last executing test programs: 3m17.346466238s ago: executing program 1 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3m17.308780027s ago: executing program 1 (id=25): r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0xa, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x304}, "6a655069ade22ce4", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", 'FY\\;', "8891ea13f18ef0be"}, 0x38) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) symlink(0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e20"], 0x90}}, 0x4048084) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r7, 0x4b46, &(0x7f0000000080)={0x6, 0x80, 0x1}) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x800000000, 0xfffffffd, 0x7, 0x4, 0x400004, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r0, 0x3) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) 3m17.207825457s ago: executing program 1 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 3m17.180017597s ago: executing program 1 (id=27): readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/189, 0xbd) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES8=r2, @ANYBLOB="19a104506aa6449e600b9cb0d058b4a94c3cc23c5d94c0d4cbbb15fca54736094a0b3ca43f650819a7e8c4e1c7daab0816d7eb5f458d3ff9ab15ee1085ba1c684ac6507674f13150429230e2dff927a44840024918293cc00cd6d1e70416d73385d4ea2f9ca774c8159b5fd5297bfc3db3dae6122018715f55f54ef30d68a87f5dbf0704c0d4c49b8b67298b4d91f139d26bcaa663a6dd90f3fa89584337ead063741ea65d8ba658f819d6cd0bb9f50504f54c9c0f5c6525be28e7be50a3ed7a7cb75c085ef2728d7d7aff254f7a88357b45a978b4bc405fb0c1d7d2c00ee473eb", @ANYRES64=r0, @ANYRES32=r3, @ANYRESHEX=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x80}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x140}}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x23, &(0x7f0000000000), 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socket(0x10, 0x803, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) 3m7.736509562s ago: executing program 3 (id=188): sync() r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={'pimreg\x00', {0x2, 0x4e21, @empty}}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r2 = creat(0x0, 0x102) pwritev2(r2, &(0x7f0000000040)=[{&(0x7f0000000a40)="c8", 0x1}], 0x1, 0xfffff, 0xfffffff5, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x88, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000021000100000000000000000002000000faff000000000000080018004e284e22050016000000000008"], 0x34}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40640, 0x61) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 3m7.638772641s ago: executing program 3 (id=190): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f9df3547190", 0x16}, {&(0x7f0000000d80)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c2e795d69d95a5e04dedd3a48fb62458c1412fdcd15e88ccb0f5d02e77bfecefda6b064c0bb2b66a9a522e6387ab59fb71eca786a359a200000000000000020069c53f90e43339845dc7fd140c55b0149ab38eb27c14e143005f0b4b088421d1a9302f3a01b888243b3fc0d46f0de00000e0ff000000000000000000000096dad7a04c3c5f7853e6ce9fb3f0d94dfa02d9181540072d8c163834f51fdaa47622c7d8589417a7773e031aa111a3", 0xc3}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb78ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1a97f80356e46d9e8166b7639bfb021b1c140ce218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f00"/220, 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f00000009c0)="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", 0x105}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004ac0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xff}}, 0xe, 0x0}, 0x30004084) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0002225850e2ef64d96c2cd483759dfe4f4d9bdf2502"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x12b000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_da_write_pages\x00', r5, 0x0, 0x1000000000008}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = socket$igmp(0x2, 0x3, 0x2) flock(r7, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) chroot(&(0x7f0000000180)='./file0\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x7ff, 0x200006, 0xc, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, 0x0) 3m7.577706661s ago: executing program 3 (id=191): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fremovexattr(r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f000000000000000014000200020000000a01010200000000000000000d0001007564703a73797a3000000000a096f342a4ca4c29a291cd73e92b2a727a71a9d5ce45d4dbe92802a710a5f81292ca2211be8db8aeb021ab73f162921332e3df2ae7b7469e7998edf8006f8b74d05a0eb2bf2347be4cf8b5155c487e0b4ad7fc6ea27b4967f58bf7ea0047fc0d5838b3fcc065af"], 0x54}}, 0x0) 3m7.409626591s ago: executing program 3 (id=195): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000240)={[], [{@seclabel}]}, 0x1, 0x549, &(0x7f0000001800)="$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") open(&(0x7f0000000080)='./file1\x00', 0x220840, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000006, 0x9, 0x3ff, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/19, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @empty, 0x40, 0x1, 'lblc\x00', 0x0, 0x0, 0x54}, 0x2c) 3m7.408743141s ago: executing program 33 (id=195): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000240)={[], [{@seclabel}]}, 0x1, 0x549, &(0x7f0000001800)="$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") open(&(0x7f0000000080)='./file1\x00', 0x220840, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000900, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000006, 0x9, 0x3ff, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000002c0), 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/19, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @empty, 0x40, 0x1, 'lblc\x00', 0x0, 0x0, 0x54}, 0x2c) 1m23.000861712s ago: executing program 6 (id=2242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x8, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 1m22.988723572s ago: executing program 6 (id=2243): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1m22.976917052s ago: executing program 6 (id=2244): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}]}]}, 0x17c}}, 0x0) (fail_nth: 2) 1m22.744035831s