last executing test programs: 3m57.334159623s ago: executing program 3 (id=666): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xd1170707f0656889, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2d, 'io'}]}, 0x4) 3m57.218578503s ago: executing program 3 (id=668): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100000, 0x0, 0x4, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x38, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='G6\xa4\x95\x00\f\x05\x00\x00\x00\x00\x00\x00\x00\x86\xc1%6\x19kr\xef\xb0\x81\xa2M\xb3\xe4\x00\x00\xce\xacT\xb0\xf5V3x=\xbc\xac\xca\xee\x91}?\xfa!\xff\x17\xbf\xb5\r1-\x00\x00\x00\x00\x00\x00\x00\a\x98\xf8\x1b\x06\xe3m\a\xe5\x00#xx\xfc\xa6\x7f', &(0x7f0000000780)='~S\xef\x00\x00\x00\x00\x00\x00\x00\xfb\x91\xbe\xce\xc4\xeb\xab\xf3\xea\xc2\xa2\x8d]\xee\xdf\xe7\xfd\x95\x16\xbbN\xb41\x03kt\x12QP\xdc{\xab\xe9\xce\x90\xf6}\x9a\xba\xeb\x84\x9b\x8a.X\xe4\x99\x1a\x87JW\xa5k^\xf77\x00\x83\x85\x05\x18+-t\xa3\x01\xb7\xd6', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYRES32=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xaa300, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='$\x00', 0x0, r4) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40301, 0x0) 3m57.196254793s ago: executing program 3 (id=670): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x1}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 3m57.053701323s ago: executing program 3 (id=673): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") acct(&(0x7f0000000200)='./file1\x00') r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10001}]}}}]}, 0x50}}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x0) 3m56.609336881s ago: executing program 3 (id=682): connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f0000000580)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000005c0)=""/126, 0x7e}, {&(0x7f00000010c0)=""/136, 0x88}, {&(0x7f0000001180)=""/222, 0xde}, {&(0x7f0000001300)=""/108, 0x6c}, {&(0x7f0000001380)=""/80, 0x50}, {0x0}, {0x0}], 0x7, &(0x7f0000002ac0)=[@rdma_args={0x48, 0x114, 0x1, {{0x7}, {&(0x7f0000002680)=""/234, 0xea}, &(0x7f00000028c0)=[{&(0x7f0000002780)=""/19, 0x13}, {&(0x7f00000027c0)=""/249, 0xf9}], 0x2, 0x0, 0xfffffffffffffffd}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002900)=""/90, 0x5a}, &(0x7f0000002980), 0x4}}, @fadd={0x58, 0x114, 0x6, {{0xfc3, 0xf5}, &(0x7f00000029c0)=0x3, &(0x7f0000002a00)=0xfffffffffffffff8, 0x8, 0x0, 0x7, 0x3, 0x8, 0x823}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002a40)=""/29, 0x1d}, &(0x7f0000002a80), 0x20}}], 0x100, 0x20000000}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "ef694928efcbe649370c73cc400f979562f2c870dd70e08f99fb7c7b70e98e6146bf76df492cf3d079e247babe647ee0dbfe0e3d6cdf315ace5e791a81a7fea32127d31fe0b3102cd4a7f6cde549d73e79585684f8f214fa5c2836bbe044f8eaf5bbbea92b3b2c6247572dab8261d29819f865672bced7e4aa6869afb738"}, 0x8e) 3m56.188605689s ago: executing program 3 (id=688): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x47, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x8, 0x2}, {0x5, 0x5}, {0xc, 0x4}]}, @const={0x4, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x5f, 0x0, 0x30, 0x30]}}, &(0x7f0000000440)=""/217, 0x73, 0xd9, 0x0, 0x2, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa108000000000007040000000000000005000000000000b70300000009ffea858a0e47d271f00260277538b94f1c1a58317b6b938008321978144158b5b75e85174a3806ee799fd34d83df4fb2c5357c1461ad2432e03797bd831268c29970d2e4599da9971c106c86c8e16b1724ad7283ea949693f83a44b785c199393e9731efb7da3db0da236a84d04c5f7ec94342fd2113bf2b31ada46262af9a9dc288b167bf2a1ca56193036aefddada6ff8736a17410d989028d5172e39067435db548d53f50ff9d63147a36a407449c4f3fffb79bba97c24d696006b8f78984b451ef4e8f58c7d018e28d41e2e964880ebaa931cc162077abd079db9e9b1448051539a3939902411e3264481b1f80d2f5a94cd6cbf8966ebace3ebf29ef6b4553525e25314709a24428ea"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() tkill(r3, 0x14) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000340)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@noinit_itable}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000185000000610000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x22, 0x0, &(0x7f0000000d80)="e0274239ed0d85df9774992f0800a57aa89f818a68ec625ec58241116005a8025aa3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081"], 0x2c}], 0x1}, 0x0) 3m56.165927449s ago: executing program 32 (id=688): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@restrict={0xb, 0x0, 0x0, 0xb, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x47, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x8, 0x2}, {0x5, 0x5}, {0xc, 0x4}]}, @const={0x4, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x5f, 0x0, 0x30, 0x30]}}, &(0x7f0000000440)=""/217, 0x73, 0xd9, 0x0, 0x2, 0x10000, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = gettid() tkill(r3, 0x14) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000340)={[{@grpquota}, {@delalloc}, {@noblock_validity}, {@usrquota}, {@dioread_nolock}, {@noinit_itable}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5eb, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000185000000610000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x22, 0x0, &(0x7f0000000d80)="e0274239ed0d85df9774992f0800a57aa89f818a68ec625ec58241116005a8025aa3", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000100081"], 0x2c}], 0x1}, 0x0) 3m48.17446334s ago: executing program 0 (id=815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x6280, &(0x7f0000000080)={0x0, 0x10000000, 0x0, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000be1000/0x3000)=nil, 0x3000, 0xb) mbind(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x1000000000000085, 0x4, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r7], 0x38}}, 0x0) 3m47.847903978s ago: executing program 0 (id=821): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000f8ffffff570167581600000000000000009500"/38], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0xffffffffffffff58, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 3m47.557962787s ago: executing program 0 (id=826): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") unlink(&(0x7f0000000000)='./file1\x00') 3m47.152808106s ago: executing program 0 (id=829): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@barrier}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") execve(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100000800005, 0x62002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100005, 0xfffffffffffffffe}, 0x484b500c4823db64, 0x0, 0x0, 0x5, 0x3, 0x3, 0x204, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x4, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) syz_open_dev$sg(&(0x7f0000000080), 0x5, 0x20000) madvise(&(0x7f0000551000/0x3000)=nil, 0x3000, 0x15) close(0xffffffffffffffff) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m46.794193334s ago: executing program 0 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, r1, 0x0, &(0x7f0000002240)='./file1\x00', 0x0, 0x200}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="f8318d0c3286d2dddee573a260ee6249e30e50161ecc2783316e1924deab0ef12a5d9912bdf412c5de5ed08c6d7b618ac2d7f6d0432bde81c32e07d3711d4292cf93d93856e3bd7632ee288c0f07608d8e50ec76fa6bc1f774d3449049f7a0c530b5501263ff0688e026c37f64d7f18bb4a15204e249e798aff4eaac57e517b6a58bafe11d46da36b2396511bba05ff193875107c2532a38608a6664841fec04b1569d396e0ffc389259ce8bb89806ce4cfb960cceddf71c986cc50ee863c020d3e0c7c10af55e5e39e6f452ed76d8a1b41369c6d4dea3e02746bc60d14fbe42934460b7a8fa9859c6a66a4c1e21a667bc9f7e3773cd7fe40a1a6e52582e9a12e529c16eb0b46b7969f354bd68a4c6f00cc5ba250c996b5a5cb4c56cd4d26cfc42451d15778e353e3c27a04edf8f2785ef581757399453c488d5279c067b5bb1c0f6b0d43921219d3d3511e761fbefc54dd2fb2a790bc805cfa54fe2e89194b7f7ac1f352d0ea606cdd06f1f99fd83a94077b4a00473a5fe6b972b4026df433e79cd4f616f7bea7a1f2b0753990a5c91b4b27d2ed9656abe98560e3fb73bf5680c92e673aa1fff5700169796995f850bf86d239528cd8416940fb32ceb4ec7a03c2900e3fac9c0d15d858ec8886976777cfda6c367fadd2aa001af62fa0dd0b911e1636b4b33c13ba9b2f384aa885511d00990f04d6317a048689b2f112cb09e2c76e07e49fa15d486f26c570af8b869e859558f4bde14941500f40601e02d833f9190b2fca76285dec25baf6467beda40a8f3d2140ef5413582ccba586baced323ac21aaa38a7e8f13e03317a8cadcccae479c6da7cc7e68a09945f446cf5e8f7dade2db14be9a7eb4248b0d04bda77c648c33d015591d774e7f44ecba8eeae07da8a71941739835d3b2499bc886a06156f9d938d4dfcaea826ff7870db9d2c248debd41297db9cacc1e31d4717c983b9f908e1de6c17732b44a6e18e3a25b5c1488086942e56643d588e1704ddda7c418f2de32de1616fc64831e5ad9f1f1b032cdec40942308f6305136b035afe644162e826be756c22c5101677a4978d07676d43feff4a9caafa16f354c718fbfc99c382ae5c4017ad404b0055baca188b4aaf1b5f85a93c4d7a0a53e27cda81e196a85864909f8889cc9b222cff23a9521ea05f9bcdac67bce8a0cfeadbffd3698cb07135e7291cb2035f915c60149f93f58b522a7b45f530dadfc6fd040b5c02adb1ffebc71ca6455cb0af1c833d481dbde45d3acb3793cdfe1535d4ddf22edd071f31c406e8dbc25984d82a1418392afdc644d7b4afeb3ae4ba0e607460a1eafe20b864dfda9cab41fca3cbafdbcfc030d92e36ef8472e4439a6440de12e4652d75e985fa3a2dc1fc6999b4f6481b534991f19d5e185c809bcd9bcaf00930d3ce805bb8297300c9e67245caa7f8c20bf628d69345bdcd6c385da6b0d729a385748b036bcc846030b9ad43dfa38fb837259aa77c771c127432ce1489be30429588f173835a62d4dd4f2a6d4def4c9492c2f913a49851db313bbf1fcdb554347a5baf90adffe54db02484d0e0178b9d00df6d2fba30fdfea2a470b69b54187e87ed4b1b9e0890da0b30cfe5c8dd318e9b933d64fc9229a28508b75f1484421788c5b0b67149c179c950cbcf8e408ae06118c939dcfcaed0cc005cb652b7c2e4040e768c1e537b967643781a53cc6a4998c4dd4e69afc98287ed8aac741689529608f316308b815ce7cb38e92fe9cdc1ec3fb7e77e9c33bd8afd2002553d604f31c2e7247eeb5ac604a69a460ca68d365561b9556d500510ad8ac98f8ce2707c7b04fe0ab4ff5c30f9b1de3e35eafcdf64cdf511989a22e89e8947c448bd7d0bfac7537dd55ed88bd8bc63b4c128dd4c45c267b57cc58bf238e2629670a7eeb1d5f5aa20d1190473a1415237c464425c9ce89fad90f79b8f47c718d897f9138837c3611b8bfb47aa3eeea5c571666ca4c83708aba04845de541684b161a25e122443eca2f49c1bb36e202ae35f372e943628254c841eb07d616a1fb6ab8d14f36c1289ff21061860d42c92b817675755d99061a0086348ac70550a751e5e296cf64ac4c81585560ede389da630b15fa7107a652ee2681f4e5bfc010cc62217aac80b717bed6678f6160ed54b166e778b4cf706bed82dd695abbeb5fbba6d48773475191d3448ecb052a92d943f67b230ac553335fa3971407494151f1c47cf620cd9b67a0cd2c7e4e50722fcbb90d8d0548bb8f0dcedba5827a6582ea4cb59b11ac61d20dff0c654d8aa272d3d6969f9a7fecb3d658fe770acfee8020eed07c7d128eb0a791458cc48f50af77c27b14aadd16bde93a70ebbdc0d022e83a1a8022db9aa8b05021c222d7f83d1a1ae36f1d41e57903a46774cee2e40f899b46ca8f0e5b9d24c696b60a2e63a00cd372b14d2da41442f1e04bb0444e32d0d30e6de4225ac00a9983d54dd403ad2524fedc40034aec05b3f28db179598b12b72c9e76cc131d777a4e1e99f26cb904d500279c391454d779b3645f773c52802d9527c9ac384251154c34dd824d908c824b6e03c12c382cdfdca749edc56a2abc8ba4838a06b63c07b95580cad7d4508e908bba2c4c035173f9051e1060a78391ce00a923caf37db36b4bfffc1ec65d53201ae13d31b8a70e40073dea13ab40fade5e5fea608803dc1c0e0228a3d1ded0bcc6b95c63a83a59cfdf65590b953b4f932ac12004e403d6c33e67840c1c45761ededc4946f275090f555059015f47890600be67f3e29a93eba198e4165045cdb1009908f934ac9e8f9b328babfd2f9e0bf62d834f6cd4076c842aaaa0955947ad4ae164ad04c48ee76926a61f29c74b1621208ecd6a35c76f296fb4279f7e95907ff10920eb5f628224353bedd761d61446f8b4c90665390fb0b72892cdc90592e2c0dfc648c895a0134a2e299f766f191ad2b00dbd808240ca8ad3b8386530b70cac39ecf4ecbe0caf0550eba43682094d1c71340ae9b9036a760b75121e6b1a82c0199fa8765b2cc5f7eb4bda6d31da936242cf150d25d94521c0c36791bc1de923a31dc02b9af02347537aa5a65bc6dd9454c4146556c80e3fe788c75e38dc98737caf12b2df7c45a8dd16e6690b01307b3e2b54e1716e5cd002cbd535de28a070ab1bca4b891af6618774373f264a2e1327c9a0d5f22b442a832b13bf9ab2b6c33431289744e32a54fadd98cf63c7c0168c1d6d64f6510a411ee33934baaa23631607c10ead4c3e1c43b3a12ab5601f7e5c9645a1f6189c4298dbfaaad49761649cd91bf85574c004f55b7390c76387151b9fc0d25c7afde75ddb5ec4754b592e1dac1361730ff233e45edaef81cf2dc8cf47647f3adc96917209e07946a9957630c61b849d2d52d1a26e054fa382d42f086bf0cdb29ffa48457bd85cb89fee649e7afbe4e9dd2332f72aee242d5091632a6959d7d4f080fe1f27db2446e78109e05815886e5be62e908f0c692c3975cc3e602cd62e2b6c41c79364498915e26dbcf6c2533188ac46e3ae0cd0043c888ae1232fa667972d1f15595307ebecf37a76cff40a95c180ad2628566342b573e6d82844ff5a835abe5117130eee42a4196d7e8266744ba153427e3ac24abb688b56f89264fa5ee5122294097edbb60928778142e431815b17ee85fb98b6cab4e4a409ad1364e9af6ab58ab4bb3e1254fbc220545fb9b591940677a299da966be7eb77d1ead0ac7fb66b73dd707ff1c026f9aaa6c7015f01c28f497bc68d8da25a4f373b54845dd47b7470270ae28653a3f54134867dc5ea2871d4e24765d3729e624c0b7e25b457f6eb2f802edb2a0cdb502f5617d48405d1d9c36e5d2d93f3f24deb31ce8bc8c1f193b29d6783af099f6be6e677f2e423579d920096142c88252cc1f3f82c86aa6d0a4b4fc8edfd503ba8a14eba968ade7099bb0fbedec981483e9b255ac294016825fd869f4fdb28f085fadb247ba02c27c547701e001ecde234b26003d4c11ba42f27a408eaeb3c03a721442b8ff0b06c9659d32fb909c920e22857350f75bbde430235865b7d9df925dc90f1f68f3e9a384e5a28830e28d1092f855aa0c406b0773fbc5d440df971efbc868f370eb8c37a0cae92d09f701ccd3f4cacefad919aae79f4505dfef24f336b3f90d95462c9d6f800fe6e79ab7f33b62380f16bbd37f3c0a95782cef1803a85bd8e8e27e84c55b60f11edf8f2cc12b49e80e47b1587ebca3ca506c30a24c8596fdeebeeaa745f990230fa57de120b5cb49907fd2c68c365eec935f28116a018b6ddc54fb9a197f86f6d198f607aa5028923bb2778fda874ef46966fd361a0541383b6b8c291f72266a2d8c5976750a2c0f94fe7e1e3bb3980f933e27c7ad90705a18c71080f523bf7b83573662d36c6c7abb2ad1fd5c5e961cf1cbc844fe0e622fd068022d1f6a965784bdf5476116acbfb75414d9fa15b4d386b2717965f8b9609965227493ea1f1f718ac99507a822180de1c20db57737b7a48d9b7e79e00137e3e3ab570109a12bb2b02d39648d08ea47a78bf18448bb34f00b3656daf9815ed46830fc3bfa66a83fdfea6ed081c608e2afdee43b023367f03be2fec66c97bafdfe64da4c15780ca32b92d596bf3bdf42cb05a2ee486a3e4c74e0bc3533fd3326ef215ae4db5ad449cb880f362ab96ec822d46a4c118274a97265ab0a9fb1a5da7b0f952b106d21cda9a62114ce212af5c78aa56548499ea51e265034e372ab3dd733f8f75cbdfa525cc17a94cccff322836ee125a91f4d5b595af1ede85816e26912db990c59840989e04c2db0630f59107f848df7d48b55374cfea60fc9f379ba17902e721794d4739095c58cf8f7acab1f64670e2baecd244b04071beada1819e88b7353a93347411faaa1ff53522f3ea09087256206e38b90c0962e9d27533b912f756aea4365d39946e9d34f2b6a14d4377036bf3ae91e76096999e9ba78ce3b158505eb6070e73caed2bb3666b4d6170ec1ec5a7deb924f850c4ab8487488f8a2116f575125e62cd4f8986b0c49e2c2a196ef71d30139e38bb79103a15047a699c5ac03a153389e27d75488c0ec8cd38d51cfdbbe8efe4cf2a7abcb10e8e06fd09ff56c594422ff4605002d032a109dbf2e564851597a6e2b7b1f3aac481e1d8761aca0f1e651600541157a93c85af9ec62e700c3ea06c0fa516fe99e7be53a9ff7b3620217afadc109d21f5df2f8d85243c782abd3fc3b3d2536e611bfbd2c1588268aaf0604871e717495a605e91644ea0a6f9bfe10861db8032f23bb326cc0fa1e7ce7c3d8d3f2d743ed557c67158b452a3d71f5d64dff3fa233e8908c896822905631c5b2b47db28bb1f79b3bdcf18cbdbd90ed0c66b68fd4f31949602e191863170d2e19cbb413143400ef007a7debcca4485d5b3d06cd79f640757adffe9bfd97b0b2eca7b40d7e9ae6512e2ce29cf814f4dc353765936f0e86be506620a3cadb7ee920d4e2b2e28b0ddcee825e180a34b9ce24df3579023354f24c6a829b892b921ce28aa456358d03cf1c886999e32049634cfc6aa4f3bb550fd8f024fcd008ce6c9028d5c9729adf66058b9fe8415207203dffe2a57b7e5d3425f0d0af01c1d4079576cf0af52908942d9e52bea774e50860f67406ca8b780f17c5af50448f7825df5cb4ce1c1388343bb6f9b8cfa9d21e0fd77901a037660f93f743fe5dbf12e4866c128b3899df94b0f1f1764e3f245611b7bb999c66ca1084c7504436f005d20db708b6e2262358eaf0b53e7b69fa99bed962e2", 0x1000}, {&(0x7f00000011c0)="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", 0x1000}], 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000000000000060001280080001007674690054000280080006"], 0x80}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000002200)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f00000021c0), 0x1, 0x3eb, &(0x7f0000000880)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',afdno=', @ANYRESHEX=r10, @ANYBLOB=',cache=loose,\x00']) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f00000004c0)={'#! ', './file1', [{0x20, 'blkio.bfq.avg_queue_size\x00'}, {}, {0x20, '\a\x00\x00\x00'}]}, 0x2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 3m46.604994243s ago: executing program 0 (id=842): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100000, 0x0, 0x4, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x38, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='G6\xa4\x95\x00\f\x05\x00\x00\x00\x00\x00\x00\x00\x86\xc1%6\x19kr\xef\xb0\x81\xa2M\xb3\xe4\x00\x00\xce\xacT\xb0\xf5V3x=\xbc\xac\xca\xee\x91}?\xfa!\xff\x17\xbf\xb5\r1-\x00\x00\x00\x00\x00\x00\x00\a\x98\xf8\x1b\x06\xe3m\a\xe5\x00#xx\xfc\xa6\x7f', &(0x7f0000000780)='~S\xef\x00\x00\x00\x00\x00\x00\x00\xfb\x91\xbe\xce\xc4\xeb\xab\xf3\xea\xc2\xa2\x8d]\xee\xdf\xe7\xfd\x95\x16\xbbN\xb41\x03kt\x12QP\xdc{\xab\xe9\xce\x90\xf6}\x9a\xba\xeb\x84\x9b\x8a.X\xe4\x99\x1a\x87JW\xa5k^\xf77\x00\x83\x85\x05\x18+-t\xa3\x01\xb7\xd6', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYRES32=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xaa300, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='$\x00', 0x0, r4) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40301, 0x0) 3m46.561161763s ago: executing program 33 (id=842): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x400) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100000, 0x0, 0x4, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x38, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='G6\xa4\x95\x00\f\x05\x00\x00\x00\x00\x00\x00\x00\x86\xc1%6\x19kr\xef\xb0\x81\xa2M\xb3\xe4\x00\x00\xce\xacT\xb0\xf5V3x=\xbc\xac\xca\xee\x91}?\xfa!