last executing test programs: 2m59.620510613s ago: executing program 1 (id=11048): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x400000) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = eventfd2(0xff, 0x1) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x40) io_submit(r1, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, r0, &(0x7f0000000080)="0fd08ab7457e707bed918d6fe55d292926ab42ce5cc4", 0x16, 0x7ff, 0x0, 0x1, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000000140)="6c4264d45c27565d15d0cbe2f1a2e8e504e108f999d8833289149c8ac169a911b1608f02620fc811f0de089be2bcdfccca19561d481b03d80496517faea2a2f5b12bc4e2681c4160a4e2f54d", 0x4c, 0x1, 0x0, 0x3}]) r4 = syz_clone3(&(0x7f0000000480)={0x2814000, &(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380), {0x25}, &(0x7f00000003c0)=""/20, 0x14, &(0x7f0000000400)=""/11, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) r6 = creat(&(0x7f0000000500)='./file0\x00', 0x60) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x2, 0x8, 0x7f, 0x0, 0x7, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3c, 0x2, @perf_bp={&(0x7f0000000240), 0xb}, 0x9100, 0x5, 0x9, 0x5, 0x4, 0xe, 0x401, 0x0, 0xf, 0x0, 0x9d5a}, r4, 0xb, r6, 0x9) syz_open_dev$sg(&(0x7f0000000540), 0x4, 0x220340) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{0x20, '/dev/sg#\x00'}, {}, {0x20, '/dev/sg#\x00'}, {0x20, ',{'}, {0x20, '$&}$}%.:'}, {0x20, '/dev/hidraw#\x00'}, {}], 0xa, "ee4152ad2677b73adcc9ad9083308a1207d2debd5e739421ddb29bbb5313bb183bc08f94db44c55fb067a4caa3965da7a98f7e979fc14079b3e16c5605da3502e7e03778c987a3f3d65ab7512763c4c636f368bd6594cf963eb918b435c822a260d615a38e979c02091711984c9b686e6fd7ad9a4e1c7114b220ee62059375f21cc7069d07e12226d5107582f17389bfa3415804d4e272d82b99f9e8de7a3b6a89bef6866f7f41ee6a1dd68b1255682e62168e74b9c7500dec3892cf1579ca37bd6040b6d24bdac153fc2cf79a8202dbf9fb6f5934e2eb6a1cf84ff2bdc2ff6f893f"}, 0x11d) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000006c0)={0x0, 0x1e6, 0xd, 0x7}, &(0x7f0000000700)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000740)={r8, 0x4}, &(0x7f0000000780)=0x8) capget(&(0x7f00000007c0)={0x19980330, r5}, &(0x7f0000000800)={0xffffffff, 0x4, 0x7, 0x1, 0x200, 0x81}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x10, 0x8000, 0x26e, 0x10000, {{0x16, 0x4, 0x2, 0x3, 0x58, 0x67, 0x0, 0x3, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x2b, 0xb2, [@private=0xa010102, @local, @empty, @remote, @multicast1, @loopback, @multicast1, @multicast2, @multicast2, @remote]}, @generic={0x44, 0x10, "2eb934f752184c42b346230053e3"}, @generic={0x82, 0x4, "c4d0"}, @ra={0x94, 0x4}, @noop]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x5, 0x0, r6, 0x7fff, '\x00', r10, r6, 0x0, 0x3, 0x5}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000980)) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/meminfo\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000a00)={r9, 0x17}, &(0x7f0000000a40)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000a80)=0x2, 0x4) epoll_create(0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r6, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r6}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x25, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd4}, [@generic={0x81, 0x9, 0x7, 0xe97c, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000cc0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x24, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[r13, r11, r0], &(0x7f0000000dc0)=[{0x0, 0x1, 0x2}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x9e9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f00)={&(0x7f0000000ec0)='erofs_readpages\x00', r11, 0x0, 0x4}, 0x18) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x4, [@union={0x6, 0xa, 0x0, 0x5, 0x0, 0x3ff, [{0x7, 0x1, 0x3}, {0x7, 0x0, 0xffffffff}, {0x1, 0x2, 0xa}, {0x2, 0x1, 0x7}, {0x4, 0x0, 0x3}, {0x5, 0x0, 0x4}, {0x3, 0x4, 0x81}, {0x7, 0x4, 0x1}, {0xc, 0x4}, {0x9, 0x2, 0x8}]}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x8, [{0xb, 0x7fffffff, 0x5}, {0xf, 0x246, 0xffffeeb8}, {0x7, 0xd5, 0x5}, {0xa, 0x81, 0x4}, {0xf, 0x9, 0x5}, {0x7, 0x20000, 0xffffffff}, {0x8, 0x6, 0x6}]}, @enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0xc, [{0xc, 0x70, 0xf431}, {0xc, 0x4, 0x6}, {0xb, 0xc, 0x4}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x1, 0x7}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000011c0)=""/62, 0x140, 0x3e, 0x1, 0x4, 0x10000, @value=r11}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x9, 0xa, &(0x7f0000000f40)=@raw=[@jmp={0x5, 0x1, 0x1, 0x5, 0x6, 0x1, 0xffffffffffffffff}, @printk={@lld}, @call={0x85, 0x0, 0x0, 0xc9}], &(0x7f0000000fc0)='GPL\x00', 0x3ff, 0x55, &(0x7f0000001000)=""/85, 0x41000, 0x1, '\x00', r10, @cgroup_sock=0xf4f984ebc502bd66, r14, 0x8, &(0x7f0000001240)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0x9, 0x4, 0x1}, 0x10, 0x0, r11, 0x0, &(0x7f00000012c0)=[r7, r11], 0x0, 0x10, 0xfffffffa}, 0x94) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000013c0), &(0x7f0000001400)=0x8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb, 0x100010, r14, 0x1c008000) 2m59.376074997s ago: executing program 1 (id=11054): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21080e, &(0x7f00000002c0)={[{@grpquota}, {@abort}, {@data_journal}]}, 0x1, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000090000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02400000010000000005000000000000000000bca2c1c300f20000006bd5d2934ccbfb53c5e3a1a910b72c559674e7824cc42f28f4616941cd97c09eac2a2a66447fa2e623cdefab85963d488465c21d1034875a076830030980a4087e7c0f77da5045d812e350c63e108fcc464ed5dd006eafcfaf99ebfa6c62356d8f0139e845bb70a60cc28f8233a40af87a690d8d2afea0b358ded8c124825274e1"], 0x50) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x3, &(0x7f0000000740)=[{0x0, 0xff, 0x7, 0x1}, {0x2a2c, 0xff, 0x6}, {0x2a, 0x3, 0x5, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) memfd_secret(0x80000) write$cgroup_devices(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='c \x00\x00\x00\x00\x00\x00\x00'], 0x9) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m59.215259419s ago: executing program 1 (id=11061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 2m59.17567279s ago: executing program 1 (id=11062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f00000500070088"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$inet6(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0800e42aba786d556a1f000002000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f50850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@test_dummy_encryption_v1}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0xd4) unlink(&(0x7f0000000000)='./file1\x00') pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5404, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77e, &(0x7f0000001cc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 2m58.749289196s ago: executing program 1 (id=11067): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x0, &(0x7f0000000500)}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x3, 0x9, 0x10, @mcast2, @mcast1, 0x8080, 0x708, 0x63a, 0x7}}) r1 = creat(&(0x7f00000006c0)='./file0\x00', 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4, 0x0, &(0x7f00000002c0)="800000e1", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x40}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r1, @ANYBLOB="18104b9c3e0700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20000000000000e6, &(0x7f0000000380)=ANY=[], 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff68}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x1a303e43) syz_emit_ethernet(0x4a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600000000014060100000000000000000000000000000000fe8000000000000000000000000000aa4e244e226a48ae70157f83439c9617ddba48ff6801f8f0a3190ea7962424fb9a551a5b8cfd536ec73d52c758530f57812cc97c85953d9114beb091f646a76b5d3aefdc155773d69d1f4c4fe5ea1b637384a68de198d4d5f955510c3c2933da3e1a783960835fd054e89a97fed78466f20d6279b6c7cd29c94e8c07dac5770db53f5bc060dbebf606a63f9f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r3], 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x88) write$binfmt_elf32(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x69) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0xe, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m58.46552753s ago: executing program 1 (id=11077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x9, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x1a9000) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0xc8, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x58b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}]}]}, 0xc8}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = socket(0x25, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0xc001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002200)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) 2m58.416374681s ago: executing program 32 (id=11077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x9, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x1a9000) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0xc8, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x4}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x58b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}]}]}]}, 0xc8}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = socket(0x25, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0xc001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r11 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002200)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) 3.037155787s ago: executing program 4 (id=14122): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x64842, 0x5a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000130a0101"], 0x174}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000800) 2.644657382s ago: executing program 4 (id=14128): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r5, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 2.138155499s ago: executing program 4 (id=14135): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="25a5c6ba0e84b763", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40001) 1.106044504s ago: executing program 2 (id=14149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000008f070000186400000b000000000000000400000018490000faffffff0000000000000000501ed7c7b39c186400000700000000000000ffffffff18350000020000000000000000000000185400000c0000000000000000000000180000002158d94a00000000110300009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x3ff, 0x49, &(0x7f0000000340)=""/73, 0x41000, 0x71, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x2, 0x5, 0x9e1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r2], &(0x7f0000000500)=[{0x3, 0x2, 0x1, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x5, 0x1, 0x4, 0xc}], 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") 1.105721424s ago: executing program 2 (id=14150): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) open(0x0, 0x64842, 0x5a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000130a0101"], 0x174}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000800) 1.013873396s ago: executing program 5 (id=14151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_emit_ethernet(0x7a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000780)={0x7f}, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000049af3d4973b3800f400000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r5, 0x0, 0x5}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x65, 0x45, ""/69}, &(0x7f00000000c0)=0x65, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1024, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x8, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./file0/file0\x00', 0x46) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = memfd_create(&(0x7f00000012c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xc3\xf4\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r5, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd1}, 0x40048c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 871.890308ms ago: executing program 0 (id=14153): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x385}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)) r3 = syz_io_uring_setup(0x49b, 0x0, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f0000000100)='./bus\x00', 0x110) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0012}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESOCT, @ANYBLOB="3bbe74dd570c25004f0631fba747ac7813f981cdf7b47aabecd9f1b82dd537196be61c501ffc25759ac2f1284e138d2c787cf8dae604ad609322a5c925a863073776bdafc6037ad4925e79a7faa18043173597cccf7f178680d541c362c033efe64bcc1415665dd25c3c269fec9b59dc78ddf36917cf0d194640c3237469441c047f69a00133238b377322412156cb1039f7c383319fe70dbeed77332db814ba7817ba8d58be2efe6147460f4fc25d7c48f331ec1426812eef59ad44eea63b2a9bb4649ddde13a6af3e3530477fedff699fa6587f181946c24165ac3", @ANYRESHEX=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 871.326008ms ago: executing program 5 (id=14154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 855.112198ms ago: executing program 2 (id=14155): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r1, 0x8, 0xf1, 0xf, 0x5a, 0x5}, &(0x7f0000000040)=0x14) 836.570968ms ago: executing program 5 (id=14157): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r0, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r5, 0x0, 0x0, 0x1001f0) fallocate(r5, 0x3, 0x9, 0x10000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000001200)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 698.80464ms ago: executing program 4 (id=14164): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x8, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 677.26361ms ago: executing program 4 (id=14165): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21080e, &(0x7f00000002c0)={[{@grpquota}, {@abort}, {@data_journal}]}, 0x1, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000090000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02400000010000000005000000000000000000bca2c1c300f20000006bd5d2934ccbfb53c5e3a1a910b72c559674e7824cc42f28f4616941cd97c09eac2a2a66447fa2e623cdefab85963d488465c21d1034875a076830030980a4087e7c0f77da5045d812e350c63e108fcc464ed5dd006eafcfaf99ebfa6c62356d8f0139e845bb70a60cc28f8233a40af87a690d8d2afea0b358ded8c124825274e1"], 0x50) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000740)=[{0x2a2c, 0xff, 0x6}, {0x2a, 0x3, 0x5, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) memfd_secret(0x80000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c \x00\x00\x00\x00\x00\x00\x00'], 0x9) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 651.437631ms ago: executing program 4 (id=14166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x7, 0xfe5d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x2c020400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000007780)={0x0, 0x21451, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r2, 0x8ba, 0x696d, 0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r5}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='task_newtask\x00', r6}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000001ec3b5f6a000000ffffffff850000002f0000009500000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SPACE_INFO(r11, 0xc0109414, &(0x7f0000000340)={0x4d2, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 601.586892ms ago: executing program 3 (id=14169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 