ago: executing program 6 (id=2246): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) (fail_nth: 13) 1m22.51403985s ago: executing program 6 (id=2247): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x5aa7, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x5113, 0x0, 0x0, 0x0, 0x0) 1m22.442020301s ago: executing program 6 (id=2248): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xb4) (fail_nth: 3) 1m7.36645285s ago: executing program 34 (id=2248): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xb4) (fail_nth: 3) 2.339830056s ago: executing program 2 (id=3951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x2}}, {@i_version}]}, 0x4, 0x504, &(0x7f0000019940)="$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") setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0x6c}}, 0x0) 2.314267067s ago: executing program 2 (id=3953): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000140)={0x2, 0x6e22, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x8000000}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x3, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) 1.905494945s ago: executing program 5 (id=3968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 1.899599895s ago: executing program 5 (id=3969): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 1.502081354s ago: executing program 2 (id=3975): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x100000000000, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.448987884s ago: executing program 2 (id=3976): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x15, 0x1, 0x20300, 0xfffffffc, {0x2, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "fd2929bf64daedcfeb488e63463d8554add1da6e87f783980a4d1634c6450559443c29240956451306cf1fb0e1"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.433925724s ago: executing program 5 (id=3977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:syslog_conf_t:s0 system_u:object_r:auditd_etc_t:s0 18446754073709551361 u'], 0x65) 1.433812654s ago: executing program 2 (id=3978): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) 1.417560554s ago: executing program 2 (id=3979): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001e00)=@generic={0x1, 0x8, 0x81}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000007c8c01f2e2426c61e5b0f0e586d7f4ce08834206", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000001cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001d00)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="02d30768937cc09484c59900", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000182b0000", @ANYRES32=r2, @ANYBLOB="00000000ff000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e00000011008188040f80ec19acbc0437177f3d1300000000000e000a09a60c979c91f349fc0009000000000000", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2000000, &(0x7f00000001c0)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@noinit_itable}, {@usrquota}, {@dioread_nolock}, {@noinit_itable}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") socket$inet6_icmp(0xa, 0x2, 0x3a) rt_sigpending(0x0, 0x0) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x16) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000480)=0x14) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) getsockname(r7, &(0x7f0000001d40)=@can, &(0x7f0000001dc0)=0x80) ioctl$VT_DISALLOCATE(r0, 0x5608) 1.417217314s ago: executing program 5 (id=3980): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="010000003703020f5800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000206010100000000000000000a00000216b1a600686173683a6e65742c706f72742c6e657400000005000500000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r6}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_gettime(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="040000000003000000000000000000000000000072b3ce9d9369ddb62c71fcd9322046b8eae19512719c8610dd049db57b1997ec6870d07d094c80ab3814fd5336ac1e3bd1ff8e011d524d96ee37630faabc98a09b34a37c8d28ee6c9ce419fc63f8aaede6b958626190c38c9a27bc5c31b43f095a576ffdce27fda8b3b687af591223ee06e21b5061b9240ce8ef3cd0152df2549ffa8aa706e43159f55dc102fd8211b7ccae4dcd6933e847ec86379be66d06145cb49c0141e3419588eeb40104ff4cad835f9b40ad175db0bb40ae6cf4d8e40cefa8a711da", @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="04000000010000000400"/28], 0x50) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) 1.296892584s ago: executing program 5 (id=3983): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611230000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x43, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010325bd70000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="000001002000"], 0x30}}, 0x0) 920.448993ms ago: executing program 4 (id=3990): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100000, 0x8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) 891.191763ms ago: executing program 5 (id=3991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) r0 = gettid() r1 = socket$inet(0x2, 0x802, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0x200}}], 0x1, 0x6) sendmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="1b", 0x1}, {&(0x7f00000007c0)="a8613b06c319a4a87eb1a045fbae99c49eab1545785f62ce8756ae1c8fc86c7278bd4e23e7ab18e63178c4dbb30fe67b6d50763c2e09eedb161140db876547299e6e2c50f36d7e486dc1ca64ecbaba0731b27ed1a516b728b789c29e7f20655c7b0a74a4f781bb03638deeda3628f36a5df7677b90ec5d42ee57c7c201b8bb3fcb8f31734f710358d9c0211c0441597ece244b7b80cd6456b2a31a84e8463821580c24e9c268b23ae6dc52ad03cae2e1ed8fc84a9b11245882501ebb62c3e523c535c436793655152937f705251485af18644de399c5bc47583496fecca05f584bd485055db6e911a2b814ef7e09ccedc963c3fc", 0xf4}, {&(0x7f0000000940)="8c42f08b8070dd9ab0289c96564488877bc393a7441acd20ecc5c99be97edf0ece78853133a511674d26f97e2717089bc9171acf118574c19ca5ffaa1fc10fe215bbda1a9f959442a8d165d58cb56fa1ac7fa6773d3fc1ae524db10328278bb6db9007", 0x63}], 0x3}}], 0x1, 0x200080c4) readv(r3, &(0x7f0000002140)=[{&(0x7f00000014c0)=""/30, 0x1e}], 0x1) 884.998063ms ago: executing program 0 (id=3992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a, 0x0, 0x0, 0x56}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 832.411973ms ago: executing program 0 (id=3993): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="010000003703020f5800000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000000206010100000000000000000a00000216b1a600686173683a6e65742c706f72742c6e657400000005000500000000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='kmem_cache_free\x00', r6}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_gettime(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="040000000003000000000000000000000000000072b3ce9d9369ddb62c71fcd9322046b8eae19512719c8610dd049db57b1997ec6870d07d094c80ab3814fd5336ac1e3bd1ff8e011d524d96ee37630faabc98a09b34a37c8d28ee6c9ce419fc63f8aaede6b958626190c38c9a27bc5c31b43f095a576ffdce27fda8b3b687af591223ee06e21b5061b9240ce8ef3cd0152df2549ffa8aa706e43159f55dc102fd8211b7ccae4dcd6933e847ec86379be66d06145cb49c0141e3419588eeb40104ff4cad835f9b40ad175db0bb40ae6cf4d8e40cefa8a711da", @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="04000000010000000400"/28], 0x50) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4623d39c10780000000000000000", 0x14}}, 0x20040814) 728.720522ms ago: executing program 0 (id=3995): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_loaded', 0x280202, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00'}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r5, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x3d) semctl$IPC_RMID(0x0, 0x0, 0xc000000) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) timer_create(0x3, &(0x7f00000005c0)={0x0, 0x2a, 0x4}, &(0x7f0000000880)=0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) timer_settime(r9, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {r10, r11+60000000}}, &(0x7f0000000940)) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f00000003c0)="83ccaf50aed5d099192e67b603daa65758832cc1c60c60bed1f0c02aa3f05e01f04d86801e251b223f2631db3f713dd9d70158f4cb295b6e5cd9ff5b8cafdfdac21b24088402eae6d95542be52bf1fd8a310cf2727a42edc715491753fe36d14f35b48b18a586fd3a15a43af545eeda1e1ca1f", 0x73}, {&(0x7f0000000640)="0330535bca9b46b73e541737cf4d0f966bffdd1908b0822aab075658da97178cf5fdd468ac7a0576e2c8af2ed6cf2f8c6d644ccb61f4817459c3a56393ad3f50d84a47e6c161bbd87a04a0d6614aad566bb81d7b3a7a1b933cebeb1de9a871b3c4e528a8b89df0f92f13b104cb3972718187614764d20c9df04f6227cd0d85453d939f36bfc97095a8716ca5ea56480e5b748c5ab731eecb714ac6b26d745a8e844710fdfc7cc51564d0c2bc85c26c653c816a6dfe39cbc7a65af73c44a1c383e61121ef758a5a6d59d488eed74d7c34d78a2bed993fcc", 0xd7}, {&(0x7f0000000440)="b6e3556f77b528b7cf143b14bfeb2c28f5cec27c52ed333d967d02f46869d9241ab892550595a7aaf0d7b5e225fab221397c6ec642b34c4a7372202aa21087a2508ea2c5e11ff30e22c458cb725f27fc1efdcbaf4af6e0b091d299b52355fe8d8cc18ea34d43f8924819f2448317", 0x6e}, {&(0x7f00000002c0)="626b3c6c96b528e913ae88d324891ac585b052bbcc3831d3241d15081ee36ee3677990483d6507398894888a64024d2d79323ea68ae628", 0x37}, {&(0x7f0000000740)="1c38aa3012108fdc1a6356cd9ba626bddfbc17f8fc9394990822bbd8535daf4ad4785a85221fb53611e0dab97c97ba97d0f2ac709fa7f020b894a947561c21fde0fafb8b05d7b9d22903883575efe426a285483289b1c7cc5d4dd690923ce56d03c61db7e13b66330444474e41e536ca3fef664285ac218f8988b2ac052d56a7a5e4c76ac972a138b07a21b7e6d122b2f4", 0x91}], 0x5, 0x2, 0x9, 0x0) r12 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(r12) write$selinux_validatetrans(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:scsi_generic_device_t:s0 system_u:object_r:tetex_data_t:s0 00000000000000034934 un'], 0x6d) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0xd) 582.608032ms ago: executing program 7 (id=3998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:syslog_conf_t:s0 system_u:object_r:auditd_etc_t:s0 18446754073709551361 u'], 0x65) 563.675292ms ago: executing program 0 (id=3999): r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 557.617892ms ago: executing program 7 (id=4000): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x12e}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x6, 0x1c, &(0x7f00000007c0)=""/28, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x9, 0x3, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES16=r1, @ANYBLOB='\x00'/20, @ANYBLOB="9951b9c7c24052706850a59fb1efc10f726e570da3fdd6fa9e5c4f0ee26948e641a728856ce00927a644b6b10720deb559c1f4a1ece42b0ce4ebda4d6998d311371d90d3fc0c9e8d1bacff3123cccd06daf40638f5f239710122cd0a0312155efc478d4bcb933f80be48a22d95d5fdd9dc1176072e6fe7a6a74f66938bcff5365e9517c010ae5f24fad47bccba8721e1af9ca138347c0fdd8f186d7c423e4d81dcb0"], 0x50) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000540)=""/228) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000280)=0x0) socket$rds(0x15, 0x5, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01000a010000340200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0)=0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r13}, 0x10) timer_create(0x7, 0x0, &(0x7f0000000500)=0x0) timer_delete(r14) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000428bd7000fedbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08009df9094317a9a615f10100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB], 0x44}}, 0x4008091) 530.741432ms ago: executing program 0 (id=4001): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x1c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) 509.365722ms ago: executing program 0 (id=4002): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x53) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2]) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000004c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000013bd0000b0c990f100"/28], 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000230010009f06000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b80)={r6, 0x0, 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$can_raw(r5, 0x0, 0x0) bind$can_raw(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 493.615952ms ago: executing program 4 (id=4003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 468.030042ms ago: executing program 4 (id=4004): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:syslog_conf_t:s0 system_u:object_r:auditd_etc_t:s0 18446754073709551361 u'], 0x65) 426.152252ms ago: executing program 7 (id=4005): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="5300c73d305989e9ad1ff632f17f4701c7fc2445b07e50f94d4a85fce2bd0adf3cbdac478cec750e2cbdd02eaa77433656a7a8292cdeb1515e0cda1a27f427f0b18697a34ad776fe587b30f267a45b8b694ed07ad602bb2ee8f2ecbb8314fc5331197a9b63384bca1938d2e1fb1dc74824cf5828dc0ffc0a09e6f4d916123bd5d911ce", @ANYRES64, @ANYRES64, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}], 0x1, 0x4000005) close(r1) 425.479551ms ago: executing program 4 (id=4006): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000c40)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x10, &(0x7f0000000180)={0x0, 0x3660, 0x2, 0x1, 0x34b}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x8d8, 0x940c, 0x3002, 0x0, 0x2c0, 0xa10, 0x3d8, 0x3d8, 0xa10, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x8b8, 0x8d8, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x1}, {0x2}, {0x9, 0x2}, {0x16b0, 0x3}, {0x9, 0x3}, {0x1, 0x3}, {0x9, 0x1}, {0xe, 0x3}, {0xff, 0x3}, {0x8}, {0x7}], [{0x0, 0x6}, {0x7, 0xfffffff7}, {0x9, 0x5}, {0x1, 0x7ff}, {0x101, 0x8}, {0x8, 0x1}, {0x2771, 0x1}, {0x5, 0xe588}, {0x1, 0xffffffff}, {0x396, 0x3ff}, {0x1000, 0x5c}], 0x6}, {[{0x867, 0x2}, {0x8, 0x1}, {0x81, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x249a542d, 0x1}, {0x1fc, 0x3}, {0x1, 0x2}, {0x7, 0x2}, {0x2, 0x1}, {0x4, 0x3}], [{0x5, 0x1000}, {0x3, 0xfffffffe}, {0x9, 0xe7}, {0x1, 0xa6}, {0x401, 0x7}, {0x311d, 0x205c}, {0xfffffff0, 0x600000}, {0xffffff80, 0x2}, {0x8, 0x5}, {0x0, 0xe}, {0x0, 0x2}], 0xa, 0x4}, {[{0xe, 0x3}, {0xe0, 0x2}, {0x7}, {0x6}, {0x7}, {0x80000001, 0x2}, {0x8, 0x2}, {0xd}, {0x3, 0x2}, {0x8, 0x2}, {0x9, 0x2}], [{0x3, 0x3}, {0x3, 0x7}, {0x1, 0x1}, {0x70000000, 0x600}, {0xfffffff8, 0xf6f}, {0x4, 0x4}, {0x6, 0x6}, {0x5, 0x2}, {0x9, 0x18}, {0x1, 0x1}, {0x6, 0x529a}], 0x7, 0x2}, {[{0x2, 0x2}, {0x4, 0x2}, {0xf, 0x3}, {0x57, 0x1}, {0x7, 0x1}, {}, {0xef, 0x2}, {0x8, 0x1}, {0xc8c, 0x1}, {0x38fc, 0x2}, {0x6, 0x2}], [{0x1f4, 0xf9}, {0x1, 0x400}, {0x7fff, 0x6}, {0x9, 0x1020}, {0x11d6, 0xffffff45}, {0x516c6867, 0x1}, {0x1, 0x3}, {0x1b, 0xe}, {0x3, 0xfc6}, {0x950, 0x9}, {0x5, 0x2}], 0x8, 0x7}, {[{0xb56, 0x3}, {0x2}, {0x8000, 0x3}, {0x3, 0x2}, {0x849f, 0x1}, {0x7}, {0x7fff, 0x2}, {0xa, 0x1}, {0xfffffffb}, {0x4}, {0x7, 0x3}], [{0x8}, {0x2, 0x3}, {0x0, 0x7ed2}, {0x15, 0x3ff}, {0x6, 0x401}, {0x0, 0x40}, {0x7, 0x81}, {0x5, 0x10000}, {0x6, 0x8bd}, {0x4, 0x9}, {0x6, 0xe7}], 0x8}, {[{0xf18d, 0x1}, {0xfff, 0x1}, {0xd71, 0x1}, {0x10001, 0x3}, {0x7f, 0x1}, {0x5cc3}, {0x9, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x2, 0x3}, {0x3, 0x2}], [{0x8, 0x7}, {0x6}, {0x4929, 0x36}, {0x10001, 0x9}, {0x2000000, 0x8000}, {0x7fff, 0x5}, {0x923, 0x4}, {0x80000000, 0x101}, {0xe12, 0x40}, {0x1, 0x4}, {0x6, 0x7ff}], 0xa, 0x1}, {[{0x1, 0x2}, {0x401}, {0x4}, {0x7fffffff, 0x2}, {}, {0x2}, {0x80000000, 0x1}, {0x7, 0x3}, {0x6, 0x2}, {0x6, 0x3}, {0x880}], [{0x7, 0xff}, {0x4, 0x3}, {0x9, 0x9}, {0x8, 0xffffffff}, {0x80000001, 0x2}, {0x40, 0x4}, {0x9, 0x3}, {0x1, 0x68c3}, {0x0, 0x7}, {}, {0x6, 0x81}], 0x40, 0x7}, {[{0x2, 0x2}, {0x4, 0x2}, {0x8001, 0x1}, {0x2e8a, 0x3}, {0xfff, 0x2}, {0x200, 0x1}, {0x7, 0x2}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x7, 0x3}], [{0x1, 0x1}, {0x9, 0x9}, {0xd, 0x1}, {0x7, 0x8}, {0x8, 0xffffff46}, {0xb, 0x6}, {0x80, 0x6}, {0x4, 0x4}, {0x44b, 0x79b8}, {0x6, 0xa}, {0xe67, 0x241f}], 0x4, 0x3}, {[{0x7}, {0x1, 0x2}, {0x4, 0x2}, {0xfff, 0x2}, {0x0, 0x1}, {0x9, 0x1}, {0x4}, {0x7}, {0x492f, 0x1}, {0xb2, 0x1}], [{0x368, 0x9}, {0xe2, 0x3ff}, {0x6, 0x8}, {0x6, 0x1}, {0x200, 0x8c}, {0x7f, 0x7fffffff}, {0xfffffff5, 0x4}, {0x6, 0x400}, {0x48, 0x10}, {0x7f, 0x4}, {0x0, 0xc}], 0x5, 0x9}, {[{0x9, 0x3}, {0x3}, {0x9, 0x2}, {0x4, 0x1}, {0x9, 0x1}, {0x7, 0x1}, {0x1ff, 0x2}, {0x4, 0x3}, {0xeca7, 0x3}, {0x8}, {0x6, 0x1}], [{0x9, 0x9}, {0x5, 0x6}, {0x6, 0xf3}, {0x634e117b, 0x7}, {0x824, 0x5}, {0xa, 0x4}, {0x7, 0x800}, {0x3, 0x3}, {0x7fffffff}, {0x7, 0x9}, {0x3, 0x3}], 0x7, 0xa}, {[{0x5}, {0x10000, 0x1}, {0x93, 0x3}, {0xfffffff7, 0x1}, {0xa1, 0x2}, {0x6, 0x2}, {0x2, 0x2}, {0x3ff, 0x1}, {0x3, 0x1}, {0x3ff, 0x2}, {0x4e6, 0x2}], [{0x7, 0x6}, {0x80000000}, {0x9526, 0x3}, {0xa9, 0xb}, {0x2000004, 0x9}, {0x7d1b, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0xe3f0, 0x48}, {0xcf8, 0x7fff}, {0x4, 0x1}], 0x5, 0x3}], 0x8}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095", @ANYRES64=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000b40), 0x1, 0x200100) ioctl$USBDEVFS_RELEASE_PORT(r5, 0x80045519, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) splice(r7, 0x0, r6, 0x0, 0x408cd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r9], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffdef) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r11}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x0, 0x0) 415.951171ms ago: executing program 7 (id=4007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x1c5341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) 391.329441ms ago: executing program 7 (id=4008): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x101, 0xd, 0xc381, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @value=r5, @void, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x4, 0x9, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000180)={0x0, 0x0, 0xc, 0x200002}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 387.001461ms ago: executing program 4 (id=4009): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)) 374.135752ms ago: executing program 4 (id=4010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_loaded', 0x280202, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00'}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r5, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x44}}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x3d) semctl$IPC_RMID(0x0, 0x0, 0xc000000) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) timer_create(0x3, &(0x7f00000005c0)={0x0, 0x2a, 0x4}, &(0x7f0000000880)=0x0) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) timer_settime(r9, 0x0, &(0x7f0000000900)={{0x0, 0x989680}, {r10, r11+60000000}}, &(0x7f0000000940)) pwritev2(r0, &(0x7f0000000800)=[{&(0x7f00000003c0)="83ccaf50aed5d099192e67b603daa65758832cc1c60c60bed1f0c02aa3f05e01f04d86801e251b223f2631db3f713dd9d70158f4cb295b6e5cd9ff5b8cafdfdac21b24088402eae6d95542be52bf1fd8a310cf2727a42edc715491753fe36d14f35b48b18a586fd3a15a43af545eeda1e1ca1f", 