\xff\x17\xbf\xb5\r1-\x00\x00\x00\x00\x00\x00\x00\a\x98\xf8\x1b\x06\xe3m\a\xe5\x00#xx\xfc\xa6\x7f', &(0x7f0000000780)='~S\xef\x00\x00\x00\x00\x00\x00\x00\xfb\x91\xbe\xce\xc4\xeb\xab\xf3\xea\xc2\xa2\x8d]\xee\xdf\xe7\xfd\x95\x16\xbbN\xb41\x03kt\x12QP\xdc{\xab\xe9\xce\x90\xf6}\x9a\xba\xeb\x84\x9b\x8a.X\xe4\x99\x1a\x87JW\xa5k^\xf77\x00\x83\x85\x05\x18+-t\xa3\x01\xb7\xd6', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYRES32=r1], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xaa300, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='$\x00', 0x0, r4) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40301, 0x0) 3m16.621069112s ago: executing program 2 (id=1377): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x4000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0xd, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0xe6}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x108) 3m16.541443412s ago: executing program 2 (id=1380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x2000008a, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000011002085000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x11, 0x0, 0x0, 0x0, 0xfffe, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES16=r2, @ANYRESOCT=r5], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x88) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) shutdown(r9, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r10 = syz_open_dev$rtc(&(0x7f0000000000), 0x78ab0829, 0x4000) ioctl$RTC_VL_READ(r10, 0x80047013, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m16.471986431s ago: executing program 2 (id=1381): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000140), 0x2cff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) 3m16.411767201s ago: executing program 2 (id=1384): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f00000018c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x9, [@var={0xe, 0x0, 0x0, 0xe, 0x2, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x41}, @fwd={0xd}, @enum={0xe, 0xa, 0x0, 0x6, 0x4, [{0x6, 0x69}, {0xe, 0x2}, {0xd, 0x7fc1}, {0x10, 0x7}, {0x10004, 0x1ff}, {0x4, 0x100}, {}, {0x5, 0x5}, {0xf, 0x76dabaca}, {0xe, 0x81}]}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @float={0xd, 0x0, 0x0, 0x10, 0x10}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x0, 0x5f, 0x61, 0x2e, 0x2e, 0x30]}}, &(0x7f00000006c0)=""/138, 0xd9, 0x8a, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x49208, r1, 0x8a19, '\x00', r4, r5, 0x5, 0x1, 0x4, 0x6, @value=r6, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000e1db00000700000083000095000020f8"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4, 0x63f}, 0x0, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x0, r2, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000820000000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r8}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000001a0001002bbd7000000000001c000000fd"], 0xa0}, 0x1, 0x0, 0x0, 0x8055}, 0x840) close(r3) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5ae, &(0x7f0000001540)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r12, {0xffff, 0xf}, {0xffff}, {0x7, 0xfff2}}}, 0x24}}, 0x80) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m15.967530869s ago: executing program 2 (id=1390): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = open(&(0x7f00000003c0)='./file1\x00', 0x14127e, 0x2) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffa000/0x4000)=nil) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0xd, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0xe6}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000002}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}}, 0x0) socket(0x1, 0x803, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0xfffffffd, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x100000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x108) 3m15.543419548s ago: executing program 2 (id=1396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x40000) 3m15.486562958s ago: executing program 34 (id=1396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x40000) 2m13.320988826s ago: executing program 5 (id=2470): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x100000}, {0x5, 0xfffffffffffffffe, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_context(r10, &(0x7f00000002c0)='system_u:object_r:kvm_device_t:s0\x00', 0x22) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x2, 0x2, {0xa, 0x4e20, 0xe442, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0xfffffffe}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f00000007c0)='ext4_load_inode\x00', r1, 0x0, 0x80000001}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRES64], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYRESHEX=r11, @ANYRES64=r11, @ANYRES16=r11, @ANYRES32, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000e104000000000000fd0807020000f8ffffffb703000008000000b70400000000000085400000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r0, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9f, 0x9f, 0x5, [@ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @datasec={0xa, 0xa, 0x0, 0xf, 0x3, [{0x4, 0x5, 0x3}, {0x3, 0xb8a4, 0x8}, {0x1, 0x8, 0x3}, {0x5, 0x9, 0x4}, {0x4, 0x5, 0x2}, {0x4, 0x4, 0x3}, {0x6, 0xffff3477, 0x7fffffff}, {0x2, 0x2, 0xe7}, {0x1, 0xfffffff8, 0x8}, {0x4, 0x31, 0xc}], "e39ead"}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f0000000e80)=""/31, 0xbd, 0x1f, 0x0, 0x5, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000f80)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0x20, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}]}, &(0x7f0000000bc0)='GPL\x00', 0x3, 0xcb, &(0x7f0000000c00)=""/203, 0x41100, 0xa, '\x00', r13, @fallback=0x35, r14, 0x8, &(0x7f0000000f00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x4, 0xc, 0x59, 0x8}, 0x10, r15, r1, 0x9, 0x0, &(0x7f0000000fc0)=[{0x3, 0x3, 0x8, 0x7}, {0x0, 0x1, 0x5, 0xb}, {0x0, 0x3, 0x3, 0xd}, {0x1, 0x9, 0xd, 0x1}, {0x2, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x2, 0x4}, {0x3, 0x4, 0xc, 0x6}, {0x0, 0x3, 0x8, 0x5}, {0x4, 0x2, 0x5, 0x9}], 0x10, 0xc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nogrpid}, {@noload}, {@noload}]}, 0x1, 0x626, &(0x7f0000000100)="$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") 2m12.940140395s ago: executing program 5 (id=2471): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0x1}, {0x9, 0x9}}}, 0x24}}, 0x4008815) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0xb8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0x10}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x84, 0x2, [@TCA_MATCHALL_ACT={0x80, 0x2, [@m_simple={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4b, 0x3, '\xce!X\xdd\x02\xc6\x18\xb9W%\xe5\xe7\xa5\xdc!7s\x0fh\x10\x14\xba\xd1\"\xc9\x94\x9b\xf4\x95]$\x1d,\xa1\xf3\x86\x92\x11\xb7w\'G\x96\xb6\xe5\xe9\x06\xf8_\x8f\xa3\xac5\xca\x164%\xfa\xd5\xc0\xf8\xa4\xe6p#\x18dy\x13\xfbU'}]}, {0x4}, {0xffffffffffffff9e}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xb8}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m12.882900595s ago: executing program 5 (id=2472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000600), &(0x7f0000000700)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000640)="be", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x6044}, 0x6) 2m12.857017425s ago: executing program 5 (id=2475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$can_raw(0x1d, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000000865c90000000000000000070015080900010073797a300000000006000240000500000c00048008000140000000040500030001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r2}, 0x8, 0x5, 0xedd1}) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, &(0x7f00000000c0)='./file0/file0\x00', 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}], 0x1}, 0x70040000}], 0x2, 0x94) 2m12.798910345s ago: executing program 5 (id=2476): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f00000000c0)=@chain) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0, 0x18, 0x31}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-generic\x00'}}, &(0x7f0000000100)="a754b89bb2be14abe9924495bad4e5df171023467192ec52", &(0x7f0000000140)=""/49) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r1, 0x0, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="b401000002010300000000000000000002000004300004802c000380080003400000000908000340413919c8050001000b00000005000100020000000500010000000000500002802c000180140003000000000000000000000000000000000014000400ff01000000000000000000000000000106000340000000000c000280050001003a0000000c00028005000100110000002c0019"], 0x1b4}, 0x1, 0x0, 0x0, 0x22008061}, 0x4c084) socket$inet6(0xa, 0x6, 0x8) 2m12.656651654s ago: executing program 5 (id=2477): msgctl$IPC_RMID(0x0, 0x300) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3, 0x0}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000040)=@raw=[@generic={0x5, 0x6, 0x8, 0x1, 0x6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x2}, 0x10, r1, r2, 0x3, &(0x7f0000000200)=[r3], &(0x7f0000000240)=[{0x5, 0x1, 0xf, 0x8}, {0x2, 0x5}, {0x1, 0x3, 0x1, 0x4}], 0x10, 0x2412, @void, @value}, 0x94) timer_create(0x2, 0x0, &(0x7f0000000700)=0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000300)) timer_gettime(r4, &(0x7f0000000000)) 2m12.637783904s ago: executing program 35 (id=2477): msgctl$IPC_RMID(0x0, 0x300) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x2, 0x60, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3, 0x0}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/schedstat\x00', 0x0, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000040)=@raw=[@generic={0x5, 0x6, 0x8, 0x1, 0x6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x2}, 0x10, r1, r2, 0x3, &(0x7f0000000200)=[r3], &(0x7f0000000240)=[{0x5, 0x1, 0xf, 0x8}, {0x2, 0x5}, {0x1, 0x3, 0x1, 0x4}], 0x10, 0x2412, @void, @value}, 0x94) timer_create(0x2, 0x0, &(0x7f0000000700)=0x0) timer_gettime(r4, 0x0) timer_gettime(r4, &(0x7f0000000300)) timer_gettime(r4, &(0x7f0000000000)) 2.772892369s ago: executing program 8 (id=5484): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r8, &(0x7f0000000140)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c8, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x2, 0x0, 0x3, 0x7, 0x7, 0xfffffffffffffff8}, @generic={0x71, 0x0, 0x3, 0x7ff, 0x100}]}, &(0x7f0000000340)='syzkaller\x00', 0x10000, 0xb5, &(0x7f0000000380)=""/181, 0x41100, 0x51, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000440)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x1a7, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r9], 0x0, 0x10, 0x7050, @void, @value}, 0x94) 2.720238679s ago: executing program 8 (id=5486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x41) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008014}, 0xc010040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) select(0x40, &(0x7f00000001c0)={0x10000, 0x1, 0x6, 0xf, 0xfff, 0x3, 0x3, 0x3}, &(0x7f0000000200)={0x100000001, 0xb, 0x3, 0x7fff, 0xffffffff, 0xe, 0x400, 0x3}, &(0x7f0000000280)={0xd, 0x2, 0x5, 0x5ea8f6ab, 0x4, 0x0, 0x5, 0xffffffff}, &(0x7f00000002c0)={0x77359400}) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 2.395200728s ago: executing program 8 (id=5488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) 2.390886538s ago: executing program 8 (id=5489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 2.318477718s ago: executing program 8 (id=5491): socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x145142, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x381000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.268999867s ago: executing program 8 (id=5493): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r0, 0x0, 0x0, 0x8, 0x0) 1.869375366s ago: executing program 7 (id=5503): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.836933166s ago: executing program 7 (id=5507): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0x0, 0x400000, {0x0, 0x0, 0x0, r1, {0xfff1, 0x3}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 1.754954196s ago: executing program 7 (id=5509): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f0000009700000050000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x5, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)={0x9c, 0x0, 0x100, 0x8, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="877eef484e1d1460bb9d9c44ef6ecd47f1366f2205d349d67ab0a6c3a391a9186ebd06412ae3005c9b6206823826915a2ce639a052303d9a0c27991ea44ea3da6ce6785d7aa3fc55ff7929b3f0bfb91fd1ee7cde780843e7f7a47369e4e63fcf36253b332b09f6908a4fde54b42f2eeadb23", 0x72, 0x4000, &(0x7f0000000440)={0xa, 0x4e24, 0x8001, @loopback, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='vm_unmapped_area\x00', r1, 0x0, 0x7}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r7, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) connect$unix(r8, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 1.697156256s ago: executing program 4 (id=5510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0xc, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x1}]}) openat$random(0xffffffffffffff9c, 0x0, 0x2003, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.090394354s ago: executing program 6 (id=5515): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4e0, &(0x7f0000000740)="$eJzs3E9sFNUfAPDvbFvaQvnRHyIKohbR2GhsoSBwMDEYTTxoYsSDHpu2EKRQQ2sihMiSGDwaEq/GePTqwat6M55MvOLRxJAQwwXwNGZ2Z7bb7Xb7b9tC+/kky7739s28efPmzb55j20AW9ZA9k8S0RcRtyJiV0SUGjMMVN/u37069uDu1bEop+npf5Jss7iXxXNJ/r4jjwyWIkpfJLMf1Jm+fOX86OTkxKU8Pjxz4ZPh6ctXXjl3YfTsxNmJiyMnTx47euTE8ZFXl1+pJuVl9bq3//OpA/ve/ujmu2OdRXpP/l5fj3YZiIFmh1LxQrsL22A768JJZ6ucr6/9wbBk2fWfNVdXpf/vio5o2XjAJpKmadq98MfltNH1eSnAIyuJjT4CYGMUX/TZ82/xajYQ2LY2w48Nd+dU9QEoq/f9/BXxbCWxmAfpani+baeBiPiw/O+32SvWaB4CAKDez6eKkWDD+K8/Ym9dvv/layj9EfH/iNgdEY9FxJ6IeDyqeZ+IiCcb9t8REWmL8gca4vPHP6Xbq6tha9n477V8bWt2/Bf1q2D9HXlsZ0QxYJ44nJ+TwejqPnNucuJIizJ+efOPrxb6rH78l72y8ouxYH4ctzsbJujGR2dGV1zhBneuR+zvbKx/0hmR1FYCkojYFxH7l7Hf/rrwuZe+P1CLdM3Nt3j9K9Km62htWKpIv4t4sdr+5ZjT/rMlJq3XJ4d7YnLi8HB2FRxuWsZvv994b6HyF63/j381bvLWiZ9O5z1r9bL23153/Uexfjtb//4kIqmt104vv4wbf3654DPNSq//bckHlXDxXPrZ6MzMpSMR25J35qePzG5bxLP3KFfrP3ioef/fnW+TnYmnIiK7iJ+OiGei+oQ4EOm1gxHxXEQcalH/X994/uPF6t+bv+f1L7XYXVtl9R9vev+b0/6z6/WVwDeRB2opk0m5mns2pRboOH/w1oMFbh5La/9jldBgntL8/pfMuUXMP4rmgdWePwAAAHgUlCKir24uqS9KpaGh6hzQnthempyannn5zNSnF8ervxHoj65SMdNVnQ/uSor5z/66+EhD/Gg+b/x1R28lPjQ2NTm+oTUHdlT6fFIaqt0Lqv0/83d7ppiBh5mf/MDWtVj/33tznQ4EWHe+/2Hrquv/5QWylP1PGdiclvL9by4QNqdm/f/aCrYBHi2pvgxb2nL6v3sFbC6d8X4tvG6/PAQeCr7TYUta0o/klxEo/rxHNSXtbp65J+ZvHj2t99wRKzuw3iZlbUigVDst61x670q2Kv6awoJ5orS8HXbHatr0eC3lzOpPy9m9bb/403x9rN0t+MMa9dPFA63vGyN9a3M/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLf/AgAA//928tWD") r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$key(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0x8, 0x5, 0x80, 0x4aa5, r3, 0x7, '\x00', r4, r3, 0x2, 0x3, 0x1, 0x6, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0xc2, 0xd, 0x1, 0x0, "b2fd7d5a603c0c06814c42fb7465dc237734043130fe21e6a9b364e11f3566a1cbcf9a5fab129740792b18c3e2c653e23bc66e4c6fead65cea4e2847e02b36ff619c477b92e6561c6ca09c04094e547aac6936bc6f76d0397c3d7d10e09e2525cd90fdedd0a1c2a297504f836f016390fb7736f078cc8f1a88e9ab5dfaf2acaa45e544fc2cf44cc0ef0d63e37e96a696f6566aa2648c4d92da273d750341c597a301363820fb8fafce411dabfa91bb4b4af9b0c697db1ee365020a023302"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x150}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x48}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000000000000000", @ANYRES32], 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 1.076694294s ago: executing program 1 (id=5516): sched_setscheduler(0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000000100000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r6}, 0x10) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x4) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000240)='./file0\x00', 0x8c7) 1.043760164s ago: executing program 1 (id=5517): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.009911334s ago: executing program 1 (id=5518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) 942.389683ms ago: executing program 1 (id=5519): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc0300000f4788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 754.618493ms ago: executing program 4 (id=5520): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r2}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x58) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x58) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x80042, 0x4, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) close(r0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) bind$inet6(r4, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setresuid(0x0, r5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x83, 0x4bc, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) r9 = perf_event_open(&(0x7f0000000380)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = open(&(0x7f0000000540)='./file0/file0\x00', 0x4000, 0x0) preadv2(r10, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[@ANYRES8=r7, @ANYRESDEC=r6, @ANYRES64=r0], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f00000002c0)=ANY=[@ANYRESDEC=r9, @ANYRES16=r4], 0x835, 0x0) 737.006263ms ago: executing program 7 (id=5521): socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x145142, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 713.041703ms ago: executing program 7 (id=5522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0xf}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x8000}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) 686.788083ms ago: executing program 4 (id=5523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2a00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/237, 0xe}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18) 686.205403ms ago: executing program 1 (id=5524): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0], 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) socket$inet(0x2, 0x3, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80), 