last executing test programs: 1m43.259931063s ago: executing program 4 (id=216): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES16=r0], 0x0, 0x0, 0xfffffffffffffe19, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x368, 0xd0, 0x0, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r6 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r6, 0x2, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x6, 0x0, 0xe}, 0x0, &(0x7f0000000000)={0x8000003ff, 0x4, 0x0, 0x7, 0x80000, 0x1, 0x7fffffff, 0x3f8}, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x3fe) listen(r7, 0x0) shutdown(r7, 0x0) 1m42.83058708s ago: executing program 4 (id=222): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000900), 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x6b, 0xf, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x200440c0}, 0x400c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0xfe, 0x6, 0x7, 0x0, 0x98ef, 0x402, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_config_ext={0x200, 0xb}, 0x802, 0x42, 0x9, 0x1, 0x3, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES16=r1, @ANYRESDEC=r4, @ANYBLOB="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", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) pause() ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000580)='noblock_validity') io_pgetevents(r2, 0x6, 0x0, &(0x7f0000000440), &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)=0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r4, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', r11, 0x7, 0x1, 0x3dd, 0xfffffbfc, {{0x5, 0x4, 0x3, 0x36, 0x14, 0x68, 0x0, 0xaf, 0x4, 0x0, @rand_addr=0x64010101, @empty}}}}) close_range(r10, 0xffffffffffffffff, 0x0) timer_settime(r8, 0x0, &(0x7f00000008c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f00000006c0)={{0x0, 0x989680}, {r12, r13+60000000}}, &(0x7f0000000700)) socket$nl_generic(0x10, 0x3, 0x10) 1m41.688284757s ago: executing program 4 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0) ioprio_get$pid(0x2, 0x0) unshare(0x2c020400) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semget$private(0x0, 0x1, 0x58c) write$binfmt_script(r3, &(0x7f0000000540), 0x84) mlockall(0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m40.985959318s ago: executing program 4 (id=240): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000008000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) fsync(0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x757, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, 0x0, 0x0, 0x5412, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x201, &(0x7f0000000440)={0x0}) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/keycreate\x00', 0x2, 0x0) copy_file_range(r9, 0x0, r2, &(0x7f0000000280)=0x1, 0x683, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0180000000000000000001000000000000000b00000000"], 0x28}}, 0x44) syz_read_part_table(0x5e6, &(0x7f0000001100)="$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") 1m40.669757842s ago: executing program 4 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f"], 0xfc}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x62200018ba392227, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffbfffe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m39.770661616s ago: executing program 4 (id=250): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002b40)=r5, 0x12) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e3a420af0582ec51d3c745337ad5de7aa45af4bcb1dd09f2a652f15ee9ad12b060ca35cac7ea9e124db5282fb00fddf453a34ffe99540d5f41b6cae45f0b2123e4f7a520459998d524ec44c6f33aa653bb9d68afe4090ceeea70cc72c66c714887a2a0c12a096776e3e5890e92457415acec264b7cdfb4ea63114711acd919a4e9dcb53ccc19568f947c85c48691a823566d6e1ff27b04d3053baf1dfcc33efd7f849204f065ebb7acb336232d7b62e44a77e57c64a3", 0xb6}, {&(0x7f0000000300)="517707a7989bd2c1069f8bab77af3a1252c67f00650fa59bf029a3ebe71c1e0bfcba80813567d41918765a13b84c1068f034e86716aba9d5cda7361799fa7e71fed70fc171e3c7d257e88faead60c4df97436d673ba726fb04ca79e1261b512001a06613c8decfd378db840d0394654e6e213ed6c3461d78f1b6f6fd268e0f2057fe90efd39744894d46775ff99d11d1f5d0c199a09890aab509fe3195cb8789df2c2fa08b1d8b33c53c3515dbfb31fbe9eed18f8975732235165be41675665ad1a02d5537a67b2032de1b5cdee76bc92e9a1f007b405f14f6d6dbe8be74", 0xde}, {&(0x7f0000000100)="12813cdb1cc347591245d18b8d9b5358bf1ff7fd980a3951b47e5a6e3017e74460", 0x21}, {&(0x7f0000000140)="f72d12544ed3c8efe6a260a859eaf2beae58d76a45a41e4c96633a49f2f28905fd5dcfb3e33ced57ed1ba520887cf8e880021895347a8250289dd8190ad2", 0x3e}], 0x4, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe2}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)="d6f9e6d463062a2bb5375abfea2bafedf525d060235b28743373555b76290bc8938b0d3f442b6e770d7bb4559b22207cf520421e85aec1c2d4f94373474c8c7c5b8845ee35bd5999567c35cb640e801ee79f4fcf13a6057f05c1e62781ee121ecea183ed48d87ea239d53d5700de458229c21b8200503c322cf91e6f", 0x7c}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x51, 0xffffffffffffffff, [{0x6, 0xe, "fd7053f2df8454a41938a0ca"}, {0x0, 0x12, "05c40b6297358ca712bd74dc2adfbf0e"}, {0x6, 0x9, "d2d6b7f12af257"}, {0x0, 0x3, "86"}, {0x2, 0x9, "500f3d374e0eda"}, {0x7, 0x11, "2c71614a5f511ff3b01ce4884b97ec"}, {0x5, 0x5, "6c39d1"}]}, @rr={0x7, 0x1f, 0xc0, [@private=0xa010102, @broadcast, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty]}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x9, [{@rand_addr=0x64010100, 0xb}, {@remote, 0x3}, {@loopback, 0x5}, {@loopback, 0xffffffff}, {@empty, 0x80}, {@multicast2, 0x400}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x82, 0x2}, @ssrr={0x89, 0x13, 0x74, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x128}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="17048fca3a403ef59d65115fa51d9ba1347ba829a2e3309267875498bb70701b9aca21d94d11e25e24453698329b75e9501c475275eaeeb746554c1fbbbd9d753cb36d164e8ae2d7733c04328e827821335dfa481f976e488d0db0be06ac87efa41f44e74ec203685b21243e92da5e7309bf5149de62ca99af36ce7b74cf67e5f91ac87f9512d2df", 0x88}, {&(0x7f00000017c0)="510562c3b8ae95a2e5446d5e33203bf5c5", 0x11}, {&(0x7f0000001800)="efdaa3619943b31612b1d4f2dac641164c56c55ad0e65edb05105100172dce652a6e7a94ba626fb4133053653062811c25cb606998c76a947ef2ef961598f27036f615dbdd0a683f108a613995a44d789bc8fbffc66e17b28794d9bb16d0e6525a798545d8fa3cb1771371dd699d4179c1a1e0625b28026dcafe973ea92e7e20493f7dd1162a523ccd2c813caa5da2c943c40f90d2480667da8cbee7fe996250a4096ae056da14f9b1872a325bf9140e969c860f420c76ff91cb58bf171c0197587a3eea92cdafdf30b0a126e715fe1f190f66162e5728ccb60e120cb574d30c870375bd91298fab6722c9ebbba9355dd5d5314284116027dffaa202a182013df05e6a06d06c8671fd3d0837d4f35c2768764dfeb41a919b8f759862f396432a9d5bdb70f4dd13148974ad48667833936a6d17e1c1ff9a81375b87ef071041cc1593ce115baee7be3e51be6b9cd4a47a1618cab430bdc97bffa7c6cd39207212ea8b2e0b9b70599baa05731302f44a9eb3419e4052df49ca98cd0dd3bcb8e36de10c6769c21d6d20b5f0fc874265d8e2c95cf3b5594a6d39f60623bbfe5ac77eff18db8120e0773c2cd2b3540a9fe78926d9f8288762112862a1e2a0a3bc859d259a2c504a824b6c9df7dcb76535b7a3cbd323688d76fd4147b70439e257851abae4314064403986f0fb45aa3f50e9bc5ca44bc7327b1747f1bd6fe9a77846ab9a884348910ef4379b1bfed49123fb22704d58b32667dbcfff0aedc63e817b4ccb88bb354d771ef9f6b099d6f5cdf4b6335cac244e57a8acc3c04228bd35e0198c84369777d4d27a3e956cd8f569d3f97bab35b355c80c1ade7a4784112b9b9455b97a64f8e4d4db2dd39aa1947b37bf68b0e6fff2fa4c5facfb068a41d059750c2ed559a3c2945dfaec323e353ed408384176ff302cb2eb12a587111f34d50fd9de37d1bfc18a7ec35840b9604cd26247fb17a2ef3792fed0058eca25f0f14203ab1fd022c414893cd37e4b3ee536463e06fd88784cef156a343686e5e35601e248a53992dfb3ca6dc8f3af968421c9dfc97404896aa81413afe34344a1a08ec6c785a1a24775c8ce1befcae2bc87dc4720988554070e8502f3db16f193bb549daf37eb80d5470b7fa131d4dc3da1955b319eea8c7543d40809bd4f4ac8da7cbaa9193e4ede0210cf8dacfdd1f393b5efbec7baa9d7fcb274e1980d5bf6a6c357e5b10620dc3a0a58e7b11c776d53030aa2b82f7e897f6350c5368d37d7a5d51a4421dbdc050ed5d359446d027564c3e3230f97593e43ccb881dc3a4e770aea9b0752d1ad18ebf13dd11023e5c4afeb28a393688e883d89268a257adad35ebdee7506b31249d33c04441991bf708ea483a1ec71b06b8fac5649a63b0321521753a56fbfa5e66da50666bb78ebbec61f5dd6fdfe840019a9d19184f20a5e0321e2bb4b95e400a6d4e7c704ede32b2bc767bef00c04b46fd769b1bc9386675aad777371e2089f74ab7ddfab404ba8368628c017c4627d168ec384da142c62575b798d71022bc6fc33d04db4fca03485372105714cba6526f4cd3e765476189e2d3e320659c99d0e97ce73b5293157191711b098d76dfcab391545aeef9df2b91e8bc6d705a69c837613ea9b2c5b2b8ed931c768703285b2d295158202a3e38ef14819bb876c2bb88161245ad1a322708695d1bba89aba32ca6b8455224e805904a4a2078b4c62636a5cc12bb9f51193c76ed574f9ae5fa87f380ace5a6219e69ad259fb903345c889988987dc79d82a8b59c9a5a0ec57d17f4a8d78dbadc0ce9ffe94a7bcc00e7fdc01114be53eddc14a1cf95d3bcd77fe77d9769129ded46e2e72878f12d1183dababe8fdfa78bdad98b374fcea2ff8b5dee0b3669124a1a918cecef9aaa315478457b63371994d2b3725ee91fb6dd3db0fe2b491f89e41c24bffa6a713932f2ef510bc095810fef5e54ed6b85b61d723118baa89a7bcecabb6c6499c18adb5072bda471a8a2c3e8715502ab0647be9718b80d139e6f436a848824b05b74e35968260421354f536987daf10d4645e68de2c63fa32b6c749e6c86b47d7db85d4c58bb11ca0cd8fa18464a65cd18614ccc6b42f934f62919ae6ad0c8fb151ffbc347cd97d77d1cfc6ddcabee2f054ce7711800b74c3d65484c3c693ac9b53b8d8480f505bb05ea05cacf64391fd3545fd97a667278b25b89d9ab0c023ad7084a0b302bbf307519a6c78f1d05ff83f7d60c494f55223001ccbd5013e2234a1d09c9dbb459b2c514feac107eecccc7eabbdbf1916dba93ed09c6e0df2718476fb14a7c2d6e6a27424ca082a09efb3abc8020798a6cc5090c06bab6c59bfb9c0fbd583a0f136ead54ff372d377dd0dfe95c344caafb55b46ec849a01a3c22ddb2a771d42d934cdda1b796ec94ef497bf1d752963c1d6968a6d9364d6b0b5699d016d00aca01923630de060f879041f45d8300edad0600c3ec049c0102a7e6278239843da9ecbbfaa8e1f74187575ffe3d6b28fca925c7f1ab45eb725e47a695c8086f973a5664566f8c40a58984e55350deba2b393a67dffdff96151994b1d4a98a968f46792e180364b650886341c5bcf2d20ec0c8a4e6a6a81074b4acbef2c8446ea5d1e7c2f9cd947572ecae3c320f9a21ce848be77d9121e8abf9c96888d8c2b9ac12a61c1e71b92e78b0750ac51edf98b81386810804992f87bb1980284c405aeb380a3c7c84d6e035ee056a9e9b9b0b3635458c70f76f90c41a17188b114dd489b81e327f49418bcc0f035bd9bae058600f76b2c6c1bdec56d6ff5082bef4b6a3920ca2fa7886279b3ad6811ca75247f8b5629c0e050b9962641151cccfadf5be921ebea397d485f103bdbe2dd619523c3abd8b2b3e13668f7647a2c4e196c34ef0ca5b175514ddc6736b8dec8c55eb35c6dd71c0db0df8d75a06f2ada09d37654d034740da1645d07ad6ad132165f5d9887b6f5721b1df9719837851b1804a9fa6a845b1d31474bc62d3b20bda495c7f5d1e25283209c0deadb65367bf841b16d44f81d1736bf14cd5199ccce8b23d101e8b6867985b642a7afb5c030f2a1fc477440baabedc184c9daaad880e4899aa305a4a4e493226f428115f77a85576bf9ff80aa17fa3700fb0d6eef336ed3f65f772a21f8900326ae3174abb8af56c85de69adf51362308cf5d23a1d02ef7e41006705aef1233ced37267290c9ff9c571c241fe0fd4c28c0e044e14b2903eaa0b9e7c32d7bd174a03d369b70c547fd8fdf779b2cd2d4f00b6ebfb3a49c342d0f6c6a3301e09b6248c1d9f55e036c50b5375913a2aed10d70679c0b5020b17ad47b4dc7234576175878510e2f4ca5939fc634661839290366fe6971b5ccda8ce3b56e99f107ce96d2f409798a0449d096c5c17494b482af5a538309b44679bf54414c1f7fc119710ad186fe36477f3173993ca37bdc5ebbfc9dbcb118f5e138e08d1c2aa242cf50dce95c9d75cc6cee6b82035407d2bea513a264535f11ca23fb3b77759bd3585f79d9196fb7b5e089421c038123c8a778f2efeddc698b23bd700c6f71a28e42f9fba685fa765d6dcaa65b4cd39a85e1692af291c50e2bd535d19c989517508e0042e7f8c00288fd9da2beec670c6ef79d83a3890046612db7fcf6824e5cdabf3bc70abf3272a942d7cf1c0f64ab8808269d1f42e6acb04b651627d35728ae38437181b968db0e26700cf329e15ef7db772b06368ed4489ee1de5d416fa43bafa879ae913e534c90297dbe1075ff05d5850a3e71f5f5dfff7f977437924f92bd5a09615630aa417deefc57988cf98616e9fbe18eaa1fac4d48b9ff0883c52dbbf5d570161e72a94070df88d2de0db6b78bb3a09b5877bf28dc4b89a73b8611a38d52ca05dc12e32cd0f84acd48f8f7c4a5248365d64869f2f097dd747b298f2cd1e3ee4bf0eb83aae834b4080a308ea68f8796540df8bee7080b00959b1cdcbcd5914c42196d639284d5d9974a14bad09dc119d6ebf6ffb863852560fbe01ca16280aafe349b3bcdb39656948761bf1b4c21a934dc35521793e82621be65dec4f56db381d3b0ac4c92713a47b45464d70923b672f491eef8c729f4b6476d307c7ba45191a7542c362eb155e87e32892bbb07396245ca9779af85d7e112568a682e46d433dff95230b4b6f087da3120a02dc1a56ca6515bbc525a3a2ecbd26fad6f625cefadf6c54fdd0efe5510ccfe3112e44ee1cbeb5d2634364e22c3e5cc5d8a7fcd1a256cb19fcf920cfe3be018c10de0d5c3ba228c928122345a3d1a0278cf76bb81ac2dc7ab6689d470e047883b296fa09f54f6dccc8b7540eeba5cffdf7368e433d9ca55ad529a1e549d7dcb81c087f59fa13b27879dc04d4f331d7d0a4a66da899e91e7890a7f98a694c4979594427e8767cfbef93db005d84715a4a906f2a793ab29932cbdef34f9bc344737eff80f88800f85d21e3f19cf6f14e27519f12c86758d8f7c9b86066bc2b664de002f2d61e80871e4231543a43558f1b4f2b5c66bd4ef1d6f38bb953c9caa6eb0f53d89cad09034b746dc8a47a088796411bf7b1e47b477cbc945842b8db3ade6c87598dbc3f685b71e2a505df94c7c96bab1857d45188b8693e246b411d9cb4157c8f1b30ff55c212733c99f4ddead72da6f37067dfba06b9ee8bab153c320ec64a1056591586b0065558268461e038e009985cf11fe374d9c04482eec71048b8324044cab88f331e8dc3149eaaf1158d49a8dc1a29458087fd88d96383ad2123edddcb0c20884d810d7f403d013f17989729e6f72fb7a972df1c81008c5cc2430ad46a59c6a10ab37be74c01688e12cc92c4a28e5f3a20aa7e7c663e419e5703633c8088d7535f301b0f7025bef57c76eab2d61fd23c6258a89b9cb05e4643dd69bfa92a126f6a1575edd43a26b6f642eb8cf6d7b7cdcd73871243e9c155f7297d8227fa026ad4ef5be0bdb88ce30198b2a17402fe02cb4787412ce90727837ade413db37dc823b1c7bd3691aac31e9883c0cd1ac623600e817bba3c06e7ecb347fdbed67d9b7f2c5c9078693c360905ec190b35c6698481f53baa335344f16724f8b41ba7f146b83da270c14b8ce9efb503e29a95d28b2c3f5ca7d39f3701f39ba6e47f42f26e92ab432cab03aa3a198fa5f88de99a3fb61f548d45b584f1ae93a11e3664fb7f60c7ed0726d08a53f9d14d1107fe20773354613023de20ab1a4cecbfb541d7b4fdaf537097151243fe700bd56aa64fe30729a678bc6e374fc19dd228531ac1d03e5805200e0aa9d7b208e2fa5cc4453b4809c489987e9935f5c2e315f7cf15efb06524083537e8a7963b46ea80d3fa348c50c29ce81fd9c3048a88bff48a1c45fc9bc18481782276aed745ff8ba454bcaf6a1b87003895d372711f6ed61e1297ced626f6c2c39d2908abf9e1391dfa5814849f4954a31aa3905e79d54a9e21db6727fb1a3ffb1daf9d7f7ccd06a35f5b85dda9e48d5dffa1667fd034e2f058e4fe69d85184bd7664a8e70b0dc43949ac5c1e575968de12718529e6ff0d149aa0950f46d9ee25ee65fa46ef923e19d9d540a549dccf361843863a1517ca97323f04f768ffdb15f3adf5c32806e8fbc15fb28689b6f444363631dc3c18f5f3f3d1f18669e379fb85d0e6ea84ca570ac434af5ad906ad6acdece187733cc0fecef8b73055c6f1279066c8ba65727431f0c06e2dcb624ad38feb0bd2bccec1d3332a509cc0e75bde9b4faeb661a79131ed75ed983871e3c8bc00e06e816f12fb0f6a319c3f55adb72ed7bffe68", 0x1000}, {&(0x7f0000002800)="eb861ee01a0fb718bbc7a78ad3f3e3a4f2e9b4f44158d537a5b25531d27cd34d696862a854e422677e988edfbd2f4acfc6102343133b8e517c9825264deafb055166667a2315576caa2aaca5a6e28b60b97509ed97c0959fe7175d9e341bc576981b96d1ba792c3316558af3fb0a3930609112e3150b285b2008f8891db0ad9d235e7e619f3b9f1316e7489ba7a849db69540bf5b234ba9f7f4fc6d6d4c9018f33aaf046", 0xa4}], 0x5, &(0x7f0000002940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}}}}, @ip_retopts={{0x100, 0x0, 0x7, {[@cipso={0x86, 0x46, 0x1, [{0x6, 0x11, "d56fe91656dc44bb2effd018905285"}, {0x2, 0x4, "288a"}, {0x6, 0xb, "45631d70b0102466f6"}, {0x2, 0xd, "d71edb5033b7e49fb1ed1c"}, {0x5, 0x2}, {0x0, 0x3, "99"}, {0x0, 0x4, ',6'}, {0x7, 0xa, "0ec0b49d308590c8"}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x7, 0x58, [@rand_addr=0x64010101]}, @rr={0x7, 0x17, 0x29, [@private=0xa010101, @remote, @empty, @multicast1, @empty]}, @cipso={0x86, 0x3e, 0x3, [{0x5, 0xd, "5be071cb8ba4c9b52952b5"}, {0x0, 0x8, "f19d565ea678"}, {0x5, 0x6, "cea6f92a"}, {0x0, 0x3, 'A'}, {0x6, 0xd, "6a89a9192a346723bddfe3"}, {0x2, 0x6, "a5778acc"}, {0x0, 0x5, "185e14"}, {0x6, 0x2}]}, @noop, @rr={0x7, 0x1f, 0xe0, [@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @remote, @local, @remote]}, @lsrr={0x83, 0x23, 0xd4, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @loopback, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}]}}}], 0x138}}], 0x3, 0x40008000) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m39.693390887s ago: executing program 32 (id=250): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002b40)=r5, 0x12) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac1414"], 0x54}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e3a420af0582ec51d3c745337ad5de7aa45af4bcb1dd09f2a652f15ee9ad12b060ca35cac7ea9e124db5282fb00fddf453a34ffe99540d5f41b6cae45f0b2123e4f7a520459998d524ec44c6f33aa653bb9d68afe4090ceeea70cc72c66c714887a2a0c12a096776e3e5890e92457415acec264b7cdfb4ea63114711acd919a4e9dcb53ccc19568f947c85c48691a823566d6e1ff27b04d3053baf1dfcc33efd7f849204f065ebb7acb336232d7b62e44a77e57c64a3", 