0x73}, {&(0x7f0000000640)="0330535bca9b46b73e541737cf4d0f966bffdd1908b0822aab075658da97178cf5fdd468ac7a0576e2c8af2ed6cf2f8c6d644ccb61f4817459c3a56393ad3f50d84a47e6c161bbd87a04a0d6614aad566bb81d7b3a7a1b933cebeb1de9a871b3c4e528a8b89df0f92f13b104cb3972718187614764d20c9df04f6227cd0d85453d939f36bfc97095a8716ca5ea56480e5b748c5ab731eecb714ac6b26d745a8e844710fdfc7cc51564d0c2bc85c26c653c816a6dfe39cbc7a65af73c44a1c383e61121ef758a5a6d59d488eed74d7c34d78a2bed993fcc", 0xd7}, {&(0x7f0000000440)="b6e3556f77b528b7cf143b14bfeb2c28f5cec27c52ed333d967d02f46869d9241ab892550595a7aaf0d7b5e225fab221397c6ec642b34c4a7372202aa21087a2508ea2c5e11ff30e22c458cb725f27fc1efdcbaf4af6e0b091d299b52355fe8d8cc18ea34d43f8924819f2448317", 0x6e}, {&(0x7f00000002c0)="626b3c6c96b528e913ae88d324891ac585b052bbcc3831d3241d15081ee36ee3677990483d6507398894888a64024d2d79323ea68ae628", 0x37}, {&(0x7f0000000740)="1c38aa3012108fdc1a6356cd9ba626bddfbc17f8fc9394990822bbd8535daf4ad4785a85221fb53611e0dab97c97ba97d0f2ac709fa7f020b894a947561c21fde0fafb8b05d7b9d22903883575efe426a285483289b1c7cc5d4dd690923ce56d03c61db7e13b66330444474e41e536ca3fef664285ac218f8988b2ac052d56a7a5e4c76ac972a138b07a21b7e6d122b2f4", 0x91}], 0x5, 0x2, 0x9, 0x0) r12 = shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) shmdt(r12) write$selinux_validatetrans(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='system_u:object_r:scsi_generic_device_t:s0 system_u:object_r:tetex_data_t:s0 00000000000000034934 un'], 0x6d) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000140)=0xd) 0s ago: executing program 7 (id=4011): r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) kernel console output (not intermixed with test programs): t is strongly recommended to keep mac addresses unique to avoid problems! [ 184.196778][T15631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.210290][T15631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.219109][T15631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.228018][T15631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.236865][T15631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.302148][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 184.328279][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 184.337406][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 184.346462][T15893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'. [ 184.565690][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 184.565703][ T29] audit: type=1107 audit(1738244076.401:13264): pid=15903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 184.615720][ T29] audit: type=1326 audit(1738244076.451:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 184.639535][ T29] audit: type=1326 audit(1738244076.451:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 184.663261][ T29] audit: type=1326 audit(1738244076.451:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 184.686919][ T29] audit: type=1326 audit(1738244076.451:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 184.710613][ T29] audit: type=1326 audit(1738244076.451:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3a22db710 code=0x7ffc0000 [ 184.734240][ T29] audit: type=1326 audit(1738244076.451:13270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3a22de5d7 code=0x7ffc0000 [ 184.757802][ T29] audit: type=1326 audit(1738244076.451:13271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 184.781313][ T29] audit: type=1326 audit(1738244076.451:13272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3a22de5d7 code=0x7ffc0000 [ 184.805120][ T29] audit: type=1326 audit(1738244076.451:13273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15905 comm="syz.2.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff3a22dba0a code=0x7ffc0000 [ 185.027430][T15909] chnl_net:caif_netlink_parms(): no params data found [ 185.118401][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.125599][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.143017][T15909] bridge_slave_0: entered allmulticast mode [ 185.149603][T15909] bridge_slave_0: entered promiscuous mode [ 185.157986][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.165163][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.172678][T15909] bridge_slave_1: entered allmulticast mode [ 185.183209][T15909] bridge_slave_1: entered promiscuous mode [ 185.210007][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.220757][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.253124][T15909] team0: Port device team_slave_0 added [ 185.260664][T15909] team0: Port device team_slave_1 added [ 185.278002][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.284988][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.310998][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.352091][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.359258][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.385224][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.528019][T15909] hsr_slave_0: entered promiscuous mode [ 185.544474][T15909] hsr_slave_1: entered promiscuous mode [ 185.560741][T15909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.568752][T15909] Cannot create hsr debugfs directory [ 185.850970][T15909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.870004][T15909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.890267][T15909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.899362][T15909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.949055][T15909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.962401][T15909] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.972006][T12826] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.979089][T12826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.994534][T12826] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.001626][T12826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.092659][T15909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.192495][T15909] veth0_vlan: entered promiscuous mode [ 186.206905][T15909] veth1_vlan: entered promiscuous mode [ 186.226424][T15909] veth0_macvtap: entered promiscuous