578.773992ms ago: executing program 3 (id=14170): io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0xfffffff, 0x1000f4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x20, 0x8000, 0x8, 0x0, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x65, 0x0, 0xf4, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x6, 0xffffffffffffffff}, @rr={0x7, 0x3, 0x1a}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='console\x00'}, 0xf) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000) 534.568283ms ago: executing program 3 (id=14171): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0x6) 471.550613ms ago: executing program 3 (id=14172): creat(0x0, 0x0) r0 = gettid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x254000, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) io_uring_setup(0x487a, &(0x7f00000000c0)={0x0, 0x2584, 0x2000, 0x2, 0x3, 0x0, r3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) 457.856014ms ago: executing program 3 (id=14173): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 445.573404ms ago: executing program 3 (id=14174): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="25a5c6ba0e84b763", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40001) 118.492038ms ago: executing program 0 (id=14175): r0 = socket(0x2b, 0x80801, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f00000000c0)=0x12d9, 0x4) syz_io_uring_setup(0x79c8, &(0x7f0000000180)={0x0, 0x126a4, 0x8, 0x1, 0x400033f}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 83.922499ms ago: executing program 0 (id=14176): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21080e, &(0x7f00000002c0)={[{@grpquota}, {@abort}, {@data_journal}]}, 0x1, 0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000090000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="02400000010000000005000000000000000000bca2c1c300f20000006bd5d2934ccbfb53c5e3a1a910b72c559674e7824cc42f28f4616941cd97c09eac2a2a66447fa2e623cdefab85963d488465c21d1034875a076830030980a4087e7c0f77da5045d812e350c63e108fcc464ed5dd006eafcfaf99ebfa6c62356d8f0139e845bb70a60cc28f8233a40af87a690d8d2afea0b358ded8c124825274e1"], 0x50) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000000440)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000740)=[{0x2a2c, 0xff, 0x6}, {0x2a, 0x3, 0x5, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) memfd_secret(0x80000) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='c \x00\x00\x00\x00\x00\x00\x00'], 0x9) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 83.502719ms ago: executing program 0 (id=14177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000500)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) 41.0326ms ago: executing program 2 (id=14178): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 40.4867ms ago: executing program 5 (id=14179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/98) 15.90923ms ago: executing program 2 (id=14180): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000540)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 15.67357ms ago: executing program 5 (id=14181): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffce5, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x4}]}}}]}, 0x48}}, 0x0) 15.41827ms ago: executing program 0 (id=14182): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x415}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 2.77597ms ago: executing program 2 (id=14183): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) close(r0) (async, rerun: 32) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x10000, 0x8, 0xfffffffd, 0x8}) r6 = io_uring_setup(0x563b, &(0x7f00000000c0)={0x0, 0xfffffff6, 0x800, 0x400, 0x20002bb}) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=14184): creat(0x0, 0x0) r0 = gettid() read$ptp(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) io_uring_setup(0x487a, &(0x7f00000000c0)={0x0, 0x2584, 0x2000, 0x2, 0x3, 0x0, r3}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'cpuset'}]}, 0x8) kernel console output (not intermixed with test programs): fed97a0e929 code=0x7ffc0000 [ 749.271753][ T29] audit: type=1326 audit(2000002875.093:110111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed97a10847 code=0x7ffc0000 [ 749.303338][ T8208] lo speed is unknown, defaulting to 1000 [ 749.784687][ T8245] FAULT_INJECTION: forcing a failure. [ 749.784687][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.797835][ T8245] CPU: 1 UID: 0 PID: 8245 Comm: syz.3.12966 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 749.797864][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.797894][ T8245] Call Trace: [ 749.797900][ T8245] [ 749.797908][ T8245] __dump_stack+0x1d/0x30 [ 749.797931][ T8245] dump_stack_lvl+0xe8/0x140 [ 749.797952][ T8245] dump_stack+0x15/0x1b [ 749.797970][ T8245] should_fail_ex+0x265/0x280 [ 749.798000][ T8245] should_fail+0xb/0x20 [ 749.798102][ T8245] should_fail_usercopy+0x1a/0x20 [ 749.798178][ T8245] _copy_from_iter+0xcf/0xe40 [ 749.798209][ T8245] ? __build_skb_around+0x1a0/0x200 [ 749.798279][ T8245] ? __alloc_skb+0x223/0x320 [ 749.798420][ T8245] netlink_sendmsg+0x471/0x6b0 [ 749.798462][ T8245] ? __pfx_netlink_sendmsg+0x10/0x10 [ 749.798559][ T8245] __sock_sendmsg+0x142/0x180 [ 749.798647][ T8245] ____sys_sendmsg+0x31e/0x4e0 [ 749.798691][ T8245] ___sys_sendmsg+0x17b/0x1d0 [ 749.798812][ T8245] __x64_sys_sendmsg+0xd4/0x160 [ 749.798844][ T8245] x64_sys_call+0x2999/0x2fb0 [ 749.798864][ T8245] do_syscall_64+0xd2/0x200 [ 749.798968][ T8245] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 749.799031][ T8245] ? clear_bhb_loop+0x40/0x90 [ 749.799053][ T8245] ? clear_bhb_loop+0x40/0x90 [ 749.799130][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.799154][ T8245] RIP: 0033:0x7f77768ae929 [ 749.799168][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.799186][ T8245] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.799207][ T8245] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 749.799240][ T8245] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 749.799254][ T8245] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 749.799270][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.799283][ T8245] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 749.799302][ T8245] [ 750.065968][ T8252] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 750.072482][ T8252] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 750.080155][ T8252] vhci_hcd vhci_hcd.0: Device attached [ 750.108475][ T8253] vhci_hcd: connection closed [ 750.108622][ T4724] vhci_hcd: stop threads [ 750.117679][ T4724] vhci_hcd: release socket [ 750.122098][ T4724] vhci_hcd: disconnect device [ 750.140517][ T8260] pim6reg: entered allmulticast mode [ 750.146295][ T8260] pim6reg: left allmulticast mode [ 750.467014][ T8263] random: crng reseeded on system resumption [ 750.560509][ T8277] FAULT_INJECTION: forcing a failure. [ 750.560509][ T8277] name failslab, interval 1, probability 0, space 0, times 0 [ 750.573271][ T8277] CPU: 1 UID: 0 PID: 8277 Comm: syz.5.12976 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 750.573327][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.573417][ T8277] Call Trace: [ 750.573479][ T8277] [ 750.573484][ T8277] __dump_stack+0x1d/0x30 [ 750.573498][ T8277] dump_stack_lvl+0xe8/0x140 [ 750.573509][ T8277] dump_stack+0x15/0x1b [ 750.573518][ T8277] should_fail_ex+0x265/0x280 [ 750.573591][ T8277] ? legacy_init_fs_context+0x31/0x80 [ 750.573631][ T8277] should_failslab+0x8c/0xb0 [ 750.573644][ T8277] __kmalloc_cache_noprof+0x4c/0x320 [ 750.573729][ T8277] legacy_init_fs_context+0x31/0x80 [ 750.573763][ T8277] alloc_fs_context+0x3ec/0x4e0 [ 750.573845][ T8277] fs_context_for_mount+0x22/0x30 [ 750.573861][ T8277] do_new_mount+0xe9/0x680 [ 750.573884][ T8277] path_mount+0x4a4/0xb20 [ 750.573901][ T8277] ? user_path_at+0x109/0x130 [ 750.573962][ T8277] __se_sys_mount+0x28f/0x2e0 [ 750.574008][ T8277] ? fput+0x8f/0xc0 [ 750.574021][ T8277] __x64_sys_mount+0x67/0x80 [ 750.574169][ T8277] x64_sys_call+0xd36/0x2fb0 [ 750.574181][ T8277] do_syscall_64+0xd2/0x200 [ 750.574199][ T8277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 750.574214][ T8277] ? clear_bhb_loop+0x40/0x90 [ 750.574280][ T8277] ? clear_bhb_loop+0x40/0x90 [ 750.574292][ T8277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.574340][ T8277] RIP: 0033:0x7fb98648e929 [ 750.574350][ T8277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.574379][ T8277] RSP: 002b:00007fb984af7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 750.574390][ T8277] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648e929 [ 750.574397][ T8277] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 750.574405][ T8277] RBP: 00007fb984af7090 R08: 0000200000000240 R09: 0000000000000000 [ 750.574412][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.574471][ T8277] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 750.574489][ T8277] [ 750.796492][ T8279] 9pnet_fd: Insufficient options for proto=fd [ 750.845192][ T8281] lo speed is unknown, defaulting to 1000 [ 750.898562][ T8288] 8021q: VLANs not supported on nlmon0 [ 751.011848][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12991'. [ 751.029474][ T8314] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(14) [ 751.036085][ T8314] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 751.043762][ T8314] vhci_hcd vhci_hcd.0: Device attached [ 751.111799][ T8321] pim6reg: entered allmulticast mode [ 751.119295][ T8321] pim6reg: left allmulticast mode [ 751.180016][ T8315] netlink: 248 bytes leftover after parsing attributes in process `syz.0.12986'. [ 751.248076][ T602] vhci_hcd: vhci_device speed not set [ 751.297020][ T8326] 9pnet_fd: Insufficient options for proto=fd [ 751.325089][ T8327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12992'. [ 751.334009][ T602] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 751.394225][ T8314] Set syz1 is full, maxelem 65536 reached [ 751.402243][ T8331] 8021q: VLANs not supported on nlmon0 [ 751.407885][ T8316] vhci_hcd: connection reset by peer [ 751.417105][ T12] vhci_hcd: stop threads [ 751.421364][ T12] vhci_hcd: release socket [ 751.425889][ T12] vhci_hcd: disconnect device [ 751.591191][ T8348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13002'. [ 751.728461][ T8354] lo speed is unknown, defaulting to 1000 [ 751.767883][ T8357] 8021q: VLANs not supported on nlmon0 [ 751.847776][ T8371] FAULT_INJECTION: forcing a failure. [ 751.847776][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.860899][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.5.13013 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 751.860926][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.860938][ T8371] Call Trace: [ 751.860944][ T8371] [ 751.860951][ T8371] __dump_stack+0x1d/0x30 [ 751.861029][ T8371] dump_stack_lvl+0xe8/0x140 [ 751.861049][ T8371] dump_stack+0x15/0x1b [ 751.861066][ T8371] should_fail_ex+0x265/0x280 [ 751.861148][ T8371] should_fail+0xb/0x20 [ 751.861173][ T8371] should_fail_usercopy+0x1a/0x20 [ 751.861204][ T8371] _copy_to_user+0x20/0xa0 [ 751.861223][ T8371] simple_read_from_buffer+0xb5/0x130 [ 751.861259][ T8371] proc_fail_nth_read+0x100/0x140 [ 751.861292][ T8371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.861420][ T8371] vfs_read+0x1a0/0x6f0 [ 751.861447][ T8371] ? __rcu_read_unlock+0x4f/0x70 [ 751.861471][ T8371] ? __fget_files+0x184/0x1c0 [ 751.861491][ T8371] ksys_read+0xda/0x1a0 [ 751.861583][ T8371] __x64_sys_read+0x40/0x50 [ 751.861614][ T8371] x64_sys_call+0x2d77/0x2fb0 [ 751.861658][ T8371] do_syscall_64+0xd2/0x200 [ 751.861688][ T8371] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 751.861713][ T8371] ? clear_bhb_loop+0x40/0x90 [ 751.861743][ T8371] ? clear_bhb_loop+0x40/0x90 [ 751.861787][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.861807][ T8371] RIP: 0033:0x7fb98648d33c [ 751.861821][ T8371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 751.861837][ T8371] RSP: 002b:00007fb984af7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 751.861858][ T8371] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648d33c [ 751.861878][ T8371] RDX: 000000000000000f RSI: 00007fb984af70a0 RDI: 0000000000000004 [ 751.861892][ T8371] RBP: 00007fb984af7090 R08: 0000000000000000 R09: 0000000000000000 [ 751.861904][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.861917][ T8371] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 751.861934][ T8371] [ 752.095219][ T8379] netlink: 'syz.5.13016': attribute type 1 has an invalid length. [ 752.103042][ T8379] netlink: 'syz.5.13016': attribute type 2 has an invalid length. [ 752.110984][ T8379] netlink: 132 bytes leftover after parsing attributes in process `syz.5.13016'. [ 752.130679][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13016'. [ 752.139946][ T8379] netlink: 'syz.5.13016': attribute type 30 has an invalid length. [ 752.147980][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13016'. [ 752.151363][ T8381] bond_slave_0: entered promiscuous mode [ 752.162714][ T8381] bond_slave_1: entered promiscuous mode [ 752.168339][ T8381] dummy0: entered promiscuous mode [ 752.173784][ T8381] vlan2: entered promiscuous mode [ 752.179040][ T8381] bond0: entered promiscuous mode [ 752.188950][ T8379] program syz.5.13016 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 752.222735][ T8385] lo speed is unknown, defaulting to 1000 [ 752.271865][ T8393] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 752.295938][ T8394] pim6reg: entered allmulticast mode [ 752.302206][ T8394] pim6reg: left allmulticast mode [ 752.429279][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13030'. [ 752.460125][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13029'. [ 752.597302][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13032'. [ 752.639271][ T8421] lo speed is unknown, defaulting to 1000 [ 752.997835][ T8430] lo speed is unknown, defaulting to 1000 [ 754.130233][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 754.130245][ T29] audit: type=1400 audit(2000002880.468:110310): avc: denied { read write } for pid=8452 comm="syz.2.13043" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 754.161820][ T29] audit: type=1400 audit(2000002880.468:110311): avc: denied { open } for pid=8452 comm="syz.2.13043" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 754.188846][ T8453] vxcan1: MTU too low for tipc bearer [ 754.194318][ T8453] tipc: Enabling of bearer rejected, failed to enable media [ 754.268077][ T29] audit: type=1400 audit(2000002880.619:110312): avc: denied { create } for pid=8465 comm="syz.2.13049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.290836][ T29] audit: type=1400 audit(2000002880.640:110313): avc: denied { bind } for pid=8465 comm="syz.2.13049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.310944][ T29] audit: type=1400 audit(2000002880.640:110314): avc: denied { read } for pid=8465 comm="syz.2.13049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.341488][ T29] audit: type=1400 audit(2000002880.704:110315): avc: denied { write } for pid=8465 comm="syz.2.13049" path="socket:[150035]" dev="sockfs" ino=150035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 754.633922][ T8478] lo speed is unknown, defaulting to 1000 [ 754.734187][ T29] audit: type=1400 audit(2000002881.123:110316): avc: denied { egress } for pid=5623 comm="napi/wg2-0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 754.758001][ T29] audit: type=1400 audit(2000002881.123:110317): avc: denied { sendto } for pid=5623 