0x13f}}, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x400) syz_emit_ethernet(0xda, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x800, @private=0xa010102, @local, {[@cipso={0x86, 0x2d, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x8, "81435aac27e3"}, {0x0, 0x12, "7706053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @empty]}, @cipso={0x86, 0x51, 0x0, [{0x0, 0x7, "4b6ceec500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x7, 0xb, "ccf0294e2a3bdb4aa4"}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4bfa, &(0x7f0000000440)=""/252) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x10) statfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000600)=""/251) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000800)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa1, 0x2, 0xef, 0x1, 0xff, 0x1000, "7947bf79b7b3a7a049a66d224e304119f22beaba689142606c44af9fa91a015f241ca4dd7e856342d302ca105c527006ee681f613db3e0d1334c817203e38a919f3dce00831a204b87041e314f90cb3d469844f387b6d0fe0597bbfbf3d49ff6df48716e7c05787d965e9c7a6f16bc302292cec66b39b35cbbee3476e44090fe02ca524d052c003011ff6397fc84f0e67c9a5f841a521f481f590cce9ab72b3a24"}}, 0x1b9) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 573.137992ms ago: executing program 7 (id=5525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x41) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008014}, 0xc010040) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x8}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) select(0x40, &(0x7f00000001c0)={0x10000, 0x1, 0x6, 0xf, 0xfff, 0x3, 0x3, 0x3}, &(0x7f0000000200)={0x100000001, 0xb, 0x3, 0x7fff, 0xffffffff, 0xe, 0x400, 0x3}, &(0x7f0000000280)={0xd, 0x2, 0x5, 0x5ea8f6ab, 0x4, 0x0, 0x5, 0xffffffff}, &(0x7f00000002c0)={0x77359400}) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0xd, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x5, 0x9, &(0x7f0000000040)=""/9, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdffffffa, @void, @value}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 390.828282ms ago: executing program 4 (id=5526): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x440, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x66010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8da}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@delalloc}, {@nouid32}, {@usrquota}, {@dioread_nolock}, {@nobh}, {@usrquota}, {@grpjquota}, {@lazytime}]}, 0x1, 0x5ef, &(0x7f0000000d40)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x400000, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xbc36}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000340), 0xfc, 0x5a3, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x18) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1f, &(0x7f0000002d40)=""/4075, &(0x7f0000000240)=0xfeb) write$nci(r0, 0x0, 0x6) 177.257821ms ago: executing program 4 (id=5527): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140"], 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 167.996491ms ago: executing program 6 (id=5528): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x65) 114.869981ms ago: executing program 6 (id=5529): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$selinux_validatetrans(r0, 0x0, 0x65) 114.205361ms ago: executing program 4 (id=5530): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@filename='./file0\x00', 0x0, &(0x7f0000000400)='./file0\x00') brk(0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) syncfs(0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r4}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 109.372921ms ago: executing program 6 (id=5531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 899.391碌s ago: executing program 6 (id=5532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000500)=@chain) 522.761碌s ago: executing program 1 (id=5533): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) sendto$packet(r4, &(0x7f00000002c0)="05030500d3fc0300000f4788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=5534): r0 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/oops_count', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80) kernel console output (not intermixed with test programs): all Trace: [ 262.705889][T15990] [ 262.705898][T15990] dump_stack_lvl+0xf2/0x150 [ 262.705931][T15990] dump_stack+0x15/0x1a [ 262.705958][T15990] should_fail_ex+0x24a/0x260 [ 262.705998][T15990] should_fail+0xb/0x10 [ 262.706050][T15990] should_fail_usercopy+0x1a/0x20 [ 262.706134][T15990] _copy_to_user+0x20/0xa0 [ 262.706163][T15990] simple_read_from_buffer+0xa0/0x110 [ 262.706191][T15990] proc_fail_nth_read+0xf9/0x140 [ 262.706222][T15990] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 262.706246][T15990] vfs_read+0x19b/0x6f0 [ 262.706294][T15990] ? __rcu_read_unlock+0x4e/0x70 [ 262.706320][T15990] ? __fget_files+0x17c/0x1c0 [ 262.706489][T15990] ksys_read+0xe8/0x1b0 [ 262.706519][T15990] __x64_sys_read+0x42/0x50 [ 262.706594][T15990] x64_sys_call+0x2874/0x2dc0 [ 262.706676][T15990] do_syscall_64+0xc9/0x1c0 [ 262.706714][T15990] ? clear_bhb_loop+0x55/0xb0 [ 262.706748][T15990] ? clear_bhb_loop+0x55/0xb0 [ 262.706795][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.706828][T15990] RIP: 0033:0x7fca1139b7bc [ 262.706846][T15990] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 262.706868][T15990] RSP: 002b:00007fca0fa01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.706935][T15990] RAX: ffffffffffffffda RBX: 00007fca115b5fa0 RCX: 00007fca1139b7bc [ 262.706949][T15990] RDX: 000000000000000f RSI: 00007fca0fa010a0 RDI: 0000000000000006 [ 262.706963][T15990] RBP: 00007fca0fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 262.706977][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.706990][T15990] R13: 0000000000000000 R14: 00007fca115b5fa0 R15: 00007fffadf66708 [ 262.707056][T15990] [ 263.018965][T16012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4506'. [ 263.116034][T16028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.124673][T16028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.176894][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4516'. [ 263.413457][T16067] SELinux: policydb version -2061882145 does not match my version range 15-34 [ 263.422637][T16067] SELinux: failed to load policy [ 263.548426][T16078] 0猉功D: renamed from 31猉功D (while UP) [ 263.565928][T16078] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 263.643632][T16075] lo speed is unknown, defaulting to 1000 [ 263.649872][T16075] ip6gretap0 speed is unknown, defaulting to 1000 [ 263.667866][T16075] lo speed is unknown, defaulting to 1000 [ 263.716251][T16075] vcan0 speed is unknown, defaulting to 1000 [ 263.766149][T16107] 1猉功D: renamed from 30猉功D (while UP) [ 263.773712][T16107] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 263.880371][T16075] chnl_net:caif_netlink_parms(): no params data found [ 263.984613][T16075] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.991712][T16075] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.013698][T16075] bridge_slave_0: entered allmulticast mode [ 264.020273][T16075] bridge_slave_0: entered promiscuous mode [ 264.046608][T16075] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.053700][T16075] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.069217][T16075] bridge_slave_1: entered allmulticast mode [ 264.083482][T16124] Process accounting resumed [ 264.089481][T16075] bridge_slave_1: entered promiscuous mode [ 264.149858][T16075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.178421][T16075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.256015][T16075] team0: Port device team_slave_0 added [ 264.271624][T16075] team0: Port device team_slave_1 added [ 264.277446][T16131] lo speed is unknown, defaulting to 1000 [ 264.344193][T16075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.351248][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.377352][T16075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.430550][T16131] ip6gretap0 speed is unknown, defaulting to 1000 [ 264.431352][T16075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.444067][T16075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.470094][T16075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.498189][T16131] lo speed is unknown, defaulting to 1000 [ 264.522363][T16075] hsr_slave_0: entered promiscuous mode [ 264.531104][T16075] hsr_slave_1: entered promiscuous mode [ 264.544263][T16075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.561565][T16075] Cannot create hsr debugfs directory [ 264.579992][T16131] vcan0 speed is unknown, defaulting to 1000 [ 265.090731][T16075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.114367][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 265.114381][ T29] audit: type=1400 audit(2000000334.890:15824): avc: denied { unmount } for pid=14440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 265.152613][T16153] loop6: detected capacity change from 0 to 1024 [ 265.154025][T16075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 265.176945][T16153] EXT4-fs (loop6): orphan cleanup on readonly fs [ 265.184843][T16075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 265.193385][T16153] EXT4-fs (loop6): 1 truncate cleaned up [ 265.201537][T16075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 265.211578][T16153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 265.249155][T16160] lo speed is unknown, defaulting to 1000 [ 265.259371][T16160] ip6gretap0 speed is unknown, defaulting to 1000 [ 265.266833][T16160] lo speed is unknown, defaulting to 1000 [ 265.273205][T14440] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.302464][T16160] vcan0 speed is unknown, defaulting to 1000 [ 265.305044][ T29] audit: type=1400 audit(2000000335.059:15825): avc: denied { nlmsg_read } for pid=16161 comm="syz.8.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.348256][T16075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.374282][T16075] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.399164][ T29] audit: type=1326 audit(2000000335.162:15826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.423125][ T29] audit: type=1326 audit(2000000335.162:15827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.446774][ T29] audit: type=1326 audit(2000000335.162:15828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.472599][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.479709][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.489276][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.496338][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.505908][ T29] audit: type=1326 audit(2000000335.162:15829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.529573][ T29] audit: type=1326 audit(2000000335.162:15830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.553355][ T29] audit: type=1326 audit(2000000335.162:15831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.577269][ T29] audit: type=1326 audit(2000000335.162:15832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.600971][ T29] audit: type=1326 audit(2000000335.162:15833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16168 comm="syz.6.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 265.618215][T16171] loop6: detected capacity change from 0 to 512 [ 265.677367][T16171] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.4568: corrupted in-inode xattr: invalid ea_ino [ 265.710239][T16171] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.4568: couldn't read orphan inode 15 (err -117) [ 265.751285][T16171] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.806675][T16075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.869214][T16194] sctp: [Deprecated]: syz.1.4574 (pid 16194) Use of int in maxseg socket option. [ 265.869214][T16194] Use struct sctp_assoc_value instead [ 265.892601][T14440] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.899086][T16199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16199 comm=syz.4.4575 [ 266.016222][T16075] veth0_vlan: entered promiscuous mode [ 266.070540][T16075] veth1_vlan: entered promiscuous mode [ 266.077522][T16217] netlink: 'syz.4.4575': attribute type 10 has an invalid length. [ 266.104223][T16075] veth0_macvtap: entered promiscuous mode [ 266.123464][T16217] batman_adv: batadv0: Adding interface: macsec0 [ 266.129839][T16217] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.155417][T16217] batman_adv: batadv0: Not using interface macsec0 (retrying later): interface not active [ 266.166738][T16075] veth1_macvtap: entered promiscuous mode [ 266.187943][T16221] lo speed is unknown, defaulting to 1000 [ 266.206058][T16221] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.212970][T16221] lo speed is unknown, defaulting to 1000 [ 266.220247][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.230767][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.240649][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.251145][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.261000][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.271486][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.337569][T16075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.350965][T16221] vcan0 speed is unknown, defaulting to 1000 [ 266.367261][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.377898][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.387945][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.399014][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.408876][T16075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.419331][T16075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.433630][T16075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.442467][T16075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.451364][T16075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.460150][T16075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.469576][T16075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.597801][T16241] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 266.606143][T16241] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 266.647669][T16245] SELinux: policydb version -2061882145 does not match my version range 15-34 [ 266.661384][T16245] SELinux: failed to load policy [ 266.747187][T16257] lo speed is unknown, defaulting to 1000 [ 266.754294][T16257] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.766867][T16257] lo speed is unknown, defaulting to 1000 [ 266.793637][T16259] lo speed is unknown, defaulting to 1000 [ 266.801938][T16259] ip6gretap0 speed is unknown, defaulting to 1000 [ 266.829280][T16259] lo speed is unknown, defaulting to 1000 [ 266.835373][T16257] vcan0 speed is unknown, defaulting to 1000 [ 266.917144][T16259] vcan0 speed is unknown, defaulting to 1000 [ 267.131114][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.139197][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.146770][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.154696][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.162164][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.170248][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.177647][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.185234][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.193809][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.201845][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.209326][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.216835][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.224270][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.232443][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.248786][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.256358][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.264461][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.271866][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.279297][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.286716][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.294183][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.302334][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.309808][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.317253][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.324748][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.332732][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.340148][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.347533][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.354970][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.363023][ T1031] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 267.371015][ T1031] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 267.429836][T16285] lo speed is unknown, defaulting to 1000 [ 267.436829][T16285] ip6gretap0 speed is unknown, defaulting to 1000 [ 267.444054][T16285] lo speed is unknown, defaulting to 1000 [ 267.480782][T16285] vcan0 speed is unknown, defaulting to 1000 [ 267.850484][T16310] __nla_validate_parse: 3 callbacks suppressed [ 267.850501][T16310] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4615'. [ 268.021649][T16327] SELinux: Context : is not valid (left unmapped). [ 268.047388][T16327] lo speed is unknown, defaulting to 1000 [ 268.053564][T16327] ip6gretap0 speed is unknown, defaulting to 1000 [ 268.060432][T16327] lo speed is unknown, defaulting to 1000 [ 268.060763][T16331] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4625'. [ 268.077468][T16331] 1猉功D: renamed from 30猉功D (while UP) [ 268.085082][T16331] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 268.089202][T16332] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 268.125166][T16334] netlink: 'syz.8.4626': attribute type 3 has an invalid length. [ 268.127938][T16327] vcan0 speed is