0xb6}, {&(0x7f0000000300)="517707a7989bd2c1069f8bab77af3a1252c67f00650fa59bf029a3ebe71c1e0bfcba80813567d41918765a13b84c1068f034e86716aba9d5cda7361799fa7e71fed70fc171e3c7d257e88faead60c4df97436d673ba726fb04ca79e1261b512001a06613c8decfd378db840d0394654e6e213ed6c3461d78f1b6f6fd268e0f2057fe90efd39744894d46775ff99d11d1f5d0c199a09890aab509fe3195cb8789df2c2fa08b1d8b33c53c3515dbfb31fbe9eed18f8975732235165be41675665ad1a02d5537a67b2032de1b5cdee76bc92e9a1f007b405f14f6d6dbe8be74", 0xde}, {&(0x7f0000000100)="12813cdb1cc347591245d18b8d9b5358bf1ff7fd980a3951b47e5a6e3017e74460", 0x21}, {&(0x7f0000000140)="f72d12544ed3c8efe6a260a859eaf2beae58d76a45a41e4c96633a49f2f28905fd5dcfb3e33ced57ed1ba520887cf8e880021895347a8250289dd8190ad2", 0x3e}], 0x4, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe2}}], 0x18}}, {{&(0x7f0000000440)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)="d6f9e6d463062a2bb5375abfea2bafedf525d060235b28743373555b76290bc8938b0d3f442b6e770d7bb4559b22207cf520421e85aec1c2d4f94373474c8c7c5b8845ee35bd5999567c35cb640e801ee79f4fcf13a6057f05c1e62781ee121ecea183ed48d87ea239d53d5700de458229c21b8200503c322cf91e6f", 0x7c}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x51, 0xffffffffffffffff, [{0x6, 0xe, "fd7053f2df8454a41938a0ca"}, {0x0, 0x12, "05c40b6297358ca712bd74dc2adfbf0e"}, {0x6, 0x9, "d2d6b7f12af257"}, {0x0, 0x3, "86"}, {0x2, 0x9, "500f3d374e0eda"}, {0x7, 0x11, "2c71614a5f511ff3b01ce4884b97ec"}, {0x5, 0x5, "6c39d1"}]}, @rr={0x7, 0x1f, 0xc0, [@private=0xa010102, @broadcast, @private=0xa010100, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @empty]}, @timestamp_addr={0x44, 0x3c, 0x78, 0x1, 0x9, [{@rand_addr=0x64010100, 0xb}, {@remote, 0x3}, {@loopback, 0x5}, {@loopback, 0xffffffff}, {@empty, 0x80}, {@multicast2, 0x400}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x82, 0x2}, @ssrr={0x89, 0x13, 0x74, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x128}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="17048fca3a403ef59d65115fa51d9ba1347ba829a2e3309267875498bb70701b9aca21d94d11e25e24453698329b75e9501c475275eaeeb746554c1fbbbd9d753cb36d164e8ae2d7733c04328e827821335dfa481f976e488d0db0be06ac87efa41f44e74ec203685b21243e92da5e7309bf5149de62ca99af36ce7b74cf67e5f91ac87f9512d2df", 0x88}, {&(0x7f00000017c0)="510562c3b8ae95a2e5446d5e33203bf5c5", 0x11}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="eb861ee01a0fb718bbc7a78ad3f3e3a4f2e9b4f44158d537a5b25531d27cd34d696862a854e422677e988edfbd2f4acfc6102343133b8e517c9825264deafb055166667a2315576caa2aaca5a6e28b60b97509ed97c0959fe7175d9e341bc576981b96d1ba792c3316558af3fb0a3930609112e3150b285b2008f8891db0ad9d235e7e619f3b9f1316e7489ba7a849db69540bf5b234ba9f7f4fc6d6d4c9018f33aaf046", 0xa4}], 0x5, &(0x7f0000002940)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}}}}, @ip_retopts={{0x100, 0x0, 0x7, {[@cipso={0x86, 0x46, 0x1, [{0x6, 0x11, "d56fe91656dc44bb2effd018905285"}, {0x2, 0x4, "288a"}, {0x6, 0xb, "45631d70b0102466f6"}, {0x2, 0xd, "d71edb5033b7e49fb1ed1c"}, {0x5, 0x2}, {0x0, 0x3, "99"}, {0x0, 0x4, ',6'}, {0x7, 0xa, "0ec0b49d308590c8"}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x7, 0x58, [@rand_addr=0x64010101]}, @rr={0x7, 0x17, 0x29, [@private=0xa010101, @remote, @empty, @multicast1, @empty]}, @cipso={0x86, 0x3e, 0x3, [{0x5, 0xd, "5be071cb8ba4c9b52952b5"}, {0x0, 0x8, "f19d565ea678"}, {0x5, 0x6, "cea6f92a"}, {0x0, 0x3, 'A'}, {0x6, 0xd, "6a89a9192a346723bddfe3"}, {0x2, 0x6, "a5778acc"}, {0x0, 0x5, "185e14"}, {0x6, 0x2}]}, @noop, @rr={0x7, 0x1f, 0xe0, [@dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @multicast1, @remote, @local, @remote]}, @lsrr={0x83, 0x23, 0xd4, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @loopback, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}]}}}], 0x138}}], 0x3, 0x40008000) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m28.335707187s ago: executing program 1 (id=332): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r1, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4, 0x0, 0x4}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000680)={0x0, 0x989680}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x7, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00', r5, 0x0, 0x9}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x0, 0x0, 'lblcr\x00', 0x0, 0xfffffffe, 0x6a}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r7, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10) 1m27.836124484s ago: executing program 1 (id=335): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e21, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='lo\x00'}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) msgget(0x0, 0x2c4) socket$nl_netfilter(0x10, 0x3, 0xc) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}], 0x1) 1m27.649847757s ago: executing program 1 (id=336): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 1m27.564943438s ago: executing program 1 (id=338): r0 = socket(0x10, 0x3, 0x9) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_read_part_table(0x61d, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x64842, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x428701) r4 = fcntl$dupfd(r3, 0x0, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xffffffffffffffff, r5, 0x1, &(0x7f0000000180)="a9521a351b4410a3cb1321d0d045f27ea1dca1b6239d79338b80cd1ad7dc721734a2cdeedd17ac41d5fbcf15e13f48321493ee2baa6ca1173bc909114a10b77723197a0b49e9d65c7d1364a7c57d565ab0d5f4903f57000043c578759bac796fa6db80060b8e0786b0061cd9f10ea3be5e5d56fd1cd20cce754f05bbcca8cd9f6a06992e06af088fb7dacd49c723ccb91c038d33eefb0907de8562d003e1b08f76b5115e70d8dee68f0f997411b0e22873eb4cca2d430000000000") setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000002c0)=0x4000c92b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaad09a80b385188100150008004502001c0000000000029078ac1e0001ffffffff00009078ffffffff"], 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESDEC=r6, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000001080)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x3b, 0x4, 0x3, 0x5, 0xec, 0x64, 0x0, 0x40, 0x2f, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x2c, 0xbf, 0x3, 0x9, [{@broadcast, 0x1000}, {@multicast2, 0x63}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x1}]}, @timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x3, [{@broadcast, 0x6}, {@empty, 0x81}, {@multicast1, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa2}, {@broadcast, 0x7}, {@multicast2, 0x8}, {@loopback, 0x4}]}, @rr={0x7, 0x1b, 0xac, [@broadcast, @multicast1, @private=0xa010101, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @noop, @ra={0x94, 0x4, 0x4}, @generic={0x89, 0xf, "6da73659fc070c62ef701cf974"}, @cipso={0x86, 0x3d, 0x0, [{0x2, 0x9, "4f994cb48409a7"}, {0x6, 0x3, 'M'}, {0x5, 0xf, "e9c622e76764c1d84fd06fecdc"}, {0x2, 0xd, "b1ea12811af5f231156fc2"}, {0x0, 0x2}, {0x6, 0xd, "131adf3879ec86380f2acb"}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m27.281623803s ago: executing program 1 (id=342): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1cd02, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x9}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x5f, 0x30, 0x30, 0x0]}}, &(0x7f0000000340)=""/3, 0x37, 0x3, 0x0, 0x8, 0x10000, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xa048e4, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xc2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 1m26.869719549s ago: executing program 1 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f"], 0xfc}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x62200018ba392227, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffbfffe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m26.865448169s ago: executing program 33 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f"], 0xfc}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x62200018ba392227, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffbfffe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.99159017s ago: executing program 6 (id=1262): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xffffffffa003e45c, 0x700000000000000) lseek(r5, 0x10004e9, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) 3.435471148s ago: executing program 3 (id=1268): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RVERSION(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000040000147f8d6c7d2432bbd10000dd0d010096e4b4417dce719fadbc3cd6755040ffa15caec49287b680a89a3f7f0b3b59a7f9becc1b1ac5cb6ba79977e5935502e16683f74a879045181fc277b0417491e16f144e1dabb6ab3043e09764c059f4b659e48510e8fc662fc9e83d6e30ac6b693ff50c014357bafe7c3748126caf014e3e264753cb4166b96417581adb47b86f67af4c6be4a787a6e4ba6092b9ad"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x5}, @ib={0x1b, 0xffff, 0x0, {"1604000000000000000700000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r4 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, 0x0, 0x103000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000140), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2c, 0xc6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYRES8=r2], 0x7c8) 3.212364251s ago: executing program 2 (id=1271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.114524102s ago: executing program 2 (id=1273): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0xfffffffe}, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000955e5dda4ce40af9fef961145d0c130ce378ce2cad8af775d985"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x8, 0x1, 0x2}) (rerun: 32) 2.925821886s ago: executing program 2 (id=1276): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000600)={[{@nobarrier}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@usrjquota}, {@data_err_ignore}, {@dioread_nolock}, {@nobh}, {@usrjquota}, {@nomblk_io_submit}, {@noquota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) (fail_nth: 5) 2.682605519s ago: executing program 6 (id=1277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r6}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.402282484s ago: executing program 3 (id=1281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd88500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.327173625s ago: executing program 2 (id=1284): r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="6f372de993a5d1b1a897f98999a57592aa9c4be43d478ace6fb5399d402776adbafa323babac9e71b540cab11c8df3d0770216905ba15ba3b030051f6175834b272a60661d137b15fee1e944d48dd816ad92c04135c24a5907ac0cc4561464e5e73a425113eec9e12bee6b78eefeb62c7bf57a32ab5a4ee29855a5c80de4937a2d10a40bc0b37b53559f", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x1}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) 1.94563736s ago: executing program 2 (id=1288): socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r3, 0x0, 0x9}, 0x18) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x5, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3e0, 0x210, 0x210, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'bond_slave_0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "60b8665cae0b08535a7e5ee7e2d94d1209c072fc9d250000370b7ceb7ca8"}}, {{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="9659819f6b4a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'ip6_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @local}}}, {{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'pimreg0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x210}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x430) io_uring_enter(r6, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) 1.919077041s ago: executing program 3 (id=1289): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6fde, &(0x7f00000003c0)={0x0, 0x89a4, 0x4000, 0x0, 0x221}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="8457", 0x2}], 0x1}}], 0x1, 0x4400c800) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x4001) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 1.777942633s ago: executing program 6 (id=1290): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x400}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4041) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00100000000d0100280012800900010076657468"], 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 1.469753318s ago: executing program 6 (id=1291): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000d58e8580f9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_enter(r6, 0x3b13, 0x8188, 0x0, &(0x7f0000000300)={[0x7]}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2e}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80d1}, 0x3400c81c) 1.020276425s ago: executing program 5 (id=1298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) close_range(r1, 0xffffffffffffffff, 0x0) 966.205065ms ago: executing program 3 (id=1299): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x80000000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x1000000, 0x0, 0x0, 0x0) (fail_nth: 1) 882.033376ms ago: executing program 3 (id=1300): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RVERSION(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000040000147f8d6c7d2432bbd10000dd0d010096e4b4417dce719fadbc3cd6755040ffa15caec49287b680a89a3f7f0b3b59a7f9becc1b1ac5cb6ba79977e5935502e16683f74a879045181fc277b0417491e16f144e1dabb6ab3043e09764c059f4b659e48510e8fc662fc9e83d6e30ac6b693ff50c014357bafe7c3748126caf014e3e264753cb4166b96417581adb47b86f67af4c6be4a787a6e4ba6092b9ad"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x5}, @ib={0x1b, 0xffff, 0x0, {"1604000000000000000700000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r4 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, @void, @value}, 0x94) openat$autofs(0xffffffffffffff9c, 0x0, 0x103000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000140), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2c, 0xc6}}, './file0\x00'}) write$binfmt_elf64(r4, &(0x7f0000000480)=ANY=[@ANYRES8=r2], 0x7c8) 881.669046ms ago: executing program 5 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x8070bd25, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x20004804) (fail_nth: 2) 607.16083ms ago: executing program 0 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x80}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 606.58473ms ago: executing program 5 (id=1303): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000600000004010c00080008000c4004480000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 537.287461ms ago: executing program 6 (id=1304): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0100000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 536.804871ms ago: executing program 5 (id=1305): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x5, &(0x7f0000000580)=""/5, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x3, 0xe, 0x1}], 0x10, 0x6, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x2, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='sched_switch\x00', r1, 0x0, 0x5}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xba}, 0x18) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000082db4c7537801bb6f3b40a02734bf42000000000000000000", @ANYRES16=r5, @ANYBLOB="010000000000fedbdf251d00000008000300", @ANYRES32=r6, @ANYBLOB="04002f80"], 0x20}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf251400000008000300", @ANYRES32=r10, @ANYBLOB="08001c00", @ANYRES32=r9, @ANYBLOB="eea9b33d4d3afae54007570e0000000000005434d29e7cbd019baa9052114b5afa89b422ddda1b8d9793807737984b1a1f4f4fd81db51e52bf0b6c13b7635f5c6a47b22d63998d44f4ded2b4a0"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r4) mremap(&(0x7f0000038000/0x4000)=nil, 0x4000, 0x1000, 0x6, &(0x7f0000074000/0x1000)=nil) 502.556812ms ago: executing program 0 (id=1306): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000b80)='./file2\x00', 0x0, &(0x7f0000000500)={[{@noauto_da_alloc}, {@errors_continue}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000040000000000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) 466.476593ms ago: executing program 6 (id=1307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x48942, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180)={'#! ', './file0'}, 0xb) copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xffffffffa003e45c, 0x700000000000000) lseek(r5, 0x10004e9, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffa) 448.605463ms ago: executing program 0 (id=1308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 385.546993ms ago: executing program 0 (id=1309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) msgsnd(0x0, 0x0, 0x401, 0x0) 368.151114ms ago: executing program 5 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000800)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/5, 0x5}], 0x1) ioctl$TCSBRKP(r2, 0x5425, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(r4, 0x5453, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) accept$unix(r6, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x18d811, 0x0) pivot_root(0x0, &(0x7f0000000540)='./file0\x00') mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 329.388295ms ago: executing program 0 (id=1311): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, r0, 0x1, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) (fail_nth: 6) 49.761349ms ago: executing program 2 (id=1312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x54, r1, 0x8a46d7e39a23237f, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) r2 = socket(0x1e, 0x4, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.246119ms ago: executing program 5 (id=1313): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x22, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='rxrpc_rtt_rx\x00', r6}, 0xfffffffffffffd63) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x20, 0x0, 0x800000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)='ext4\x00', 0xfffffffffffffffb) sendmmsg$inet_sctp(r5, &(0x7f0000006ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000bb300000000000000084000000010000008100030015800000060000000080ffff050000000300000001000000", @ANYRES32=0x0], 0x50, 0x10}], 0x1, 0x40c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000006a321449c5894bc6b69ee01f292ef72fe7050386d88c1fef2cabf1706ca753601162c80976b960df86cc4be22a59834e17ca0dde39f4174cff21436f35023c8d42093b61cb2022eca5bf4e924cb443a633", @ANYRES16=r8, @ANYBLOB="020026bd7000fddbdf250900000008000200080000000800020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) 687.63µs ago: executing program 3 (id=1314): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x6fde, &(0x7f00000003c0)={0x0, 0x89a4, 0x4000, 0x0, 0x221}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000001e2454", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25360000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="8457", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r5 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000060000008500000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="5974207601c791fb9d97dc587ee643a15c8ca9cdb8609af73d0e9e7c80ce51688d17857529823689671065bc80844169ca89241769fb8f11ccdd2c7bc957951fdb5a8842e9be0cbefcb3e0082b1d21062cd93d52d7fc213dacff0f628c19c500c32dc43fccd5af2b268efd35b81ca098b30e88f905976cdf446f46ab1c232606562c3b815e0e5b10ff0c021bc1fb62737f488a21ae2ac67163a9a6e94ee28266525430cbb45300f16948b0ca7af454b0824e8d174b4016", 0xb7, 0x20084081, &(0x7f0000000480)={0x11, 0x9, r6, 0x1, 0x8, 0x6, @link_local}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x4001) io_uring_enter(r1, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) 0s ago: executing program 0 (id=1315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc0001241}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x250, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2af}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "09a5522379928a32a1c08a8e8989325a85c5143d7d0c2fd3b9a7715756cefbe1a131f8b85597c269f79271cb34f6ad03950fa01f205229fee98425e686a3f389dade02c4cc2047c7870991250792452d3d9cbc6da6c768927d7e4bfa03ad9edfb9f9a1e68d6fcf97e63c16f1c91c7c713b0c6adb03975208655f3efd6e07bbf90875d30b207dc69bf620bf79ca20ff8c737fb541d8934dfe65c81bf0b18db957395d7d323f19"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffcb4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r4], 0x40}, 0x1, 0xd}, 0x0) kernel console output (not intermixed with test programs): ysadm_t pid=5274 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 72.842609][ T5097] veth0_vlan: entered promiscuous mode [ 72.859578][ T29] audit: type=1326 audit(1742794076.533:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 72.888404][ T29] audit: type=1326 audit(1742794076.533:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 72.911990][ T29] audit: type=1326 audit(1742794076.533:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 72.936541][ T5097] veth1_vlan: entered promiscuous mode [ 72.954461][ T5097] veth0_macvtap: entered promiscuous mode [ 72.955323][ T5284] syz.0.381: attempt to access beyond end of device [ 72.955323][ T5284] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 72.965947][ T5097] veth1_macvtap: entered promiscuous mode [ 72.997732][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.008251][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.018128][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.028577][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.038432][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.048980][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.059004][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.066298][ T5288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.383'. [ 73.069774][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.090839][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.184033][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.194605][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.204409][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.214903][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.224859][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.235318][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.245179][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.255878][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.267013][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.275532][ T5097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.284425][ T5097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.293217][ T5097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.302052][ T5097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442145][ T5296] __nla_validate_parse: 2 callbacks suppressed [ 73.442176][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 73.536848][ T5307] loop2: detected capacity change from 0 to 512 [ 73.626095][ T5307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.638842][ T5307] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.016434][ T5325] loop6: detected capacity change from 0 to 512 [ 74.039175][ T5325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.051772][ T5325] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.118633][ T5329] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.140302][ T5331] netlink: 44 bytes leftover after parsing attributes in process `syz.5.393'. [ 74.149559][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.393'. [ 74.159953][ T5331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.393'. [ 74.229344][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.395383][ T5344] loop3: detected capacity change from 0 to 512 [ 74.403458][ T5344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.424592][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.504338][ T5344] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.750248][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.018045][ T5378] loop3: detected capacity change from 0 to 512 [ 75.095645][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.203188][ T5378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.215941][ T5378] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.416965][ T5384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.701455][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.727774][ T5392] loop6: detected capacity change from 0 to 512 [ 75.900357][ T5392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.913148][ T5392] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.010322][ T5397] loop0: detected capacity change from 0 to 2048 [ 76.106249][ T5401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.413'. [ 76.124943][ T5397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.353084][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.406297][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.541807][ T5419] loop6: detected capacity change from 0 to 128 [ 76.548666][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 76.593487][ T5427] FAULT_INJECTION: forcing a failure. [ 76.593487][ T5427] name failslab, interval 1, probability 0, space 0, times 0 [ 76.606268][ T5427] CPU: 1 UID: 0 PID: 5427 Comm: syz.0.425 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 76.606311][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.606342][ T5427] Call Trace: [ 76.606350][ T5427] [ 76.606359][ T5427] dump_stack_lvl+0xf2/0x150 [ 76.606392][ T5427] dump_stack+0x15/0x1a [ 76.606417][ T5427] should_fail_ex+0x24a/0x260 [ 76.606522][ T5427] ? tty_open+0x80/0xb00 [ 76.606620][ T5427] should_failslab+0x8f/0xb0 [ 76.606657][ T5427] __kmalloc_cache_noprof+0x4e/0x320 [ 76.606687][ T5427] tty_open+0x80/0xb00 [ 76.606722][ T5427] ? __pfx_exact_match+0x10/0x10 [ 76.606767][ T5427] chrdev_open+0x2f9/0x370 [ 76.606798][ T5427] ? __pfx_chrdev_open+0x10/0x10 [ 76.606831][ T5427] do_dentry_open+0x621/0xa20 [ 76.606854][ T5427] vfs_open+0x38/0x1e0 [ 76.606919][ T5427] dentry_open+0x4a/0x90 [ 76.606988][ T5427] ptm_open_peer+0x117/0x180 [ 76.607012][ T5427] tty_ioctl+0x620/0xbe0 [ 76.607164][ T5427] ? __pfx_tty_ioctl+0x10/0x10 [ 76.607196][ T5427] __se_sys_ioctl+0xc9/0x140 [ 76.607292][ T5427] __x64_sys_ioctl+0x43/0x50 [ 76.607320][ T5427] x64_sys_call+0x1690/0x2dc0 [ 76.607351][ T5427] do_syscall_64+0xc9/0x1c0 [ 76.607386][ T5427] ? clear_bhb_loop+0x55/0xb0 [ 76.607458][ T5427] ? clear_bhb_loop+0x55/0xb0 [ 76.607484][ T5427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.607559][ T5427] RIP: 0033:0x7f1d3a89d169 [ 76.607577][ T5427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.607598][ T5427] RSP: 002b:00007f1d38f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.607617][ T5427] RAX: ffffffffffffffda RBX: 00007f1d3aab5fa0 RCX: 00007f1d3a89d169 [ 76.607631][ T5427] RDX: 0000000000000000 RSI: 0000000000005441 RDI: 0000000000000006 [ 76.607674][ T5427] RBP: 00007f1d38f07090 R08: 0000000000000000 R09: 0000000000000000 [ 76.607686][ T5427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.607697][ T5427] R13: 0000000000000000 R14: 00007f1d3aab5fa0 R15: 00007ffced4b1d98 [ 76.607714][ T5427] [ 77.411213][ T5452] netlink: 'syz.3.434': attribute type 29 has an invalid length. [ 77.484873][ T5452] netlink: 'syz.3.434': attribute type 29 has an invalid length. [ 77.511055][ T2999] loop1: p1 < > p4 [ 77.520219][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'. [ 77.534713][ T2999] loop1: p4 size 8388608 extends beyond EOD, truncated [ 77.640360][ T5464] loop3: detected capacity change from 0 to 512 [ 77.698262][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 77.698359][ T29] audit: type=1326 audit(1742794081.543:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.738858][ T29] audit: type=1326 audit(1742794081.573:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.762312][ T29] audit: type=1326 audit(1742794081.573:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.785836][ T29] audit: type=1326 audit(1742794081.573:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.809311][ T29] audit: type=1326 audit(1742794081.573:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.832702][ T29] audit: type=1326 audit(1742794081.573:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.856233][ T29] audit: type=1326 audit(1742794081.573:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.879698][ T29] audit: type=1326 audit(1742794081.573:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.903077][ T29] audit: type=1326 audit(1742794081.573:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 77.926650][ T29] audit: type=1326 audit(1742794081.573:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5474 comm="syz.6.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 78.176369][ T5489] loop5: detected capacity change from 0 to 2048 [ 78.186183][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.449'. [ 78.195329][ T5489] ext4: Unknown parameter 'euid' [ 78.365657][ T5498] syzkaller1: entered promiscuous mode [ 78.371208][ T5498] syzkaller1: entered allmulticast mode [ 78.415948][ T5496] netlink: 44 bytes leftover after parsing attributes in process `syz.5.453'. [ 78.424893][ T5496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.453'. [ 78.516458][ T5502] loop3: detected capacity change from 0 to 512 [ 78.516725][ T5499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.453'. [ 78.653891][ T5508] loop6: detected capacity change from 0 to 128 [ 78.660679][ T5508] EXT4-fs: test_dummy_encryption option not supported [ 80.491715][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.462'. [ 80.948955][ T5537] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 81.135663][ T5543] loop0: detected capacity change from 0 to 512 [ 81.142329][ T5543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.251996][ T5544] loop3: detected capacity change from 0 to 512 [ 81.367903][ T5543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 81.442473][ T5544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.455238][ T5544] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.503017][ T5543] System zones: 1-12 [ 81.536308][ T3376] IPVS: starting estimator thread 0... [ 81.572757][ T5543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.468: bg 0: block 328: padding at end of block bitmap is not set [ 81.596931][ T5543] EXT4-fs (loop0): Remounting filesystem read-only [ 81.628382][ T5543] EXT4-fs (loop0): 1 orphan inode deleted [ 81.651183][ T5543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.664586][ T5551] IPVS: using max 2064 ests per chain, 103200 per kthread [ 81.698140][ T5543] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 81.725299][ T5543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.888210][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.040374][ T5567] netlink: 44 bytes leftover after parsing attributes in process `syz.5.475'. [ 82.049422][ T5567] netlink: 24 bytes leftover after parsing attributes in process `syz.5.475'. [ 82.102774][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 82.118157][ T5569] loop0: detected capacity change from 0 to 512 [ 82.182761][ T5573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.475'. [ 82.253557][ T5569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.266223][ T5569] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.375770][ T5579] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 82.408406][ T5581] FAULT_INJECTION: forcing a failure. [ 82.408406][ T5581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.421674][ T5581] CPU: 1 UID: 0 PID: 5581 Comm: syz.3.478 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 82.421698][ T5581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.421710][ T5581] Call Trace: [ 82.421716][ T5581] [ 82.421723][ T5581] dump_stack_lvl+0xf2/0x150 [ 82.421757][ T5581] dump_stack+0x15/0x1a [ 82.421783][ T5581] should_fail_ex+0x24a/0x260 [ 82.421946][ T5581] should_fail+0xb/0x10 [ 82.421981][ T5581] should_fail_usercopy+0x1a/0x20 [ 82.422047][ T5581] _copy_to_user+0x20/0xa0 [ 82.422067][ T5581] simple_read_from_buffer+0xa0/0x110 [ 82.422095][ T5581] proc_fail_nth_read+0xf9/0x140 [ 82.422127][ T5581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.422157][ T5581] vfs_read+0x19b/0x6f0 [ 82.422185][ T5581] ? __rcu_read_unlock+0x4e/0x70 [ 82.422213][ T5581] ? __fget_files+0x17c/0x1c0 [ 82.422319][ T5581] ksys_read+0xe8/0x1b0 [ 82.422345][ T5581] __x64_sys_read+0x42/0x50 [ 82.422377][ T5581] x64_sys_call+0x2874/0x2dc0 [ 82.422405][ T5581] do_syscall_64+0xc9/0x1c0 [ 82.422489][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 82.422521][ T5581] ? clear_bhb_loop+0x55/0xb0 [ 82.422580][ T5581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.422612][ T5581] RIP: 0033:0x7fc4f214bb7c [ 82.422626][ T5581] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 82.422644][ T5581] RSP: 