comm="napi/wg2-0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 754.830727][ T8482] 9pnet: Could not find request transport: t [ 754.876403][ T29] audit: type=1326 audit(2000002881.273:110318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.3.13055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 754.901945][ T29] audit: type=1326 audit(2000002881.273:110319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8486 comm="syz.3.13055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 754.999462][ T8497] 8021q: VLANs not supported on nlmon0 [ 755.095989][ T8501] FAULT_INJECTION: forcing a failure. [ 755.095989][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 755.108675][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.3.13059 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 755.108702][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.108714][ T8501] Call Trace: [ 755.108720][ T8501] [ 755.108727][ T8501] __dump_stack+0x1d/0x30 [ 755.108750][ T8501] dump_stack_lvl+0xe8/0x140 [ 755.108802][ T8501] dump_stack+0x15/0x1b [ 755.108816][ T8501] should_fail_ex+0x265/0x280 [ 755.108924][ T8501] ? alloc_netdev_mqs+0x86a/0xab0 [ 755.108959][ T8501] should_failslab+0x8c/0xb0 [ 755.108983][ T8501] __kmalloc_cache_noprof+0x4c/0x320 [ 755.109058][ T8501] alloc_netdev_mqs+0x86a/0xab0 [ 755.109094][ T8501] rtnl_create_link+0x239/0x710 [ 755.109125][ T8501] rtnl_newlink_create+0x14c/0x620 [ 755.109226][ T8501] ? security_capable+0x83/0x90 [ 755.109255][ T8501] ? netlink_ns_capable+0x86/0xa0 [ 755.109287][ T8501] rtnl_newlink+0xf29/0x12d0 [ 755.109324][ T8501] ? css_rstat_updated+0xcd/0x5b0 [ 755.109353][ T8501] ? __list_del_entry_valid_or_report+0x65/0x130 [ 755.109416][ T8501] ? __memcg_slab_free_hook+0x135/0x230 [ 755.109470][ T8501] ? __kfree_skb+0x109/0x150 [ 755.109501][ T8501] ? __rcu_read_unlock+0x4f/0x70 [ 755.109573][ T8501] ? avc_has_perm_noaudit+0x1b1/0x200 [ 755.109604][ T8501] ? selinux_capable+0x1f9/0x270 [ 755.109719][ T8501] ? security_capable+0x83/0x90 [ 755.109745][ T8501] ? ns_capable+0x7d/0xb0 [ 755.109761][ T8501] ? __pfx_rtnl_newlink+0x10/0x10 [ 755.109780][ T8501] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 755.109865][ T8501] netlink_rcv_skb+0x120/0x220 [ 755.109954][ T8501] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 755.109982][ T8501] rtnetlink_rcv+0x1c/0x30 [ 755.109998][ T8501] netlink_unicast+0x59e/0x670 [ 755.110060][ T8501] netlink_sendmsg+0x58b/0x6b0 [ 755.110135][ T8501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 755.110167][ T8501] __sock_sendmsg+0x142/0x180 [ 755.110242][ T8501] ____sys_sendmsg+0x31e/0x4e0 [ 755.110280][ T8501] ___sys_sendmsg+0x17b/0x1d0 [ 755.110320][ T8501] __x64_sys_sendmsg+0xd4/0x160 [ 755.110392][ T8501] x64_sys_call+0x2999/0x2fb0 [ 755.110420][ T8501] do_syscall_64+0xd2/0x200 [ 755.110450][ T8501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 755.110507][ T8501] ? clear_bhb_loop+0x40/0x90 [ 755.110608][ T8501] ? clear_bhb_loop+0x40/0x90 [ 755.110628][ T8501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.110650][ T8501] RIP: 0033:0x7f77768ae929 [ 755.110664][ T8501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.110751][ T8501] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.110771][ T8501] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 755.110785][ T8501] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 755.110798][ T8501] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 755.110812][ T8501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.110825][ T8501] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 755.110844][ T8501] [ 755.442062][ T8505] FAULT_INJECTION: forcing a failure. [ 755.442062][ T8505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.455336][ T8505] CPU: 1 UID: 0 PID: 8505 Comm: syz.5.13061 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 755.455366][ T8505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.455377][ T8505] Call Trace: [ 755.455388][ T8505] [ 755.455394][ T8505] __dump_stack+0x1d/0x30 [ 755.455472][ T8505] dump_stack_lvl+0xe8/0x140 [ 755.455493][ T8505] dump_stack+0x15/0x1b [ 755.455511][ T8505] should_fail_ex+0x265/0x280 [ 755.455538][ T8505] should_fail+0xb/0x20 [ 755.455560][ T8505] should_fail_usercopy+0x1a/0x20 [ 755.455614][ T8505] _copy_from_iter+0xcf/0xe40 [ 755.455644][ T8505] ? alloc_pages_mpol+0x201/0x250 [ 755.455677][ T8505] copy_page_from_iter+0x178/0x2a0 [ 755.455782][ T8505] tun_get_user+0x5f0/0x2500 [ 755.455863][ T8505] ? ref_tracker_alloc+0x1f2/0x2f0 [ 755.455990][ T8505] tun_chr_write_iter+0x15e/0x210 [ 755.456015][ T8505] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 755.456038][ T8505] vfs_write+0x4a0/0x8e0 [ 755.456100][ T8505] ksys_write+0xda/0x1a0 [ 755.456131][ T8505] __x64_sys_write+0x40/0x50 [ 755.456163][ T8505] x64_sys_call+0x2cdd/0x2fb0 [ 755.456183][ T8505] do_syscall_64+0xd2/0x200 [ 755.456299][ T8505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 755.456323][ T8505] ? clear_bhb_loop+0x40/0x90 [ 755.456343][ T8505] ? clear_bhb_loop+0x40/0x90 [ 755.456364][ T8505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.456398][ T8505] RIP: 0033:0x7fb98648d3df [ 755.456412][ T8505] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 755.456427][ T8505] RSP: 002b:00007fb984af7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 755.456445][ T8505] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648d3df [ 755.456512][ T8505] RDX: 00000000000000a0 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 755.456523][ T8505] RBP: 00007fb984af7090 R08: 0000000000000000 R09: 0000000000000000 [ 755.456535][ T8505] R10: 00000000000000a0 R11: 0000000000000293 R12: 0000000000000001 [ 755.456545][ T8505] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 755.456561][ T8505] [ 755.674593][ T8509] __nla_validate_parse: 4 callbacks suppressed [ 755.674605][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13062'. [ 755.708009][ T8514] netlink: 'syz.2.13065': attribute type 1 has an invalid length. [ 755.715862][ T8514] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13065'. [ 755.780811][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13066'. [ 755.793956][ T8515] lo speed is unknown, defaulting to 1000 [ 755.856743][ T8522] 8021q: VLANs not supported on nlmon0 [ 755.889074][ T8527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13070'. [ 756.106042][ T8533] lo speed is unknown, defaulting to 1000 [ 756.139702][ T602] vhci_hcd: vhci_device speed not set [ 756.399262][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13075'. [ 756.681367][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13078'. [ 756.734799][ T8553] netlink: 'syz.2.13079': attribute type 1 has an invalid length. [ 756.742669][ T8553] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13079'. [ 756.857023][ T8555] 8021q: VLANs not supported on nlmon0 [ 757.003746][ T8564] lo speed is unknown, defaulting to 1000 [ 757.076165][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13086'. [ 757.455349][ T8579] lo speed is unknown, defaulting to 1000 [ 757.711422][ T8583] netlink: 'syz.2.13091': attribute type 1 has an invalid length. [ 757.721296][ T8583] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13091'. [ 757.934262][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13092'. [ 757.945659][ T8587] 8021q: VLANs not supported on caif0 [ 757.986487][ T8592] No source specified [ 758.313626][ T8617] xt_ipcomp: unknown flags 12 [ 758.336296][ T8619] netlink: 'syz.3.13104': attribute type 1 has an invalid length. [ 758.456356][ T8621] 8021q: VLANs not supported on caif0 [ 758.668020][ T8627] lo speed is unknown, defaulting to 1000 [ 758.903480][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 758.903493][ T29] audit: type=1400 audit(2000002885.586:110415): avc: denied { name_bind } for pid=8635 comm="syz.2.13111" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 758.944913][ T29] audit: type=1400 audit(2000002885.586:110416): avc: denied { node_bind } for pid=8635 comm="syz.2.13111" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 759.108480][ T8646] 9pnet_fd: Insufficient options for proto=fd [ 759.108850][ T29] audit: type=1400 audit(2000002885.811:110417): avc: denied { ioctl } for pid=8633 comm="syz.5.13110" path="socket:[150751]" dev="sockfs" ino=150751 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 759.227883][ T8653] 8021q: VLANs not supported on caif0 [ 759.283768][ T29] audit: type=1326 audit(2000002886.005:110418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.307515][ T29] audit: type=1326 audit(2000002886.005:110419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.331229][ T29] audit: type=1326 audit(2000002886.005:110420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.354953][ T29] audit: type=1326 audit(2000002886.005:110421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.378688][ T29] audit: type=1326 audit(2000002886.005:110422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.402736][ T29] audit: type=1326 audit(2000002886.005:110423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.452609][ T29] audit: type=1326 audit(2000002886.005:110424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8658 comm="syz.2.13119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 759.494071][ T8669] lo speed is unknown, defaulting to 1000 [ 759.539574][ T8676] 9pnet_fd: Insufficient options for proto=fd [ 759.581793][ T8683] 8021q: VLANs not supported on caif0 [ 759.619340][ T8688] 9pnet_fd: Insufficient options for proto=fd [ 759.814403][ T8694] lo speed is unknown, defaulting to 1000 [ 760.144203][ T8706] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8706 comm=syz.4.13138 [ 760.182821][ T8710] 8021q: VLANs not supported on caif0 [ 760.212915][ T8714] 9pnet_fd: Insufficient options for proto=fd [ 760.344778][ T8721] FAULT_INJECTION: forcing a failure. [ 760.344778][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 760.357443][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.3.13145 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 760.357493][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 760.357560][ T8721] Call Trace: [ 760.357565][ T8721] [ 760.357569][ T8721] __dump_stack+0x1d/0x30 [ 760.357583][ T8721] dump_stack_lvl+0xe8/0x140 [ 760.357637][ T8721] dump_stack+0x15/0x1b [ 760.357646][ T8721] should_fail_ex+0x265/0x280 [ 760.357663][ T8721] ? ctnetlink_alloc_filter+0x4d/0x550 [ 760.357732][ T8721] should_failslab+0x8c/0xb0 [ 760.357745][ T8721] __kmalloc_cache_noprof+0x4c/0x320 [ 760.357762][ T8721] ctnetlink_alloc_filter+0x4d/0x550 [ 760.357797][ T8721] ctnetlink_del_conntrack+0x420/0x4f0 [ 760.357817][ T8721] nfnetlink_rcv_msg+0x4c3/0x590 [ 760.357841][ T8721] ? selinux_capable+0x1f9/0x270 [ 760.357910][ T8721] netlink_rcv_skb+0x120/0x220 [ 760.357927][ T8721] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 760.357944][ T8721] nfnetlink_rcv+0x16b/0x1690 [ 760.357958][ T8721] ? __kfree_skb+0x109/0x150 [ 760.357992][ T8721] ? nlmon_xmit+0x4f/0x60 [ 760.358020][ T8721] ? consume_skb+0x49/0x150 [ 760.358035][ T8721] ? nlmon_xmit+0x4f/0x60 [ 760.358046][ T8721] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 760.358066][ T8721] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 760.358145][ T8721] ? __dev_queue_xmit+0x182/0x1fb0 [ 760.358314][ T8721] ? ref_tracker_free+0x37d/0x3e0 [ 760.358333][ T8721] ? __netlink_deliver_tap+0x4dc/0x500 [ 760.358352][ T8721] netlink_unicast+0x59e/0x670 [ 760.358379][ T8721] netlink_sendmsg+0x58b/0x6b0 [ 760.358413][ T8721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.358444][ T8721] __sock_sendmsg+0x142/0x180 [ 760.358466][ T8721] ____sys_sendmsg+0x31e/0x4e0 [ 760.358492][ T8721] ___sys_sendmsg+0x17b/0x1d0 [ 760.358522][ T8721] __x64_sys_sendmsg+0xd4/0x160 [ 760.358576][ T8721] x64_sys_call+0x2999/0x2fb0 [ 760.358588][ T8721] do_syscall_64+0xd2/0x200 [ 760.358606][ T8721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 760.358653][ T8721] ? clear_bhb_loop+0x40/0x90 [ 760.358665][ T8721] ? clear_bhb_loop+0x40/0x90 [ 760.358677][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.358690][ T8721] RIP: 0033:0x7f77768ae929 [ 760.358699][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.358756][ T8721] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.358768][ T8721] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 760.358776][ T8721] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 760.358783][ T8721] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 760.358790][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.358797][ T8721] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 760.358836][ T8721] [ 760.720650][ T8734] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8734 comm=syz.3.13150 [ 760.752165][ T8738] 8021q: VLANs not supported on caif0 [ 760.774226][ T8742] 9pnet_fd: Insufficient options for proto=fd [ 761.155887][ T8757] xt_CT: No such helper "pptp" [ 761.175405][ T8761] FAULT_INJECTION: forcing a failure. [ 761.175405][ T8761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.188537][ T8761] CPU: 0 UID: 0 PID: 8761 Comm: syz.2.13161 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 761.188596][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.188608][ T8761] Call Trace: [ 761.188615][ T8761] [ 761.188623][ T8761] __dump_stack+0x1d/0x30 [ 761.188673][ T8761] dump_stack_lvl+0xe8/0x140 [ 761.188685][ T8761] dump_stack+0x15/0x1b [ 761.188694][ T8761] should_fail_ex+0x265/0x280 [ 761.188736][ T8761] should_fail+0xb/0x20 [ 761.188751][ T8761] should_fail_usercopy+0x1a/0x20 [ 761.188951][ T8761] _copy_from_user+0x1c/0xb0 [ 761.188963][ T8761] ___sys_sendmsg+0xc1/0x1d0 [ 761.188989][ T8761] __x64_sys_sendmsg+0xd4/0x160 [ 761.189009][ T8761] x64_sys_call+0x2999/0x2fb0 [ 761.189022][ T8761] do_syscall_64+0xd2/0x200 [ 761.189040][ T8761] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 761.189110][ T8761] ? clear_bhb_loop+0x40/0x90 [ 761.189122][ T8761] ? clear_bhb_loop+0x40/0x90 [ 761.189164][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.189176][ T8761] RIP: 0033:0x7fd4f43be929 [ 761.189186][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.189196][ T8761] RSP: 002b:00007fd4f2a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.189259][ T8761] RAX: ffffffffffffffda RBX: 00007fd4f45e5fa0 RCX: 00007fd4f43be929 [ 761.189267][ T8761] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 761.189274][ T8761] RBP: 00007fd4f2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 761.189281][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.189288][ T8761] R13: 0000000000000000 R14: 00007fd4f45e5fa0 R15: 00007ffc952699f8 [ 761.189299][ T8761] [ 761.422929][ T8771] 9pnet_fd: Insufficient options for proto=fd [ 761.436688][ T8773] __nla_validate_parse: 13 callbacks suppressed [ 761.436701][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13167'. [ 761.534584][ T8788] netlink: 'syz.2.13173': attribute type 1 has an invalid length. [ 761.542596][ T8788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13173'. [ 761.616337][ T8796] netlink: 'syz.0.13176': attribute type 10 has an invalid length. [ 761.630914][ T8796] syz_tun: entered promiscuous mode [ 761.650488][ T8796] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 761.662738][ T8802] 9pnet_fd: Insufficient options for proto=fd [ 761.669524][ T8796] netlink: 'syz.0.13176': attribute type 10 has an invalid length. [ 761.684793][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13180'. [ 761.689595][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.702668][ T8796] team0: Port device bond0 added [ 761.845472][ T8826] lo speed is unknown, defaulting to 1000 [ 762.047428][ T8833] FAULT_INJECTION: forcing a failure. [ 762.047428][ T8833] name failslab, interval 1, probability 0, space 0, times 0 [ 762.060144][ T8833] CPU: 0 UID: 0 PID: 8833 Comm: syz.0.13191 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 762.060170][ T8833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 762.060182][ T8833] Call Trace: [ 762.060190][ T8833] [ 762.060196][ T8833] __dump_stack+0x1d/0x30 [ 762.060240][ T8833] dump_stack_lvl+0xe8/0x140 [ 762.060261][ T8833] dump_stack+0x15/0x1b [ 762.060279][ T8833] should_fail_ex+0x265/0x280 [ 762.060304][ T8833] ? __hw_addr_add_ex+0x162/0x440 [ 762.060380][ T8833] should_failslab+0x8c/0xb0 [ 762.060399][ T8833] __kmalloc_cache_noprof+0x4c/0x320 [ 762.060427][ T8833] __hw_addr_add_ex+0x162/0x440 [ 762.060452][ T8833] dev_addr_init+0xb1/0x120 [ 762.060478][ T8833] alloc_netdev_mqs+0x212/0xab0 [ 762.060508][ T8833] ? __pfx_tun_setup+0x10/0x10 [ 762.060534][ T8833] tun_set_iff+0x42c/0x890 [ 762.060624][ T8833] __tun_chr_ioctl+0x5f0/0x14c0 [ 762.060698][ T8833] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 762.060724][ T8833] tun_chr_ioctl+0x27/0x40 [ 762.060749][ T8833] __se_sys_ioctl+0xce/0x140 [ 762.060847][ T8833] __x64_sys_ioctl+0x43/0x50 [ 762.060965][ T8833] x64_sys_call+0x19a8/0x2fb0 [ 762.060986][ T8833] do_syscall_64+0xd2/0x200 [ 762.061074][ T8833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 762.061096][ T8833] ? clear_bhb_loop+0x40/0x90 [ 762.061119][ T8833] ? clear_bhb_loop+0x40/0x90 [ 762.061138][ T8833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.061208][ T8833] RIP: 0033:0x7fed97a0e929 [ 762.061240][ T8833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.061260][ T8833] RSP: 002b:00007fed96077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.061277][ T8833] RAX: ffffffffffffffda RBX: 00007fed97c35fa0 RCX: 00007fed97a0e929 [ 762.061368][ T8833] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 762.061382][ T8833] RBP: 00007fed96077090 R08: 0000000000000000 R09: 0000000000000000 [ 762.061395][ T8833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.061409][ T8833] R13: 0000000000000000 R14: 00007fed97c35fa0 R15: 00007ffd6df17648 [ 762.061428][ T8833] [ 762.449211][ T8839] 9pnet_fd: Insufficient options for proto=fd [ 763.029093][ T8867] 9pnet_fd: Insufficient options for proto=fd [ 763.111227][ T8873] FAULT_INJECTION: forcing a failure. [ 763.111227][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 763.123933][ T8873] CPU: 1 UID: 0 PID: 8873 Comm: kfree Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 763.123990][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.124002][ T8873] Call Trace: [ 763.124034][ T8873] [ 763.124040][ T8873] __dump_stack+0x1d/0x30 [ 763.124059][ T8873] dump_stack_lvl+0xe8/0x140 [ 763.124079][ T8873] dump_stack+0x15/0x1b [ 763.124097][ T8873] should_fail_ex+0x265/0x280 [ 763.124142][ T8873] should_failslab+0x8c/0xb0 [ 763.124236][ T8873] kmem_cache_alloc_noprof+0x50/0x310 [ 763.124306][ T8873] ? skb_clone+0x151/0x1f0 [ 763.124338][ T8873] skb_clone+0x151/0x1f0 [ 763.124368][ T8873] __netlink_deliver_tap+0x2c9/0x500 [ 763.124475][ T8873] netlink_unicast+0x64c/0x670 [ 763.124522][ T8873] netlink_sendmsg+0x58b/0x6b0 [ 763.124551][ T8873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 763.124632][ T8873] __sock_sendmsg+0x142/0x180 [ 763.124654][ T8873] ____sys_sendmsg+0x31e/0x4e0 [ 763.124687][ T8873] ___sys_sendmsg+0x17b/0x1d0 [ 763.124743][ T8873] __x64_sys_sendmsg+0xd4/0x160 [ 763.124845][ T8873] x64_sys_call+0x2999/0x2fb0 [ 763.124864][ T8873] do_syscall_64+0xd2/0x200 [ 763.124900][ T8873] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 763.124929][ T8873] ? clear_bhb_loop+0x40/0x90 [ 763.124948][ T8873] ? clear_bhb_loop+0x40/0x90 [ 763.124985][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.125042][ T8873] RIP: 0033:0x7fd4f43be929 [ 763.125055][ T8873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.125071][ T8873] RSP: 002b:00007fd4f2a27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.125091][ T8873] RAX: ffffffffffffffda RBX: 00007fd4f45e5fa0 RCX: 00007fd4f43be929 [ 763.125105][ T8873] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 763.125118][ T8873] RBP: 00007fd4f2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 763.125129][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.125140][ T8873] R13: 0000000000000000 R14: 00007fd4f45e5fa0 R15: 00007ffc952699f8 [ 763.125231][ T8873] [ 763.125582][ T8873] netlink: 28 bytes leftover after parsing attributes in process `kfree'. [ 763.513726][ T8887] lo speed is unknown, defaulting to 1000 [ 763.615525][ T8895] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 763.665668][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 763.665681][ T29] audit: type=1326 audit(2000002890.704:110594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.701992][ T29] audit: type=1326 audit(2000002890.736:110595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.725742][ T29] audit: type=1326 audit(2000002890.736:110596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.748868][ T29] audit: type=1326 audit(2000002890.736:110597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.771907][ T29] audit: type=1326 audit(2000002890.736:110598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.795077][ T29] audit: type=1326 audit(2000002890.736:110599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.818186][ T29] audit: type=1326 audit(2000002890.736:110600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.841229][ T29] audit: type=1326 audit(2000002890.736:110601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.864258][ T29] audit: type=1326 audit(2000002890.736:110602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.887339][ T29] audit: type=1326 audit(2000002890.736:110603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 763.910692][ T597] IPVS: starting estimator thread 0... [ 763.996880][ T8902] IPVS: using max 2448 ests per chain, 122400 per kthread [ 764.396055][ T8916] lo speed is unknown, defaulting to 1000 [ 764.459787][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.532445][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 764.726515][ T8926] tmpfs: Bad value for 'mpol' [ 764.749221][ T8929] netlink: 'syz.5.13224': attribute type 1 has an invalid length. [ 764.757145][ T8929] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13224'. [ 765.014933][ T8936] netlink: 'syz.4.13226': attribute type 1 has an invalid length. [ 765.177333][ T8945] netlink: 'syz.3.13230': attribute type 1 has an invalid length. [ 765.185234][ T8945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13230'. [ 765.215432][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13233'. [ 765.228474][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13231'. [ 765.283650][ T8957] x_tables: duplicate underflow at hook 1 [ 765.293614][ T8962] No source specified [ 765.340294][ T8953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8953 comm=syz.0.13233 [ 765.428216][ T8970] 8021q: VLANs not supported on nlmon0 [ 765.601921][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13247'. [ 765.614603][ T8986] bridge0: port 3(macvlan2) entered blocking state [ 765.620289][ T8987] netlink: 'syz.2.13246': attribute type 1 has an invalid length. [ 765.621418][ T8986] bridge0: port 3(macvlan2) entered disabled state [ 765.628941][ T8987] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13246'. [ 765.654846][ T8986] macvlan2: entered allmulticast mode [ 765.660290][ T8986] bridge0: entered allmulticast mode [ 765.666001][ T8986] macvlan2: left allmulticast mode [ 765.671157][ T8986] bridge0: left allmulticast mode [ 765.695203][ T8989] No source specified [ 765.746092][ T8993] 9pnet_fd: Insufficient options for proto=fd [ 765.772179][ T8996] 8021q: VLANs not supported on nlmon0 [ 766.029430][ T9016] No source specified [ 766.204237][ T9029] pim6reg: entered allmulticast mode [ 766.214530][ T9029] pim6reg: left allmulticast mode [ 766.270021][ T9031] netlink: 'syz.4.13263': attribute type 1 has an invalid length. [ 766.277905][ T9031] __nla_validate_parse: 1 callbacks suppressed [ 766.277918][ T9031] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13263'. [ 766.401870][ T9035] netlink: 92 bytes leftover after parsing attributes in process `syz.3.13265'. [ 766.414451][ T9035] syzkaller1: entered promiscuous mode [ 766.419935][ T9035] syzkaller1: entered allmulticast mode [ 766.493771][ T9040] netlink: 'syz.3.13267': attribute type 1 has an invalid length. [ 766.528120][ T9040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.537196][ T9040] bond1: (slave bond2): making interface the new active one [ 766.545345][ T9040] bond1: (slave bond2): Enslaving as an active interface with an up link [ 766.565226][ T9040] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 766.575088][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13267'. [ 766.586767][ T9040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.618377][ T9044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=9044 comm=syz.3.13268 [ 766.666512][ T9048] lo speed is unknown, defaulting to 1000 [ 766.710550][ T9051] xt_CT: No such helper "pptp" [ 766.728304][ T9054] binfmt_misc: register: failed to install interpreter file ./file1 [ 766.739733][ T9054] TCP: TCP_TX_DELAY enabled [ 766.948073][ T9064] netlink: 'syz.2.13276': attribute type 1 has an invalid length. [ 766.955965][ T9064] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13276'. [ 767.137676][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13279'. [ 767.255946][ T9080] xt_CT: No such helper "pptp" [ 767.286395][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13283'. [ 767.317402][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13284'. [ 767.440468][ T9090] pim6reg: entered allmulticast mode [ 767.446244][ T9090] pim6reg: left allmulticast mode [ 767.650695][ T597] usb usb8-port1: attempt power cycle [ 767.750077][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13286'. [ 767.822624][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13289'. [ 767.863851][ T9104] 9pnet_fd: Insufficient options for proto=fd [ 768.013444][ T9110] 8021q: VLANs not supported on nlmon0 [ 768.051711][ T9112] xt_CT: No such helper "pptp" [ 768.085693][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13295'. [ 768.111546][ T9119] FAULT_INJECTION: forcing a failure. [ 768.111546][ T9119] name failslab, interval 1, probability 0, space 0, times 0 [ 768.124179][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.3.13297 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 768.124204][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.124214][ T9119] Call Trace: [ 768.124220][ T9119] [ 768.124227][ T9119] __dump_stack+0x1d/0x30 [ 768.124247][ T9119] dump_stack_lvl+0xe8/0x140 [ 768.124263][ T9119] dump_stack+0x15/0x1b [ 768.124276][ T9119] should_fail_ex+0x265/0x280 [ 768.124300][ T9119] should_failslab+0x8c/0xb0 [ 768.124317][ T9119] kmem_cache_alloc_noprof+0x50/0x310 [ 768.124337][ T9119] ? vm_area_dup+0x33/0x2c0 [ 768.124358][ T9119] vm_area_dup+0x33/0x2c0 [ 768.124379][ T9119] dup_mmap+0x501/0xf20 [ 768.124399][ T9119] copy_mm+0x11a/0x370 [ 768.124419][ T9119] copy_process+0xcf1/0x1f90 [ 768.124443][ T9119] kernel_clone+0x16c/0x5b0 [ 768.124462][ T9119] ? vfs_write+0x75e/0x8e0 [ 768.124486][ T9119] __x64_sys_clone+0xe6/0x120 [ 768.124512][ T9119] x64_sys_call+0x2c59/0x2fb0 [ 768.124528][ T9119] do_syscall_64+0xd2/0x200 [ 768.124560][ T9119] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 768.124582][ T9119] ? clear_bhb_loop+0x40/0x90 [ 768.124598][ T9119] ? clear_bhb_loop+0x40/0x90 [ 768.124615][ T9119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.124631][ T9119] RIP: 0033:0x7f77768ae929 [ 768.124643][ T9119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.124657][ T9119] RSP: 002b:00007f7774f16fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 768.124673][ T9119] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 768.124682][ T9119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 768.124692][ T9119] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 768.124701][ T9119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 768.124711][ T9119] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 768.124726][ T9119] [ 768.346405][ T9122] netlink: 'syz.3.13298': attribute type 1 has an invalid length. [ 768.363763][ T9125] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 768.370286][ T9125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 768.377919][ T9125] vhci_hcd vhci_hcd.0: Device attached [ 768.384994][ T9126] vhci_hcd: connection closed [ 768.385707][ T4702] vhci_hcd: stop threads [ 768.394854][ T4702] vhci_hcd: release socket [ 768.399320][ T4702] vhci_hcd: disconnect device [ 768.446144][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 768.446158][ T29] audit: type=1400 audit(2000002895.832:110900): avc: denied { create } for pid=9128 comm="syz.3.13300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 768.446504][ T9129] No source specified [ 768.617711][ T9138] lo speed is unknown, defaulting to 1000 [ 768.718964][ T9143] 8021q: VLANs not supported on nlmon0 [ 768.747030][ T9146] xt_CT: No such helper "pptp" [ 768.846456][ T9151] lo speed is unknown, defaulting to 1000 [ 768.908728][ T9150] lo speed is unknown, defaulting to 1000 [ 769.033477][ T9159] pim6reg: entered allmulticast mode [ 769.041335][ T9159] pim6reg: left allmulticast mode [ 769.049952][ T29] audit: type=1400 audit(2000002896.476:110901): avc: denied { egress } for pid=23 comm="kworker/1:0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 769.073681][ T29] audit: type=1400 audit(2000002896.476:110902): avc: denied { sendto } for pid=23 comm="kworker/1:0" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 769.268574][ T9166] No source specified [ 769.345451][ T29] audit: type=1326 audit(2000002896.787:110903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.369359][ T29] audit: type=1326 audit(2000002896.787:110904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.369476][ T597] usb usb8-port1: unable to enumerate USB device [ 769.393101][ T29] audit: type=1326 audit(2000002896.787:110905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.4.13312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.423060][ T29] audit: type=1326 audit(2000002896.787:110906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.423087][ T29] audit: type=1326 audit(2000002896.787:110907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.423111][ T29] audit: type=1326 audit(2000002896.787:110908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 769.423156][ T29] audit: type=1326 audit(2000002896.787:110909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e28160847 code=0x7ffc0000 [ 769.570686][ T9178] lo speed is unknown, defaulting to 1000 [ 769.670924][ T9187] FAULT_INJECTION: forcing a failure. [ 769.670924][ T9187] name failslab, interval 1, probability 0, space 0, times 0 [ 769.683685][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.5.13319 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 769.683712][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.683723][ T9187] Call Trace: [ 769.683745][ T9187] [ 769.683753][ T9187] __dump_stack+0x1d/0x30 [ 769.683775][ T9187] dump_stack_lvl+0xe8/0x140 [ 769.683856][ T9187] dump_stack+0x15/0x1b [ 769.683874][ T9187] should_fail_ex+0x265/0x280 [ 769.683905][ T9187] should_failslab+0x8c/0xb0 [ 769.683937][ T9187] kmem_cache_alloc_node_noprof+0x57/0x320 [ 769.683963][ T9187] ? __alloc_skb+0x101/0x320 [ 769.684050][ T9187] __alloc_skb+0x101/0x320 [ 769.684080][ T9187] netlink_ack+0xfd/0x500 [ 769.684116][ T9187] netlink_rcv_skb+0x192/0x220 [ 769.684185][ T9187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 769.684212][ T9187] rtnetlink_rcv+0x1c/0x30 [ 769.684232][ T9187] netlink_unicast+0x59e/0x670 [ 769.684367][ T9187] netlink_sendmsg+0x58b/0x6b0 [ 769.684451][ T9187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 769.684588][ T9187] __sock_sendmsg+0x142/0x180 [ 769.684614][ T9187] ____sys_sendmsg+0x31e/0x4e0 [ 769.684706][ T9187] ___sys_sendmsg+0x17b/0x1d0 [ 769.684777][ T9187] __x64_sys_sendmsg+0xd4/0x160 [ 769.684814][ T9187] x64_sys_call+0x2999/0x2fb0 [ 769.684837][ T9187] do_syscall_64+0xd2/0x200 [ 769.684907][ T9187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 769.684935][ T9187] ? clear_bhb_loop+0x40/0x90 [ 769.684961][ T9187] ? clear_bhb_loop+0x40/0x90 [ 769.685019][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.685121][ T9187] RIP: 0033:0x7fb98648e929 [ 769.685137][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.685155][ T9187] RSP: 002b:00007fb984af7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.685175][ T9187] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648e929 [ 769.685189][ T9187] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 769.685202][ T9187] RBP: 00007fb984af7090 R08: 0000000000000000 R09: 0000000000000000 [ 769.685261][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.685274][ T9187] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 769.685293][ T9187] [ 769.951035][ T9182] lo speed is unknown, defaulting to 1000 [ 769.986712][ T9194] 8021q: VLANs not supported on nlmon0 [ 770.256695][ T9221] FAULT_INJECTION: forcing a failure. [ 770.256695][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.269783][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.5.13334 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 770.269865][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.269878][ T9221] Call Trace: [ 770.269885][ T9221] [ 770.269892][ T9221] __dump_stack+0x1d/0x30 [ 770.269987][ T9221] dump_stack_lvl+0xe8/0x140 [ 770.270008][ T9221] dump_stack+0x15/0x1b [ 770.270025][ T9221] should_fail_ex+0x265/0x280 [ 770.270070][ T9221] should_fail+0xb/0x20 [ 770.270102][ T9221] should_fail_usercopy+0x1a/0x20 [ 770.270128][ T9221] _copy_to_user+0x20/0xa0 [ 770.270185][ T9221] simple_read_from_buffer+0xb5/0x130 [ 770.270226][ T9221] proc_fail_nth_read+0x100/0x140 [ 770.270257][ T9221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.270342][ T9221] vfs_read+0x1a0/0x6f0 [ 770.270396][ T9221] ? __rcu_read_unlock+0x4f/0x70 [ 770.270449][ T9221] ? __fget_files+0x184/0x1c0 [ 770.270464][ T9221] ? inode_to_bdi+0x47/0xa0 [ 770.270526][ T9221] ksys_read+0xda/0x1a0 [ 770.270599][ T9221] __x64_sys_read+0x40/0x50 [ 770.270630][ T9221] x64_sys_call+0x2d77/0x2fb0 [ 770.270653][ T9221] do_syscall_64+0xd2/0x200 [ 770.270684][ T9221] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 770.270794][ T9221] ? clear_bhb_loop+0x40/0x90 [ 770.270812][ T9221] ? clear_bhb_loop+0x40/0x90 [ 770.270830][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.270848][ T9221] RIP: 0033:0x7fb98648d33c [ 770.270915][ T9221] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 770.270931][ T9221] RSP: 002b:00007fb984af7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.270948][ T9221] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648d33c [ 770.270959][ T9221] RDX: 000000000000000f RSI: 00007fb984af70a0 RDI: 0000000000000004 [ 770.271044][ T9221] RBP: 00007fb984af7090 R08: 0000000000000000 R09: 0000000000000000 [ 770.271055][ T9221] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 770.271066][ T9221] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 770.271083][ T9221] [ 770.496646][ T9223] lo speed is unknown, defaulting to 1000 [ 770.507931][ T9222] pim6reg: entered allmulticast mode [ 770.609977][ T9182] ------------[ cut here ]------------ [ 770.615553][ T9182] WARNING: CPU: 0 PID: 9182 at kernel/events/core.c:7211 perf_pending_task+0x206/0x210 [ 770.625340][ T9182] Modules linked in: [ 770.629231][ T9182] CPU: 0 UID: 0 PID: 9182 Comm: syz.0.13317 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 770.641794][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.651874][ T9182] RIP: 0010:perf_pending_task+0x206/0x210 [ 770.657600][ T9182] Code: 20 f0 fc ff 41 88 6c 1d 00 eb 05 e8 54 ec e2 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c1 ff ee 03 cc e8 3b ec e2 ff 90 <0f> 0b 90 eb 86 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 770.677268][ T9182] RSP: 0018:ffffc90003627c30 EFLAGS: 00010293 [ 770.683348][ T9182] RAX: ffffffff8174b925 RBX: 0000000000000000 RCX: ffff888101baa080 [ 770.691365][ T9182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888116231e88 [ 770.699411][ T9182] RBP: 000000007ea8565f R08: 0001888116231e8f R09: 0000000000000000 [ 770.707385][ T9182] R10: ffff888165e0f840 R11: ffffffff8174b720 R12: ffff888109c3cb08 [ 770.715488][ T9182] R13: ffff888101baa080 R14: ffff888109c3cc50 R15: ffff888116231e00 [ 770.723477][ T9182] FS: 0000000000000000(0000) GS:ffff8882aee2e000(0000) knlGS:0000000000000000 [ 770.732509][ T9182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.739185][ T9182] CR2: 000000110c30d1a3 CR3: 000000014a76a000 CR4: 00000000003506f0 [ 770.747336][ T9182] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 770.755334][ T9182] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 770.763304][ T9182] Call Trace: [ 770.766607][ T9182] [ 770.769545][ T9182] task_work_run+0x131/0x1a0 [ 770.774203][ T9182] do_exit+0x483/0x1590 [ 770.778380][ T9182] do_group_exit+0xff/0x140 [ 770.782914][ T9182] ? get_signal+0xe51/0xf70 [ 770.787522][ T9182] get_signal+0xe59/0xf70 [ 770.791874][ T9182] arch_do_signal_or_restart+0x96/0x480 [ 770.797552][ T9182] exit_to_user_mode_loop+0x7a/0x100 [ 770.802859][ T9182] do_syscall_64+0x1d6/0x200 [ 770.807503][ T9182] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 770.813250][ T9182] ? clear_bhb_loop+0x40/0x90 [ 770.818057][ T9182] ? clear_bhb_loop+0x40/0x90 [ 770.822757][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.828722][ T9182] RIP: 0033:0x7fed97a0e929 [ 770.833157][ T9182] Code: Unable to access opcode bytes at 0x7fed97a0e8ff. [ 770.840316][ T9182] RSP: 002b:00007fed96076fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 770.848824][ T9182] RAX: fffffffffffffff4 RBX: 00007fed97c35fa0 RCX: 00007fed97a0e929 [ 770.856799][ T9182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 770.864800][ T9182] RBP: 00007fed97a90b39 R08: 0000000000000000 R09: 0000000000000000 [ 770.872813][ T9182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 770.880797][ T9182] R13: 0000000000000000 R14: 00007fed97c35fa0 R15: 00007ffd6df17648 [ 770.888787][ T9182] [ 770.891803][ T9182] ---[ end trace 0000000000000000 ]--- [ 771.045996][ T9246] __nla_validate_parse: 4 callbacks suppressed [ 771.046010][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13343'. [ 771.077867][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13340'. [ 771.511777][ T9263] lo speed is unknown, defaulting to 1000 [ 771.716738][ T9282] 9pnet_fd: Insufficient options for proto=fd [ 771.724992][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13355'. [ 771.757423][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13356'. [ 771.847762][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13358'. [ 772.021525][ T9303] lo speed is unknown, defaulting to 1000 [ 772.095039][ T9307] lo speed is unknown, defaulting to 1000 [ 772.339044][ T9319] netlink: 'syz.4.13366': attribute type 10 has an invalid length. [ 772.360126][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.377897][ T9319] bridge_slave_1: left allmulticast mode [ 772.383660][ T9319] bridge_slave_1: left promiscuous mode [ 772.389496][ T9319] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.418398][ T9319] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 772.469427][ T9321] 9pnet_fd: Insufficient options for proto=fd [ 772.490097][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13368'. [ 772.911690][ T9339] lo speed is unknown, defaulting to 1000 [ 773.128913][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 773.128930][ T29] audit: type=1400 audit(2000002906.480:111097): avc: denied { write } for pid=9330 comm="syz.0.13372" lport=49901 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 773.168357][ T29] audit: type=1326 audit(2000002906.888:111098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.192168][ T29] audit: type=1326 audit(2000002906.888:111099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.215846][ T29] audit: type=1326 audit(2000002906.888:111100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.239757][ T29] audit: type=1326 audit(2000002906.888:111101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.265259][ T29] audit: type=1326 audit(2000002906.974:111102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.288899][ T29] audit: type=1326 audit(2000002906.974:111103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.312614][ T29] audit: type=1326 audit(2000002906.974:111104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.336319][ T29] audit: type=1326 audit(2000002906.974:111105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.357385][ T9353] netlink: 'syz.3.13378': attribute type 1 has an invalid length. [ 773.360009][ T29] audit: type=1326 audit(2000002906.974:111106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9349 comm="syz.3.13378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77768ae929 code=0x7ffc0000 [ 773.367837][ T9353] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13378'. [ 773.584110][ T9367] pim6reg: left allmulticast mode [ 773.622861][ T9370] xt_CT: No such helper "pptp" [ 773.648373][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13386'. [ 773.739094][ T9380] lo speed is unknown, defaulting to 1000 [ 774.302135][ T9403] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 774.351699][ T9408] xt_CT: No such helper "pptp" [ 774.368708][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13398'. [ 774.390356][ T9406] lo speed is unknown, defaulting to 1000 [ 774.412010][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13400'. [ 774.783125][ T9422] netlink: 'syz.3.13402': attribute type 4 has an invalid length. [ 774.829163][ T9429] lo speed is unknown, defaulting to 1000 [ 775.360832][ T9451] 9pnet_fd: Insufficient options for proto=fd [ 775.694938][ T9470] lo speed is unknown, defaulting to 1000 [ 775.849051][ T9478] 8021q: VLANs not supported on caif0 [ 775.884992][ T9482] veth1_macvtap: left promiscuous mode [ 775.892299][ T9482] macsec0: entered promiscuous mode [ 775.950846][ T9484] __nla_validate_parse: 2 callbacks suppressed [ 775.950858][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13426'. [ 776.003578][ T9490] FAULT_INJECTION: forcing a failure. [ 776.003578][ T9490] name failslab, interval 1, probability 0, space 0, times 0 [ 776.016408][ T9490] CPU: 1 UID: 0 PID: 9490 Comm: syz.4.13429 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 776.016592][ T9490] Tainted: [W]=WARN [ 776.016598][ T9490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 776.016616][ T9490] Call Trace: [ 776.016621][ T9490] [ 776.016628][ T9490] __dump_stack+0x1d/0x30 [ 776.016646][ T9490] dump_stack_lvl+0xe8/0x140 [ 776.016663][ T9490] dump_stack+0x15/0x1b [ 776.016736][ T9490] should_fail_ex+0x265/0x280 [ 776.016760][ T9490] should_failslab+0x8c/0xb0 [ 776.016779][ T9490] kmem_cache_alloc_noprof+0x50/0x310 [ 776.016825][ T9490] ? vm_area_alloc+0x2c/0xb0 [ 776.016855][ T9490] vm_area_alloc+0x2c/0xb0 [ 776.016876][ T9490] create_init_stack_vma+0x28/0x390 [ 776.016899][ T9490] alloc_bprm+0x2b9/0x350 [ 776.016923][ T9490] do_execveat_common+0x12e/0x750 [ 776.017067][ T9490] ? getname_flags+0x154/0x3b0 [ 776.017085][ T9490] __x64_sys_execveat+0x73/0x90 [ 776.017110][ T9490] x64_sys_call+0x2dae/0x2fb0 [ 776.017160][ T9490] do_syscall_64+0xd2/0x200 [ 776.017186][ T9490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 776.017208][ T9490] ? clear_bhb_loop+0x40/0x90 [ 776.017239][ T9490] ? clear_bhb_loop+0x40/0x90 [ 776.017318][ T9490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.017336][ T9490] RIP: 0033:0x7f0e2815e929 [ 776.017348][ T9490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.017364][ T9490] RSP: 002b:00007f0e267c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 776.017454][ T9490] RAX: ffffffffffffffda RBX: 00007f0e28385fa0 RCX: 00007f0e2815e929 [ 776.017473][ T9490] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 776.017483][ T9490] RBP: 00007f0e267c7090 R08: 0000000000000000 R09: 0000000000000000 [ 776.017493][ T9490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.017503][ T9490] R13: 0000000000000000 R14: 00007f0e28385fa0 R15: 00007fffe535bf78 [ 776.017519][ T9490] [ 776.224854][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13430'. [ 776.256133][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13432'. [ 776.311572][ T9504] 8021q: VLANs not supported on caif0 [ 776.335988][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13438'. [ 776.389168][ T9516] sit0: entered promiscuous mode [ 776.404808][ T9516] netlink: 'syz.2.13441': attribute type 1 has an invalid length. [ 776.413029][ T9516] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13441'. [ 776.463162][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13444'. [ 776.514971][ T9529] binfmt_misc: register: failed to install interpreter file ./file1 [ 776.563785][ T9536] 8021q: VLANs not supported on caif0 [ 776.570300][ T9532] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13445'. [ 776.660480][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13454'. [ 776.689228][ T9548] binfmt_misc: register: failed to install interpreter file ./file1 [ 776.774831][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13458'. [ 776.825819][ T9560] 8021q: VLANs not supported on caif0 [ 776.880078][ T9567] 9pnet_fd: Insufficient options for proto=fd [ 776.964031][ T9571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13465'. [ 777.023546][ T9576] FAULT_INJECTION: forcing a failure. [ 777.023546][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 777.036209][ T9576] CPU: 1 UID: 0 PID: 9576 Comm: syz.3.13467 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 777.036275][ T9576] Tainted: [W]=WARN [ 777.036283][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.036296][ T9576] Call Trace: [ 777.036302][ T9576] [ 777.036315][ T9576] __dump_stack+0x1d/0x30 [ 777.036335][ T9576] dump_stack_lvl+0xe8/0x140 [ 777.036356][ T9576] dump_stack+0x15/0x1b [ 777.036444][ T9576] should_fail_ex+0x265/0x280 [ 777.036483][ T9576] should_failslab+0x8c/0xb0 [ 777.036506][ T9576] __kmalloc_cache_node_noprof+0x54/0x320 [ 777.036602][ T9576] ? __get_vm_area_node+0x106/0x1d0 [ 777.036732][ T9576] __get_vm_area_node+0x106/0x1d0 [ 777.036768][ T9576] __vmalloc_node_range_noprof+0x273/0xe00 [ 777.036801][ T9576] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 777.036830][ T9576] ? mntput_no_expire+0x6f/0x3c0 [ 777.036920][ T9576] ? __rcu_read_unlock+0x4f/0x70 [ 777.036964][ T9576] ? selinux_capable+0x1f9/0x270 [ 777.036995][ T9576] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 777.037023][ T9576] __vmalloc_noprof+0x83/0xc0 [ 