unknown, defaulting to 1000 [ 268.312096][T16347] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4630'. [ 268.323693][T16347] mmap: syz.8.4630 (16347): VmData 167489536 exceed data ulimit 79. Update limits or use boot option ignore_rlimit_data. [ 268.480308][T16364] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4637'. [ 268.538815][T16364] 0猉功D: renamed from 31猉功D (while UP) [ 268.549740][T16364] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 268.699786][T16388] loop6: detected capacity change from 0 to 512 [ 268.709256][T16388] EXT4-fs: Ignoring removed oldalloc option [ 268.752715][T16388] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.4649: Parent and EA inode have the same ino 15 [ 268.774825][T16388] EXT4-fs (loop6): 1 orphan inode deleted [ 268.785941][T16388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.831606][T16388] smc: net device bond0 applied user defined pnetid SYZ0 [ 268.843750][T16388] smc: net device bond0 erased user defined pnetid SYZ0 [ 268.928576][T14440] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.998716][T16410] bridge_slave_0: left allmulticast mode [ 269.004434][T16410] bridge_slave_0: left promiscuous mode [ 269.010242][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.024467][T16410] bridge_slave_1: left allmulticast mode [ 269.030817][T16410] bridge_slave_1: left promiscuous mode [ 269.036527][T16410] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.047186][T16412] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4658'. [ 269.070209][T16410] bond0: (slave bond_slave_0): Releasing backup interface [ 269.087782][T16410] bond0: (slave bond_slave_1): Releasing backup interface [ 269.120469][T16410] team0: Port device team_slave_0 removed [ 269.144831][T16410] team0: Port device team_slave_1 removed [ 269.157234][T16410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.164756][T16410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.256312][T16410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.263894][T16410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.420794][T16416] lo speed is unknown, defaulting to 1000 [ 269.429001][T16416] ip6gretap0 speed is unknown, defaulting to 1000 [ 269.436946][T16416] lo speed is unknown, defaulting to 1000 [ 269.446333][T16418] lo speed is unknown, defaulting to 1000 [ 269.458583][T16418] ip6gretap0 speed is unknown, defaulting to 1000 [ 269.481183][T16416] vcan0 speed is unknown, defaulting to 1000 [ 269.490091][T16418] lo speed is unknown, defaulting to 1000 [ 269.591022][T16418] vcan0 speed is unknown, defaulting to 1000 [ 269.777672][T16437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.786217][T16437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.942702][T16447] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4673'. [ 269.952197][T16447] 0猉功D: renamed from 31猉功D (while UP) [ 269.970992][T16447] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 270.002788][T16446] loop6: detected capacity change from 0 to 1024 [ 270.019436][T16446] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 270.031577][T16446] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 270.042557][T16446] EXT4-fs error (device loop6): ext4_get_journal_inode:5798: inode #32: comm syz.6.4674: iget: special inode unallocated [ 270.061740][T16446] EXT4-fs (loop6): no journal found [ 270.067249][T16446] EXT4-fs (loop6): can't get journal size [ 270.076818][T16446] EXT4-fs error (device loop6): ext4_protect_reserved_inode:160: inode #32: comm syz.6.4674: iget: special inode unallocated [ 270.091968][T16446] EXT4-fs (loop6): failed to initialize system zone (-117) [ 270.099519][T16446] EXT4-fs (loop6): mount failed [ 270.133750][T16461] loop6: detected capacity change from 0 to 128 [ 270.148650][T16461] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=16461 comm=syz.6.4680 [ 270.402221][T16487] netlink: 'syz.7.4692': attribute type 12 has an invalid length. [ 270.410359][T16487] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4692'. [ 270.421295][T16487] loop6: detected capacity change from 0 to 7 [ 270.427612][T16487] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.438016][T16487] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.446038][T16487] loop6: unable to read partition table [ 270.455153][T16487] loop_reread_partitions: partition scan of loop6 (x熝鵂诂Ыd皮脆杻荨夥 [ 270.455153][T16487] ) failed (rc=-5) [ 270.505724][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.514754][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.608560][T16512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4703'. [ 270.635786][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 270.635804][ T29] audit: type=1326 audit(2000000340.054:16438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.678241][ T29] audit: type=1326 audit(2000000340.054:16439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.681043][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4707'. [ 270.701950][ T29] audit: type=1326 audit(2000000340.054:16440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.701992][ T29] audit: type=1326 audit(2000000340.054:16441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.758379][ T29] audit: type=1326 audit(2000000340.054:16442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.782165][ T29] audit: type=1326 audit(2000000340.054:16443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.806048][ T29] audit: type=1326 audit(2000000340.054:16444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16515 comm="syz.4.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1139cda9 code=0x7ffc0000 [ 270.868647][T16529] loop6: detected capacity change from 0 to 7 [ 270.874854][T16529] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.882937][T16529] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.891081][T16529] loop6: unable to read partition table [ 270.896812][T16529] loop_reread_partitions: partition scan of loop6 (x熝鵂诂Ыd皮脆杻荨夥 [ 270.896812][T16529] ) failed (rc=-5) [ 271.012984][T16549] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4719'. [ 271.022398][T16549] 0猉功D: renamed from gretap0 (while UP) [ 271.030220][T16549] 0猉功D: entered allmulticast mode [ 271.036116][T16549] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 271.112811][T16556] Invalid ELF header magic: != ELF [ 271.118587][ T29] audit: type=1400 audit(2000000340.512:16445): avc: denied { module_load } for pid=16555 comm="syz.7.4722" path="/sys/kernel/notes" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 271.153765][T16559] Invalid ELF header magic: != ELF [ 271.167659][ T29] audit: type=1400 audit(2000000340.540:16446): avc: denied { module_load } for pid=16557 comm="syz.6.4724" path="/sys/kernel/notes" dev="sysfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 271.191670][ T29] audit: type=1326 audit(2000000340.550:16447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16558 comm="syz.8.4725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x0 [ 271.248571][T16569] loop6: detected capacity change from 0 to 4096 [ 271.257650][T16569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.310989][T16569] xt_hashlimit: max too large, truncated to 1048576 [ 271.345283][T14440] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.367166][T16575] : renamed from bond0 (while UP) [ 271.372537][T16575] FAULT_INJECTION: forcing a failure. [ 271.372537][T16575] name failslab, interval 1, probability 0, space 0, times 0 [ 271.385255][T16575] CPU: 1 UID: 0 PID: 16575 Comm: syz.6.4729 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 271.385298][T16575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 271.385313][T16575] Call Trace: [ 271.385321][T16575] [ 271.385330][T16575] dump_stack_lvl+0xf2/0x150 [ 271.385363][T16575] dump_stack+0x15/0x1a [ 271.385390][T16575] should_fail_ex+0x24a/0x260 [ 271.385439][T16575] should_failslab+0x8f/0xb0 [ 271.385461][T16575] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 271.385492][T16575] ? device_rename+0x85/0x1a0 [ 271.385515][T16575] kstrdup+0x38/0x80 [ 271.385533][T16575] device_rename+0x85/0x1a0 [ 271.385611][T16575] dev_change_name+0x1e2/0x670 [ 271.385638][T16575] ? selinux_capable+0x1f2/0x260 [ 271.385743][T16575] ? full_name_hash+0x93/0xe0 [ 271.385800][T16575] dev_ifsioc+0x5d2/0xa10 [ 271.385822][T16575] dev_ioctl+0x774/0xab0 [ 271.385843][T16575] sock_do_ioctl+0x11c/0x260 [ 271.385875][T16575] sock_ioctl+0x40f/0x600 [ 271.385979][T16575] ? __pfx_sock_ioctl+0x10/0x10 [ 271.386007][T16575] __se_sys_ioctl+0xc9/0x140 [ 271.386025][T16575] __x64_sys_ioctl+0x43/0x50 [ 271.386042][T16575] x64_sys_call+0x1690/0x2dc0 [ 271.386066][T16575] do_syscall_64+0xc9/0x1c0 [ 271.386086][T16575] ? clear_bhb_loop+0x55/0xb0 [ 271.386110][T16575] ? clear_bhb_loop+0x55/0xb0 [ 271.386203][T16575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.386226][T16575] RIP: 0033:0x7f965b7ecda9 [ 271.386245][T16575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.386264][T16575] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.386299][T16575] RAX: ffffffffffffffda RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 271.386315][T16575] RDX: 0000000020000000 RSI: 0000000000008923 RDI: 0000000000000003 [ 271.386326][T16575] RBP: 00007f9659e57090 R08: 0000000000000000 R09: 0000000000000000 [ 271.386342][T16575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.386377][T16575] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 271.386400][T16575] [ 271.612310][T16577] : renamed from bond0 (while UP) [ 271.840805][T16590] 0猉功D: renamed from 31猉功D (while UP) [ 271.850783][T16590] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 271.888669][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.897306][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.128462][T16617] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 272.144652][T16617] FAULT_INJECTION: forcing a failure. [ 272.144652][T16617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.157840][T16617] CPU: 1 UID: 0 PID: 16617 Comm: syz.4.4747 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 272.157867][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 272.157968][T16617] Call Trace: [ 272.157976][T16617] [ 272.157984][T16617] dump_stack_lvl+0xf2/0x150 [ 272.158018][T16617] dump_stack+0x15/0x1a [ 272.158044][T16617] should_fail_ex+0x24a/0x260 [ 272.158086][T16617] should_fail+0xb/0x10 [ 272.158130][T16617] should_fail_usercopy+0x1a/0x20 [ 272.158155][T16617] _copy_to_user+0x20/0xa0 [ 272.158222][T16617] simple_read_from_buffer+0xa0/0x110 [ 272.158251][T16617] proc_fail_nth_read+0xf9/0x140 [ 272.158284][T16617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.158314][T16617] vfs_read+0x19b/0x6f0 [ 272.158358][T16617] ? __rcu_read_unlock+0x4e/0x70 [ 272.158379][T16617] ? __fget_files+0x17c/0x1c0 [ 272.158410][T16617] ksys_read+0xe8/0x1b0 [ 272.158440][T16617] __x64_sys_read+0x42/0x50 [ 272.158515][T16617] x64_sys_call+0x2874/0x2dc0 [ 272.158548][T16617] do_syscall_64+0xc9/0x1c0 [ 272.158578][T16617] ? clear_bhb_loop+0x55/0xb0 [ 272.158608][T16617] ? clear_bhb_loop+0x55/0xb0 [ 272.158701][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.158746][T16617] RIP: 0033:0x7fca1139b7bc [ 272.158765][T16617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.158787][T16617] RSP: 002b:00007fca0fa01030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.158807][T16617] RAX: ffffffffffffffda RBX: 00007fca115b5fa0 RCX: 00007fca1139b7bc [ 272.158819][T16617] RDX: 000000000000000f RSI: 00007fca0fa010a0 RDI: 0000000000000004 [ 272.158873][T16617] RBP: 00007fca0fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 272.158951][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.158967][T16617] R13: 0000000000000000 R14: 00007fca115b5fa0 R15: 00007fffadf66708 [ 272.158988][T16617] [ 272.361628][T16623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23245 sclass=netlink_route_socket pid=16623 comm=syz.7.4749 [ 272.418567][T16633] FAULT_INJECTION: forcing a failure. [ 272.418567][T16633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.431810][T16633] CPU: 1 UID: 0 PID: 16633 Comm: syz.4.4755 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 272.431840][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 272.431856][T16633] Call Trace: [ 272.431862][T16633] [ 272.431870][T16633] dump_stack_lvl+0xf2/0x150 [ 272.431948][T16633] dump_stack+0x15/0x1a [ 272.432022][T16633] should_fail_ex+0x24a/0x260 [ 272.432127][T16633] should_fail+0xb/0x10 [ 272.432161][T16633] should_fail_usercopy+0x1a/0x20 [ 272.432180][T16633] _copy_from_user+0x1c/0xa0 [ 272.432210][T16633] br_dev_read_uargs+0xdb/0x270 [ 272.432236][T16633] br_ioctl_stub+0x169/0x5d0 [ 272.432269][T16633] ? do_vfs_ioctl+0x96e/0x1530 [ 272.432294][T16633] ? __pfx_br_ioctl_stub+0x10/0x10 [ 272.432319][T16633] sock_ioctl+0x3dd/0x600 [ 272.432354][T16633] ? __pfx_sock_ioctl+0x10/0x10 [ 272.432497][T16633] __se_sys_ioctl+0xc9/0x140 [ 272.432519][T16633] __x64_sys_ioctl+0x43/0x50 [ 272.432543][T16633] x64_sys_call+0x1690/0x2dc0 [ 272.432601][T16633] do_syscall_64+0xc9/0x1c0 [ 272.432625][T16633] ? clear_bhb_loop+0x55/0xb0 [ 272.432655][T16633] ? clear_bhb_loop+0x55/0xb0 [ 272.432692][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.432719][T16633] RIP: 0033:0x7fca1139cda9 [ 272.432743][T16633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.432762][T16633] RSP: 002b:00007fca0fa01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.432781][T16633] RAX: ffffffffffffffda RBX: 00007fca115b5fa0 RCX: 00007fca1139cda9 [ 272.432836][T16633] RDX: 0000000020000080 RSI: 0000000000008940 RDI: 0000000000000004 [ 272.432848][T16633] RBP: 00007fca0fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 272.432860][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.432872][T16633] R13: 0000000000000000 R14: 00007fca115b5fa0 R15: 00007fffadf66708 [ 272.432898][T16633] [ 272.656828][T16635] bond0 (unregistering): Released all slaves [ 273.040058][T16674] 9pnet_fd: Insufficient options for proto=fd [ 273.135613][T16677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.149013][T16677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.384173][T16683] lo speed is unknown, defaulting to 1000 [ 273.400158][T16683] ip6gretap0 speed is unknown, defaulting to 1000 [ 273.418947][T16683] lo speed is unknown, defaulting to 1000 [ 273.437898][T16684] lo speed is unknown, defaulting to 1000 [ 273.449047][T16684] ip6gretap0 speed is unknown, defaulting to 1000 [ 273.460297][T16697] __nla_validate_parse: 4 callbacks suppressed [ 273.460312][T16697] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.4778'. [ 273.476451][T16683] vcan0 speed is unknown, defaulting to 1000 [ 273.485367][T16684] lo speed is unknown, defaulting to 1000 [ 273.543967][T16684] vcan0 speed is unknown, defaulting to 1000 [ 273.644592][T16684] chnl_net:caif_netlink_parms(): no params data found [ 273.681037][T16684] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.688095][T16684] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.695977][T16684] bridge_slave_0: entered allmulticast mode [ 273.702729][T16684] bridge_slave_0: entered promiscuous mode [ 273.710474][T16684] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.717572][T16684] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.726317][T16684] bridge_slave_1: entered allmulticast mode [ 273.734331][T16684] bridge_slave_1: entered promiscuous mode [ 273.762945][T16684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.790462][T16684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.844528][T16718] FAULT_INJECTION: forcing a failure. [ 273.844528][T16718] name failslab, interval 1, probability 0, space 0, times 0 [ 273.857972][T16718] CPU: 0 UID: 0 PID: 16718 Comm: syz.7.4784 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 273.857998][T16718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 273.858024][T16718] Call Trace: [ 273.858033][T16718] [ 273.858042][T16718] dump_stack_lvl+0xf2/0x150 [ 273.858133][T16718] dump_stack+0x15/0x1a [ 273.858159][T16718] should_fail_ex+0x24a/0x260 [ 273.858199][T16718] ? audit_log_d_path+0x96/0x250 [ 273.858233][T16718] should_failslab+0x8f/0xb0 [ 273.858376][T16718] __kmalloc_cache_noprof+0x4e/0x320 [ 273.858503][T16718] audit_log_d_path+0x96/0x250 [ 273.858605][T16718] ? __rcu_read_unlock+0x4e/0x70 [ 273.858630][T16718] audit_log_d_path_exe+0x42/0x70 [ 273.858670][T16718] audit_log_task+0x192/0x1c0 [ 273.858711][T16718] audit_seccomp+0x68/0x130 [ 273.858822][T16718] __seccomp_filter+0x6fa/0x1180 [ 273.858849][T16718] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.858881][T16718] ? vfs_write+0x644/0x920 [ 273.858903][T16718] ? __schedule+0x75b/0x990 [ 273.858937][T16718] __secure_computing+0x9f/0x1c0 [ 273.858961][T16718] syscall_trace_enter+0xd1/0x1f0 [ 273.858991][T16718] do_syscall_64+0xaa/0x1c0 [ 273.859024][T16718] ? clear_bhb_loop+0x55/0xb0 [ 273.859101][T16718] ? clear_bhb_loop+0x55/0xb0 [ 273.859138][T16718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.859170][T16718] RIP: 0033:0x7f4a4722cda9 [ 273.859185][T16718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.859207][T16718] RSP: 002b:00007f4a45897038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 273.859305][T16718] RAX: ffffffffffffffda RBX: 00007f4a47445fa0 RCX: 00007f4a4722cda9 [ 273.859321][T16718] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000069 [ 273.859340][T16718] RBP: 00007f4a45897090 R08: 0000000000000000 R09: 0000000000000000 [ 273.859356][T16718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.859370][T16718] R13: 0000000000000000 R14: 00007f4a47445fa0 R15: 00007fffb7dcfe68 [ 273.859392][T16718] [ 274.069718][T16684] team0: Port device team_slave_0 added [ 274.099889][T16684] team0: Port device team_slave_1 added [ 