002b:00007fc4f07b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.422662][ T5581] RAX: ffffffffffffffda RBX: 00007fc4f2365fa0 RCX: 00007fc4f214bb7c [ 82.422674][ T5581] RDX: 000000000000000f RSI: 00007fc4f07b70a0 RDI: 0000000000000008 [ 82.422688][ T5581] RBP: 00007fc4f07b7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.422702][ T5581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.422748][ T5581] R13: 0000000000000000 R14: 00007fc4f2365fa0 R15: 00007fff0e3404f8 [ 82.422770][ T5581] [ 82.803825][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.948497][ T5592] loop3: detected capacity change from 0 to 8192 [ 83.005309][ T5592] loop3: p1 p2 < > p3 p4 < > [ 83.010064][ T5592] loop3: partition table partially beyond EOD, truncated [ 83.010137][ T5592] loop3: p1 size 83886848 extends beyond EOD, truncated [ 83.010752][ T5592] loop3: p2 start 327680 is beyond EOD, truncated [ 83.010774][ T5592] loop3: p3 size 132352 extends beyond EOD, truncated [ 83.012031][ T5592] loop3: p4 start 786432 is beyond EOD, truncated [ 83.018006][ T29] kauditd_printk_skb: 714 callbacks suppressed [ 83.018021][ T29] audit: type=1400 audit(1742794086.863:4445): avc: denied { mounton } for pid=5591 comm="syz.3.483" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 83.095117][ T5602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 83.104241][ T29] audit: type=1326 audit(1742794086.933:4446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104312][ T29] audit: type=1326 audit(1742794086.933:4447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104339][ T29] audit: type=1326 audit(1742794086.933:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104432][ T29] audit: type=1326 audit(1742794086.933:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104456][ T29] audit: type=1326 audit(1742794086.933:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104527][ T29] audit: type=1326 audit(1742794086.933:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104558][ T29] audit: type=1326 audit(1742794086.933:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104605][ T29] audit: type=1326 audit(1742794086.933:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.104710][ T29] audit: type=1326 audit(1742794086.933:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 83.106879][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.124071][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 83.222225][ T5611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.490'. [ 83.295356][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 83.309346][ T5611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 83.315634][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 83.344084][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 83.682480][ T5646] loop5: detected capacity change from 0 to 512 [ 83.875853][ T5646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.888475][ T5646] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.052142][ T5656] __nla_validate_parse: 3 callbacks suppressed [ 84.052160][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 84.086858][ T5635] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 84.104218][ T5635] loop0: detected capacity change from 0 to 512 [ 84.144760][ T5635] EXT4-fs: Ignoring removed i_version option [ 84.144949][ T5635] EXT4-fs: Ignoring removed i_version option [ 84.145533][ T5635] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.146916][ T5635] EXT4-fs (loop0): 1 truncate cleaned up [ 84.229699][ T5635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.243275][ T5635] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 84.630127][ T4552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.708130][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.787571][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.504'. [ 84.807170][ T5673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.839368][ T5671] netlink: 44 bytes leftover after parsing attributes in process `syz.0.505'. [ 84.848399][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 84.862285][ T5671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.505'. [ 84.917867][ T5673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.098344][ T5673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.177567][ T5673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.254306][ T5673] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.269229][ T5673] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.284461][ T5673] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.298114][ T5673] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.379237][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 85.495230][ T5715] loop3: detected capacity change from 0 to 512 [ 85.515143][ T5715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.528129][ T5719] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 85.553969][ T5715] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 85.564308][ T5715] System zones: 1-12 [ 85.591427][ T5715] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.518: bg 0: block 328: padding at end of block bitmap is not set [ 85.607447][ T5715] EXT4-fs (loop3): Remounting filesystem read-only [ 85.614058][ T5715] EXT4-fs (loop3): 1 orphan inode deleted [ 85.620550][ T5715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.634255][ T5715] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 85.642377][ T5715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.654749][ T5725] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 85.762409][ T5738] loop5: detected capacity change from 0 to 512 [ 85.782597][ T5738] EXT4-fs (loop5): 1 orphan inode deleted [ 85.789913][ T5738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.805797][ T3556] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:12: Failed to release dquot type 1 [ 85.817871][ T5738] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.839714][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.847567][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.855353][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.863113][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.870938][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.878734][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.886543][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.894306][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x4 [ 85.902103][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.909932][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.917728][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.925532][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x2 [ 85.933279][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.941084][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.948870][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.956789][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.957487][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 85.964561][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.981114][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.988873][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 85.996721][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 86.004590][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 86.012341][ T3377] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 86.020115][ T3377] hid-generic 0000:0000:20000000.0002: item fetching failed at offset 24/43 [ 86.029082][ T3377] hid-generic 0000:0000:20000000.0002: probe with driver hid-generic failed with error -22 [ 86.072735][ T5749] loop6: detected capacity change from 0 to 512 [ 86.088846][ T5749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.096064][ T4552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.119357][ T5749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 86.142031][ T5749] System zones: 1-12 [ 86.156047][ T5749] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.528: bg 0: block 328: padding at end of block bitmap is not set [ 86.179536][ T5749] EXT4-fs (loop6): Remounting filesystem read-only [ 86.187115][ T5754] FAULT_INJECTION: forcing a failure. [ 86.187115][ T5754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.196953][ T5749] EXT4-fs (loop6): 1 orphan inode deleted [ 86.200216][ T5754] CPU: 1 UID: 0 PID: 5754 Comm: syz.2.530 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 86.200251][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.200297][ T5754] Call Trace: [ 86.200306][ T5754] [ 86.200315][ T5754] dump_stack_lvl+0xf2/0x150 [ 86.200350][ T5754] dump_stack+0x15/0x1a [ 86.200377][ T5754] should_fail_ex+0x24a/0x260 [ 86.200562][ T5754] should_fail+0xb/0x10 [ 86.200634][ T5754] should_fail_usercopy+0x1a/0x20 [ 86.200675][ T5754] _copy_to_user+0x20/0xa0 [ 86.200700][ T5754] simple_read_from_buffer+0xa0/0x110 [ 86.200813][ T5754] proc_fail_nth_read+0xf9/0x140 [ 86.200913][ T5754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 86.200949][ T5754] vfs_read+0x19b/0x6f0 [ 86.200978][ T5754] ? bpf_trace_run2+0x123/0x1d0 [ 86.201009][ T5754] ? __rcu_read_unlock+0x4e/0x70 [ 86.201122][ T5754] ? __fget_files+0x17c/0x1c0 [ 86.201165][ T5754] ksys_read+0xe8/0x1b0 [ 86.201242][ T5754] __x64_sys_read+0x42/0x50 [ 86.201275][ T5754] x64_sys_call+0x2874/0x2dc0 [ 86.201380][ T5754] do_syscall_64+0xc9/0x1c0 [ 86.201436][ T5754] ? clear_bhb_loop+0x55/0xb0 [ 86.201469][ T5754] ? clear_bhb_loop+0x55/0xb0 [ 86.201502][ T5754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.201535][ T5754] RIP: 0033:0x7fdf5281bb7c [ 86.201604][ T5754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 86.201628][ T5754] RSP: 002b:00007fdf50e87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.201725][ T5754] RAX: ffffffffffffffda RBX: 00007fdf52a35fa0 RCX: 00007fdf5281bb7c [ 86.201741][ T5754] RDX: 000000000000000f RSI: 00007fdf50e870a0 RDI: 0000000000000008 [ 86.201756][ T5754] RBP: 00007fdf50e87090 R08: 0000000000000000 R09: 0000000000000000 [ 86.201770][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.201785][ T5754] R13: 0000000000000000 R14: 00007fdf52a35fa0 R15: 00007ffe7c7e8b48 [ 86.201844][ T5754] [ 86.405065][ T5749] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.417185][ T5749] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 86.453499][ T5749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.479111][ T5767] FAULT_INJECTION: forcing a failure. [ 86.479111][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 86.491906][ T5767] CPU: 0 UID: 0 PID: 5767 Comm: syz.5.534 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 86.491935][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.491950][ T5767] Call Trace: [ 86.491957][ T5767] [ 86.491965][ T5767] dump_stack_lvl+0xf2/0x150 [ 86.492062][ T5767] dump_stack+0x15/0x1a [ 86.492146][ T5767] should_fail_ex+0x24a/0x260 [ 86.492176][ T5767] should_failslab+0x8f/0xb0 [ 86.492239][ T5767] __kmalloc_node_noprof+0xad/0x410 [ 86.492265][ T5767] ? __kvmalloc_node_noprof+0x72/0x170 [ 86.492338][ T5767] __kvmalloc_node_noprof+0x72/0x170 [ 86.492376][ T5767] snd_seq_pool_init+0x50/0x200 [ 86.492403][ T5767] snd_seq_fifo_resize+0x72/0x1b0 [ 86.492431][ T5767] snd_seq_ioctl_set_client_pool+0x23c/0x300 [ 86.492503][ T5767] snd_seq_ioctl+0x169/0x2a0 [ 86.492559][ T5767] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 86.492601][ T5767] __se_sys_ioctl+0xc9/0x140 [ 86.492628][ T5767] __x64_sys_ioctl+0x43/0x50 [ 86.492656][ T5767] x64_sys_call+0x1690/0x2dc0 [ 86.492688][ T5767] do_syscall_64+0xc9/0x1c0 [ 86.492724][ T5767] ? clear_bhb_loop+0x55/0xb0 [ 86.492798][ T5767] ? clear_bhb_loop+0x55/0xb0 [ 86.492830][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.492861][ T5767] RIP: 0033:0x7ff21559d169 [ 86.492879][ T5767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.492949][ T5767] RSP: 002b:00007ff213c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.492968][ T5767] RAX: ffffffffffffffda RBX: 00007ff2157b5fa0 RCX: 00007ff21559d169 [ 86.492983][ T5767] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000005 [ 86.492997][ T5767] RBP: 00007ff213c07090 R08: 0000000000000000 R09: 0000000000000000 [ 86.493011][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.493052][ T5767] R13: 0000000000000000 R14: 00007ff2157b5fa0 R15: 00007fff968e2d28 [ 86.493103][ T5767] [ 86.936762][ T5793] loop3: detected capacity change from 0 to 2048 [ 86.962010][ T5793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.206214][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.510298][ T5822] netlink: 'syz.6.552': attribute type 1 has an invalid length. [ 87.533966][ T5822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.555137][ T5822] bond1: (slave gretap1): making interface the new active one [ 87.569397][ T5822] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 87.600345][ T5822] syz.6.552 (5822) used greatest stack depth: 10176 bytes left [ 87.641639][ T5827] loop5: detected capacity change from 0 to 512 [ 87.658547][ T5827] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.686498][ T5827] EXT4-fs (loop5): 1 truncate cleaned up [ 87.699891][ T5827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.782767][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 87.898155][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 87.941477][ T5857] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 88.025258][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 88.025274][ T29] audit: type=1400 audit(1742794091.803:4894): avc: denied { write } for pid=5826 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.051069][ T29] audit: type=1400 audit(1742794091.803:4895): avc: denied { read write } for pid=5826 comm="syz.5.554" path="/43/bus/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.074054][ T29] audit: type=1400 audit(1742794091.853:4896): avc: denied { bind } for pid=5851 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.094449][ T29] audit: type=1400 audit(1742794091.853:4897): avc: denied { setopt } for pid=5851 comm="syz.3.