ T8909] v9fs_session_init+0xf7/0xde0 [ 232.823901][ T8909] ? __rcu_read_unlock+0x4f/0x70 [ 232.823926][ T8909] ? should_fail_ex+0xdb/0x280 [ 232.824029][ T8909] ? v9fs_mount+0x51/0x590 [ 232.824050][ T8909] ? should_failslab+0x8c/0xb0 [ 232.824080][ T8909] ? __kmalloc_cache_noprof+0x189/0x320 [ 232.824103][ T8909] v9fs_mount+0x67/0x590 [ 232.824154][ T8909] ? __pfx_v9fs_mount+0x10/0x10 [ 232.824176][ T8909] legacy_get_tree+0x78/0xd0 [ 232.824238][ T8909] vfs_get_tree+0x54/0x1d0 [ 232.824272][ T8909] do_new_mount+0x207/0x680 [ 232.824302][ T8909] path_mount+0x4a4/0xb20 [ 232.824368][ T8909] ? user_path_at+0x109/0x130 [ 232.824389][ T8909] __se_sys_mount+0x28f/0x2e0 [ 232.824415][ T8909] ? fput+0x8f/0xc0 [ 232.824451][ T8909] __x64_sys_mount+0x67/0x80 [ 232.824479][ T8909] x64_sys_call+0xd36/0x2fb0 [ 232.824500][ T8909] do_syscall_64+0xd0/0x1a0 [ 232.824526][ T8909] ? clear_bhb_loop+0x40/0x90 [ 232.824548][ T8909] ? clear_bhb_loop+0x40/0x90 [ 232.824591][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.824616][ T8909] RIP: 0033:0x7fc1cfe6e969 [ 232.824632][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.824651][ T8909] RSP: 002b:00007fc1ce4d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.824697][ T8909] RAX: ffffffffffffffda RBX: 00007fc1d0095fa0 RCX: 00007fc1cfe6e969 [ 232.824709][ T8909] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 232.824797][ T8909] RBP: 00007fc1ce4d7090 R08: 0000200000000300 R09: 0000000000000000 [ 232.824810][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.824822][ T8909] R13: 0000000000000000 R14: 00007fc1d0095fa0 R15: 00007ffe6ee514a8 [ 232.824842][ T8909] [ 233.181504][ T8918] pu_sys: renamed from bond0 (while UP) [ 233.204859][ T8929] netlink: 'syz.1.1733': attribute type 32 has an invalid length. [ 233.236513][ T8927] SELinux: ebitmap: truncated map [ 233.243287][ T8927] SELinux: failed to load policy [ 233.276555][ T8940] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 233.982194][ T8991] netlink: 'syz.2.1756': attribute type 13 has an invalid length. [ 233.998671][ T8991] gretap0: refused to change device tx_queue_len [ 234.009562][ T8991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.368774][ T9010] FAULT_INJECTION: forcing a failure. [ 234.368774][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 234.386443][ T9010] CPU: 1 UID: 0 PID: 9010 Comm: syz.7.1765 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 234.386525][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 234.386542][ T9010] Call Trace: [ 234.386551][ T9010] [ 234.386561][ T9010] __dump_stack+0x1d/0x30 [ 234.386635][ T9010] dump_stack_lvl+0xe8/0x140 [ 234.386654][ T9010] dump_stack+0x15/0x1b [ 234.386675][ T9010] should_fail_ex+0x265/0x280 [ 234.386722][ T9010] should_failslab+0x8c/0xb0 [ 234.386761][ T9010] kmem_cache_alloc_noprof+0x50/0x310 [ 234.386785][ T9010] ? __anon_vma_prepare+0x70/0x2f0 [ 234.386811][ T9010] ? __rcu_read_lock+0x37/0x50 [ 234.386846][ T9010] __anon_vma_prepare+0x70/0x2f0 [ 234.386880][ T9010] handle_mm_fault+0x1e68/0x2ae0 [ 234.386915][ T9010] ? mas_walk+0xf2/0x120 [ 234.386943][ T9010] do_user_addr_fault+0x636/0x1090 [ 234.386976][ T9010] ? fpregs_assert_state_consistent+0x84/0xa0 [ 234.387081][ T9010] ? fpregs_assert_state_consistent+0x84/0xa0 [ 234.387158][ T9010] exc_page_fault+0x54/0xc0 [ 234.387183][ T9010] asm_exc_page_fault+0x26/0x30 [ 234.387250][ T9010] RIP: 0033:0x7fd3f24d0cc3 [ 234.387269][ T9010] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 234.387323][ T9010] RSP: 002b:00007fd3f0c764a0 EFLAGS: 00010202 [ 234.387412][ T9010] RAX: 0000000000008000 RBX: 00007fd3f0c76540 RCX: 00007fd3e8857000 [ 234.387426][ T9010] RDX: 00007fd3f0c766e0 RSI: 0000000000000016 RDI: 00007fd3f0c765e0 [ 234.387439][ T9010] RBP: 0000000000000102 R08: 0000000000000005 R09: 0000000000000004 [ 234.387464][ T9010] R10: 0000000000000008 R11: 00007fd3f0c76540 R12: 0000000000000001 [ 234.387493][ T9010] R13: 00007fd3f26abfc0 R14: 0000000000000001 R15: 00007fd3f0c765e0 [ 234.387511][ T9010] [ 234.387524][ T9010] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 234.740805][ T9020] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 