777.037070][ T9576] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 777.037099][ T9576] bpf_prog_alloc_no_stats+0x47/0x390 [ 777.037130][ T9576] ? bpf_prog_alloc+0x2a/0x150 [ 777.037169][ T9576] bpf_prog_alloc+0x3c/0x150 [ 777.037193][ T9576] bpf_prog_load+0x514/0x1070 [ 777.037236][ T9576] ? security_bpf+0x2b/0x90 [ 777.037252][ T9576] __sys_bpf+0x51d/0x790 [ 777.037338][ T9576] __x64_sys_bpf+0x41/0x50 [ 777.037439][ T9576] x64_sys_call+0x2478/0x2fb0 [ 777.037540][ T9576] do_syscall_64+0xd2/0x200 [ 777.037568][ T9576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 777.037671][ T9576] ? clear_bhb_loop+0x40/0x90 [ 777.037691][ T9576] ? clear_bhb_loop+0x40/0x90 [ 777.037715][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.037803][ T9576] RIP: 0033:0x7f77768ae929 [ 777.037817][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.037872][ T9576] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.037888][ T9576] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 777.037978][ T9576] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 777.037997][ T9576] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 777.038009][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.038041][ T9576] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 777.038061][ T9576] [ 777.038069][ T9576] syz.3.13467: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 777.140129][ T9580] pim6reg: entered allmulticast mode [ 777.142394][ T9576] ,cpuset=syz3 [ 777.159477][ T9580] pim6reg: left allmulticast mode [ 777.162777][ T9576] ,mems_allowed=0 [ 777.322530][ T9576] CPU: 1 UID: 0 PID: 9576 Comm: syz.3.13467 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 777.322564][ T9576] Tainted: [W]=WARN [ 777.322571][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.322585][ T9576] Call Trace: [ 777.322592][ T9576] [ 777.322599][ T9576] __dump_stack+0x1d/0x30 [ 777.322692][ T9576] dump_stack_lvl+0xe8/0x140 [ 777.322710][ T9576] dump_stack+0x15/0x1b [ 777.322731][ T9576] warn_alloc+0x12b/0x1a0 [ 777.322766][ T9576] __vmalloc_node_range_noprof+0x297/0xe00 [ 777.322805][ T9576] ? mntput_no_expire+0x6f/0x3c0 [ 777.322841][ T9576] ? __rcu_read_unlock+0x4f/0x70 [ 777.322915][ T9576] ? selinux_capable+0x1f9/0x270 [ 777.322943][ T9576] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 777.322973][ T9576] __vmalloc_noprof+0x83/0xc0 [ 777.323003][ T9576] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 777.323058][ T9576] bpf_prog_alloc_no_stats+0x47/0x390 [ 777.323085][ T9576] ? bpf_prog_alloc+0x2a/0x150 [ 777.323109][ T9576] bpf_prog_alloc+0x3c/0x150 [ 777.323202][ T9576] bpf_prog_load+0x514/0x1070 [ 777.323326][ T9576] ? security_bpf+0x2b/0x90 [ 777.323338][ T9576] __sys_bpf+0x51d/0x790 [ 777.323358][ T9576] __x64_sys_bpf+0x41/0x50 [ 777.323428][ T9576] x64_sys_call+0x2478/0x2fb0 [ 777.323537][ T9576] do_syscall_64+0xd2/0x200 [ 777.323612][ T9576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 777.323743][ T9576] ? clear_bhb_loop+0x40/0x90 [ 777.323756][ T9576] ? clear_bhb_loop+0x40/0x90 [ 777.323768][ T9576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.323780][ T9576] RIP: 0033:0x7f77768ae929 [ 777.323789][ T9576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.323827][ T9576] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.323838][ T9576] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 777.323863][ T9576] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 777.323870][ T9576] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 777.323877][ T9576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.323884][ T9576] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 777.323895][ T9576] [ 777.323899][ T9576] Mem-Info: [ 777.554108][ T9576] active_anon:4336 inactive_anon:214 isolated_anon:0 [ 777.554108][ T9576] active_file:12215 inactive_file:15082 isolated_file:0 [ 777.554108][ T9576] unevictable:0 dirty:260 writeback:0 [ 777.554108][ T9576] slab_reclaimable:3289 slab_unreclaimable:30230 [ 777.554108][ T9576] mapped:32629 shmem:476 pagetables:1439 [ 777.554108][ T9576] sec_pagetables:0 bounce:0 [ 777.554108][ T9576] kernel_misc_reclaimable:0 [ 777.554108][ T9576] free:1851285 free_pcp:13918 free_cma:0 [ 777.599250][ T9576] Node 0 active_anon:17344kB inactive_anon:856kB active_file:48860kB inactive_file:60328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130516kB dirty:1040kB writeback:0kB shmem:1904kB writeback_tmp:0kB kernel_stack:5584kB pagetables:5756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 777.628375][ T9576] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 777.657027][ T9576] lowmem_reserve[]: 0 2882 7860 7860 [ 777.662416][ T9576] Node 0 DMA32 free:2947736kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 777.692751][ T9576] lowmem_reserve[]: 0 0 4978 4978 [ 777.697803][ T9576] Node 0 Normal free:4442044kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17344kB inactive_anon:856kB active_file:48860kB inactive_file:60328kB unevictable:0kB writepending:1040kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52044kB local_pcp:19492kB free_cma:0kB [ 777.730145][ T9576] lowmem_reserve[]: 0 0 0 0 [ 777.734799][ T9576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 777.747533][ T9576] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947736kB [ 777.763907][ T9576] Node 0 Normal: 1335*4kB (UME) 1723*8kB (UME) 1167*16kB (UME) 982*32kB (UME) 603*64kB (UME) 261*128kB (UME) 290*256kB (UME) 235*512kB (UME) 170*1024kB (UME) 68*2048kB (UME) 926*4096kB (UM) = 4442020kB [ 777.783901][ T9576] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 777.793191][ T9576] 27971 total pagecache pages [ 777.797950][ T9576] 214 pages in swap cache [ 777.802290][ T9576] Free swap = 124140kB [ 777.806472][ T9576] Total swap = 124996kB [ 777.810831][ T9576] 2097051 pages RAM [ 777.814612][ T9576] 0 pages HighMem/MovableOnly [ 777.819264][ T9576] 80810 pages reserved [ 777.873887][ T9597] 8021q: VLANs not supported on caif0 [ 777.919983][ T9599] 9pnet_fd: Insufficient options for proto=fd [ 777.926479][ T9603] xt_CT: No such helper "pptp" [ 777.929566][ T9608] netlink: 'syz.5.13479': attribute type 1 has an invalid length. [ 777.968351][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 777.968365][ T29] audit: type=1326 audit(2000002912.038:111205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.005583][ T29] audit: type=1326 audit(2000002912.081:111206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.029373][ T29] audit: type=1326 audit(2000002912.081:111207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.053158][ T29] audit: type=1326 audit(2000002912.081:111208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.076894][ T29] audit: type=1326 audit(2000002912.081:111209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.100463][ T29] audit: type=1400 audit(2000002912.081:111210): avc: denied { create } for pid=9605 comm="syz.4.13478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 778.120375][ T29] audit: type=1326 audit(2000002912.081:111211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.123457][ T9615] No source specified [ 778.144097][ T29] audit: type=1326 audit(2000002912.081:111212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.144126][ T29] audit: type=1326 audit(2000002912.081:111213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9605 comm="syz.4.13478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 778.195377][ T29] audit: type=1400 audit(2000002912.081:111214): avc: denied { getopt } for pid=9605 comm="syz.4.13478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 778.402734][ T9641] lo speed is unknown, defaulting to 1000 [ 778.430675][ T9642] pim6reg: entered allmulticast mode [ 778.436871][ T9642] pim6reg: left allmulticast mode [ 779.086895][ T9651] netlink: 'syz.0.13494': attribute type 1 has an invalid length. [ 779.102820][ T9651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.125033][ T9651] bond1 (unregistering): Released all slaves [ 779.193379][ T9664] 9pnet_fd: Insufficient options for proto=fd [ 779.220076][ T9668] netlink: 'syz.3.13501': attribute type 1 has an invalid length. [ 779.357704][ T9691] binfmt_misc: register: failed to install interpreter file ./file1 [ 779.423728][ T9696] pim6reg: entered allmulticast mode [ 779.439626][ T9696] pim6reg: left allmulticast mode [ 779.459981][ T9702] 9pnet_fd: Insufficient options for proto=fd [ 779.542900][ T9706] 8021q: VLANs not supported on caif0 [ 780.069293][ T9724] wireguard0: entered promiscuous mode [ 780.074883][ T9724] wireguard0: entered allmulticast mode [ 780.095929][ T9727] netlink: 'syz.2.13524': attribute type 1 has an invalid length. [ 780.257327][ T9734] 9pnet_fd: Insufficient options for proto=fd [ 780.352006][ T9752] netlink: 'syz.3.13536': attribute type 1 has an invalid length. [ 780.410786][ T9759] wireguard0: entered promiscuous mode [ 780.416286][ T9759] wireguard0: entered allmulticast mode [ 780.461363][ T9770] 9pnet_fd: Insufficient options for proto=fd [ 780.488878][ T9774] xt_CT: No such helper "pptp" [ 780.641154][ T9801] 9pnet_fd: Insufficient options for proto=fd [ 780.659798][ T9799] xt_CT: No such helper "pptp" [ 780.661341][ T9806] netlink: 'syz.3.13561': attribute type 1 has an invalid length. [ 780.672559][ T9806] __nla_validate_parse: 15 callbacks suppressed [ 780.672570][ T9806] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13561'. [ 780.728259][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13562'. [ 780.804656][ T9812] wireguard0: entered promiscuous mode [ 780.810145][ T9812] wireguard0: entered allmulticast mode [ 780.829944][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13570'. [ 780.856238][ T9828] netlink: 352 bytes leftover after parsing attributes in process `syz.3.13571'. [ 780.881854][ T9833] No source specified [ 780.912654][ T9836] 9pnet_fd: Insufficient options for proto=fd [ 780.922774][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13576'. [ 780.962003][ T9844] No source specified [ 780.992356][ T9851] netlink: 'syz.5.13582': attribute type 1 has an invalid length. [ 781.000308][ T9851] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13582'. [ 781.050932][ T9859] binfmt_misc: register: failed to install interpreter file ./file1 [ 781.100328][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13589'. [ 781.144924][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13592'. [ 781.228345][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13592'. [ 781.276889][ T9882] wireguard0: entered promiscuous mode [ 781.282414][ T9882] wireguard0: entered allmulticast mode [ 781.303458][ T9881] 8021q: VLANs not supported on caif0 [ 781.340189][ T9889] 9pnet_fd: Insufficient options for proto=fd [ 781.354310][ T9892] binfmt_misc: register: failed to install interpreter file ./file1 [ 782.011833][ T9908] netlink: 'syz.3.13604': attribute type 1 has an invalid length. [ 782.019740][ T9908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13604'. [ 782.252611][ T9921] 8021q: VLANs not supported on caif0 [ 782.304272][ T9925] 9pnet_fd: Insufficient options for proto=fd [ 782.606198][ T9943] wireguard0: entered promiscuous mode [ 782.611797][ T9943] wireguard0: entered allmulticast mode [ 782.635962][ T9946] No source specified [ 782.690143][ T9949] netlink: 'syz.2.13621': attribute type 1 has an invalid length. [ 782.924758][ T9959] 9pnet_fd: Insufficient options for proto=fd [ 782.925775][ T9956] xt_CT: No such helper "pptp" [ 783.495893][ T9975] No source specified [ 783.563293][ T9982] No source specified [ 783.638701][ T9990] netlink: 'syz.5.13635': attribute type 1 has an invalid length. [ 783.648100][ T9986] wireguard0: entered promiscuous mode [ 783.653676][ T9986] wireguard0: entered allmulticast mode [ 783.920510][T10010] No source specified [ 783.978046][T10017] 8021q: VLANs not supported on caif0 [ 783.983137][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 783.983157][ T29] audit: type=1326 audit(2000002918.486:111333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.013425][ T29] audit: type=1326 audit(2000002918.486:111334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.037161][ T29] audit: type=1326 audit(2000002918.486:111335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.061029][ T29] audit: type=1326 audit(2000002918.486:111336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.084770][ T29] audit: type=1326 audit(2000002918.486:111337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.108538][ T29] audit: type=1326 audit(2000002918.486:111338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.132341][ T29] audit: type=1326 audit(2000002918.486:111339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.156271][ T29] audit: type=1326 audit(2000002918.572:111340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.180055][ T29] audit: type=1326 audit(2000002918.572:111341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.203806][ T29] audit: type=1326 audit(2000002918.572:111342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.2.13647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 784.267337][T10023] binfmt_misc: register: failed to install interpreter file ./file1 [ 784.317823][T10027] wireguard0: entered promiscuous mode [ 784.323334][T10027] wireguard0: entered allmulticast mode [ 784.467692][T10043] No source specified [ 784.524649][T10054] 8021q: VLANs not supported on caif0 [ 784.531068][T10045] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 784.582729][T10060] xt_CT: No such helper "pptp" [ 784.636469][T10071] wireguard0: entered promiscuous mode [ 784.642065][T10071] wireguard0: entered allmulticast mode [ 784.729132][T10075] lo speed is unknown, defaulting to 1000 [ 785.077947][T10087] No source specified [ 785.104246][T10090] 8021q: VLANs not supported on caif0 [ 785.138483][T10094] binfmt_misc: register: failed to install interpreter file ./file1 [ 785.177855][T10096] xt_CT: No such helper "pptp" [ 785.240857][T10101] FAULT_INJECTION: forcing a failure. [ 785.240857][T10101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.253983][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.3.13678 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 785.254041][T10101] Tainted: [W]=WARN [ 785.254048][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.254061][T10101] Call Trace: [ 785.254098][T10101] [ 785.254106][T10101] __dump_stack+0x1d/0x30 [ 785.254127][T10101] dump_stack_lvl+0xe8/0x140 [ 785.254148][T10101] dump_stack+0x15/0x1b [ 785.254208][T10101] should_fail_ex+0x265/0x280 [ 785.254238][T10101] should_fail+0xb/0x20 [ 785.254265][T10101] should_fail_usercopy+0x1a/0x20 [ 785.254363][T10101] copy_folio_from_iter_atomic+0x278/0x1170 [ 785.254439][T10101] ? shmem_write_begin+0xa8/0x190 [ 785.254465][T10101] ? shmem_write_begin+0xe1/0x190 [ 785.254544][T10101] generic_perform_write+0x2c2/0x490 [ 785.254569][T10101] shmem_file_write_iter+0xc5/0xf0 [ 785.254591][T10101] do_iter_readv_writev+0x421/0x4c0 [ 785.254663][T10101] vfs_writev+0x2df/0x8b0 [ 785.254695][T10101] __se_sys_pwritev2+0xfc/0x1c0 [ 785.254749][T10101] __x64_sys_pwritev2+0x67/0x80 [ 785.254797][T10101] x64_sys_call+0x1cea/0x2fb0 [ 785.254819][T10101] do_syscall_64+0xd2/0x200 [ 785.254891][T10101] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 785.254996][T10101] ? clear_bhb_loop+0x40/0x90 [ 785.255084][T10101] ? clear_bhb_loop+0x40/0x90 [ 785.255103][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.255121][T10101] RIP: 0033:0x7f77768ae929 [ 785.255171][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.255187][T10101] RSP: 