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.118229][ T29] audit: type=1400 audit(1742794091.943:4898): avc: denied { map } for pid=5826 comm="syz.5.554" path="/43/bus/memory.events" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.142019][ T29] audit: type=1326 audit(1742794091.963:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d3a894127 code=0x7ffc0000 [ 88.165342][ T29] audit: type=1326 audit(1742794091.963:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d3a839359 code=0x7ffc0000 [ 88.188597][ T29] audit: type=1326 audit(1742794091.963:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d3a894127 code=0x7ffc0000 [ 88.211906][ T29] audit: type=1326 audit(1742794091.963:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d3a839359 code=0x7ffc0000 [ 88.235483][ T29] audit: type=1326 audit(1742794091.963:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 88.345692][ T4552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.972819][ T5882] netlink: 44 bytes leftover after parsing attributes in process `syz.6.567'. [ 89.053408][ T5884] loop2: detected capacity change from 0 to 512 [ 89.169400][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.182170][ T5884] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.297392][ T5890] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 89.377976][ T5890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.432227][ T5894] __nla_validate_parse: 2 callbacks suppressed [ 89.432241][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.570'. [ 89.686881][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'. [ 89.728261][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.794344][ T5908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.575'. [ 89.803323][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 89.835857][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 90.691014][ T5953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.589'. [ 90.699983][ T5953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 90.807640][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 90.999534][ T5966] FAULT_INJECTION: forcing a failure. [ 90.999534][ T5966] name failslab, interval 1, probability 0, space 0, times 0 [ 91.012281][ T5966] CPU: 0 UID: 0 PID: 5966 Comm: syz.5.591 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 91.012365][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.012380][ T5966] Call Trace: [ 91.012388][ T5966] [ 91.012409][ T5966] dump_stack_lvl+0xf2/0x150 [ 91.012441][ T5966] dump_stack+0x15/0x1a [ 91.012467][ T5966] should_fail_ex+0x24a/0x260 [ 91.012513][ T5966] ? get_mountpoint+0x179/0x2d0 [ 91.012542][ T5966] should_failslab+0x8f/0xb0 [ 91.012645][ T5966] __kmalloc_cache_noprof+0x4e/0x320 [ 91.012672][ T5966] ? should_fail_ex+0xd7/0x260 [ 91.012700][ T5966] get_mountpoint+0x179/0x2d0 [ 91.012728][ T5966] attach_recursive_mnt+0xca/0x1060 [ 91.012818][ T5966] ? _raw_spin_unlock+0x26/0x50 [ 91.012881][ T5966] do_move_mount+0x478/0x550 [ 91.012905][ T5966] __se_sys_move_mount+0x1ad/0x730 [ 91.012947][ T5966] __x64_sys_move_mount+0x67/0x80 [ 91.013033][ T5966] x64_sys_call+0x2608/0x2dc0 [ 91.013089][ T5966] do_syscall_64+0xc9/0x1c0 [ 91.013129][ T5966] ? clear_bhb_loop+0x55/0xb0 [ 91.013162][ T5966] ? clear_bhb_loop+0x55/0xb0 [ 91.013258][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.013286][ T5966] RIP: 0033:0x7ff21559d169 [ 91.013303][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.013379][ T5966] RSP: 002b:00007ff213c07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 91.013401][ T5966] RAX: ffffffffffffffda RBX: 00007ff2157b5fa0 RCX: 00007ff21559d169 [ 91.013416][ T5966] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000005 [ 91.013431][ T5966] RBP: 00007ff213c07090 R08: 0000000000000000 R09: 0000000000000000 [ 91.013445][ T5966] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 91.013459][ T5966] R13: 0000000000000000 R14: 00007ff2157b5fa0 R15: 00007fff968e2d28 [ 91.013478][ T5966] [ 91.293998][ T5972] x_tables: duplicate underflow at hook 2 [ 91.393358][ T5983] xt_TCPMSS: Only works on TCP SYN packets [ 91.450080][ T5982] loop6: detected capacity change from 0 to 2048 [ 91.678968][ T5988] netlink: 44 bytes leftover after parsing attributes in process `syz.6.603'. [ 91.687916][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.6.603'. [ 91.912857][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.939632][ T5996] batadv_slave_1: entered promiscuous mode [ 92.882355][ T6034] loop6: detected capacity change from 0 to 128 [ 92.914917][ T6034] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.946569][ T6034] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.062214][ T5097] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.231668][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 93.231685][ T29] audit: type=1326 audit(1742794097.073:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1837854127 code=0x7ffc0000 [ 93.491847][ T29] audit: type=1326 audit(1742794097.313:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18377f9359 code=0x7ffc0000 [ 93.515298][ T29] audit: type=1326 audit(1742794097.313:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.538946][ T29] audit: type=1326 audit(1742794097.313:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.562575][ T29] audit: type=1326 audit(1742794097.323:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.586284][ T29] audit: type=1326 audit(1742794097.323:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1837854127 code=0x7ffc0000 [ 93.609541][ T29] audit: type=1326 audit(1742794097.323:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f18377f9359 code=0x7ffc0000 [ 93.632910][ T29] audit: type=1326 audit(1742794097.323:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.656346][ T29] audit: type=1326 audit(1742794097.333:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.680060][ T29] audit: type=1326 audit(1742794097.333:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6048 comm="syz.6.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 93.812421][ T6053] loop5: detected capacity change from 0 to 8192 [ 93.881275][ T6053] loop5: p1 p2 < > p3 p4 < > [ 93.886103][ T6053] loop5: partition table partially beyond EOD, truncated [ 93.893260][ T6053] loop5: p1 size 83886848 extends beyond EOD, truncated [ 93.932981][ T6053] loop5: p2 start 327680 is beyond EOD, truncated [ 93.939523][ T6053] loop5: p3 size 132352 extends beyond EOD, truncated [ 93.963400][ T6058] loop3: detected capacity change from 0 to 128 [ 94.012252][ T6053] loop5: p4 start 786432 is beyond EOD, truncated [ 94.039609][ T6058] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.077525][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 94.079214][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 94.103971][ T6058] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.237300][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.311644][ T6074] loop3: detected capacity change from 0 to 128 [ 94.321102][ T6074] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.339265][ T6074] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 94.503723][ T6076] loop6: detected capacity change from 0 to 512 [ 94.586155][ T6076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.598830][ T6076] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.767124][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.973691][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.169650][ T6099] __nla_validate_parse: 6 callbacks suppressed [ 95.169664][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.641'. [ 95.860920][ T6123] xt_hashlimit: max too large, truncated to 1048576 [ 96.068654][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 96.793093][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.666'. [ 96.821575][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.658752][ T6185] FAULT_INJECTION: forcing a failure. [ 97.658752][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.671975][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.5.674 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 97.672000][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.672014][ T6185] Call Trace: [ 97.672022][ T6185] [ 97.672031][ T6185] dump_stack_lvl+0xf2/0x150 [ 97.672087][ T6185] dump_stack+0x15/0x1a [ 97.672114][ T6185] should_fail_ex+0x24a/0x260 [ 97.672207][ T6185] should_fail+0xb/0x10 [ 97.672239][ T6185] should_fail_usercopy+0x1a/0x20 [ 97.672270][ T6185] _copy_to_user+0x20/0xa0 [ 97.672289][ T6185] simple_read_from_buffer+0xa0/0x110 [ 97.672321][ T6185] proc_fail_nth_read+0xf9/0x140 [ 97.672414][ T6185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.672524][ T6185] vfs_read+0x19b/0x6f0 [ 97.672553][ T6185] ? __rcu_read_unlock+0x4e/0x70 [ 97.672578][ T6185] ? __fget_files+0x17c/0x1c0 [ 97.672615][ T6185] ksys_read+0xe8/0x1b0 [ 97.672684][ T6185] __x64_sys_read+0x42/0x50 [ 97.672790][ T6185] x64_sys_call+0x2874/0x2dc0 [ 97.672823][ T6185] do_syscall_64+0xc9/0x1c0 [ 97.672862][ T6185] ? clear_bhb_loop+0x55/0xb0 [ 97.672888][ T6185] ? clear_bhb_loop+0x55/0xb0 [ 97.672937][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.673041][ T6185] RIP: 0033:0x7ff21559bb7c [ 97.673058][ T6185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.673080][ T6185] RSP: 002b:00007ff213c07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.673103][ T6185] RAX: ffffffffffffffda RBX: 00007ff2157b5fa0 RCX: 00007ff21559bb7c [ 97.673115][ T6185] RDX: 000000000000000f RSI: 00007ff213c070a0 RDI: 0000000000000003 [ 97.673129][ T6185] RBP: 00007ff213c07090 R08: 0000000000000000 R09: 0000000000000000 [ 97.673143][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.673168][ T6185] R13: 0000000000000001 R14: 00007ff2157b5fa0 R15: 00007fff968e2d28 [ 97.673190][ T6185] [ 98.197634][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 98.954543][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 98.954572][ T29] audit: type=1400 audit(1742794102.773:6280): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 99.222803][ T6216] netlink: 44 bytes leftover after parsing attributes in process `syz.6.686'. [ 99.231848][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.6.686'. [ 99.280638][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.6.686'. [ 99.412756][ T6226] loop6: detected capacity change from 0 to 1024 [ 99.457330][ T6226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.502516][ T29] audit: type=1400 audit(1742794103.343:6281): avc: denied { read write } for pid=6225 comm="syz.6.689" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.525175][ T29] audit: type=1400 audit(1742794103.343:6282): avc: denied { open } for pid=6225 comm="syz.6.689" path="/62/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.568630][ T6226] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 99.685219][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.707721][ T29] audit: type=1326 audit(1742794103.463:6283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.731285][ T29] audit: type=1326 audit(1742794103.463:6284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.754863][ T29] audit: type=1326 audit(1742794103.463:6285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.778280][ T29] audit: type=1326 audit(1742794103.463:6286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.801752][ T29] audit: type=1326 audit(1742794103.463:6287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.825240][ T29] audit: type=1326 audit(1742794103.473:6288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.848659][ T29] audit: type=1326 audit(1742794103.473:6289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6231 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 99.957066][ T6224] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 99.964899][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 100.285533][ T6238] netlink: 44 bytes leftover after parsing attributes in process `syz.5.692'. [ 100.294456][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 100.489609][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.692'. [ 101.098839][ T6270] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 101.182719][ T6281] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 101.292970][ T6282] netlink: 14 bytes leftover after parsing attributes in process `syz.3.706'. [ 101.305207][ T6280] netlink: 44 bytes leftover after parsing attributes in process `syz.5.707'. [ 101.314148][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.707'. [ 101.325063][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.5.707'. [ 101.351427][ T6282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.362967][ T6282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.373917][ T6282] bond0 (unregistering): Released all slaves [ 101.420314][ T6287] loop6: detected capacity change from 0 to 512 [ 101.426978][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.465952][ T6287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 101.484398][ T6287] System zones: 1-12 [ 101.489929][ T6287] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.708: bg 0: block 328: padding at end of block bitmap is not set [ 101.504339][ T6287] EXT4-fs (loop6): Remounting filesystem read-only [ 101.512132][ T6287] EXT4-fs (loop6): 1 orphan inode deleted [ 101.518313][ T6287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.531446][ T6287] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 101.538461][ T6287] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.247369][ T6324] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 102.298549][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.720'. [ 102.319624][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.327095][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.336759][ T6326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.344181][ T6326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.365584][ T6331] FAULT_INJECTION: forcing a failure. [ 102.365584][ T6331] name failslab, interval 1, probability 0, space 0, times 0 [ 102.378358][ T6331] CPU: 1 UID: 0 PID: 6331 Comm: syz.3.722 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 102.378387][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.378402][ T6331] Call Trace: [ 102.378409][ T6331] [ 102.378417][ T6331] dump_stack_lvl+0xf2/0x150 [ 102.378452][ T6331] dump_stack+0x15/0x1a [ 102.378558][ T6331] should_fail_ex+0x24a/0x260 [ 102.378590][ T6331] should_failslab+0x8f/0xb0 [ 102.378624][ T6331] kmem_cache_alloc_node_noprof+0x59/0x320 [ 102.378683][ T6331] ? __alloc_skb+0x10b/0x310 [ 102.378710][ T6331] __alloc_skb+0x10b/0x310 [ 102.378736][ T6331] __ip_append_data+0x198f/0x2440 [ 102.378771][ T6331] ? __pfx_raw_getfrag+0x10/0x10 [ 102.378814][ T6331] ? __rcu_read_unlock+0x4e/0x70 [ 102.378890][ T6331] ? __pfx_raw_getfrag+0x10/0x10 [ 102.378929][ T6331] ip_append_data+0x11f/0x150 [ 102.378960][ T6331] raw_sendmsg+0xcd8/0xe70 [ 102.379041][ T6331] ? __pfx_raw_sendmsg+0x10/0x10 [ 102.379079][ T6331] inet_sendmsg+0xc5/0xd0 [ 102.379117][ T6331] __sock_sendmsg+0x102/0x180 [ 102.379167][ T6331] ____sys_sendmsg+0x326/0x4b0 [ 102.379200][ T6331] __sys_sendmsg+0x19d/0x230 [ 102.379288][ T6331] __x64_sys_sendmsg+0x46/0x50 [ 102.379359][ T6331] x64_sys_call+0x2734/0x2dc0 [ 102.379393][ T6331] do_syscall_64+0xc9/0x1c0 [ 102.379434][ T6331] ? clear_bhb_loop+0x55/0xb0 [ 102.379536][ T6331] ? clear_bhb_loop+0x55/0xb0 [ 102.379587][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.379619][ T6331] RIP: 0033:0x7fc4f214d169 [ 102.379637][ T6331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.379659][ T6331] RSP: 002b:00007fc4f07b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.379760][ T6331] RAX: ffffffffffffffda RBX: 00007fc4f2365fa0 RCX: 00007fc4f214d169 [ 102.379773][ T6331] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 102.379785][ T6331] RBP: 00007fc4f07b7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.379796][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.379808][ T6331] R13: 0000000000000000 R14: 00007fc4f2365fa0 R15: 00007fff0e3404f8 [ 102.379825][ T6331] [ 103.764900][ T6382] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 103.863442][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.737'. [ 104.090161][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 104.090177][ T29] audit: type=1400 audit(1742794107.933:6485): avc: denied { create } for pid=6406 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.122812][ T6408] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.140905][ T6408] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.164494][ T29] audit: type=1400 audit(1742794107.963:6486): avc: denied { write } for pid=6406 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.199195][ T6408] netlink: 20 bytes leftover after parsing attributes in process `syz.2.744'. [ 104.208161][ T6408] IPv6: NLM_F_CREATE should be specified when creating new route [ 104.219269][ T6408] IPv6: Can't replace route, no match found [ 104.236412][ T29] audit: type=1400 audit(1742794108.083:6487): avc: denied { mount } for pid=6409 comm="syz.6.745" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.454050][ T29] audit: type=1400 audit(1742794108.243:6488): avc: denied { getopt } for pid=6419 comm="syz.3.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.473681][ T29] audit: type=1326 audit(1742794108.293:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 104.497119][ T29] audit: type=1326 audit(1742794108.293:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 104.520458][ T29] audit: type=1326 audit(1742794108.293:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 104.543853][ T29] audit: type=1326 audit(1742794108.293:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 104.567236][ T29] audit: type=1326 audit(1742794108.293:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.5.