274.102622][T16722] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4787'. [ 274.117275][T16724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.125784][T16724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.134654][T16684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.141742][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.167809][T16684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.178959][T16722] 1猉功D: renamed from 30猉功D (while UP) [ 274.186965][T16722] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 274.203926][T16684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.210888][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.237520][T16684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.266902][T16727] FAULT_INJECTION: forcing a failure. [ 274.266902][T16727] name failslab, interval 1, probability 0, space 0, times 0 [ 274.279700][T16727] CPU: 0 UID: 0 PID: 16727 Comm: syz.7.4789 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 274.279729][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 274.279744][T16727] Call Trace: [ 274.279752][T16727] [ 274.279761][T16727] dump_stack_lvl+0xf2/0x150 [ 274.279795][T16727] dump_stack+0x15/0x1a [ 274.279831][T16727] should_fail_ex+0x24a/0x260 [ 274.279869][T16727] should_failslab+0x8f/0xb0 [ 274.279902][T16727] kmem_cache_alloc_node_noprof+0x59/0x320 [ 274.279944][T16727] ? __alloc_skb+0x10b/0x310 [ 274.279990][T16727] __alloc_skb+0x10b/0x310 [ 274.280020][T16727] tipc_buf_acquire+0x2c/0xb0 [ 274.280063][T16727] tipc_named_withdraw+0x144/0x360 [ 274.280096][T16727] tipc_nametbl_withdraw+0x105/0x1f0 [ 274.280128][T16727] tipc_sk_bind+0x298/0x310 [ 274.280229][T16727] tipc_bind+0x66/0x190 [ 274.280262][T16727] __sys_bind+0x10c/0x190 [ 274.280292][T16727] __x64_sys_bind+0x41/0x50 [ 274.280315][T16727] x64_sys_call+0x20ab/0x2dc0 [ 274.280385][T16727] do_syscall_64+0xc9/0x1c0 [ 274.280415][T16727] ? clear_bhb_loop+0x55/0xb0 [ 274.280491][T16727] ? clear_bhb_loop+0x55/0xb0 [ 274.280525][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.280558][T16727] RIP: 0033:0x7f4a4722cda9 [ 274.280573][T16727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.280595][T16727] RSP: 002b:00007f4a45897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 274.280692][T16727] RAX: ffffffffffffffda RBX: 00007f4a47445fa0 RCX: 00007f4a4722cda9 [ 274.280705][T16727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.280716][T16727] RBP: 00007f4a45897090 R08: 0000000000000000 R09: 0000000000000000 [ 274.280728][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.280820][T16727] R13: 0000000000000000 R14: 00007f4a47445fa0 R15: 00007fffb7dcfe68 [ 274.280840][T16727] [ 274.280849][T16727] tipc: Withdrawal distribution failure [ 274.499821][T16684] hsr_slave_0: entered promiscuous mode [ 274.506746][T16684] hsr_slave_1: entered promiscuous mode [ 274.512888][T16684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.520478][T16684] Cannot create hsr debugfs directory [ 274.567084][T16732] netlink: 'syz.1.4791': attribute type 10 has an invalid length. [ 274.574971][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4791'. [ 274.601121][T16732] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 274.751080][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4794'. [ 274.906082][T16684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.964728][T16684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.227141][T16765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.238067][T16765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.284988][T16684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.299368][T16684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.395613][T16772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.427033][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.444630][T16772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.466496][T16684] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.485674][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.492821][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.507326][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.514446][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.621595][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.818017][T16684] veth0_vlan: entered promiscuous mode [ 275.826002][T16684] veth1_vlan: entered promiscuous mode [ 275.841995][T16684] veth0_macvtap: entered promiscuous mode [ 275.849519][T16684] veth1_macvtap: entered promiscuous mode [ 275.859768][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.870358][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.880219][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.890750][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.900604][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.911104][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.922091][T16684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.930623][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.941169][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.951013][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.961477][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.971342][T16684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.981836][T16684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.986995][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 275.987012][ T29] audit: type=1400 audit(2000000345.030:16661): avc: denied { lock } for pid=16811 comm="syz.8.4818" path="socket:[52980]" dev="sockfs" ino=52980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 276.002121][T16684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.021961][ T29] audit: type=1400 audit(2000000345.049:16662): avc: denied { mount } for pid=16811 comm="syz.8.4818" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 276.032222][T16815] lo speed is unknown, defaulting to 1000 [ 276.056932][T16684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.065865][T16684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.074619][T16684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.084303][T16684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.103534][T16815] ip6gretap0 speed is unknown, defaulting to 1000 [ 276.112514][T16821] FAULT_INJECTION: forcing a failure. [ 276.112514][T16821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.125977][T16821] CPU: 1 UID: 0 PID: 16821 Comm: syz.6.4828 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 276.126073][T16821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 276.126094][T16821] Call Trace: [ 276.126101][T16821] [ 276.126110][T16821] dump_stack_lvl+0xf2/0x150 [ 276.126137][T16821] dump_stack+0x15/0x1a [ 276.126160][T16821] should_fail_ex+0x24a/0x260 [ 276.126198][T16821] should_fail+0xb/0x10 [ 276.126248][T16821] should_fail_usercopy+0x1a/0x20 [ 276.126270][T16821] copy_fpstate_to_sigframe+0x640/0x7e0 [ 276.126294][T16821] ? copy_fpstate_to_sigframe+0xea/0x7e0 [ 276.126322][T16821] ? dequeue_signal+0x364/0x370 [ 276.126359][T16821] ? fpu__alloc_mathframe+0x95/0xd0 [ 276.126433][T16821] get_sigframe+0x2f3/0x430 [ 276.126475][T16821] x64_setup_rt_frame+0xad/0x590 [ 276.126504][T16821] arch_do_signal_or_restart+0x287/0x4b0 [ 276.126558][T16821] syscall_exit_to_user_mode+0x62/0x120 [ 276.126591][T16821] do_syscall_64+0xd6/0x1c0 [ 276.126614][T16821] ? clear_bhb_loop+0x55/0xb0 [ 276.126640][T16821] ? clear_bhb_loop+0x55/0xb0 [ 276.126669][T16821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.126724][T16821] RIP: 0033:0x7f965b7ecda7 [ 276.126741][T16821] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 276.126759][T16821] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 276.126777][T16821] RAX: 00000000000000ca RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 276.126789][T16821] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000000002000cffc [ 276.126802][T16821] RBP: 00007f9659e57090 R08: 0000000020048000 R09: 0000000000000300 [ 276.126815][T16821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.126866][T16821] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 276.126886][T16821] [ 276.128245][T16815] lo speed is unknown, defaulting to 1000 [ 276.416920][T16815] vcan0 speed is unknown, defaulting to 1000 [ 276.471376][ T29] audit: type=1400 audit(2000000345.517:16663): avc: denied { write } for pid=16684 comm="syz-executor" name="pids.max" dev="cgroup2" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 276.498191][ T29] audit: type=1400 audit(2000000345.517:16664): avc: denied { open } for pid=16684 comm="syz-executor" path="/syzcgroup/unified/syz4/pids.max" dev="cgroup2" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_log_t:s0" [ 276.794898][ T29] audit: type=1326 audit(2000000345.816:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.7.4832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4722cda9 code=0x0 [ 276.797635][T16848] lo speed is unknown, defaulting to 1000 [ 276.824565][T16848] ip6gretap0 speed is unknown, defaulting to 1000 [ 276.831893][T16848] lo speed is unknown, defaulting to 1000 [ 276.850428][ T29] audit: type=1326 audit(2000000345.872:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.8.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 276.878852][ T29] audit: type=1326 audit(2000000345.900:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.8.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fccd33b3d67 code=0x7ffc0000 [ 276.902421][ T29] audit: type=1326 audit(2000000345.900:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.8.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fccd3358fa9 code=0x7ffc0000 [ 276.925950][ T29] audit: type=1326 audit(2000000345.900:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.8.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 276.949720][ T29] audit: type=1326 audit(2000000345.900:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="syz.8.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 277.020443][T16848] vcan0 speed is unknown, defaulting to 1000 [ 277.102374][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4835'. [ 277.145446][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4836'. [ 277.186802][T16866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16866 comm=syz.4.4837 [ 277.201672][T16865] netlink: 'syz.4.4837': attribute type 5 has an invalid length. [ 277.302024][T16876] ref_ctr_offset mismatch. inode: 0x26 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 277.308627][T16878] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4841'. [ 277.326016][T16878] 1猉功D: renamed from 30猉功D (while UP) [ 277.337502][T16878] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 277.481924][ T9] IPVS: starting estimator thread 0... [ 277.490494][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'. [ 277.591044][T16889] IPVS: using max 2400 ests per chain, 120000 per kthread [ 277.625090][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4848'. [ 277.725688][T16911] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4854'. [ 277.735448][T16911] 1猉功D: renamed from 30猉功D (while UP) [ 277.747671][T16911] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 278.362068][T16929] lo speed is unknown, defaulting to 1000 [ 278.368506][T16929] ip6gretap0 speed is unknown, defaulting to 1000 [ 278.375696][T16929] lo speed is unknown, defaulting to 1000 [ 278.429762][T16929] vcan0 speed is unknown, defaulting to 1000 [ 278.691542][T16956] 0猉功D: renamed from 31猉功D (while UP) [ 278.699263][T16956] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 279.033467][T16983] __nla_validate_parse: 3 callbacks suppressed [ 279.033487][T16983] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4882'. [ 279.050896][T16983] 1猉功D: renamed from 30猉功D (while UP) [ 279.058956][T16983] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 279.254278][T16995] netlink: 'syz.6.4889': attribute type 1 has an invalid length. [ 279.262120][T16995] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4889'. [ 279.349287][T17008] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4893'. [ 279.358717][T17008] 0猉功D: renamed from 31猉功D (while UP) [ 279.366374][T17008] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 279.398139][T17007] lo speed is unknown, defaulting to 1000 [ 279.404218][T17007] ip6gretap0 speed is unknown, defaulting to 1000 [ 279.411988][T17007] lo speed is unknown, defaulting to 1000 [ 279.489666][T17021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.513625][T17007] vcan0 speed is unknown, defaulting to 1000 [ 279.515467][T17021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.523867][T17023] lo speed is unknown, defaulting to 1000 [ 279.536175][T17023] ip6gretap0 speed is unknown, defaulting to 1000 [ 279.550496][T17023] lo speed is unknown, defaulting to 1000 [ 279.683913][T17023] vcan0 speed is unknown, defaulting to 1000 [ 280.145289][T17046] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4909'. [ 280.154935][T17046] 0猉功D: renamed from 31猉功D (while UP) [ 280.163669][T17046] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 280.297634][T17058] lo speed is unknown, defaulting to 1000 [ 280.303904][T17058] ip6gretap0 speed is unknown, defaulting to 1000 [ 280.313052][T17058] lo speed is unknown, defaulting to 1000 [ 280.355767][T17058] vcan0 speed is unknown, defaulting to 1000 [ 280.837361][T17073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.848208][T17073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.060173][T17080] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4922'. [ 281.069468][T17080] 0猉功D: renamed from 31猉功D (while UP) [ 281.077599][T17080] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 281.273216][T17099] FAULT_INJECTION: forcing a failure. [ 281.273216][T17099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.286485][T17099] CPU: 0 UID: 0 PID: 17099 Comm: syz.6.4929 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 281.286519][T17099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.286540][T17099] Call Trace: [ 281.286547][T17099] [ 281.286555][T17099] dump_stack_lvl+0xf2/0x150 [ 281.286590][T17099] dump_stack+0x15/0x1a [ 281.286617][T17099] should_fail_ex+0x24a/0x260 [ 281.286714][T17099] should_fail+0xb/0x10 [ 281.286751][T17099] should_fail_usercopy+0x1a/0x20 [ 281.286775][T17099] _copy_from_user+0x1c/0xa0 [ 281.286808][T17099] do_sock_getsockopt+0xd3/0x260 [ 281.286924][T17099] __x64_sys_getsockopt+0x18c/0x200 [ 281.286963][T17099] x64_sys_call+0x1288/0x2dc0 [ 281.286996][T17099] do_syscall_64+0xc9/0x1c0 [ 281.287026][T17099] ? clear_bhb_loop+0x55/0xb0 [ 281.287185][T17099] ? clear_bhb_loop+0x55/0xb0 [ 281.287219][T17099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.287251][T17099] RIP: 0033:0x7f965b7ecda9 [ 281.287317][T17099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.287340][T17099] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 281.287362][T17099] RAX: ffffffffffffffda RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 281.287377][T17099] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 281.287391][T17099] RBP: 00007f9659e57090 R08: 0000000020000180 R09: 0000000000000000 [ 281.287405][T17099] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.287419][T17099] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 281.287441][T17099] [ 281.521341][T17108] FAULT_INJECTION: forcing a failure. [ 281.521341][T17108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.534477][T17108] CPU: 0 UID: 0 PID: 17108 Comm: syz.6.4934 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 281.534503][T17108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 281.534534][T17108] Call Trace: [ 281.534541][T17108] [ 281.534550][T17108] dump_stack_lvl+0xf2/0x150 [ 281.534583][T17108] dump_stack+0x15/0x1a [ 281.534609][T17108] should_fail_ex+0x24a/0x260 [ 281.534760][T17108] should_fail+0xb/0x10 [ 281.534796][T17108] should_fail_usercopy+0x1a/0x20 [ 281.534879][T17108] _copy_from_user+0x1c/0xa0 [ 281.534908][T17108] __sys_bpf+0x14e/0x7a0 [ 281.534947][T17108] __x64_sys_bpf+0x43/0x50 [ 281.534975][T17108] x64_sys_call+0x2914/0x2dc0 [ 281.535032][T17108] do_syscall_64+0xc9/0x1c0 [ 281.535056][T17108] ? clear_bhb_loop+0x55/0xb0 [ 281.535108][T17108] ? clear_bhb_loop+0x55/0xb0 [ 281.535143][T17108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.535194][T17108] RIP: 0033:0x7f965b7ecda9 [ 281.535210][T17108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.535232][T17108] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.535256][T17108] RAX: ffffffffffffffda RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 281.535271][T17108] RDX: 0000000000000048 RSI: 00000000200009c0 RDI: 0000000000000000 [ 281.535288][T17108] RBP: 00007f9659e57090 R08: 0000000000000000 R09: 0000000000000000 [ 281.535300][T17108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.535367][T17108] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 281.535391][T17108] [ 281.760265][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 281.760284][ T29] audit: type=1326 audit(2000000350.455:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.790301][ T29] audit: type=1326 audit(2000000350.455:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.814080][ T29] audit: type=1326 audit(2000000350.455:17176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.822364][T17114] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4935'. [ 281.837789][ T29] audit: type=1326 audit(2000000350.455:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.837905][ T29] audit: type=1326 audit(2000000350.455:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.837937][ T29] audit: type=1326 audit(2000000350.455:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.842654][ T29] audit: type=1326 audit(2000000350.455:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.890788][T17114] 1猉功D: renamed from 30猉功D (while UP) [ 281.895104][ T29] audit: type=1326 audit(2000000350.465:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.972499][ T29] audit: type=1326 audit(2000000350.465:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 281.996202][ T29] audit: type=1326 audit(2000000350.465:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.6.