234.751391][ T9020] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.023024][ T9051] netlink: 'syz.5.1782': attribute type 32 has an invalid length. [ 235.037681][ T9048] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 235.049013][ T9048] SELinux: failed to load policy [ 235.819632][ T9118] netlink: 'syz.1.1811': attribute type 29 has an invalid length. [ 235.895622][ T9126] __nla_validate_parse: 17 callbacks suppressed [ 235.895669][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 235.923466][ T9128] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1815'. [ 235.967351][ T9129] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.051656][ T9129] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.127959][ T9129] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.150106][ T9138] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1818'. [ 236.205784][ T9142] netlink: 'syz.5.1820': attribute type 10 has an invalid length. [ 236.218668][ T9129] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.234608][ T9142] hsr_slave_0: left promiscuous mode [ 236.243670][ T9142] hsr_slave_1: left promiscuous mode [ 236.285528][ T9140] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1819'. [ 236.308409][ T9129] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.329519][ T9129] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.353508][ T9129] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.375462][ T9129] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.391802][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 236.391823][ T29] audit: type=1326 audit(1747419732.243:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.445384][ T29] audit: type=1326 audit(1747419732.271:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.474387][ T29] audit: type=1326 audit(1747419732.271:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.500144][ T29] audit: type=1326 audit(1747419732.271:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.531921][ T29] audit: type=1326 audit(1747419732.271:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.562275][ T29] audit: type=1326 audit(1747419732.271:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.590110][ T29] audit: type=1326 audit(1747419732.271:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.619251][ T29] audit: type=1326 audit(1747419732.281:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.651644][ T29] audit: type=1326 audit(1747419732.281:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9148 comm="syz.5.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4b3d4ee969 code=0x7ffc0000 [ 236.656741][ T9153] rdma_op ffff8881188b0980 conn xmit_rdma 0000000000000000 [ 236.685226][ T29] audit: type=1400 audit(1747419732.281:7080): avc: denied { getopt } for pid=9148 comm="syz.5.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 236.757881][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 236.771661][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 236.777953][ T9159] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1827'. [ 236.821561][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 236.839902][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 236.860798][ T9166] can: request_module (can-proto-0) failed. [ 236.902426][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 237.074471][ T9182] pim6reg1: entered promiscuous mode [ 237.081834][ T9182] pim6reg1: entered allmulticast mode [ 237.723194][ T9204] FAULT_INJECTION: forcing a failure. [ 237.723194][ T9204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.747978][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.2.1840 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 237.748013][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.748028][ T9204] Call Trace: [ 237.748117][ T9204] [ 237.748128][ T9204] __dump_stack+0x1d/0x30 [ 237.748233][ T9204] dump_stack_lvl+0xe8/0x140 [ 237.748258][ T9204] dump_stack+0x15/0x1b [ 237.748349][ T9204] should_fail_ex+0x265/0x280 [ 237.748414][ T9204] should_fail+0xb/0x20 [ 237.748500][ T9204] should_fail_usercopy+0x1a/0x20 [ 237.748522][ T9204] _copy_from_user+0x1c/0xb0 [ 237.748545][ T9204] __sys_bpf+0x178/0x790 [ 237.748642][ T9204] __x64_sys_bpf+0x41/0x50 [ 237.748675][ T9204] x64_sys_call+0x2478/0x2fb0 [ 237.748736][ T9204] do_syscall_64+0xd0/0x1a0 [ 237.748832][ T9204] ? clear_bhb_loop+0x40/0x90 [ 237.748859][ T9204] ? clear_bhb_loop+0x40/0x90 [ 237.748932][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.748966][ T9204] RIP: 0033:0x7f354492e969 [ 237.748980][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.749041][ T9204] RSP: 002b:00007f3542f97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.749062][ T9204] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492e969 [ 237.749077][ T9204] RDX: 0000000000000020 RSI: 0000200000000900 RDI: 0000000000000002 [ 237.749092][ T9204] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 237.749107][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.749179][ T9204] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 237.749259][ T9204] [ 238.189243][ T9220] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.262227][ T9236] veth1_macvtap: left promiscuous mode [ 238.273681][ T9236] macsec0: entered promiscuous mode [ 238.337914][ T9242] FAULT_INJECTION: forcing a failure. [ 238.337914][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 238.356116][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.1.1854 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 238.356300][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 238.356312][ T9242] Call Trace: [ 238.356319][ T9242] [ 238.356328][ T9242] __dump_stack+0x1d/0x30 [ 238.356349][ T9242] dump_stack_lvl+0xe8/0x140 [ 238.356423][ T9242] dump_stack+0x15/0x1b [ 238.356515][ T9242] should_fail_ex+0x265/0x280 [ 238.356633][ T9242] should_failslab+0x8c/0xb0 [ 238.356694][ T9242] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 238.356789][ T9242] ? sidtab_sid2str_get+0xa0/0x130 [ 238.356830][ T9242] kmemdup_noprof+0x2b/0x70 [ 238.356855][ T9242] sidtab_sid2str_get+0xa0/0x130 [ 238.356917][ T9242] security_sid_to_context_core+0x1eb/0x2e0 [ 238.357014][ T9242] security_sid_to_context+0x27/0x40 [ 238.357099][ T9242] selinux_lsmprop_to_secctx+0x67/0xf0 [ 238.357139][ T9242] security_lsmprop_to_secctx+0x43/0x80 [ 238.357210][ T9242] audit_log_task_context+0x77/0x190 [ 238.357319][ T9242] audit_log_task+0xf4/0x250 [ 238.357357][ T9242] audit_seccomp+0x61/0x100 [ 238.357385][ T9242] ? __seccomp_filter+0x68c/0x10d0 [ 238.357465][ T9242] __seccomp_filter+0x69d/0x10d0 [ 238.357494][ T9242] ? __pfx_pollwake+0x10/0x10 [ 238.357604][ T9242] ? __pfx_pollwake+0x10/0x10 [ 238.357644][ T9242] __secure_computing+0x82/0x150 [ 238.357671][ T9242] syscall_trace_enter+0xcf/0x1e0 [ 238.357702][ T9242] do_syscall_64+0xaa/0x1a0 [ 238.357767][ T9242] ? clear_bhb_loop+0x40/0x90 [ 238.357791][ T9242] ? clear_bhb_loop+0x40/0x90 [ 238.357868][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.357889][ T9242] RIP: 0033:0x7f06c1e5d37c [ 238.357905][ T9242] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.357927][ T9242] RSP: 002b:00007f06c04c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.357950][ T9242] RAX: ffffffffffffffda RBX: 00007f06c2085fa0 RCX: 00007f06c1e5d37c [ 238.357966][ T9242] RDX: 000000000000000f RSI: 00007f06c04c70a0 RDI: 0000000000000004 [ 238.357982][ T9242] RBP: 00007f06c04c7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.358058][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.358069][ T9242] R13: 0000000000000000 R14: 00007f06c2085fa0 R15: 00007ffdd4fc7f08 [ 238.358087][ T9242] [ 238.684614][ T9220] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.934027][ T9220] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.123076][ T9220] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.300391][ T9220] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.318862][ T9220] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.336364][ T9220] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.350131][ T9220] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.423277][ T9280] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9280 comm=syz.5.1868 [ 239.441231][ T9280] vlan2: entered