002b:00007f7774f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 785.255202][T10101] RAX: ffffffffffffffda RBX: 00007f7776ad5fa0 RCX: 00007f77768ae929 [ 785.255214][T10101] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 785.255226][T10101] RBP: 00007f7774f17090 R08: 0000000000000000 R09: 0000000000000000 [ 785.255272][T10101] R10: 0000000000005405 R11: 0000000000000246 R12: 0000000000000001 [ 785.255285][T10101] R13: 0000000000000000 R14: 00007f7776ad5fa0 R15: 00007ffcf6f62eb8 [ 785.255306][T10101] [ 785.550024][T10106] wireguard0: entered promiscuous mode [ 785.555594][T10106] wireguard0: entered allmulticast mode [ 785.754286][T10117] __nla_validate_parse: 21 callbacks suppressed [ 785.754301][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13684'. [ 785.803515][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13684'. [ 785.855370][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13688'. [ 785.867822][T10126] xt_CT: No such helper "pptp" [ 785.895656][T10132] binfmt_misc: register: failed to install interpreter file ./file1 [ 785.924645][T10136] 9pnet_fd: Insufficient options for proto=fd [ 786.351707][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13696'. [ 786.431086][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13701'. [ 786.465561][T10160] 9pnet_fd: Insufficient options for proto=fd [ 786.644118][T10168] netlink: 352 bytes leftover after parsing attributes in process `syz.5.13707'. [ 786.696771][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13710'. [ 786.744208][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13713'. [ 786.891727][T10190] lo: entered promiscuous mode [ 786.909847][T10190] tunl0: entered promiscuous mode [ 786.916706][T10190] gre0: entered promiscuous mode [ 786.922201][T10190] gretap0: entered promiscuous mode [ 786.929011][T10190] erspan0: entered promiscuous mode [ 786.934700][T10190] ip_vti0: entered promiscuous mode [ 786.940434][T10190] ip6_vti0: entered promiscuous mode [ 786.948161][T10190] sit0: entered promiscuous mode [ 786.954062][T10190] ip6tnl0: entered promiscuous mode [ 786.959700][T10190] ip6gre0: entered promiscuous mode [ 786.966152][T10190] syz_tun: entered promiscuous mode [ 786.971719][T10190] ip6gretap0: entered promiscuous mode [ 786.977688][T10190] bridge0: entered promiscuous mode [ 786.985511][T10190] vcan0: entered promiscuous mode [ 786.992295][T10190] bond0: entered promiscuous mode [ 786.997343][T10190] bond_slave_0: entered promiscuous mode [ 787.003169][T10190] bond_slave_1: entered promiscuous mode [ 787.011101][T10190] team0: entered promiscuous mode [ 787.016278][T10190] team_slave_0: entered promiscuous mode [ 787.022042][T10190] team_slave_1: entered promiscuous mode [ 787.031841][T10190] nlmon0: entered promiscuous mode [ 787.038226][T10190] caif0: entered promiscuous mode [ 787.043333][T10190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.166123][T10205] binfmt_misc: register: failed to install interpreter file ./file1 [ 787.213454][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13722'. [ 787.316875][T10203] netlink: 352 bytes leftover after parsing attributes in process `syz.0.13720'. [ 787.567995][T10228] lo speed is unknown, defaulting to 1000 [ 787.571187][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116fa6a00: rx timeout, send abort [ 788.037147][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116fa7c00: rx timeout, send abort [ 788.048018][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116fa6a00: abort rx timeout. Force session deactivation [ 788.331538][T10255] 8021q: VLANs not supported on caif0 [ 788.349100][T10258] binfmt_misc: register: failed to install interpreter file ./file1 [ 788.413613][T10264] pim6reg: entered allmulticast mode [ 788.427660][T10264] pim6reg: left allmulticast mode [ 788.511468][ C1] vcan0: j1939_tp_rxtimer: 0xffff888116fa7c00: abort rx timeout. Force session deactivation [ 788.568466][T10283] netlink: 'syz.0.13753': attribute type 4 has an invalid length. [ 788.579274][T10283] netlink: 'syz.0.13753': attribute type 4 has an invalid length. [ 788.612238][T10275] lo speed is unknown, defaulting to 1000 [ 788.698578][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 788.698593][ T29] audit: type=1400 audit(2000002923.561:111381): avc: denied { setopt } for pid=10291 comm="syz.0.13756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 788.753959][ T29] audit: type=1326 audit(2000002923.615:111382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 788.802780][ T29] audit: type=1326 audit(2000002923.625:111383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 788.827201][ T29] audit: type=1326 audit(2000002923.625:111384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed97a0d290 code=0x7ffc0000 [ 788.850979][ T29] audit: type=1326 audit(2000002923.625:111385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fed97a10157 code=0x7ffc0000 [ 788.875492][ T29] audit: type=1326 audit(2000002923.625:111386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 788.899164][ T29] audit: type=1326 audit(2000002923.625:111387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fed97a10157 code=0x7ffc0000 [ 788.923501][ T29] audit: type=1326 audit(2000002923.625:111388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed97a0d58a code=0x7ffc0000 [ 788.947087][ T29] audit: type=1326 audit(2000002923.625:111389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 788.971484][ T29] audit: type=1326 audit(2000002923.625:111390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.0.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed97a0e929 code=0x7ffc0000 [ 789.090708][T10298] binfmt_misc: register: failed to install interpreter file ./file1 [ 789.293510][T10308] No source specified [ 789.555986][T10329] binfmt_misc: register: failed to install interpreter file ./file1 [ 789.621550][T10331] pim6reg: entered allmulticast mode [ 789.647614][T10331] pim6reg: left allmulticast mode [ 790.428285][T10353] __nla_validate_parse: 8 callbacks suppressed [ 790.428299][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13779'. [ 790.493464][T10359] No source specified [ 790.656246][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13785'. [ 790.787969][T10376] netlink: 'syz.2.13790': attribute type 1 has an invalid length. [ 790.795856][T10376] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13790'. [ 790.817620][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13789'. [ 790.994938][T10393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13797'. [ 791.143565][T10404] netlink: 'syz.5.13802': attribute type 1 has an invalid length. [ 791.151467][T10404] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13802'. [ 792.125928][T10447] netlink: 'syz.4.13821': attribute type 1 has an invalid length. [ 792.133913][T10447] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13821'. [ 792.157351][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13824'. [ 792.288762][T10470] No source specified [ 792.331933][T10468] wireguard0: entered promiscuous mode [ 792.337468][T10468] wireguard0: entered allmulticast mode [ 792.360439][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13836'. [ 792.452118][T10506] No source specified [ 792.499251][T10515] 9pnet: Unknown protocol version 9p2 [ 792.560131][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13851'. [ 792.682849][T10538] No source specified [ 792.754816][T10542] wireguard0: entered promiscuous mode [ 792.760352][T10542] wireguard0: entered allmulticast mode [ 793.220261][T10517] netlink: 'syz.5.13847': attribute type 1 has an invalid length. [ 793.228247][T10491] netlink: 'syz.4.13839': attribute type 1 has an invalid length. [ 793.237065][T10491] workqueue: Failed to create a rescuer kthread for wq "phy43": -EINTR [ 793.256268][T10554] lo speed is unknown, defaulting to 1000 [ 793.359851][T10571] No source specified [ 793.379100][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 793.379115][ T29] audit: type=1326 audit(2000002928.582:111567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.411344][ T29] audit: type=1326 audit(2000002928.614:111568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.435168][ T29] audit: type=1326 audit(2000002928.614:111569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.458969][ T29] audit: type=1326 audit(2000002928.614:111570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.482797][ T29] audit: type=1326 audit(2000002928.614:111571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.506597][ T29] audit: type=1326 audit(2000002928.614:111572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.530368][ T29] audit: type=1326 audit(2000002928.614:111573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.564721][ T29] audit: type=1326 audit(2000002928.647:111574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.588632][ T29] audit: type=1326 audit(2000002928.647:111575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.612459][ T29] audit: type=1326 audit(2000002928.647:111576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10572 comm="syz.5.13867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98648e929 code=0x7ffc0000 [ 793.743737][T10589] netlink: 'syz.5.13873': attribute type 1 has an invalid length. [ 793.765604][T10591] wireguard0: entered promiscuous mode [ 793.771199][T10591] wireguard0: entered allmulticast mode [ 793.919241][T10604] 9pnet_fd: Insufficient options for proto=fd [ 793.937868][T10606] 8021q: VLANs not supported on caif0 [ 794.190624][T10625] lo speed is unknown, defaulting to 1000 [ 794.514619][T10636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.553175][T10639] 8021q: VLANs not supported on caif0 [ 794.589756][T10636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.592742][T10645] 9pnet_fd: Insufficient options for proto=fd [ 794.644418][T10636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.700991][T10636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.751064][T10636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.764334][T10636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.777584][T10636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.789755][T10636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.971922][T10678] 9pnet_fd: Insufficient options for proto=fd [ 795.005186][T10677] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 795.080363][T10685] 8021q: VLANs not supported on caif0 [ 795.177230][T10695] __nla_validate_parse: 14 callbacks suppressed [ 795.177246][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13912'. [ 795.192732][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13912'. [ 795.201823][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13912'. [ 795.211952][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13912'. [ 795.221088][T10695] netlink: 'syz.2.13912': attribute type 6 has an invalid length. [ 795.231110][T10697] No such timeout policy "syz0" [ 795.376141][T10701] lo speed is unknown, defaulting to 1000 [ 795.499236][T10703] pim6reg: entered allmulticast mode [ 795.507561][T10703] pim6reg: left allmulticast mode [ 795.654859][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13915'. [ 795.689910][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13915'. [ 795.724750][T10714] 9pnet_fd: Insufficient options for proto=fd [ 795.857914][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13919'. [ 795.985507][T10722] lo speed is unknown, defaulting to 1000 [ 796.303628][T10730] lo speed is unknown, defaulting to 1000 [ 796.494159][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13923'. [ 796.659587][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13927'. [ 796.680766][T10748] 9pnet_fd: Insufficient options for proto=fd [ 796.723107][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13927'. [ 796.759718][T10752] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 796.857996][T10762] No source specified [ 796.962740][T10784] lo: entered promiscuous mode [ 796.978844][T10784] tunl0: entered promiscuous mode [ 796.986487][T10784] gre0: entered promiscuous mode [ 796.992916][T10784] gretap0: entered promiscuous mode [ 796.998947][T10784] erspan0: entered promiscuous mode [ 797.005196][T10784] ip_vti0: entered promiscuous mode [ 797.011487][T10784] ip6_vti0: entered promiscuous mode [ 797.020232][T10784] sit0: entered promiscuous mode [ 797.026232][T10784] ip6tnl0: entered promiscuous mode [ 797.032606][T10784] ip6gre0: entered promiscuous mode [ 797.038815][T10784] syz_tun: entered promiscuous mode [ 797.044904][T10784] ip6gretap0: entered promiscuous mode [ 797.051155][T10784] bridge0: entered promiscuous mode [ 797.059322][T10784] team0: entered promiscuous mode [ 797.064372][T10784] team_slave_0: entered promiscuous mode [ 797.070245][T10784] team_slave_1: entered promiscuous mode [ 797.078825][T10784] nlmon0: entered promiscuous mode [ 797.086619][T10784] caif0: entered promiscuous mode [ 797.091772][T10784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.107460][T10786] 8021q: VLANs not supported on caif0 [ 797.144478][T10790] lo speed is unknown, defaulting to 1000 [ 797.183918][ C0] vcan0: j1939_tp_rxtimer: 0xffff888106f81000: rx timeout, send abort [ 797.238822][T10800] FAULT_INJECTION: forcing a failure. [ 797.238822][T10800] name failslab, interval 1, probability 0, space 0, times 0 [ 797.251600][T10800] CPU: 0 UID: 0 PID: 10800 Comm: syz.0.13948 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 797.251695][T10800] Tainted: [W]=WARN [ 797.251701][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 797.251712][T10800] Call Trace: [ 797.251719][T10800] [ 797.251728][T10800] __dump_stack+0x1d/0x30 [ 797.251783][T10800] dump_stack_lvl+0xe8/0x140 [ 797.251808][T10800] dump_stack+0x15/0x1b [ 797.251827][T10800] should_fail_ex+0x265/0x280 [ 797.251858][T10800] ? legacy_init_fs_context+0x31/0x80 [ 797.252047][T10800] should_failslab+0x8c/0xb0 [ 797.252067][T10800] __kmalloc_cache_noprof+0x4c/0x320 [ 797.252185][T10800] legacy_init_fs_context+0x31/0x80 [ 797.252294][T10800] alloc_fs_context+0x3ec/0x4e0 [ 797.252342][T10800] fs_context_for_mount+0x22/0x30 [ 797.252419][T10800] do_new_mount+0xe9/0x680 [ 797.252473][T10800] path_mount+0x4a4/0xb20 [ 797.252505][T10800] ? user_path_at+0x109/0x130 [ 797.252606][T10800] __se_sys_mount+0x28f/0x2e0 [ 797.252644][T10800] ? fput+0x8f/0xc0 [ 797.252668][T10800] __x64_sys_mount+0x67/0x80 [ 797.252742][T10800] x64_sys_call+0xd36/0x2fb0 [ 797.252802][T10800] do_syscall_64+0xd2/0x200 [ 797.252831][T10800] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 797.252854][T10800] ? clear_bhb_loop+0x40/0x90 [ 797.252880][T10800] ? clear_bhb_loop+0x40/0x90 [ 797.252902][T10800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.252920][T10800] RIP: 0033:0x7fed97a0e929 [ 797.252934][T10800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.253002][T10800] RSP: 002b:00007fed96077038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 797.253014][T10800] RAX: ffffffffffffffda RBX: 00007fed97c35fa0 RCX: 00007fed97a0e929 [ 797.253089][T10800] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 797.253096][T10800] RBP: 00007fed96077090 R08: 0000200000000600 R09: 0000000000000000 [ 797.253117][T10800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.253125][T10800] R13: 0000000000000000 R14: 00007fed97c35fa0 R15: 00007ffd6df17648 [ 797.253136][T10800] [ 797.541647][T10813] lo: entered promiscuous mode [ 797.546961][T10813] tunl0: entered promiscuous mode [ 797.553129][T10813] gre0: entered