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x7ffc0000 [ 282.022446][T17117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=17117 comm=syz.1.4938 [ 282.036937][T17114] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 282.063174][T17115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4936'. [ 282.213798][T17140] FAULT_INJECTION: forcing a failure. [ 282.213798][T17140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.227024][T17140] CPU: 1 UID: 0 PID: 17140 Comm: syz.1.4945 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 282.227056][T17140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 282.227072][T17140] Call Trace: [ 282.227081][T17140] [ 282.227090][T17140] dump_stack_lvl+0xf2/0x150 [ 282.227192][T17140] dump_stack+0x15/0x1a [ 282.227245][T17140] should_fail_ex+0x24a/0x260 [ 282.227280][T17140] should_fail+0xb/0x10 [ 282.227309][T17140] should_fail_usercopy+0x1a/0x20 [ 282.227328][T17140] copy_page_from_iter_atomic+0x228/0xf80 [ 282.227418][T17140] ? shmem_write_begin+0xa2/0x180 [ 282.227454][T17140] ? shmem_write_begin+0xda/0x180 [ 282.227605][T17140] generic_perform_write+0x2f1/0x4a0 [ 282.227637][T17140] shmem_file_write_iter+0xc2/0xe0 [ 282.227662][T17140] vfs_write+0x77b/0x920 [ 282.227758][T17140] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 282.227791][T17140] ksys_write+0xe8/0x1b0 [ 282.227818][T17140] __x64_sys_write+0x42/0x50 [ 282.227840][T17140] x64_sys_call+0x287e/0x2dc0 [ 282.227885][T17140] do_syscall_64+0xc9/0x1c0 [ 282.227920][T17140] ? clear_bhb_loop+0x55/0xb0 [ 282.227954][T17140] ? clear_bhb_loop+0x55/0xb0 [ 282.228062][T17140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.228113][T17140] RIP: 0033:0x7f2aea81cda9 [ 282.228132][T17140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.228155][T17140] RSP: 002b:00007f2ae8e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.228177][T17140] RAX: ffffffffffffffda RBX: 00007f2aeaa35fa0 RCX: 00007f2aea81cda9 [ 282.228191][T17140] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000006 [ 282.228243][T17140] RBP: 00007f2ae8e81090 R08: 0000000000000000 R09: 0000000000000000 [ 282.228255][T17140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.228267][T17140] R13: 0000000000000000 R14: 00007f2aeaa35fa0 R15: 00007ffcbce1bec8 [ 282.228330][T17140] [ 282.536665][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4951'. [ 282.564576][T17152] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4950'. [ 282.573748][T17152] 1猉功D: renamed from 30猉功D (while UP) [ 282.586599][T17152] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 282.602678][T17153] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 282.612231][T17153] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 282.655127][T17158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=17158 comm=syz.4.4952 [ 282.967516][T17189] FAULT_INJECTION: forcing a failure. [ 282.967516][T17189] name failslab, interval 1, probability 0, space 0, times 0 [ 282.980297][T17189] CPU: 1 UID: 0 PID: 17189 Comm: syz.7.4961 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 282.980328][T17189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 282.980376][T17189] Call Trace: [ 282.980385][T17189] [ 282.980394][T17189] dump_stack_lvl+0xf2/0x150 [ 282.980423][T17189] dump_stack+0x15/0x1a [ 282.980443][T17189] should_fail_ex+0x24a/0x260 [ 282.980480][T17189] ? io_ring_ctx_alloc+0x38/0x730 [ 282.980533][T17189] should_failslab+0x8f/0xb0 [ 282.980609][T17189] __kmalloc_cache_noprof+0x4e/0x320 [ 282.980654][T17189] io_ring_ctx_alloc+0x38/0x730 [ 282.980735][T17189] ? xfd_validate_state+0x46/0xf0 [ 282.980758][T17189] ? io_uring_fill_params+0x2a7/0x330 [ 282.980783][T17189] io_uring_create+0x40/0x6d0 [ 282.980860][T17189] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 282.980895][T17189] __x64_sys_io_uring_setup+0x31/0x40 [ 282.980922][T17189] x64_sys_call+0x270c/0x2dc0 [ 282.980952][T17189] do_syscall_64+0xc9/0x1c0 [ 282.980986][T17189] ? clear_bhb_loop+0x55/0xb0 [ 282.981050][T17189] ? clear_bhb_loop+0x55/0xb0 [ 282.981083][T17189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.981116][T17189] RIP: 0033:0x7f4a4722cda9 [ 282.981134][T17189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.981220][T17189] RSP: 002b:00007f4a45897038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 282.981238][T17189] RAX: ffffffffffffffda RBX: 00007f4a47445fa0 RCX: 00007f4a4722cda9 [ 282.981253][T17189] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000c90 [ 282.981268][T17189] RBP: 00007f4a45897090 R08: 0000000000000000 R09: 0000000000000000 [ 282.981283][T17189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.981296][T17189] R13: 0000000000000000 R14: 00007f4a47445fa0 R15: 00007fffb7dcfe68 [ 282.981314][T17189] [ 283.219914][T17193] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4964'. [ 283.255093][T17193] 0猉功D: renamed from 31猉功D (while UP) [ 283.264684][T17193] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 283.345237][T17207] Invalid ELF header magic: != ELF [ 283.366837][T17210] lo speed is unknown, defaulting to 1000 [ 283.372956][T17210] ip6gretap0 speed is unknown, defaulting to 1000 [ 283.411182][T17210] lo speed is unknown, defaulting to 1000 [ 283.460724][T17219] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 283.460724][T17219] program syz.7.4975 not setting count and/or reply_len properly [ 283.488886][T17210] vcan0 speed is unknown, defaulting to 1000 [ 283.574757][T17228] FAULT_INJECTION: forcing a failure. [ 283.574757][T17228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.588639][T17228] CPU: 0 UID: 0 PID: 17228 Comm: syz.7.4978 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 283.588670][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 283.588759][T17228] Call Trace: [ 283.588767][T17228] [ 283.588777][T17228] dump_stack_lvl+0xf2/0x150 [ 283.588817][T17228] dump_stack+0x15/0x1a [ 283.588844][T17228] should_fail_ex+0x24a/0x260 [ 283.588881][T17228] should_fail+0xb/0x10 [ 283.588969][T17228] should_fail_usercopy+0x1a/0x20 [ 283.588992][T17228] _copy_from_user+0x1c/0xa0 [ 283.589019][T17228] sg_write+0x5e1/0x710 [ 283.589060][T17228] vfs_writev+0x3fa/0x880 [ 283.589156][T17228] ? __pfx_sg_write+0x10/0x10 [ 283.589187][T17228] do_writev+0xf4/0x220 [ 283.589304][T17228] __x64_sys_writev+0x45/0x50 [ 283.589333][T17228] x64_sys_call+0x1fab/0x2dc0 [ 283.589366][T17228] do_syscall_64+0xc9/0x1c0 [ 283.589395][T17228] ? clear_bhb_loop+0x55/0xb0 [ 283.589503][T17228] ? clear_bhb_loop+0x55/0xb0 [ 283.589537][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.589570][T17228] RIP: 0033:0x7f4a4722cda9 [ 283.589585][T17228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.589603][T17228] RSP: 002b:00007f4a45897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 283.589686][T17228] RAX: ffffffffffffffda RBX: 00007f4a47445fa0 RCX: 00007f4a4722cda9 [ 283.589701][T17228] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000003 [ 283.589717][T17228] RBP: 00007f4a45897090 R08: 0000000000000000 R09: 0000000000000000 [ 283.589731][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.589800][T17228] R13: 0000000000000000 R14: 00007f4a47445fa0 R15: 00007fffb7dcfe68 [ 283.589822][T17228] [ 283.795424][T17229] xt_hashlimit: max too large, truncated to 1048576 [ 283.806205][T17229] program syz.1.4973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.846774][T17232] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 283.934147][T17238] 1猉功D: renamed from 30猉功D (while UP) [ 283.942877][T17238] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 284.100627][T17246] xt_CT: No such helper "pptp" [ 284.202984][T17251] tmpfs: Bad value for 'mpol' [ 284.385730][T17258] __nla_validate_parse: 4 callbacks suppressed [ 284.385749][T17258] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4989'. [ 284.502441][T17272] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4993'. [ 284.512443][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4991'. [ 284.565765][T17272] 1猉功D: renamed from 30猉功D (while UP) [ 284.601163][T17272] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 284.669004][T17279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4997'. [ 284.748123][T17292] lo speed is unknown, defaulting to 1000 [ 284.756262][T17292] lo speed is unknown, defaulting to 1000 [ 284.773131][T17292] lo speed is unknown, defaulting to 1000 [ 284.780861][T17292] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 284.792235][T17292] lo speed is unknown, defaulting to 1000 [ 284.798445][T17292] lo speed is unknown, defaulting to 1000 [ 284.804625][T17292] lo speed is unknown, defaulting to 1000 [ 284.811600][T17292] lo speed is unknown, defaulting to 1000 [ 284.818021][T17292] lo speed is unknown, defaulting to 1000 [ 284.827129][T17292] lo speed is unknown, defaulting to 1000 [ 284.834979][T17292] lo speed is unknown, defaulting to 1000 [ 284.841199][T17292] lo speed is unknown, defaulting to 1000 [ 284.847875][T17292] lo speed is unknown, defaulting to 1000 [ 284.854029][T17292] lo speed is unknown, defaulting to 1000 [ 284.860575][T17292] lo speed is unknown, defaulting to 1000 [ 284.880299][T17292] lo speed is unknown, defaulting to 1000 [ 285.004839][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5005'. [ 285.131818][T17317] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5012'. [ 285.141121][T17317] 1猉功D: renamed from 30猉功D (while UP) [ 285.148698][T17317] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 285.556859][T17324] siw: device registration error -23 [ 285.563504][T17324] netlink: 'syz.1.5015': attribute type 21 has an invalid length. [ 285.571388][T17324] netlink: 'syz.1.5015': attribute type 20 has an invalid length. [ 285.580038][T17324] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.617919][T17328] bond1: entered promiscuous mode [ 285.623078][T17328] bond1: entered allmulticast mode [ 285.628479][T17328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.650414][T17328] bond1 (unregistering): Released all slaves [ 285.660049][T17333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5018'. [ 285.873648][T17358] FAULT_INJECTION: forcing a failure. [ 285.873648][T17358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.886868][T17358] CPU: 0 UID: 0 PID: 17358 Comm: syz.6.5030 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 285.886899][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 285.886942][T17358] Call Trace: [ 285.886948][T17358] [ 285.886957][T17358] dump_stack_lvl+0xf2/0x150 [ 285.886986][T17358] dump_stack+0x15/0x1a [ 285.887012][T17358] should_fail_ex+0x24a/0x260 [ 285.887061][T17358] should_fail+0xb/0x10 [ 285.887128][T17358] should_fail_usercopy+0x1a/0x20 [ 285.887146][T17358] _copy_from_user+0x1c/0xa0 [ 285.887169][T17358] copy_msghdr_from_user+0x54/0x2a0 [ 285.887189][T17358] ? __fget_files+0x17c/0x1c0 [ 285.887226][T17358] __sys_sendmsg+0x13e/0x230 [ 285.887288][T17358] __x64_sys_sendmsg+0x46/0x50 [ 285.887324][T17358] x64_sys_call+0x2734/0x2dc0 [ 285.887382][T17358] do_syscall_64+0xc9/0x1c0 [ 285.887407][T17358] ? clear_bhb_loop+0x55/0xb0 [ 285.887442][T17358] ? clear_bhb_loop+0x55/0xb0 [ 285.887475][T17358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.887504][T17358] RIP: 0033:0x7f965b7ecda9 [ 285.887572][T17358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.887636][T17358] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.887659][T17358] RAX: ffffffffffffffda RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 285.887674][T17358] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000003 [ 285.887765][T17358] RBP: 00007f9659e57090 R08: 0000000000000000 R09: 0000000000000000 [ 285.887776][T17358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.887788][T17358] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 285.887810][T17358] [ 286.159094][T17374] Invalid ELF header magic: != ELF [ 286.197034][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5035'. [ 286.257636][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5039'. [ 286.273844][T17387] team_slave_0: entered promiscuous mode [ 286.279560][T17387] team_slave_1: entered promiscuous mode [ 286.288399][T17387] macvtap1: entered promiscuous mode [ 286.293947][T17387] team0: entered promiscuous mode [ 286.299330][T17387] macvtap1: entered allmulticast mode [ 286.304888][T17387] team0: entered allmulticast mode [ 286.310066][T17387] team_slave_0: entered allmulticast mode [ 286.315818][T17395] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5043'. [ 286.315834][T17387] team_slave_1: entered allmulticast mode [ 286.332212][T17387] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 286.341777][T17380] team0: left allmulticast mode [ 286.346717][T17380] team_slave_0: left allmulticast mode [ 286.352434][T17380] team_slave_1: left allmulticast mode [ 286.358188][T17380] team0: left promiscuous mode [ 286.363441][T17380] team_slave_0: left promiscuous mode [ 286.368875][T17380] team_slave_1: left promiscuous mode [ 286.621512][T17417] Invalid ELF header magic: != ELF [ 287.170887][T17432] wireguard1: entered promiscuous mode [ 287.176449][T17432] wireguard1: entered allmulticast mode [ 287.366150][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 287.366214][ T29] audit: type=1326 audit(2000000355.703:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17444 comm="syz.6.5063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f965b7ecda9 code=0x0 [ 287.400536][ T29] audit: type=1326 audit(2000000355.740:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.429364][ T29] audit: type=1326 audit(2000000355.740:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.453140][ T29] audit: type=1326 audit(2000000355.740:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.476987][ T29] audit: type=1326 audit(2000000355.740:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.500668][ T29] audit: type=1326 audit(2000000355.740:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.524507][ T29] audit: type=1326 audit(2000000355.740:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.548219][ T29] audit: type=1326 audit(2000000355.740:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.572042][ T29] audit: type=1326 audit(2000000355.740:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.595658][ T29] audit: type=1326 audit(2000000355.740:17347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17446 comm="syz.8.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccd33bcda9 code=0x7ffc0000 [ 287.657391][T17463] FAULT_INJECTION: forcing a failure. [ 287.657391][T17463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.670660][T17463] CPU: 0 UID: 0 PID: 17463 Comm: syz.4.5069 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 287.670691][T17463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 287.670707][T17463] Call Trace: [ 287.670715][T17463] [ 287.670723][T17463] dump_stack_lvl+0xf2/0x150 [ 287.670756][T17463] dump_stack+0x15/0x1a [ 287.670849][T17463] should_fail_ex+0x24a/0x260 [ 287.670890][T17463] should_fail+0xb/0x10 [ 287.670988][T17463] should_fail_usercopy+0x1a/0x20 [ 287.671008][T17463] _copy_from_user+0x1c/0xa0 [ 287.671030][T17463] copy_msghdr_from_user+0x54/0x2a0 [ 287.671050][T17463] ? __fget_files+0x17c/0x1c0 [ 287.671093][T17463] __sys_sendmsg+0x13e/0x230 [ 287.671192][T17463] __x64_sys_sendmsg+0x46/0x50 [ 287.671221][T17463] x64_sys_call+0x2734/0x2dc0 [ 287.671321][T17463] do_syscall_64+0xc9/0x1c0 [ 287.671344][T17463] ? clear_bhb_loop+0x55/0xb0 [ 287.671371][T17463] ? clear_bhb_loop+0x55/0xb0 [ 287.671401][T17463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.671495][T17463] RIP: 0033:0x7f1c8c1ecda9 [ 287.671510][T17463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.671528][T17463] RSP: 002b:00007f1c8a851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.671547][T17463] RAX: ffffffffffffffda RBX: 00007f1c8c405fa0 RCX: 00007f1c8c1ecda9 [ 287.671562][T17463] RDX: 0000000000000000 RSI: 0000000020001980 RDI: 0000000000000003 [ 287.671577][T17463] RBP: 00007f1c8a851090 R08: 0000000000000000 R09: 0000000000000000 [ 287.671592][T17463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.671607][T17463] R13: 0000000000000000 R14: 00007f1c8c405fa0 R15: 00007fff223a3b68 [ 287.671666][T17463] [ 287.689068][T17467] 0猉功D: renamed from 31猉功D (while UP) [ 287.865488][T17467] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 288.144913][T17494] lo speed is unknown, defaulting to 1000 [ 288.151341][T17494] ip6gretap0 speed is unknown, defaulting to 1000 [ 288.158548][T17494] lo speed is unknown, defaulting to 1000 [ 288.214380][T17494] vcan0 speed is unknown, defaulting to 1000 [ 288.264666][T17494] lo speed is unknown, defaulting to 1000 [ 288.760146][T17507] qrtr: Invalid version 192 [ 288.946189][T17480] Set syz1 is full, maxelem 65536 reached [ 289.667517][T17517] wireguard1: entered promiscuous mode [ 289.673066][T17517] wireguard1: entered allmulticast mode [ 289.685866][T17522] 0猉功D: renamed from 31猉功D (while UP) [ 289.693943][T17522] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 289.729678][T17525] batadv_slave_1: default FDB implementation only supports local addresses [ 289.818771][T17528] xt_bpf: check failed: parse error [ 