allmulticast mode [ 239.775002][ T9307] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 239.794655][ T9306] FAULT_INJECTION: forcing a failure. [ 239.794655][ T9306] name failslab, interval 1, probability 0, space 0, times 0 [ 239.813547][ T9306] CPU: 1 UID: 0 PID: 9306 Comm: syz.2.1880 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 239.813584][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.813624][ T9306] Call Trace: [ 239.813633][ T9306] [ 239.813643][ T9306] __dump_stack+0x1d/0x30 [ 239.813664][ T9306] dump_stack_lvl+0xe8/0x140 [ 239.813685][ T9306] dump_stack+0x15/0x1b [ 239.813706][ T9306] should_fail_ex+0x265/0x280 [ 239.813803][ T9306] should_failslab+0x8c/0xb0 [ 239.813842][ T9306] __kmalloc_noprof+0xa5/0x3e0 [ 239.813864][ T9306] ? nft_obj_init+0x15f/0x220 [ 239.813928][ T9306] nft_obj_init+0x15f/0x220 [ 239.813961][ T9306] nf_tables_updobj+0x109/0x1a0 [ 239.813995][ T9306] nf_tables_newobj+0xc8f/0xcc0 [ 239.814110][ T9306] nfnetlink_rcv+0xb99/0x1690 [ 239.814199][ T9306] netlink_unicast+0x5a1/0x670 [ 239.814239][ T9306] netlink_sendmsg+0x58b/0x6b0 [ 239.814261][ T9306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.814283][ T9306] __sock_sendmsg+0x145/0x180 [ 239.814400][ T9306] ____sys_sendmsg+0x31e/0x4e0 [ 239.814430][ T9306] ___sys_sendmsg+0x17b/0x1d0 [ 239.814528][ T9306] __x64_sys_sendmsg+0xd4/0x160 [ 239.814558][ T9306] x64_sys_call+0x2999/0x2fb0 [ 239.814584][ T9306] do_syscall_64+0xd0/0x1a0 [ 239.814615][ T9306] ? clear_bhb_loop+0x40/0x90 [ 239.814642][ T9306] ? clear_bhb_loop+0x40/0x90 [ 239.814698][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.814718][ T9306] RIP: 0033:0x7f354492e969 [ 239.814735][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.814756][ T9306] RSP: 002b:00007f3542f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.814774][ T9306] RAX: ffffffffffffffda RBX: 00007f3544b55fa0 RCX: 00007f354492e969 [ 239.814786][ T9306] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000006 [ 239.814871][ T9306] RBP: 00007f3542f97090 R08: 0000000000000000 R09: 0000000000000000 [ 239.814886][ T9306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.814901][ T9306] R13: 0000000000000000 R14: 00007f3544b55fa0 R15: 00007ffd187dc8d8 [ 239.814921][ T9306] [ 240.178606][ T9312] random: crng reseeded on system resumption [ 240.262293][ T9324] ================================================================== [ 240.274364][ T9324] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 240.282795][ T9324] [ 240.286180][ T9324] write to 0xffff8881337d3208 of 8 bytes by task 9311 on cpu 1: [ 240.298608][ T9324] mas_wr_store_entry+0x15cc/0x2b60 [ 240.305597][ T9324] mas_store_prealloc+0x74d/0x9e0 [ 240.313543][ T9324] commit_merge+0x66e/0x6f0 [ 240.320042][ T9324] vma_expand+0x1d0/0x370 [ 240.326063][ T9324] vma_merge_new_range+0x296/0x310 [ 240.331578][ T9324] mmap_region+0x7e6/0x1470 [ 240.337452][ T9324] do_mmap+0x9de/0xc20 [ 240.342685][ T9324] vm_mmap_pgoff+0x17a/0x2e0 [ 240.348151][ T9324] ksys_mmap_pgoff+0xc2/0x310 [ 240.353807][ T9324] x64_sys_call+0x1602/0x2fb0 [ 240.358840][ T9324] do_syscall_64+0xd0/0x1a0 [ 240.365217][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.372775][ T9324] [ 240.375773][ T9324] read to 0xffff8881337d3208 of 8 bytes by task 9324 on cpu 0: [ 240.385129][ T9324] mas_state_walk+0x28f/0x650 [ 240.391134][ T9324] mas_walk+0x30/0x120 [ 240.395296][ T9324] lock_vma_under_rcu+0xa2/0x2f0 [ 240.401949][ T9324] do_user_addr_fault+0x233/0x1090 [ 240.408226][ T9324] exc_page_fault+0x54/0xc0 [ 240.413841][ T9324] asm_exc_page_fault+0x26/0x30 [ 240.419681][ T9324] [ 240.422670][ T9324] value changed: 0x00007f3542f55fff -> 0x00007f3542f34fff [ 240.431905][ T9324] [ 240.434288][ T9324] Reported by Kernel Concurrency Sanitizer on: [ 240.441151][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.2.1883 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 240.457782][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.469782][ T9324] ================================================================== [ 249.340627][ T10] page_pool_release_retry() stalled pool shutdown: id 68, 42 inflight 60 sec