promiscuous mode [ 797.558982][T10813] gretap0: entered promiscuous mode [ 797.565489][T10813] erspan0: entered promiscuous mode [ 797.572077][T10813] ip_vti0: entered promiscuous mode [ 797.578079][T10813] ip6_vti0: entered promiscuous mode [ 797.609936][T10813] ip6tnl0: entered promiscuous mode [ 797.617372][T10813] ip6gre0: entered promiscuous mode [ 797.624310][T10813] syz_tun: entered promiscuous mode [ 797.632926][T10813] ip6gretap0: entered promiscuous mode [ 797.639363][T10813] bridge0: entered promiscuous mode [ 797.646296][T10813] bond0: entered promiscuous mode [ 797.649651][ C0] vcan0: j1939_tp_rxtimer: 0xffff888106f81e00: rx timeout, send abort [ 797.651337][T10813] bond_slave_0: entered promiscuous mode [ 797.651509][T10813] bond_slave_1: entered promiscuous mode [ 797.659585][ C0] vcan0: j1939_tp_rxtimer: 0xffff888106f81000: abort rx timeout. Force session deactivation [ 797.667720][T10813] team0: entered promiscuous mode [ 797.687040][T10813] team_slave_0: entered promiscuous mode [ 797.692919][T10813] team_slave_1: entered promiscuous mode [ 797.702512][T10813] dummy0: entered promiscuous mode [ 797.709616][T10813] nlmon0: entered promiscuous mode [ 797.716413][T10813] caif0: entered promiscuous mode [ 797.721496][T10813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.743585][T10817] 8021q: VLANs not supported on caif0 [ 797.876210][T10844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.978281][T10855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 797.994668][T10856] netlink: 'syz.4.13961': attribute type 13 has an invalid length. [ 798.026796][T10856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.058003][T10858] FAULT_INJECTION: forcing a failure. [ 798.058003][T10858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.071159][T10858] CPU: 1 UID: 0 PID: 10858 Comm: syz.5.13972 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 798.071224][T10858] Tainted: [W]=WARN [ 798.071231][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.071244][T10858] Call Trace: [ 798.071252][T10858] [ 798.071260][T10858] __dump_stack+0x1d/0x30 [ 798.071282][T10858] dump_stack_lvl+0xe8/0x140 [ 798.071301][T10858] dump_stack+0x15/0x1b [ 798.071372][T10858] should_fail_ex+0x265/0x280 [ 798.071402][T10858] should_fail+0xb/0x20 [ 798.071553][T10858] should_fail_usercopy+0x1a/0x20 [ 798.071655][T10858] _copy_from_user+0x1c/0xb0 [ 798.071676][T10858] memdup_user+0x5e/0xd0 [ 798.071710][T10858] strndup_user+0x68/0xb0 [ 798.071733][T10858] __se_sys_mount+0x4d/0x2e0 [ 798.071795][T10858] ? fput+0x8f/0xc0 [ 798.071818][T10858] ? ksys_write+0x192/0x1a0 [ 798.071851][T10858] __x64_sys_mount+0x67/0x80 [ 798.071944][T10858] x64_sys_call+0xd36/0x2fb0 [ 798.071965][T10858] do_syscall_64+0xd2/0x200 [ 798.071998][T10858] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 798.072025][T10858] ? clear_bhb_loop+0x40/0x90 [ 798.072048][T10858] ? clear_bhb_loop+0x40/0x90 [ 798.072086][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.072162][T10858] RIP: 0033:0x7fb98648e929 [ 798.072178][T10858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.072237][T10858] RSP: 002b:00007fb984af7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 798.072257][T10858] RAX: ffffffffffffffda RBX: 00007fb9866b5fa0 RCX: 00007fb98648e929 [ 798.072270][T10858] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 00002000000013c0 [ 798.072282][T10858] RBP: 00007fb984af7090 R08: 00002000000000c0 R09: 0000000000000000 [ 798.072294][T10858] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 798.072307][T10858] R13: 0000000000000000 R14: 00007fb9866b5fa0 R15: 00007ffcb4f757a8 [ 798.072327][T10858] [ 798.125983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888106f81e00: abort rx timeout. Force session deactivation [ 798.391331][T10865] pim6reg: entered allmulticast mode [ 798.397105][T10865] pim6reg: left allmulticast mode [ 798.474959][T10866] lo speed is unknown, defaulting to 1000 [ 798.695740][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 798.695753][ T29] audit: type=1326 audit(2000002934.279:111719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.729044][ T29] audit: type=1326 audit(2000002934.279:111720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.752984][ T29] audit: type=1326 audit(2000002934.279:111721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.777391][ T29] audit: type=1326 audit(2000002934.279:111722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.801788][ T29] audit: type=1326 audit(2000002934.279:111723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.825537][ T29] audit: type=1326 audit(2000002934.279:111724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.849984][ T29] audit: type=1326 audit(2000002934.279:111725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.873895][ T29] audit: type=1326 audit(2000002934.279:111726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.898256][ T29] audit: type=1326 audit(2000002934.279:111727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 798.922734][ T29] audit: type=1326 audit(2000002934.290:111728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10881 comm="syz.4.13981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2815e929 code=0x7ffc0000 [ 799.820452][T10938] No source specified [ 799.840006][T10936] pim6reg: entered allmulticast mode [ 799.854658][T10936] pim6reg: left allmulticast mode [ 800.045229][T10935] __nla_validate_parse: 4 callbacks suppressed [ 800.045241][T10935] netlink: 352 bytes leftover after parsing attributes in process `syz.0.14000'. [ 800.128753][T10972] netlink: 'syz.0.14013': attribute type 10 has an invalid length. [ 800.133766][T10973] No source specified [ 800.137639][T10970] netlink: 'syz.0.14013': attribute type 10 has an invalid length. [ 800.177601][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14016'. [ 800.300491][T10989] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 800.763481][T11003] No source specified [ 800.831081][T10996] netlink: 352 bytes leftover after parsing attributes in process `syz.5.14022'. [ 800.841405][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14029'. [ 800.870102][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14027'. [ 800.957481][T11024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14033'. [ 800.985304][T11021] lo speed is unknown, defaulting to 1000 [ 801.028770][T11025] pim6reg: entered allmulticast mode [ 801.034769][T11025] pim6reg: left allmulticast mode [ 801.043696][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14033'. [ 801.130877][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14040'. [ 801.324608][T11046] netlink: 352 bytes leftover after parsing attributes in process `syz.0.14041'. [ 801.408967][T11066] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 801.673214][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14052'. [ 801.975320][T11123] pim6reg: entered allmulticast mode [ 801.981268][T11123] pim6reg: left allmulticast mode [ 802.393893][T11162] No source specified [ 802.564875][T11189] No source specified [ 802.632490][T11196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.931545][T11239] pim6reg: entered allmulticast mode [ 802.950055][T11239] pim6reg: left allmulticast mode [ 803.077655][T11240] lo speed is unknown, defaulting to 1000 [ 803.228167][T11240] chnl_net:caif_netlink_parms(): no params data found [ 803.376050][T11240] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.383878][T11240] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.392626][T11240] bridge_slave_0: entered allmulticast mode [ 803.399893][T11240] bridge_slave_0: entered promiscuous mode [ 803.416506][T11240] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.424289][T11240] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.441434][T11240] bridge_slave_1: entered allmulticast mode [ 803.457474][T11240] bridge_slave_1: entered promiscuous mode [ 803.484491][ T4724] bridge_slave_1: left allmulticast mode [ 803.490275][ T4724] bridge_slave_1: left promiscuous mode [ 803.496092][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.507737][ T4724] bridge_slave_0: left allmulticast mode [ 803.513553][ T4724] bridge_slave_0: left promiscuous mode [ 803.519331][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.564968][ T3414] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 803.612950][ T4724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.629278][ T4724] bond_slave_0: left promiscuous mode [ 803.636663][ T4724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.646065][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 803.646079][ T29] audit: type=1326 audit(2000002939.590:112180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.678758][ T4724] bond_slave_1: left promiscuous mode [ 803.679170][ T29] audit: type=1326 audit(2000002939.590:112181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.692877][ T4724] bond0 (unregistering): Released all slaves [ 803.709311][ T29] audit: type=1326 audit(2000002939.644:112182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.738855][ T29] audit: type=1326 audit(2000002939.644:112183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.763860][ T29] audit: type=1326 audit(2000002939.644:112184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.789112][ T29] audit: type=1326 audit(2000002939.676:112185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.812888][ T29] audit: type=1326 audit(2000002939.676:112186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.837941][ T29] audit: type=1326 audit(2000002939.676:112187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.841594][T11240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.862822][ T29] audit: type=1326 audit(2000002939.751:112188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.895754][ T29] audit: type=1326 audit(2000002939.751:112189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11286 comm="syz.2.14131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4f43be929 code=0x7ffc0000 [ 803.922791][T11240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.975668][ T4724] hsr_slave_0: left promiscuous mode [ 803.981507][ T4724] hsr_slave_1: left promiscuous mode [ 804.092541][ T4724] team_slave_1 (unregistering): left promiscuous mode [ 804.113181][ T4724] team0 (unregistering): Port device team_slave_1 removed [ 804.125124][ T4724] team_slave_0 (unregistering): left promiscuous mode [ 804.132620][ T4724] team0 (unregistering): Port device team_slave_0 removed [ 804.165998][T11240] team0: Port device team_slave_0 added [ 804.174199][T11240] team0: Port device team_slave_1 added [ 804.194061][T11240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 804.201065][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.227146][T11240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 804.240197][T11240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 804.247444][T11240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 804.273449][T11240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.288628][T11310] pim6reg: entered allmulticast mode [ 804.294157][T11311] pim6reg: left allmulticast mode [ 804.316002][T11240] hsr_slave_0: entered promiscuous mode [ 804.322143][T11240] hsr_slave_1: entered promiscuous mode [ 804.353879][T11314] netlink: 'syz.3.14141': attribute type 1 has an invalid length. [ 804.489967][ T4724] IPVS: stop unused estimator thread 0... [ 804.610220][T11240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.620347][T11240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.629425][T11240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 804.638426][T11240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 804.680296][T11240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.693990][T11240] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.704742][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.711958][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.720838][T11328] 9pnet: Could not find request transport: f [ 804.729640][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.736820][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.754152][T11240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.765761][T11240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.818761][T11240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.893726][T11349] wireguard0: entered promiscuous mode [ 804.899374][T11349] wireguard0: entered allmulticast mode [ 804.941863][T11240] veth0_vlan: entered promiscuous mode [ 804.950177][T11240] veth1_vlan: entered promiscuous mode [ 804.964962][T11240] veth0_macvtap: entered promiscuous mode [ 804.972250][T11240] veth1_macvtap: entered promiscuous mode [ 804.982532][T11240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.993516][T11240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.003957][T11240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.012920][T11240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.021687][T11240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.030816][T11240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.092480][T11364] netlink: 'syz.5.14151': attribute type 1 has an invalid length. [ 805.101677][T11364] __nla_validate_parse: 12 callbacks suppressed [ 805.101688][T11364] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14151'. [ 805.203756][T11359] netlink: 352 bytes leftover after parsing attributes in process `syz.2.14150'. [ 805.312524][T11380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.391265][T11389] pim6reg: entered allmulticast mode [ 805.402535][T11389] pim6reg: left allmulticast mode [ 805.427581][T11397] No source specified [ 805.538955][T11411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 805.999688][T11424] No source specified [ 806.102803][T11442] ================================================================== [ 806.110923][T11442] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 806.118478][T11442] [ 806.120792][T11442] write to 0xffff888101444510 of 8 bytes by task 11441 on cpu 0: [ 806.128495][T11442] mas_wr_store_entry+0x1581/0x2b50 [ 806.133694][T11442] mas_store_prealloc+0x74d/0x9e0 [ 806.138717][T11442] commit_merge+0x6a5/0x730 [ 806.143212][T11442] vma_expand+0x1d0/0x370 [ 806.147563][T11442] vma_merge_new_range+0x296/0x310 [ 806.152665][T11442] mmap_region+0x9fa/0x1580 [ 806.157161][T11442] do_mmap+0x9b3/0xbe0 [ 806.161227][T11442] vm_mmap_pgoff+0x17a/0x2e0 [ 806.165813][T11442] ksys_mmap_pgoff+0xc2/0x310 [ 806.170497][T11442] x64_sys_call+0x1602/0x2fb0 [ 806.175166][T11442] do_syscall_64+0xd2/0x200 [ 806.179672][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.185560][T11442] [ 806.187877][T11442] read to 0xffff888101444510 of 8 bytes by task 11442 on cpu 1: [ 806.195498][T11442] mas_state_walk+0x2f5/0x650 [ 806.200177][T11442] mas_walk+0x30/0x120 [ 806.204242][T11442] lock_vma_under_rcu+0xa2/0x2f0 [ 806.209178][T11442] do_user_addr_fault+0x233/0x1090 [ 806.214291][T11442] exc_page_fault+0x62/0xa0 [ 806.218790][T11442] asm_exc_page_fault+0x26/0x30 [ 806.223651][T11442] [ 806.225961][T11442] value changed: 0x00007fd4f2a06fff -> 0xffffffff855ed850 [ 806.233055][T11442] [ 806.235365][T11442] Reported by Kernel Concurrency Sanitizer on: [ 806.241508][T11442] CPU: 1 UID: 0 PID: 11442 Comm: syz.2.14183 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 806.255657][T11442] Tainted: [W]=WARN [ 806.259448][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 806.269494][T11442] ==================================================================