289.894285][T17529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.994777][T17529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.082736][T17529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.135436][T17529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.229892][T17550] SELinux: syz.7.5099 (17550) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 290.252730][T17550] xt_hashlimit: max too large, truncated to 1048576 [ 290.301100][T17529] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.315368][T17529] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.328239][T17529] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.339702][T17529] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.616381][T17560] lo speed is unknown, defaulting to 1000 [ 290.622746][T17560] ip6gretap0 speed is unknown, defaulting to 1000 [ 290.629700][T17560] lo speed is unknown, defaulting to 1000 [ 290.663111][T17560] vcan0 speed is unknown, defaulting to 1000 [ 290.702575][T17560] lo speed is unknown, defaulting to 1000 [ 290.948746][T17577] FAULT_INJECTION: forcing a failure. [ 290.948746][T17577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.961991][T17577] CPU: 0 UID: 0 PID: 17577 Comm: syz.6.5109 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 290.962018][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 290.962033][T17577] Call Trace: [ 290.962040][T17577] [ 290.962049][T17577] dump_stack_lvl+0xf2/0x150 [ 290.962090][T17577] dump_stack+0x15/0x1a [ 290.962117][T17577] should_fail_ex+0x24a/0x260 [ 290.962153][T17577] should_fail+0xb/0x10 [ 290.962187][T17577] should_fail_usercopy+0x1a/0x20 [ 290.962282][T17577] _copy_from_user+0x1c/0xa0 [ 290.962308][T17577] core_sys_select+0x1c3/0x530 [ 290.962356][T17577] __se_sys_select+0x1c7/0x210 [ 290.962383][T17577] __x64_sys_select+0x67/0x80 [ 290.962412][T17577] x64_sys_call+0x2b3a/0x2dc0 [ 290.962447][T17577] do_syscall_64+0xc9/0x1c0 [ 290.962477][T17577] ? clear_bhb_loop+0x55/0xb0 [ 290.962507][T17577] ? clear_bhb_loop+0x55/0xb0 [ 290.962537][T17577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.962617][T17577] RIP: 0033:0x7f965b7ecda9 [ 290.962635][T17577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.962656][T17577] RSP: 002b:00007f9659e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 290.962676][T17577] RAX: ffffffffffffffda RBX: 00007f965ba05fa0 RCX: 00007f965b7ecda9 [ 290.962691][T17577] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000040 [ 290.962706][T17577] RBP: 00007f9659e57090 R08: 0000000000000000 R09: 0000000000000000 [ 290.962752][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.962765][T17577] R13: 0000000000000000 R14: 00007f965ba05fa0 R15: 00007ffd846f0738 [ 290.962787][T17577] [ 291.256362][T17596] SELinux: syz.6.5117 (17596) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 291.278932][T17597] __nla_validate_parse: 6 callbacks suppressed [ 291.278948][T17597] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5118'. [ 291.297386][T17596] xt_hashlimit: max too large, truncated to 1048576 [ 291.297580][T17597] 0猉功D: renamed from gretap0 (while UP) [ 291.304845][T17596] Cannot find set identified by id 0 to match [ 291.318273][T17597] 0猉功D: entered allmulticast mode [ 291.324231][T17597] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 291.601766][T17605] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 292.146521][T17639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17639 comm=syz.1.5132 [ 292.162663][T17644] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5133'. [ 292.177367][T17644] 0猉功D: renamed from 31猉功D (while UP) [ 292.186140][T17644] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 292.257901][T17655] Cannot find add_set index 0 as target [ 292.263840][T17656] Cannot find add_set index 0 as target [ 292.295125][T17661] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5139'. [ 292.304340][T17661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5139'. [ 292.400732][T17670] FAULT_INJECTION: forcing a failure. [ 292.400732][T17670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.414459][T17670] CPU: 0 UID: 0 PID: 17670 Comm: syz.6.5141 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 292.414482][T17670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 292.414494][T17670] Call Trace: [ 292.414500][T17670] [ 292.414507][T17670] dump_stack_lvl+0xf2/0x150 [ 292.414532][T17670] dump_stack+0x15/0x1a [ 292.414553][T17670] should_fail_ex+0x24a/0x260 [ 292.414653][T17670] should_fail+0xb/0x10 [ 292.414678][T17670] should_fail_usercopy+0x1a/0x20 [ 292.414714][T17670] _copy_to_user+0x20/0xa0 [ 292.414735][T17670] store_msg+0x4e/0xf0 [ 292.414764][T17670] do_mq_timedreceive+0x5a8/0x6d0 [ 292.414842][T17670] __x64_sys_mq_timedreceive+0xca/0x150 [ 292.414865][T17670] x64_sys_call+0x18f1/0x2dc0 [ 292.414888][T17670] do_syscall_64+0xc9/0x1c0 [ 292.414910][T17670] ? clear_bhb_loop+0x55/0xb0 [ 292.414934][T17670] ? clear_bhb_loop+0x55/0xb0 [ 292.414974][T17670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.414997][T17670] RIP: 0033:0x7f965b7ecda9 [ 292.415011][T17670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.415026][T17670] RSP: 002b:00007f9659e36038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 292.415043][T17670] RAX: ffffffffffffffda RBX: 00007f965ba06080 RCX: 00007f965b7ecda9 [ 292.415087][T17670] RDX: 00000000000000d7 RSI: 0000000020000440 RDI: 0000000000000004 [ 292.415100][T17670] RBP: 00007f9659e36090 R08: 0000000000000000 R09: 0000000000000000 [ 292.415112][T17670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.415123][T17670] R13: 0000000000000001 R14: 00007f965ba06080 R15: 00007ffd846f0738 [ 292.415141][T17670] [ 292.668698][T17677] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5146'. [ 292.679777][T17677] 1猉功D: renamed from 30猉功D (while UP) [ 292.701664][T17677] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 292.737111][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 292.737132][ T29] audit: type=1326 audit(2000000360.717:17767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17683 comm="syz.4.5149" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8c1ecda9 code=0x0 [ 292.788579][ T29] audit: type=1326 audit(2000000360.773:17768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.7.5152" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4722cda9 code=0x0 [ 292.871633][ T29] audit: type=1326 audit(2000000360.857:17769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 292.900081][ T29] audit: type=1326 audit(2000000360.857:17770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 292.923884][ T29] audit: type=1326 audit(2000000360.857:17771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 292.947656][ T29] audit: type=1326 audit(2000000360.857:17772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 292.971397][ T29] audit: type=1326 audit(2000000360.857:17773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 292.995295][ T29] audit: type=1326 audit(2000000360.857:17774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 293.019295][ T29] audit: type=1326 audit(2000000360.857:17775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 293.043017][ T29] audit: type=1326 audit(2000000360.857:17776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.1.5157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 293.068059][T17711] FAULT_INJECTION: forcing a failure. [ 293.068059][T17711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.081248][T17711] CPU: 1 UID: 0 PID: 17711 Comm: syz.1.5160 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 293.081279][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 293.081299][T17711] Call Trace: [ 293.081308][T17711] [ 293.081317][T17711] dump_stack_lvl+0xf2/0x150 [ 293.081353][T17711] dump_stack+0x15/0x1a [ 293.081380][T17711] should_fail_ex+0x24a/0x260 [ 293.081416][T17711] should_fail+0xb/0x10 [ 293.081453][T17711] should_fail_usercopy+0x1a/0x20 [ 293.081476][T17711] _copy_from_user+0x1c/0xa0 [ 293.081500][T17711] __sys_bpf+0x14e/0x7a0 [ 293.081542][T17711] __x64_sys_bpf+0x43/0x50 [ 293.081570][T17711] x64_sys_call+0x2914/0x2dc0 [ 293.081631][T17711] do_syscall_64+0xc9/0x1c0 [ 293.081721][T17711] ? clear_bhb_loop+0x55/0xb0 [ 293.081755][T17711] ? clear_bhb_loop+0x55/0xb0 [ 293.081846][T17711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.081874][T17711] RIP: 0033:0x7f2aea81cda9 [ 293.081935][T17711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.081953][T17711] RSP: 002b:00007f2ae8e81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 293.081976][T17711] RAX: ffffffffffffffda RBX: 00007f2aeaa35fa0 RCX: 00007f2aea81cda9 [ 293.082032][T17711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 293.082044][T17711] RBP: 00007f2ae8e81090 R08: 0000000000000000 R09: 0000000000000000 [ 293.082079][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.082090][T17711] R13: 0000000000000000 R14: 00007f2aeaa35fa0 R15: 00007ffcbce1bec8 [ 293.082112][T17711] [ 293.293002][T17718] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5163'. [ 293.304487][T17718] 0猉功D: renamed from 31猉功D (while UP) [ 293.312440][T17718] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 293.468414][T17738] wireguard0: entered promiscuous mode [ 293.473921][T17738] wireguard0: entered allmulticast mode [ 293.508457][T17747] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5177'. [ 293.518274][T17747] 1猉功D: renamed from 30猉功D (while UP) [ 293.526522][T17747] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 293.585050][T17757] SELinux: syz.1.5181 (17757) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 293.604442][T17757] xt_hashlimit: max too large, truncated to 1048576 [ 293.702057][T17771] 9pnet: p9_errstr2errno: server reported unknown error [ 293.741625][T17775] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 293.774404][T17775] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.791046][T17782] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5191'. [ 293.804826][T17779] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5193'. [ 293.819777][T17782] 1猉功D: renamed from 30猉功D (while UP) [ 293.840209][T17782] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 294.270694][T17822] batadv_slave_1: default FDB implementation only supports local addresses [ 294.410492][T17819] lo speed is unknown, defaulting to 1000 [ 294.416765][T17819] ip6gretap0 speed is unknown, defaulting to 1000 [ 294.426161][T17819] lo speed is unknown, defaulting to 1000 [ 294.486477][T17819] vcan0 speed is unknown, defaulting to 1000 [ 294.574203][T17819] lo speed is unknown, defaulting to 1000 [ 294.809060][T17827] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.856691][T17825] Falling back ldisc for ttyS3. [ 294.933394][T17845] lo speed is unknown, defaulting to 1000 [ 294.939726][T17845] ip6gretap0 speed is unknown, defaulting to 1000 [ 294.947144][T17845] lo speed is unknown, defaulting to 1000 [ 294.980092][T17845] vcan0 speed is unknown, defaulting to 1000 [ 295.017149][T17845] lo speed is unknown, defaulting to 1000 [ 295.130540][T17858] wireguard0: entered promiscuous mode [ 295.136182][T17858] wireguard0: entered allmulticast mode [ 295.281398][T17874] wg2: entered promiscuous mode [ 295.287031][T17874] wg2: entered allmulticast mode [ 295.527846][T17890] SELinux: failed to load policy [ 295.749558][T17895] SELinux: syz.7.5231 (17895) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.775340][T17897] SELinux: syz.1.5232 (17897) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.932450][T17913] SELinux: failed to load policy [ 296.112974][T17920] xt_bpf: check failed: parse error [ 296.160930][T17922] pimreg: entered allmulticast mode [ 296.168357][T17922] pimreg: left allmulticast mode [ 296.181032][T17923] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.250046][T17923] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.314546][T17923] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.365029][T17923] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.549423][T17923] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.615156][T17923] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.673783][T17931] SELinux: syz.4.5244 (17931) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 296.693686][T17923] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.712194][T17923] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.735075][T17907] FAULT_INJECTION: forcing a failure. [ 296.735075][T17907] name fail_futex, interval 1, probability 0, space 0, times 1 [ 296.747972][T17907] CPU: 0 UID: 0 PID: 17907 Comm: syz.7.5237 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 296.747997][T17907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 296.748064][T17907] Call Trace: [ 296.748076][T17907] [ 296.748085][T17907] dump_stack_lvl+0xf2/0x150 [ 296.748144][T17907] dump_stack+0x15/0x1a [ 296.748171][T17907] should_fail_ex+0x24a/0x260 [ 296.748290][T17907] should_fail+0xb/0x10 [ 296.748322][T17907] get_futex_key+0x109/0x740 [ 296.748383][T17907] futex_wake+0x7d/0x330 [ 296.748422][T17907] do_futex+0x2ab/0x370 [ 296.748454][T17907] mm_release+0xb7/0x1e0 [ 296.748568][T17907] exit_mm_release+0x25/0x30 [ 296.748596][T17907] exit_mm+0x38/0x190 [ 296.748720][T17907] do_exit+0x559/0x17f0 [ 296.748752][T17907] do_group_exit+0x102/0x150 [ 296.748786][T17907] ? get_signal+0xeb1/0x1000 [ 296.748806][T17907] get_signal+0xeb9/0x1000 [ 296.748903][T17907] arch_do_signal_or_restart+0x95/0x4b0 [ 296.748939][T17907] syscall_exit_to_user_mode+0x62/0x120 [ 296.749013][T17907] do_syscall_64+0xd6/0x1c0 [ 296.749037][T17907] ? clear_bhb_loop+0x55/0xb0 [ 296.749064][T17907] ? clear_bhb_loop+0x55/0xb0 [ 296.749095][T17907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.749145][T17907] RIP: 0033:0x7f4a4722cda9 [ 296.749164][T17907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.749187][T17907] RSP: 002b:00007f4a45897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 296.749208][T17907] RAX: fffffffffffffe00 RBX: 00007f4a47445fa0 RCX: 00007f4a4722cda9 [ 296.749223][T17907] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000004 [ 296.749238][T17907] RBP: 00007f4a45897090 R08: 000000000000fffd R09: 0000000000000000 [ 296.749250][T17907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.749329][T17907] R13: 0000000000000000 R14: 00007f4a47445fa0 R15: 00007fffb7dcfe68 [ 296.749359][T17907] [ 297.246830][T17951] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5254'. [ 297.260095][T17951] 0猉功D: renamed from 31猉功D (while UP) [ 297.282891][T17951] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 297.429133][T17981] Invalid ELF header magic: != ELF [ 297.488077][T17981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5266'. [ 297.512533][T17991] vlan2: entered allmulticast mode [ 297.518974][T17991] : entered allmulticast mode [ 297.523876][T17991] bond_slave_0: entered allmulticast mode [ 297.529854][T17991] bond_slave_1: entered allmulticast mode [ 297.540327][T17991] : left allmulticast mode [ 297.544881][T17991] bond_slave_0: left allmulticast mode [ 297.550587][T17991] bond_slave_1: left allmulticast mode [ 297.564384][T17994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.573085][T17994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.166242][T18018] Invalid ELF header magic: != ELF [ 298.203024][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5280'. [ 298.241946][T18020] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.249433][ T3379] IPVS: starting estimator thread 0... [ 298.301911][T18031] hsr_slave_0: left promiscuous mode [ 298.307788][T18020] netlink: 'syz.7.5281': attribute type 1 has an invalid length. [ 298.320017][T18033] SELinux: failed to load policy [ 298.351757][T18026] IPVS: using max 1968 ests per chain, 98400 per kthread [ 298.357504][T18020] bond0: entered promiscuous mode [ 298.378157][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 298.378205][ T29] audit: type=1400 audit(2000000366.002:18326): avc: denied { map } for pid=18019 comm="syz.7.5281" path="/dev/vcsu" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 298.564407][ T29] audit: type=1326 audit(2000000366.180:18327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18052 comm="syz.7.5293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4722cda9 code=0x0 [ 298.634165][T18066] SELinux: failed to load policy [ 298.635955][ T29] audit: type=1400 audit(2000000366.245:18328): avc: denied { mounton } for pid=18065 comm="syz.1.5299" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 298.710988][T18074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5302'. [ 298.757060][T18074] lo speed is unknown, defaulting to 1000 [ 298.766957][T18074] ip6gretap0 speed is unknown, defaulting to 1000 [ 298.778216][T18074] lo speed is unknown, defaulting to 1000 [ 298.838189][T18074] vcan0 speed is unknown, defaulting to 1000 [ 298.878451][T18074] lo speed is unknown, defaulting to 1000 [ 298.913289][T18085] x_tables: duplicate underflow at hook 2 [ 298.938395][T18089] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5308'. [ 298.947595][T18089] 0猉功D: renamed from 31猉功D (while UP) [ 298.959030][T18089] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 299.132251][T18097] pimreg: entered allmulticast mode [ 299.152467][T18097] pimreg: left allmulticast mode [ 299.188883][ T29] audit: type=1326 audit(2000000366.703:18329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.212959][ T29] audit: type=1326 audit(2000000366.703:18330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.236669][ T29] audit: type=1326 audit(2000000366.703:18331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.260493][ T29] audit: type=1326 audit(2000000366.703:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.284282][ T29] audit: type=1326 audit(2000000366.703:18333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.307890][ T29] audit: type=1326 