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 104.647659][ T6425] IPv6: Can't replace route, no match found [ 104.756835][ T29] audit: type=1400 audit(1742794108.443:6494): avc: denied { unmount } for pid=5097 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.907228][ T6440] loop6: detected capacity change from 0 to 128 [ 104.914001][ T6440] EXT4-fs: test_dummy_encryption option not supported [ 105.761461][ T6465] __nla_validate_parse: 4 callbacks suppressed [ 105.761479][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.760'. [ 107.699886][ T6497] FAULT_INJECTION: forcing a failure. [ 107.699886][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 107.712622][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.3.770 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 107.712650][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 107.712667][ T6497] Call Trace: [ 107.712673][ T6497] [ 107.712680][ T6497] dump_stack_lvl+0xf2/0x150 [ 107.712706][ T6497] dump_stack+0x15/0x1a [ 107.712725][ T6497] should_fail_ex+0x24a/0x260 [ 107.712761][ T6497] should_failslab+0x8f/0xb0 [ 107.712797][ T6497] kmem_cache_alloc_noprof+0x52/0x320 [ 107.712822][ T6497] ? vm_area_dup+0x2c/0x130 [ 107.712846][ T6497] vm_area_dup+0x2c/0x130 [ 107.712873][ T6497] __split_vma+0xf7/0x6a0 [ 107.712904][ T6497] vma_modify+0x105/0x200 [ 107.712925][ T6497] vma_modify_policy+0xeb/0x120 [ 107.712953][ T6497] mbind_range+0x1d8/0x490 [ 107.712979][ T6497] __se_sys_set_mempolicy_home_node+0x38a/0x580 [ 107.713007][ T6497] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 107.713030][ T6497] x64_sys_call+0x2d10/0x2dc0 [ 107.713061][ T6497] do_syscall_64+0xc9/0x1c0 [ 107.713119][ T6497] ? clear_bhb_loop+0x55/0xb0 [ 107.713150][ T6497] ? clear_bhb_loop+0x55/0xb0 [ 107.713183][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.713216][ T6497] RIP: 0033:0x7fc4f214d169 [ 107.713234][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.713254][ T6497] RSP: 002b:00007fc4f07b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 107.713272][ T6497] RAX: ffffffffffffffda RBX: 00007fc4f2365fa0 RCX: 00007fc4f214d169 [ 107.713284][ T6497] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000fff000 [ 107.713295][ T6497] RBP: 00007fc4f07b7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.713306][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.713317][ T6497] R13: 0000000000000000 R14: 00007fc4f2365fa0 R15: 00007fff0e3404f8 [ 107.713338][ T6497] [ 108.473972][ T6500] loop6: detected capacity change from 0 to 1024 [ 108.583498][ T6500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.671911][ T6513] netlink: 44 bytes leftover after parsing attributes in process `syz.0.774'. [ 108.680911][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 109.247443][ T6513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 109.297556][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.463658][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.492009][ T6531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.532810][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.541739][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.607788][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 109.635824][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 109.635841][ T29] audit: type=1326 audit(1742794113.483:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.716341][ T29] audit: type=1326 audit(1742794113.513:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.739305][ T29] audit: type=1326 audit(1742794113.513:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.762146][ T29] audit: type=1326 audit(1742794113.513:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.784971][ T29] audit: type=1326 audit(1742794113.513:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.807830][ T29] audit: type=1326 audit(1742794113.513:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.830689][ T29] audit: type=1326 audit(1742794113.513:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.853605][ T29] audit: type=1326 audit(1742794113.513:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.876453][ T29] audit: type=1326 audit(1742794113.513:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 109.899397][ T29] audit: type=1326 audit(1742794113.513:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6541 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 110.431137][ T6555] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 111.396559][ T6570] loop6: detected capacity change from 0 to 764 [ 111.980821][ T6596] loop6: detected capacity change from 0 to 128 [ 111.987532][ T6596] EXT4-fs: test_dummy_encryption option not supported [ 112.178968][ T6590] usb usb1: usbfs: process 6590 (syz.2.798) did not claim interface 32 before use [ 112.195995][ T6590] netlink: 'syz.2.798': attribute type 10 has an invalid length. [ 112.204001][ T6590] ipvlan0: entered allmulticast mode [ 112.209373][ T6590] veth0_vlan: entered allmulticast mode [ 112.222178][ T6590] team0: Device ipvlan0 failed to register rx_handler [ 112.291970][ T6604] netlink: 44 bytes leftover after parsing attributes in process `syz.2.802'. [ 112.301049][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'. [ 112.315188][ T6604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'. [ 113.035734][ T6611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 113.044739][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 113.090227][ T6612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 113.274098][ T6622] FAULT_INJECTION: forcing a failure. [ 113.274098][ T6622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 113.287448][ T6622] CPU: 1 UID: 0 PID: 6622 Comm: syz.5.808 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 113.287473][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.287514][ T6622] Call Trace: [ 113.287521][ T6622] [ 113.287531][ T6622] dump_stack_lvl+0xf2/0x150 [ 113.287566][ T6622] dump_stack+0x15/0x1a [ 113.287593][ T6622] should_fail_ex+0x24a/0x260 [ 113.287625][ T6622] should_fail_alloc_page+0xfd/0x110 [ 113.287730][ T6622] __alloc_frozen_pages_noprof+0x109/0x340 [ 113.287770][ T6622] alloc_pages_mpol+0xb4/0x260 [ 113.287854][ T6622] vma_alloc_folio_noprof+0x1a0/0x310 [ 113.287888][ T6622] handle_mm_fault+0xdd7/0x2b00 [ 113.287920][ T6622] exc_page_fault+0x3b9/0x650 [ 113.287953][ T6622] asm_exc_page_fault+0x26/0x30 [ 113.287999][ T6622] RIP: 0033:0x7ff215468b7b [ 113.288016][ T6622] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 113.288038][ T6622] RSP: 002b:00007ff213be4fb0 EFLAGS: 00010202 [ 113.288057][ T6622] RAX: 0000000000000000 RBX: 00007ff2157b6080 RCX: 0000000000000000 [ 113.288072][ T6622] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0 [ 113.288120][ T6622] RBP: 00007ff213be6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.288138][ T6622] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000001 [ 113.288216][ T6622] R13: 0000000000000001 R14: 00007ff2157b6080 R15: 00007fff968e2d28 [ 113.288238][ T6622] [ 113.288258][ T6622] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 113.354368][ T6618] netlink: 44 bytes leftover after parsing attributes in process `syz.3.807'. [ 113.435397][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 113.438289][ T6618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 113.558386][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.565652][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.713710][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.803098][ T6619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.915450][ T6619] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.923924][ T6619] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.932450][ T6619] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.940914][ T6619] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.216744][ T6647] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.259461][ T6653] netlink: 44 bytes leftover after parsing attributes in process `syz.5.818'. [ 114.975701][ T6667] loop6: detected capacity change from 0 to 128 [ 114.982966][ T6667] EXT4-fs: test_dummy_encryption option not supported [ 116.380707][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 116.380725][ T29] audit: type=1326 audit(1742794120.223:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.410262][ T29] audit: type=1326 audit(1742794120.223:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.567055][ T6693] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.574543][ T6693] vhci_hcd: invalid port number 186 [ 116.579824][ T6693] vhci_hcd: default hub control req: 4014 v0008 i00ba l0 [ 116.584065][ T29] audit: type=1326 audit(1742794120.283:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.610353][ T29] audit: type=1326 audit(1742794120.283:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.633742][ T29] audit: type=1326 audit(1742794120.283:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.657060][ T29] audit: type=1326 audit(1742794120.283:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.680417][ T29] audit: type=1326 audit(1742794120.283:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.703868][ T29] audit: type=1326 audit(1742794120.283:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.727144][ T29] audit: type=1326 audit(1742794120.283:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 116.750512][ T29] audit: type=1326 audit(1742794120.283:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6689 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 117.619664][ T6685] Set syz1 is full, maxelem 65536 reached [ 117.828715][ T6735] __nla_validate_parse: 6 callbacks suppressed [ 117.828731][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.845'. [ 117.853829][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.5.846'. [ 117.862783][ T6736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.846'. [ 117.874848][ T6736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.846'. [ 118.565777][ T6762] loop6: detected capacity change from 0 to 8192 [ 118.588641][ T6762] loop6: p1 p2 < > p3 p4 < > [ 118.593415][ T6762] loop6: partition table partially beyond EOD, truncated [ 118.600590][ T6762] loop6: p1 size 83886848 extends beyond EOD, truncated [ 118.608720][ T6762] loop6: p2 start 327680 is beyond EOD, truncated [ 118.615245][ T6762] loop6: p3 size 132352 extends beyond EOD, truncated [ 118.622611][ T6762] loop6: p4 start 786432 is beyond EOD, truncated [ 118.678858][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 118.686023][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 118.722518][ T6768] loop6: detected capacity change from 0 to 512 [ 118.778803][ T6768] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.801309][ T6768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 118.819627][ T6768] System zones: 1-12 [ 118.833948][ T6768] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.858: bg 0: block 328: padding at end of block bitmap is not set [ 118.865530][ T6768] EXT4-fs (loop6): Remounting filesystem read-only [ 118.904665][ T6768] EXT4-fs (loop6): 1 orphan inode deleted [ 118.921581][ T6768] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.925371][ T6773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.860'. [ 118.942686][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'. [ 118.956852][ T6772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'. [ 118.966877][ T6768] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 118.982553][ T6768] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.053352][ T6783] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 119.341682][ T6807] loop6: detected capacity change from 0 to 128 [ 119.348549][ T6807] EXT4-fs: test_dummy_encryption option not supported [ 119.651058][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 119.745955][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 121.232148][ T6832] usb usb1: usbfs: process 6832 (syz.5.878) did not claim interface 32 before use [ 121.620472][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.883'. [ 121.639337][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 121.639355][ T29] audit: type=1326 audit(1742794125.463:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.668948][ T29] audit: type=1326 audit(1742794125.463:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.692540][ T29] audit: type=1326 audit(1742794125.463:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.715974][ T29] audit: type=1326 audit(1742794125.463:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.716006][ T29] audit: type=1326 audit(1742794125.463:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.716034][ T29] audit: type=1326 audit(1742794125.463:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.786100][ T29] audit: type=1326 audit(1742794125.463:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.809615][ T29] audit: type=1326 audit(1742794125.463:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.833195][ T29] audit: type=1326 audit(1742794125.463:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 121.856599][ T29] audit: type=1326 audit(1742794125.463:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6841 comm="syz.6.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 122.239998][ T6857] SELinux: Context : is not valid (left unmapped). [ 122.250522][ T6850] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 122.257164][ T6850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 122.264702][ T6850] vhci_hcd vhci_hcd.0: Device attached [ 122.272729][ T6860] vhci_hcd: connection closed [ 122.272990][ T3577] vhci_hcd: stop threads [ 122.282053][ T3577] vhci_hcd: release socket [ 122.286493][ T3577] vhci_hcd: disconnect device [ 122.326953][ T6866] vhci_hcd: default hub control req: 230e v0008 i0002 l0 [ 122.464198][ T6865] usb usb1: usbfs: process 6865 (syz.0.891) did not claim interface 32 before use [ 122.580331][ T6868] cgroup: fork rejected by pids controller in /syz0 [ 123.351059][ T7766] FAULT_INJECTION: forcing a failure. [ 123.351059][ T7766] name failslab, interval 1, probability 0, space 0, times 0 [ 123.363765][ T7766] CPU: 0 UID: 0 PID: 7766 Comm: syz.2.906 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 123.363796][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.363880][ T7766] Call Trace: [ 123.363889][ T7766] [ 123.363899][ T7766] dump_stack_lvl+0xf2/0x150 [ 123.363939][ T7766] dump_stack+0x15/0x1a [ 123.364017][ T7766] should_fail_ex+0x24a/0x260 [ 123.364056][ T7766] should_failslab+0x8f/0xb0 [ 123.364110][ T7766] kmem_cache_alloc_noprof+0x52/0x320 [ 123.364148][ T7766] ? getname_flags+0x81/0x3b0 [ 123.364185][ T7766] getname_flags+0x81/0x3b0 [ 123.364223][ T7766] __x64_sys_rename+0x33/0x70 [ 123.364338][ T7766] x64_sys_call+0x2b1c/0x2dc0 [ 123.364367][ T7766] do_syscall_64+0xc9/0x1c0 [ 123.364429][ T7766] ? clear_bhb_loop+0x55/0xb0 [ 123.364465][ T7766] ? clear_bhb_loop+0x55/0xb0 [ 123.364498][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.364616][ T7766] RIP: 0033:0x7fdf5281d169 [ 123.364634][ T7766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.364653][ T7766] RSP: 002b:00007fdf50e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 123.364672][ T7766] RAX: ffffffffffffffda RBX: 00007fdf52a35fa0 RCX: 00007fdf5281d169 [ 123.364686][ T7766] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00002000000002c0 [ 123.364701][ T7766] RBP: 00007fdf50e87090 R08: 0000000000000000 R09: 0000000000000000 [ 123.364714][ T7766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.364733][ T7766] R13: 0000000000000000 R14: 00007fdf52a35fa0 R15: 00007ffe7c7e8b48 [ 123.364753][ T7766] [ 124.102941][ T7786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.356977][ T7807] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 124.953904][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.976693][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.352420][ T7843] loop6: detected capacity change from 0 to 1024 [ 125.368033][ T7843] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.930: bad orphan inode 2304 [ 125.386194][ T7843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.416850][ T7848] __nla_validate_parse: 2 callbacks suppressed [ 125.416868][ T7848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.932'. [ 125.432066][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 125.442443][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.932'. [ 125.986342][ T7872] usb usb1: usbfs: process 7872 (syz.0.939) did not claim interface 32 before use [ 126.000424][ T7872] netlink: 'syz.0.939': attribute type 10 has an invalid length. [ 126.016090][ T7872] ipvlan0: entered allmulticast mode [ 126.021445][ T7872] veth0_vlan: entered allmulticast mode [ 126.028915][ T7872] team0: Device ipvlan0 failed to register rx_handler [ 126.037639][ T7882] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 126.226272][ T5097] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.677438][ T7909] FAULT_INJECTION: forcing a failure. [ 126.677438][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.690575][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.3.953 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 126.690601][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.690679][ T7909] Call Trace: [ 126.690687][ T7909] [ 126.690696][ T7909] dump_stack_lvl+0xf2/0x150 [ 126.690729][ T7909] dump_stack+0x15/0x1a [ 126.690820][ T7909] should_fail_ex+0x24a/0x260 [ 126.690857][ T7909] should_fail+0xb/0x10 [ 126.690884][ T7909] should_fail_usercopy+0x1a/0x20 [ 126.690914][ T7909] _copy_to_user+0x20/0xa0 [ 126.691012][ T7909] simple_read_from_buffer+0xa0/0x110 [ 126.691040][ T7909] proc_fail_nth_read+0xf9/0x140 [ 126.691072][ T7909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.691151][ T7909] vfs_read+0x19b/0x6f0 [ 126.691174][ T7909] ? bpf_trace_run2+0x123/0x1d0 [ 126.691275][ T7909] ? __rcu_read_unlock+0x4e/0x70 [ 126.691299][ T7909] ? __fget_files+0x17c/0x1c0 [ 126.691341][ T7909] ksys_read+0xe8/0x1b0 [ 126.691374][ T7909] __x64_sys_read+0x42/0x50 [ 126.691428][ T7909] x64_sys_call+0x2874/0x2dc0 [ 126.691456][ T7909] do_syscall_64+0xc9/0x1c0 [ 126.691496][ T7909] ? clear_bhb_loop+0x55/0xb0 [ 126.691583][ T7909] ? clear_bhb_loop+0x55/0xb0 [ 126.691616][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.691648][ T7909] RIP: 0033:0x7fc4f214bb7c [ 126.691734][ T7909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.691755][ T7909] RSP: 002b:00007fc4f0775030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.691777][ T7909] RAX: ffffffffffffffda RBX: 00007fc4f2366160 RCX: 00007fc4f214bb7c [ 126.691791][ T7909] RDX: 000000000000000f RSI: 00007fc4f07750a0 RDI: 000000000000000a [ 126.691805][ T7909] RBP: 00007fc4f0775090 R08: 0000000000000000 R09: 0000000000000000 [ 126.691818][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.691868][ T7909] R13: 0000000000000000 R14: 00007fc4f2366160 R15: 00007fff0e3404f8 [ 126.691887][ T7909] [ 126.849707][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 126.849726][ T29] audit: type=1326 audit(1742794130.693:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 126.868073][ T7911] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 126.899114][ T29] audit: type=1326 audit(1742794130.733:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7875 comm="syz.5.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 127.010279][ T29] audit: type=1400 audit(1742794130.853:7413): avc: denied { write } for pid=7912 comm="syz.2.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.113977][ T29] audit: type=1400 audit(1742794130.953:7414): avc: denied { create } for pid=7914 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.365992][ T7927] loop6: detected capacity change from 0 to 8192 [ 127.424927][ T7927] loop6: p1 p2 < > p3 p4 < > [ 127.429668][ T7927] loop6: partition table partially beyond EOD, truncated [ 127.436899][ T7927] loop6: p1 size 83886848 extends beyond EOD, truncated [ 127.445655][ T7927] loop6: p2 start 327680 is beyond EOD, truncated [ 127.452151][ T7927] loop6: p3 size 132352 extends beyond EOD, truncated [ 127.459513][ T7927] loop6: p4 start 786432 is beyond EOD, truncated [ 127.482517][ T2999] loop6: p1 p2 < > p3 p4 < > [ 127.487272][ T2999] loop6: partition table partially beyond EOD, truncated [ 127.495777][ T2999] loop6: p1 size 83886848 extends beyond EOD, truncated [ 127.508426][ T2999] loop6: p2 start 327680 is beyond EOD, truncated [ 127.515048][ T2999] loop6: p3 size 132352 extends beyond EOD, truncated [ 127.538457][ T2999] loop6: p4 start 786432 is beyond EOD, truncated [ 127.579999][ T29] audit: type=1326 audit(1742794131.423:7415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 127.603513][ T29] audit: type=1326 audit(1742794131.423:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 127.626874][ T29] audit: type=1326 audit(1742794131.423:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 127.650238][ T29] audit: type=1326 audit(1742794131.423:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 127.673666][ T29] audit: type=1326 audit(1742794131.423:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7928 comm="syz.3.962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f214d169 code=0x7ffc0000 [ 127.801040][ T29] audit: type=1326 audit(1742794131.643:7420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7937 comm="syz.2.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 127.817970][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 127.867699][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 127.921219][ T3720] udevd[3720]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 127.932593][ T3482] udevd[3482]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 128.001569][ T7942] loop6: detected capacity change from 0 to 8192 [ 128.027373][ T7942] usb usb1: usbfs: process 7942 (syz.6.967) did not claim interface 32 before use [ 128.055507][ T7942] netlink: 'syz.6.967': attribute type 10 has an invalid length. [ 128.120747][ T7942] ipvlan0: entered allmulticast mode [ 128.126178][ T7942] veth0_vlan: entered allmulticast mode [ 128.197425][ T7942] team0: Device ipvlan0 failed to register rx_handler [ 130.063531][ T7998] netlink: 'syz.2.985': attribute type 13 has an invalid length. [ 130.187544][ T8012] x_tables: duplicate underflow at hook 1 [ 130.388361][ T8032] FAULT_INJECTION: forcing a failure. [ 130.388361][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 130.401054][ T8032] CPU: 1 UID: 0 PID: 8032 Comm: syz.0.996 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 130.401082][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.401110][ T8032] Call Trace: [ 130.401116][ T8032] [ 130.401122][ T8032] dump_stack_lvl+0xf2/0x150 [ 130.401145][ T8032] dump_stack+0x15/0x1a [ 130.401163][ T8032] should_fail_ex+0x24a/0x260 [ 130.401245][ T8032] should_failslab+0x8f/0xb0 [ 130.401271][ T8032] kmem_cache_alloc_noprof+0x52/0x320 [ 130.401289][ T8032] ? getname_flags+0x81/0x3b0 [ 130.401317][ T8032] getname_flags+0x81/0x3b0 [ 130.401358][ T8032] user_path_at+0x26/0x120 [ 130.401377][ T8032] __se_sys_mount+0x24b/0x2d0 [ 130.401422][ T8032] ? __bpf_trace_sys_enter+0x10/0x30 [ 130.401445][ T8032] __x64_sys_mount+0x67/0x80 [ 130.401472][ T8032] x64_sys_call+0x2c84/0x2dc0 [ 130.401567][ T8032] do_syscall_64+0xc9/0x1c0 [ 130.401640][ T8032] ? clear_bhb_loop+0x55/0xb0 [ 130.401668][ T8032] ? clear_bhb_loop+0x55/0xb0 [ 130.401691][ T8032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.401725][ T8032] RIP: 0033:0x7f1d3a89d169 [ 130.401738][ T8032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.401762][ T8032] RSP: 002b:00007f1d38f07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 130.401784][ T8032] RAX: ffffffffffffffda RBX: 00007f1d3aab5fa0 RCX: 00007f1d3a89d169 [ 130.401800][ T8032] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 130.401860][ T8032] RBP: 00007f1d38f07090 R08: 0000200000000400 R09: 0000000000000000 [ 130.401870][ T8032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.401880][ T8032] R13: 0000000000000000 R14: 00007f1d3aab5fa0 R15: 00007ffced4b1d98 [ 130.401895][ T8032] [ 130.682390][ T8037] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 130.724735][ T8035] Falling back ldisc for ttyS3. [ 131.109137][ T8045] usb usb1: usbfs: process 8045 (syz.2.1001) did not claim interface 32 before use [ 131.119432][ T8045] netlink: 'syz.2.1001': attribute type 10 has an invalid length. [ 131.128859][ T8045] team0: Device ipvlan0 failed to register rx_handler [ 131.423946][ T8064] SET target dimension over the limit! [ 131.539469][ T8064] vlan2: entered allmulticast mode [ 131.965875][ T8047] Set syz1 is full, maxelem 65536 reached [ 132.060437][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 132.060457][ T29] audit: type=1326 audit(1742794135.893:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.090173][ T29] audit: type=1326 audit(1742794135.893:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.113632][ T29] audit: type=1326 audit(1742794135.893:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.137247][ T29] audit: type=1326 audit(1742794135.893:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.160690][ T29] audit: type=1326 audit(1742794135.893:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.160761][ T29] audit: type=1326 audit(1742794135.893:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.160840][ T29] audit: type=1326 audit(1742794135.893:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.160872][ T29] audit: type=1326 audit(1742794135.893:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.160901][ T29] audit: type=1326 audit(1742794135.893:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.277960][ T29] audit: type=1326 audit(1742794135.893:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8084 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 132.384583][ T8093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8093 comm=syz.5.1016 [ 132.397226][ T8093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8093 comm=syz.5.1016 [ 132.458751][ T8098] FAULT_INJECTION: forcing a failure. [ 132.458751][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 132.471482][ T8098] CPU: 1 UID: 0 PID: 8098 Comm: syz.5.1018 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 132.471514][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.471530][ T8098] Call Trace: [ 132.471538][ T8098] [ 132.471547][ T8098] dump_stack_lvl+0xf2/0x150 [ 132.471614][ T8098] dump_stack+0x15/0x1a [ 132.471640][ T8098] should_fail_ex+0x24a/0x260 [ 132.471678][ T8098] ? alloc_pipe_info+0xb0/0x360 [ 132.471785][ T8098] should_failslab+0x8f/0xb0 [ 132.471823][ T8098] __kmalloc_cache_noprof+0x4e/0x320 [ 132.471855][ T8098] alloc_pipe_info+0xb0/0x360 [ 132.471936][ T8098] splice_direct_to_actor+0x60f/0x670 [ 132.471968][ T8098] ? __pfx_direct_splice_actor+0x10/0x10 [ 132.472007][ T8098] ? htab_map_hash+0x15a/0x1d0 [ 132.472036][ T8098] ? bcmp+0x5b/0x80 [ 132.472075][ T8098] ? avc_policy_seqno+0x15/0x20 [ 132.472094][ T8098] ? selinux_file_permission+0x22a/0x360 [ 132.472130][ T8098] do_splice_direct+0xd7/0x150 [ 132.472200][ T8098] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 132.472239][ T8098] do_sendfile+0x398/0x660 [ 132.472298][ T8098] __x64_sys_sendfile64+0x110/0x150 [ 132.472437][ T8098] x64_sys_call+0xfbd/0x2dc0 [ 132.472470][ T8098] do_syscall_64+0xc9/0x1c0 [ 132.472538][ T8098] ? clear_bhb_loop+0x55/0xb0 [ 132.472570][ T8098] ? clear_bhb_loop+0x55/0xb0 [ 132.472638][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.472669][ T8098] RIP: 0033:0x7ff21559d169 [ 132.472688][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.472737][ T8098] RSP: 002b:00007ff213c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 132.472759][ T8098] RAX: ffffffffffffffda RBX: 00007ff2157b5fa0 RCX: 00007ff21559d169 [ 132.472773][ T8098] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 132.472788][ T8098] RBP: 00007ff213c07090 R08: 0000000000000000 R09: 0000000000000000 [ 132.472802][ T8098] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 132.472817][ T8098] R13: 0000000000000000 R14: 00007ff2157b5fa0 R15: 00007fff968e2d28 [ 132.472840][ T8098] [ 132.703368][ T8101] x_tables: duplicate underflow at hook 1 [ 132.835653][ T8109] usb usb1: usbfs: process 8109 (syz.0.1021) did not claim interface 32 before use [ 132.876057][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1025'. [ 132.878900][ T8109] netlink: 'syz.0.1021': attribute type 10 has an invalid length. [ 132.885108][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 132.902053][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 132.982070][ T8109] team0: Device ipvlan0 failed to register rx_handler [ 133.490642][ T8151] usb usb1: check_ctrlrecip: process 8151 (syz.5.1028) requesting ep 01 but needs 81 [ 133.586869][ T8151] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 133.987218][ T8169] 9pnet_fd: Insufficient options for proto=fd [ 134.929510][ T8210] loop6: detected capacity change from 0 to 128 [ 134.979099][ T8210] EXT4-fs: test_dummy_encryption option not supported [ 136.598497][ T8262] x_tables: duplicate underflow at hook 1 [ 136.624210][ T8264] x_tables: duplicate underflow at hook 1 [ 136.719122][ T8271] loop6: detected capacity change from 0 to 128 [ 136.725798][ T8271] EXT4-fs: test_dummy_encryption option not supported [ 136.771941][ T8272] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1076'. [ 137.192240][ T29] kauditd_printk_skb: 4976 callbacks suppressed [ 137.198619][ T29] audit: type=1400 audit(1742794141.033:12782): avc: denied { write } for pid=8281 comm="syz.2.1080" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 137.363975][ T29] audit: type=1400 audit(1742794141.193:12783): avc: denied { setopt } for pid=8281 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.653979][ T8305] x_tables: duplicate underflow at hook 1 [ 137.795472][ T29] audit: type=1326 audit(1742794141.633:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.819220][ T29] audit: type=1326 audit(1742794141.633:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.884067][ T29] audit: type=1326 audit(1742794141.693:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.907928][ T29] audit: type=1326 audit(1742794141.693:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.931609][ T29] audit: type=1326 audit(1742794141.693:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.955097][ T29] audit: type=1326 audit(1742794141.693:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 137.978598][ T29] audit: type=1326 audit(1742794141.693:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 138.002094][ T29] audit: type=1326 audit(1742794141.693:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8320 comm="syz.0.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 139.561421][ T8498] loop6: detected capacity change from 0 to 128 [ 139.568282][ T8498] EXT4-fs: test_dummy_encryption option not supported [ 141.089394][ T8551] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 141.120006][ T8541] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 141.168320][ T8541] team0: Device ipvlan0 failed to register rx_handler [ 141.642685][ T8614] x_tables: duplicate underflow at hook 1 [ 142.236622][ T8653] netlink: 'syz.0.1137': attribute type 10 has an invalid length. [ 142.260251][ T8653] team0: Device ipvlan0 failed to register rx_handler [ 142.465042][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 142.465059][ T29] audit: type=1326 audit(1742794146.313:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 142.505918][ T29] audit: type=1326 audit(1742794146.313:13123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.6.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183785d169 code=0x7ffc0000 [ 142.529494][ T29] audit: type=1326 audit(1742794146.323:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.553040][ T29] audit: type=1326 audit(1742794146.323:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.576560][ T29] audit: type=1326 audit(1742794146.323:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.600170][ T29] audit: type=1326 audit(1742794146.323:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.623710][ T29] audit: type=1326 audit(1742794146.323:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.647437][ T29] audit: type=1326 audit(1742794146.323:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.671040][ T29] audit: type=1326 audit(1742794146.323:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 142.694562][ T29] audit: type=1326 audit(1742794146.323:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8663 comm="syz.0.