audit(2000000366.703:18334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 299.331449][ T29] audit: type=1326 audit(2000000366.703:18335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18096 comm="syz.1.5311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 300.182578][T18112] SELinux: syz.7.5316 (18112) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 300.288044][T18114] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5317'. [ 300.336614][T18114] 0猉功: renamed from caif0 [ 300.359410][T18114] 0猉功: entered allmulticast mode [ 300.364954][T18114] A link change request failed with some changes committed already. Interface 60猉功 may have been left with an inconsistent configuration, please check. [ 300.443880][T18123] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 300.676626][T18150] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.729853][T18150] netlink: 'syz.1.5333': attribute type 1 has an invalid length. [ 300.744119][T18150] bond1: entered promiscuous mode [ 301.771891][ T1031] IPVS: starting estimator thread 0... [ 301.779187][T18188] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.836966][T18188] netlink: 'syz.4.5347': attribute type 1 has an invalid length. [ 301.851475][T18188] bond1: entered promiscuous mode [ 301.879863][T18195] IPVS: using max 2256 ests per chain, 112800 per kthread [ 301.911883][T18205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5352'. [ 301.915330][T18206] SELinux: syz.4.5351 (18206) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 302.047940][T18221] SELinux: policydb version -2061882145 does not match my version range 15-34 [ 302.058512][T18221] SELinux: failed to load policy [ 302.354412][T18235] SELinux: policydb version -2061882145 does not match my version range 15-34 [ 302.363941][T18235] SELinux: failed to load policy [ 302.389816][T18240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5364'. [ 302.813344][T18280] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5379'. [ 302.908607][T18290] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 303.089415][T18304] lo speed is unknown, defaulting to 1000 [ 303.095765][T18304] ip6gretap0 speed is unknown, defaulting to 1000 [ 303.102602][T18304] lo speed is unknown, defaulting to 1000 [ 303.141003][T18304] vcan0 speed is unknown, defaulting to 1000 [ 303.173462][T18304] lo speed is unknown, defaulting to 1000 [ 303.262091][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.270351][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.277739][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.285745][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.293252][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.300790][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.308907][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.316341][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.323800][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.331234][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.339338][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.346827][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.354225][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.361651][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.369843][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.377315][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.384706][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.392215][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.400238][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.407826][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.415276][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.422688][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.430803][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.438384][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.445838][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.453333][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.460804][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.468940][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.476585][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.484124][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 303.500488][ T3375] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 303.738489][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 303.738503][ T29] audit: type=1326 audit(2000000371.016:18644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a47223d67 code=0x7ffc0000 [ 303.769719][ T29] audit: type=1326 audit(2000000371.016:18645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a471c8fa9 code=0x7ffc0000 [ 303.793967][ T29] audit: type=1326 audit(2000000371.016:18646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4a4722cda9 code=0x7ffc0000 [ 303.817856][ T29] audit: type=1326 audit(2000000371.053:18647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a47223d67 code=0x7ffc0000 [ 303.842147][ T29] audit: type=1326 audit(2000000371.053:18648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a471c8fa9 code=0x7ffc0000 [ 303.865690][ T29] audit: type=1326 audit(2000000371.053:18649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4a4722cda9 code=0x7ffc0000 [ 303.890199][ T29] audit: type=1326 audit(2000000371.053:18650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a47223d67 code=0x7ffc0000 [ 303.913994][ T29] audit: type=1326 audit(2000000371.053:18651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4a471c8fa9 code=0x7ffc0000 [ 303.938527][ T29] audit: type=1326 audit(2000000371.053:18652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f4a4722cda9 code=0x7ffc0000 [ 303.962325][ T29] audit: type=1326 audit(2000000371.053:18653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18310 comm="syz.7.5402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4a47223d67 code=0x7ffc0000 [ 304.136393][T18355] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5410'. [ 304.243755][T18358] lo speed is unknown, defaulting to 1000 [ 304.249965][T18358] ip6gretap0 speed is unknown, defaulting to 1000 [ 304.256883][T18358] lo speed is unknown, defaulting to 1000 [ 304.284681][T18360] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 304.289687][T18358] vcan0 speed is unknown, defaulting to 1000 [ 304.332477][T18358] lo speed is unknown, defaulting to 1000 [ 304.438448][T18364] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5413'. [ 304.510486][T18366] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5412'. [ 304.599082][T18366] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5412'. [ 304.653604][T18366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.714269][T18366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.793576][T18366] bond0 (unregistering): Released all slaves [ 304.832048][T18385] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5419'. [ 304.841740][T18385] 1猉功D: renamed from 30猉功D (while UP) [ 304.850071][T18385] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 304.986271][T18396] macvlan0: entered allmulticast mode [ 304.991898][T18396] veth1_vlan: entered allmulticast mode [ 304.998064][T18396] macvlan0: left allmulticast mode [ 305.003341][T18396] veth1_vlan: left allmulticast mode [ 305.831246][T18417] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5432'. [ 305.840429][T18417] 1猉功D: renamed from 30猉功D (while UP) [ 305.848332][T18417] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 305.915011][T18424] Invalid ELF header magic: != ELF [ 305.963498][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5435'. [ 305.994703][T18435] SELinux: syz.7.5438 (18435) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 306.128228][T18451] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5444'. [ 306.137537][T18451] 0猉功D: renamed from 31猉功D (while UP) [ 306.144818][T18451] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 306.475356][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5449'. [ 306.596969][T18481] 1猉功D: renamed from 30猉功D (while UP) [ 306.604568][T18481] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 306.937849][T18510] lo speed is unknown, defaulting to 1000 [ 306.944211][T18510] ip6gretap0 speed is unknown, defaulting to 1000 [ 306.951221][T18510] lo speed is unknown, defaulting to 1000 [ 307.018062][T18510] vcan0 speed is unknown, defaulting to 1000 [ 307.104111][T18510] lo speed is unknown, defaulting to 1000 [ 307.208809][T18534] lo speed is unknown, defaulting to 1000 [ 307.215077][T18534] ip6gretap0 speed is unknown, defaulting to 1000 [ 307.221963][T18534] lo speed is unknown, defaulting to 1000 [ 307.277442][T18534] vcan0 speed is unknown, defaulting to 1000 [ 307.432473][T18534] lo speed is unknown, defaulting to 1000 [ 307.482253][T18553] xt_hashlimit: size too large, truncated to 1048576 [ 307.863442][T18572] random: crng reseeded on system resumption [ 308.265682][T18584] lo speed is unknown, defaulting to 1000 [ 308.272025][T18584] ip6gretap0 speed is unknown, defaulting to 1000 [ 308.286211][T18584] lo speed is unknown, defaulting to 1000 [ 308.314203][T18616] __nla_validate_parse: 2 callbacks suppressed [ 308.314220][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5507'. [ 308.378024][T18584] vcan0 speed is unknown, defaulting to 1000 [ 308.423121][T18584] lo speed is unknown, defaulting to 1000 [ 308.496806][T18584] chnl_net:caif_netlink_parms(): no params data found [ 308.545229][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.552450][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.559771][T18584] bridge_slave_0: entered allmulticast mode [ 308.566458][T18584] bridge_slave_0: entered promiscuous mode [ 308.573845][T18584] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.580890][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.588227][T18584] bridge_slave_1: entered allmulticast mode [ 308.594717][T18584] bridge_slave_1: entered promiscuous mode [ 308.616126][T18584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.627187][T18584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.652164][T18584] team0: Port device team_slave_0 added [ 308.660767][T18584] team0: Port device team_slave_1 added [ 308.683599][T18584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.690715][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.716677][T18584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.734807][T18584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.741854][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.767900][T18584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.799571][T18584] hsr_slave_0: entered promiscuous mode [ 308.805993][T18584] hsr_slave_1: entered promiscuous mode [ 308.812225][T18584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.820019][T18584] Cannot create hsr debugfs directory [ 308.886628][T18584] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.938685][T18584] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.993755][T18584] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.045055][T18584] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.100068][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 309.100087][ T29] audit: type=1326 audit(2000000376.039:18937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.131501][ T29] audit: type=1326 audit(2000000376.039:18938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.155305][ T29] audit: type=1326 audit(2000000376.039:18939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.179182][ T29] audit: type=1326 audit(2000000376.039:18940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.203035][ T29] audit: type=1326 audit(2000000376.039:18941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.226970][ T29] audit: type=1326 audit(2000000376.039:18942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.250622][ T29] audit: type=1326 audit(2000000376.039:18943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.274227][ T29] audit: type=1326 audit(2000000376.039:18944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.298172][ T29] audit: type=1326 audit(2000000376.039:18945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.321860][ T29] audit: type=1326 audit(2000000376.039:18946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18653 comm="syz.1.5518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aea81cda9 code=0x7ffc0000 [ 309.421272][T18584] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 309.436614][ T1031] hid-generic 0002:00EF:0001.0008: ignoring exceeding usage max [ 309.440541][T18584] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 309.450223][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x4 [ 309.458421][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x4 [ 309.466020][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x5 [ 309.474025][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x6 [ 309.482620][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x0 [ 309.490039][ T1031] hid-generic 0002:00EF:0001.0008: unknown main item tag 0x0 [ 309.497529][ T1031] hid-generic 0002:00EF:0001.0008: item fetching failed at offset 83/161 [ 309.506946][ T1031] hid-generic 0002:00EF:0001.0008: probe with driver hid-generic failed with error -22 [ 309.530628][T18671] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.545137][T18584] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 309.554615][T18584] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 309.565842][T18676] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 309.566595][T18672] IPVS: stopping master sync thread 18676 ... [ 309.602122][T18671] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.650000][T18584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.668177][T18671] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.696883][T18584] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.709212][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.716425][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.742775][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.749906][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.776172][T18671] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.860647][T18671] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.880590][T18584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.901418][T18671] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.935087][T18671] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.970620][T18671] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.113443][T18713] ================================================================== [ 310.121571][T18713] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 310.129494][T18713] [ 310.131836][T18713] write to 0xffff88810b7aac90 of 8 bytes by task 18714 on cpu 0: [ 310.139654][T18713] cpu_map_kthread_run+0x4a1/0x11e0 [ 310.145045][T18713] kthread+0x4ae/0x520 [ 310.149146][T18713] ret_from_fork+0x4b/0x60 [ 310.153594][T18713] ret_from_fork_asm+0x1a/0x30 [ 310.158390][T18713] [ 310.160724][T18713] read to 0xffff88810b7aac90 of 8 bytes by task 18713 on cpu 1: [ 310.168373][T18713] bq_flush_to_queue+0x125/0x360 [ 310.173351][T18713] __cpu_map_flush+0x38/0x80 [ 310.178004][T18713] xdp_do_flush+0x101/0x170 [ 310.182539][T18713] bpf_test_run_xdp_live+0xc8d/0x1040 [ 310.187946][T18713] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 310.193268][T18713] bpf_prog_test_run+0x20f/0x3a0 [ 310.198236][T18713] __sys_bpf+0x400/0x7a0 [ 310.202507][T18713] __x64_sys_bpf+0x43/0x50 [ 310.206949][T18713] x64_sys_call+0x2914/0x2dc0 [ 310.211644][T18713] do_syscall_64+0xc9/0x1c0 [ 310.216166][T18713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.222095][T18713] [ 310.224441][T18713] value changed: 0xffff88811ca9c070 -> 0x0000000000000000 [ 310.231564][T18713] [ 310.233906][T18713] Reported by Kernel Concurrency Sanitizer on: [ 310.240245][T18713] CPU: 1 UID: 0 PID: 18713 Comm: syz.1.5533 Not tainted 6.14.0-rc1-syzkaller-00020-g0de63bb7d919 #0 [ 310.251028][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 310.261102][T18713] ================================================================== [ 310.285003][T18584] veth0_vlan: entered promiscuous mode [ 310.343358][T18584] veth1_vlan: entered promiscuous mode [ 310.369054][T18584] veth0_macvtap: entered promiscuous mode [ 310.377183][T18584] veth1_macvtap: entered promiscuous mode [ 310.390529][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.401657][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.411682][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.422209][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.432146][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.443347][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.453284][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.463801][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.474728][T18584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.488671][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.499269][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.509751][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.520229][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.530192][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.541221][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.551115][T18584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.561577][T18584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.573643][T18584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.584152][T18584] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.592988][T18584] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.601678][T18584] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.611108][T18584] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0