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3a89d169 code=0x7ffc0000 [ 143.273910][ T8704] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 143.284637][ T8704] team0: Device ipvlan0 failed to register rx_handler [ 143.889905][ T8706] Set syz1 is full, maxelem 65536 reached [ 144.261657][ T8740] loop6: detected capacity change from 0 to 256 [ 144.282460][ T8740] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.315544][ T8740] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.934898][ T8765] netlink: 'syz.3.1173': attribute type 13 has an invalid length. [ 145.013501][ T8768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8768 comm=syz.3.1173 [ 145.354677][ T8742] Set syz1 is full, maxelem 65536 reached [ 145.374059][ T8765] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.513827][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1180'. [ 145.556775][ T8796] FAULT_INJECTION: forcing a failure. [ 145.556775][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 145.559468][ T8795] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1184'. [ 145.569548][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.2.1182 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 145.569617][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.569633][ T8796] Call Trace: [ 145.569640][ T8796] [ 145.569648][ T8796] dump_stack_lvl+0xf2/0x150 [ 145.569683][ T8796] dump_stack+0x15/0x1a [ 145.569708][ T8796] should_fail_ex+0x24a/0x260 [ 145.569805][ T8796] ? rtm_new_nexthop+0x1464/0x4ad0 [ 145.569832][ T8796] should_failslab+0x8f/0xb0 [ 145.569870][ T8796] __kmalloc_cache_noprof+0x4e/0x320 [ 145.569902][ T8796] rtm_new_nexthop+0x1464/0x4ad0 [ 145.569981][ T8796] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 145.570011][ T8796] ? mod_objcg_state+0x2ea/0x4f0 [ 145.570115][ T8796] ? security_capable+0x81/0x90 [ 145.570166][ T8796] ? ns_capable+0x7d/0xb0 [ 145.570247][ T8796] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 145.570275][ T8796] rtnetlink_rcv_msg+0x6aa/0x710 [ 145.570312][ T8796] ? ref_tracker_free+0x3a5/0x410 [ 145.570382][ T8796] netlink_rcv_skb+0x12c/0x230 [ 145.570427][ T8796] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.570528][ T8796] rtnetlink_rcv+0x1c/0x30 [ 145.570560][ T8796] netlink_unicast+0x599/0x670 [ 145.570602][ T8796] netlink_sendmsg+0x5cc/0x6e0 [ 145.570632][ T8796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.570656][ T8796] __sock_sendmsg+0x140/0x180 [ 145.570752][ T8796] ____sys_sendmsg+0x326/0x4b0 [ 145.570791][ T8796] __sys_sendmsg+0x19d/0x230 [ 145.570855][ T8796] __x64_sys_sendmsg+0x46/0x50 [ 145.570891][ T8796] x64_sys_call+0x2734/0x2dc0 [ 145.570974][ T8796] do_syscall_64+0xc9/0x1c0 [ 145.571015][ T8796] ? clear_bhb_loop+0x55/0xb0 [ 145.571110][ T8796] ? clear_bhb_loop+0x55/0xb0 [ 145.571213][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.571248][ T8796] RIP: 0033:0x7fdf5281d169 [ 145.571266][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.571289][ T8796] RSP: 002b:00007fdf50e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.571322][ T8796] RAX: ffffffffffffffda RBX: 00007fdf52a35fa0 RCX: 00007fdf5281d169 [ 145.571337][ T8796] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 145.571352][ T8796] RBP: 00007fdf50e87090 R08: 0000000000000000 R09: 0000000000000000 [ 145.571367][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.571383][ T8796] R13: 0000000000000000 R14: 00007fdf52a35fa0 R15: 00007ffe7c7e8b48 [ 145.571437][ T8796] [ 145.776193][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1184'. [ 145.779711][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1184'. [ 146.850157][ T8889] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1192'. [ 146.859541][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1192'. [ 146.871734][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1192'. [ 147.441276][ T8962] x_tables: duplicate underflow at hook 1 [ 147.488872][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 147.488891][ T29] audit: type=1326 audit(1742794151.333:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf52814127 code=0x7ffc0000 [ 147.576735][ T29] audit: type=1326 audit(1742794151.333:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf527b9359 code=0x7ffc0000 [ 147.600371][ T29] audit: type=1326 audit(1742794151.333:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf52814127 code=0x7ffc0000 [ 147.623812][ T29] audit: type=1326 audit(1742794151.333:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf527b9359 code=0x7ffc0000 [ 147.647336][ T29] audit: type=1326 audit(1742794151.333:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 147.670875][ T29] audit: type=1326 audit(1742794151.333:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 147.694395][ T29] audit: type=1326 audit(1742794151.333:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 147.717915][ T29] audit: type=1326 audit(1742794151.333:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 147.741414][ T29] audit: type=1326 audit(1742794151.333:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf5281d169 code=0x7ffc0000 [ 147.764922][ T29] audit: type=1326 audit(1742794151.333:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf52814127 code=0x7ffc0000 [ 148.607845][ T8989] loop6: detected capacity change from 0 to 256 [ 148.616426][ T8989] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.639659][ T8989] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.716265][ T8998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1216'. [ 148.725410][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 148.737410][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1216'. [ 149.012492][ T9024] netlink: 'syz.5.1224': attribute type 10 has an invalid length. [ 149.022827][ T9024] ipvlan0: entered allmulticast mode [ 149.028193][ T9024] veth0_vlan: entered allmulticast mode [ 149.037472][ T9024] team0: Device ipvlan0 failed to register rx_handler [ 149.941065][ T9069] ALSA: seq fatal error: cannot create timer (-19) [ 150.083909][ T9073] netlink: 'syz.6.1243': attribute type 21 has an invalid length. [ 150.440653][ T9073] loop6: detected capacity change from 0 to 8192 [ 150.491589][ T9073] 9pnet_fd: Insufficient options for proto=fd [ 150.637375][ T9089] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.669327][ T9093] __nla_validate_parse: 14 callbacks suppressed [ 150.669347][ T9093] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1250'. [ 150.684711][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1250'. [ 150.725053][ T9095] syz.0.1249 uses obsolete (PF_INET,SOCK_PACKET) [ 150.747062][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1250'. [ 150.769507][ T9089] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.806931][ T9095] pim6reg: entered allmulticast mode [ 150.836364][ T9089] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.885522][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 150.896519][ T9089] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.085389][ T9089] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.097346][ T9089] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.108449][ T9089] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.119918][ T9089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.423739][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1264'. [ 152.139594][ T9148] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1273'. [ 152.148755][ T9148] unsupported nla_type 65024 [ 152.275011][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1275'. [ 152.306100][ T9158] FAULT_INJECTION: forcing a failure. [ 152.306100][ T9158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.319423][ T9158] CPU: 1 UID: 0 PID: 9158 Comm: syz.2.1276 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 152.319454][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.319468][ T9158] Call Trace: [ 152.319476][ T9158] [ 152.319484][ T9158] dump_stack_lvl+0xf2/0x150 [ 152.319511][ T9158] dump_stack+0x15/0x1a [ 152.319532][ T9158] should_fail_ex+0x24a/0x260 [ 152.319642][ T9158] should_fail+0xb/0x10 [ 152.319673][ T9158] should_fail_usercopy+0x1a/0x20 [ 152.319744][ T9158] copy_page_from_iter_atomic+0x22a/0xf80 [ 152.319783][ T9158] ? shmem_write_begin+0xa2/0x180 [ 152.319804][ T9158] ? shmem_write_begin+0xda/0x180 [ 152.319867][ T9158] generic_perform_write+0x2d0/0x4a0 [ 152.319904][ T9158] shmem_file_write_iter+0xc2/0xe0 [ 152.319930][ T9158] vfs_write+0x77b/0x920 [ 152.319959][ T9158] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 152.319995][ T9158] ksys_write+0xe8/0x1b0 [ 152.320058][ T9158] __x64_sys_write+0x42/0x50 [ 152.320154][ T9158] x64_sys_call+0x287e/0x2dc0 [ 152.320248][ T9158] do_syscall_64+0xc9/0x1c0 [ 152.320282][ T9158] ? clear_bhb_loop+0x55/0xb0 [ 152.320316][ T9158] ? clear_bhb_loop+0x55/0xb0 [ 152.320395][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.320426][ T9158] RIP: 0033:0x7fdf5281d169 [ 152.320443][ T9158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.320464][ T9158] RSP: 002b:00007fdf50e87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.320541][ T9158] RAX: ffffffffffffffda RBX: 00007fdf52a35fa0 RCX: 00007fdf5281d169 [ 152.320553][ T9158] RDX: 000000000208e24b RSI: 0000200000001400 RDI: 0000000000000003 [ 152.320567][ T9158] RBP: 00007fdf50e87090 R08: 0000000000000000 R09: 0000000000000000 [ 152.320582][ T9158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.320595][ T9158] R13: 0000000000000000 R14: 00007fdf52a35fa0 R15: 00007ffe7c7e8b48 [ 152.320616][ T9158] [ 152.946683][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1286'. [ 152.977755][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 152.977775][ T29] audit: type=1326 audit(1742794156.823:13923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.020742][ T29] audit: type=1326 audit(1742794156.853:13924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.044327][ T29] audit: type=1326 audit(1742794156.853:13925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.068018][ T29] audit: type=1326 audit(1742794156.853:13926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.091628][ T29] audit: type=1326 audit(1742794156.853:13927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.115226][ T29] audit: type=1326 audit(1742794156.853:13928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.138830][ T29] audit: type=1326 audit(1742794156.853:13929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.162353][ T29] audit: type=1326 audit(1742794156.853:13930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.186086][ T29] audit: type=1326 audit(1742794156.853:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.209700][ T29] audit: type=1326 audit(1742794156.853:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9182 comm="syz.5.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21559d169 code=0x7ffc0000 [ 153.611803][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1290'. [ 153.915729][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 154.355773][ T9232] FAULT_INJECTION: forcing a failure. [ 154.355773][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 154.368538][ T9232] CPU: 1 UID: 0 PID: 9232 Comm: syz.5.1301 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 154.368565][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.368579][ T9232] Call Trace: [ 154.368587][ T9232] [ 154.368595][ T9232] dump_stack_lvl+0xf2/0x150 [ 154.368627][ T9232] dump_stack+0x15/0x1a [ 154.368653][ T9232] should_fail_ex+0x24a/0x260 [ 154.368734][ T9232] should_failslab+0x8f/0xb0 [ 154.368764][ T9232] kmem_cache_alloc_node_noprof+0x59/0x320 [ 154.368827][ T9232] ? __alloc_skb+0x10b/0x310 [ 154.368851][ T9232] __alloc_skb+0x10b/0x310 [ 154.368874][ T9232] netlink_alloc_large_skb+0xad/0xe0 [ 154.368966][ T9232] netlink_sendmsg+0x3b4/0x6e0 [ 154.368988][ T9232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.369041][ T9232] __sock_sendmsg+0x140/0x180 [ 154.369147][ T9232] ____sys_sendmsg+0x326/0x4b0 [ 154.369177][ T9232] __sys_sendmsg+0x19d/0x230 [ 154.369217][ T9232] __x64_sys_sendmsg+0x46/0x50 [ 154.369242][ T9232] x64_sys_call+0x2734/0x2dc0 [ 154.369348][ T9232] do_syscall_64+0xc9/0x1c0 [ 154.369384][ T9232] ? clear_bhb_loop+0x55/0xb0 [ 154.369411][ T9232] ? clear_bhb_loop+0x55/0xb0 [ 154.369437][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.369463][ T9232] RIP: 0033:0x7ff21559d169 [ 154.369477][ T9232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.369538][ T9232] RSP: 002b:00007ff213c07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.369556][ T9232] RAX: ffffffffffffffda RBX: 00007ff2157b5fa0 RCX: 00007ff21559d169 [ 154.369568][ T9232] RDX: 0000000020004804 RSI: 0000200000000500 RDI: 0000000000000003 [ 154.369579][ T9232] RBP: 00007ff213c07090 R08: 0000000000000000 R09: 0000000000000000 [ 154.369624][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.369635][ T9232] R13: 0000000000000000 R14: 00007ff2157b5fa0 R15: 00007fff968e2d28 [ 154.369653][ T9232] [ 154.619724][ T9235] netlink: 'syz.5.1303': attribute type 21 has an invalid length. [ 154.637845][ T9236] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 154.660875][ T9236] team0: Device ipvlan0 failed to register rx_handler [ 154.936579][ T9259] FAULT_INJECTION: forcing a failure. [ 154.936579][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 154.949404][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.0.1311 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 154.949435][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.949447][ T9259] Call Trace: [ 154.949453][ T9259] [ 154.949461][ T9259] dump_stack_lvl+0xf2/0x150 [ 154.949505][ T9259] dump_stack+0x15/0x1a [ 154.949532][ T9259] should_fail_ex+0x24a/0x260 [ 154.949570][ T9259] should_failslab+0x8f/0xb0 [ 154.949606][ T9259] kmem_cache_alloc_node_noprof+0x59/0x320 [ 154.949687][ T9259] ? __alloc_skb+0x10b/0x310 [ 154.949716][ T9259] __alloc_skb+0x10b/0x310 [ 154.949744][ T9259] netlink_ack+0xef/0x4f0 [ 154.949793][ T9259] netlink_rcv_skb+0x19c/0x230 [ 154.949892][ T9259] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.949928][ T9259] genl_rcv+0x28/0x40 [ 154.949949][ T9259] netlink_unicast+0x599/0x670 [ 154.949980][ T9259] netlink_sendmsg+0x5cc/0x6e0 [ 154.950042][ T9259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.950065][ T9259] __sock_sendmsg+0x140/0x180 [ 154.950100][ T9259] ____sys_sendmsg+0x326/0x4b0 [ 154.950137][ T9259] __sys_sendmsg+0x19d/0x230 [ 154.950225][ T9259] __x64_sys_sendmsg+0x46/0x50 [ 154.950255][ T9259] x64_sys_call+0x2734/0x2dc0 [ 154.950352][ T9259] do_syscall_64+0xc9/0x1c0 [ 154.950424][ T9259] ? clear_bhb_loop+0x55/0xb0 [ 154.950452][ T9259] ? clear_bhb_loop+0x55/0xb0 [ 154.950498][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.950531][ T9259] RIP: 0033:0x7f1d3a89d169 [ 154.950551][ T9259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.950572][ T9259] RSP: 002b:00007f1d38f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.950594][ T9259] RAX: ffffffffffffffda RBX: 00007f1d3aab5fa0 RCX: 00007f1d3a89d169 [ 154.950632][ T9259] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.950644][ T9259] RBP: 00007f1d38f07090 R08: 0000000000000000 R09: 0000000000000000 [ 154.950656][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.950668][ T9259] R13: 0000000000000000 R14: 00007f1d3aab5fa0 R15: 00007ffced4b1d98 [ 154.950686][ T9259] [ 155.233585][ T9271] ================================================================== [ 155.241718][ T9271] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 155.249471][ T9271] [ 155.251795][ T9271] write to 0xffff8881301e3b10 of 8 bytes by task 9267 on cpu 0: [ 155.259428][ T9271] mas_wr_store_entry+0x1222/0x23f0 [ 155.264646][ T9271] mas_store_prealloc+0x6bf/0x960 [ 155.269699][ T9271] commit_merge+0x441/0x740 [ 155.274252][ T9271] vma_expand+0x211/0x360 [ 155.278609][ T9271] vma_merge_new_range+0x2da/0x340 [ 155.283748][ T9271] mmap_region+0x7e0/0x1620 [ 155.288264][ T9271] do_mmap+0x98a/0xc30 [ 155.292365][ T9271] vm_mmap_pgoff+0x16d/0x2d0 [ 155.296977][ T9271] ksys_mmap_pgoff+0xd0/0x330 [ 155.301670][ T9271] x64_sys_call+0x1940/0x2dc0 [ 155.306362][ T9271] do_syscall_64+0xc9/0x1c0 [ 155.310882][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.316786][ T9271] [ 155.319109][ T9271] read to 0xffff8881301e3b10 of 8 bytes by task 9271 on cpu 1: [ 155.326649][ T9271] mtree_range_walk+0x1b4/0x460 [ 155.331516][ T9271] mas_walk+0x16e/0x320 [ 155.335683][ T9271] lock_vma_under_rcu+0x95/0x270 [ 155.340625][ T9271] exc_page_fault+0x150/0x650 [ 155.345312][ T9271] asm_exc_page_fault+0x26/0x30 [ 155.350175][ T9271] [ 155.352499][ T9271] value changed: 0x00007f1d38ec5fff -> 0x00007f1d38ea4fff [ 155.359605][ T9271] [ 155.361927][ T9271] Reported by Kernel Concurrency Sanitizer on: [ 155.368081][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.0.1315 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 155.378759][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.388825][ T9271] ==================================================================