mode [ 186.242701][T15909] veth1_macvtap: entered promiscuous mode [ 186.267662][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.278218][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.288080][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.298543][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.308493][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.318958][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.328849][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.339427][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.353416][T15909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.367105][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.377625][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.387494][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.397947][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.407776][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.418212][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.428032][T15909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.438559][T15909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.455238][T15909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.466117][T15909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.474913][T15909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.483794][T15909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.492656][T15909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.733376][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.739972][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.747547][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.763224][T16203] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.790925][T16203] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.811932][T16219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2973'. [ 186.851089][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.900204][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.937097][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.943875][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.958126][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.975852][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.982737][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 186.995596][T16203] ip6gretap0 speed is unknown, defaulting to 1000 [ 187.150087][T16237] ip6gretap0 speed is unknown, defaulting to 1000 [ 187.183028][T15822] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.194514][T15822] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.212595][T15822] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.239463][T15822] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.276061][T16237] chnl_net:caif_netlink_parms(): no params data found [ 187.338499][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.345715][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.353293][T16237] bridge_slave_0: entered allmulticast mode [ 187.359897][T16237] bridge_slave_0: entered promiscuous mode [ 187.366891][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.373992][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.381396][T16237] bridge_slave_1: entered allmulticast mode [ 187.388198][T16237] bridge_slave_1: entered promiscuous mode [ 187.405608][T16237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.415887][T16237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.437929][T16237] team0: Port device team_slave_0 added [ 187.444583][T16237] team0: Port device team_slave_1 added [ 187.461171][T16237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.468263][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.494235][T16237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.507143][T16290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.518648][T16237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.525640][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.551590][T16237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.577185][T16237] hsr_slave_0: entered promiscuous mode [ 187.583228][T16237] hsr_slave_1: entered promiscuous mode [ 187.591513][T16237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.599266][T16237] Cannot create hsr debugfs directory [ 187.646466][T16237] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.656272][T16237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19968 - 0 [ 187.666196][T16237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.676048][T16237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 187.726541][T16237] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.736483][T16237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19968 - 0 [ 187.746384][T16237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.756291][T16237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 187.816863][T16237] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.826834][T16237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19968 - 0 [ 187.836807][T16237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.846649][T16237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 187.876690][T16237] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.886503][T16237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19968 - 0 [ 187.896459][T16237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.906314][T16237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 187.978368][T16237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.989982][T16237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.998843][T16237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.012945][T16237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.064088][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.088215][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.104770][T16237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.115178][T16237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.128081][T12795] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.135167][T12795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.153573][T12795] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.160671][T12795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.231004][T16237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.338971][T16237] veth0_vlan: entered promiscuous mode [ 188.349518][T16237] veth1_vlan: entered promiscuous mode [ 188.361135][T16293] Set syz1 is full, maxelem 65536 reached [ 188.364466][T16237] veth0_macvtap: entered promiscuous mode [ 188.377841][T16237] veth1_macvtap: entered promiscuous mode [ 188.387900][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.398490][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.408459][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.418906][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.428750][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.439285][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.449218][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.459636][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.469786][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.480331][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.491009][T16237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.501259][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.511748][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.521600][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.532082][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.541944][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.552462][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.562275][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.572730][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.582538][T16237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.592963][T16237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.604335][T16237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.614142][T16237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.622980][T16237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.632046][T16237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.641151][T16237] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.658754][T16290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.698215][T16290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.748768][T16290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.779911][T16333] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3011'. [ 188.788960][T16333] netlink: 'syz.4.3011': attribute type 9 has an invalid length. [ 188.802959][T16290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.816351][T16290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.829747][T16290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.841158][T16290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.007890][T16361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.057826][T16361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.071932][T16369] FAULT_INJECTION: forcing a failure. [ 189.071932][T16369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.085158][T16369] CPU: 1 UID: 0 PID: 16369 Comm: syz.7.3029 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 189.085244][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.085255][T16369] Call Trace: [ 189.085260][T16369] [ 189.085266][T16369] dump_stack_lvl+0xf2/0x150 [ 189.085286][T16369] dump_stack+0x15/0x1a [ 189.085301][T16369] should_fail_ex+0x24a/0x260 [ 189.085442][T16369] should_fail+0xb/0x10 [ 189.085461][T16369] should_fail_usercopy+0x1a/0x20 [ 189.085484][T16369] _copy_from_user+0x1c/0xa0 [ 189.085499][T16369] memdup_user+0x64/0xc0 [ 189.085516][T16369] strndup_user+0x68/0xa0 [ 189.085540][T16369] __se_sys_mount+0x91/0x2d0 [ 189.085596][T16369] ? fput+0x1c4/0x200 [ 189.085616][T16369] ? ksys_write+0x176/0x1b0 [ 189.085631][T16369] __x64_sys_mount+0x67/0x80 [ 189.085702][T16369] x64_sys_call+0x2c84/0x2dc0 [ 189.085786][T16369] do_syscall_64+0xc9/0x1c0 [ 189.085805][T16369] ? clear_bhb_loop+0x55/0xb0 [ 189.085825][T16369] ? clear_bhb_loop+0x55/0xb0 [ 189.085844][T16369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.085879][T16369] RIP: 0033:0x7f6dffd5cda9 [ 189.085890][T16369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.085904][T16369] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.085918][T16369] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 189.085927][T16369] RDX: 0000000020000240 RSI: 0000000020000280 RDI: 0000000020000100 [ 189.085936][T16369] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.085946][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.085954][T16369] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 189.085981][T16369] [ 189.243373][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 189.248396][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 189.306816][T16361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.336823][T16383] FAULT_INJECTION: forcing a failure. [ 189.336823][T16383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.350007][T16383] CPU: 1 UID: 0 PID: 16383 Comm: syz.5.3035 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 189.350029][T16383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 189.350040][T16383] Call Trace: [ 189.350045][T16383] [ 189.350052][T16383] dump_stack_lvl+0xf2/0x150 [ 189.350083][T16383] dump_stack+0x15/0x1a [ 189.350143][T16383] should_fail_ex+0x24a/0x260 [ 189.350168][T16383] should_fail+0xb/0x10 [ 189.350193][T16383] should_fail_usercopy+0x1a/0x20 [ 189.350261][T16383] _copy_from_user+0x1c/0xa0 [ 189.350278][T16383] memdup_user+0x64/0xc0 [ 189.350295][T16383] strndup_user+0x68/0xa0 [ 189.350312][T16383] __se_sys_mount+0x91/0x2d0 [ 189.350386][T16383] ? fput+0x1c4/0x200 [ 189.350411][T16383] ? ksys_write+0x176/0x1b0 [ 189.350430][T16383] __x64_sys_mount+0x67/0x80 [ 189.350522][T16383] x64_sys_call+0x2c84/0x2dc0 [ 189.350547][T16383] do_syscall_64+0xc9/0x1c0 [ 189.350571][T16383] ? clear_bhb_loop+0x55/0xb0 [ 189.350628][T16383] ? clear_bhb_loop+0x55/0xb0 [ 189.350649][T16383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.350752][T16383] RIP: 0033:0x7ff43deccda9 [ 189.350796][T16383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.350814][T16383] RSP: 002b:00007ff43c531038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.350832][T16383] RAX: ffffffffffffffda RBX: 00007ff43e0e5fa0 RCX: 00007ff43deccda9 [ 189.350844][T16383] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 189.350856][T16383] RBP: 00007ff43c531090 R08: 0000000000000000 R09: 0000000000000000 [ 189.350880][T16383] R10: 0000000000075809 R11: 0000000000000246 R12: 0000000000000001 [ 189.350890][T16383] R13: 0000000000000000 R14: 00007ff43e0e5fa0 R15: 00007ffc43e50638 [ 189.350945][T16383] [ 189.541378][T16361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.656557][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 189.656573][ T29] audit: type=1107 audit(1738244081.501:13551): pid=16396 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 189.692973][ T29] audit: type=1107 audit(1738244081.531:13552): pid=16398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 189.784695][ T29] audit: type=1326 audit(1738244081.621:13553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 189.808399][ T29] audit: type=1326 audit(1738244081.621:13554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 189.832121][ T29] audit: type=1326 audit(1738244081.621:13555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 189.855796][ T29] audit: type=1326 audit(1738244081.621:13556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 189.879459][ T29] audit: type=1326 audit(1738244081.621:13557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 189.903078][ T29] audit: type=1326 audit(1738244081.621:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f901f9ab710 code=0x7ffc0000 [ 189.926662][ T29] audit: type=1326 audit(1738244081.621:13559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f901f9ae5d7 code=0x7ffc0000 [ 189.950275][ T29] audit: type=1326 audit(1738244081.621:13560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16410 comm="syz.0.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 191.040957][T16361] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.051975][T16361] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.063109][T16361] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.074613][T16361] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.204792][T16466] ip6gretap0 speed is unknown, defaulting to 1000 [ 191.494766][T16487] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.537188][T16487] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.607820][T16487] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.639545][T16499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3084'. [ 191.650031][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 191.659066][T16499] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3084'. [ 191.670620][T16487] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.894072][T16523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.904696][T16523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.058974][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3101'. [ 192.097570][T16537] FAULT_INJECTION: forcing a failure. [ 192.097570][T16537] name failslab, interval 1, probability 0, space 0, times 0 [ 192.110285][T16537] CPU: 1 UID: 0 PID: 16537 Comm: syz.7.3102 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 192.110306][T16537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 192.110316][T16537] Call Trace: [ 192.110321][T16537] [ 192.110328][T16537] dump_stack_lvl+0xf2/0x150 [ 192.110353][T16537] dump_stack+0x15/0x1a [ 192.110371][T16537] should_fail_ex+0x24a/0x260 [ 192.110398][T16537] ? resv_map_alloc+0x32/0x190 [ 192.110424][T16537] should_failslab+0x8f/0xb0 [ 192.110443][T16537] __kmalloc_cache_noprof+0x4e/0x320 [ 192.110473][T16537] resv_map_alloc+0x32/0x190 [ 192.110499][T16537] hugetlb_reserve_pages+0x265/0xbc0 [ 192.110522][T16537] hugetlbfs_file_mmap+0x2a3/0x350 [ 192.110549][T16537] mmap_region+0xc47/0x1620 [ 192.110592][T16537] do_mmap+0x98a/0xc30 [ 192.110612][T16537] vm_mmap_pgoff+0x16d/0x2d0 [ 192.110638][T16537] ksys_mmap_pgoff+0x2de/0x330 [ 192.110662][T16537] x64_sys_call+0x1940/0x2dc0 [ 192.110685][T16537] do_syscall_64+0xc9/0x1c0 [ 192.110706][T16537] ? clear_bhb_loop+0x55/0xb0 [ 192.110725][T16537] ? clear_bhb_loop+0x55/0xb0 [ 192.110744][T16537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.110764][T16537] RIP: 0033:0x7f6dffd5cda9 [ 192.110778][T16537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.110794][T16537] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.110811][T16537] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 192.110820][T16537] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000 [ 192.110830][T16537] RBP: 00007f6dfe3c7090 R08: ffffffffffffffff R09: 0000000000000000 [ 192.110842][T16537] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 192.110852][T16537] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 192.110868][T16537] [ 192.344568][T16545] serio: Serial port ptm0 [ 192.354098][T16545] FAULT_INJECTION: forcing a failure. [ 192.354098][T16545] name failslab, interval 1, probability 0, space 0, times 0 [ 192.366798][T16545] CPU: 1 UID: 0 PID: 16545 Comm: +}[@ Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 192.366885][T16545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 192.366896][T16545] Call Trace: [ 192.366902][T16545] [ 192.366909][T16545] dump_stack_lvl+0xf2/0x150 [ 192.366934][T16545] dump_stack+0x15/0x1a [ 192.367028][T16545] should_fail_ex+0x24a/0x260 [ 192.367053][T16545] should_failslab+0x8f/0xb0 [ 192.367076][T16545] __kmalloc_noprof+0xab/0x3f0 [ 192.367165][T16545] ? kobject_get_path+0x85/0x160 [ 192.367197][T16545] ? kobject_uevent_env+0x1a4/0x550 [ 192.367218][T16545] kobject_get_path+0x85/0x160 [ 192.367304][T16545] kobject_uevent_env+0x1b9/0x550 [ 192.367325][T16545] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 192.367411][T16545] ? kobject_put+0x10a/0x180 [ 192.367497][T16545] kobject_uevent+0x1c/0x30 [ 192.367513][T16545] device_del+0x6fa/0x780 [ 192.367529][T16545] ? finish_task_switch+0xb5/0x2b0 [ 192.367640][T16545] serio_destroy_port+0x25e/0x310 [ 192.367667][T16545] serio_unregister_port+0xed/0x110 [ 192.367689][T16545] serport_ldisc_read+0x2b9/0x2e0 [ 192.367770][T16545] ? __pfx_autoremove_wake_function+0x10/0x10 [ 192.367793][T16545] tty_read+0x155/0x460 [ 192.367867][T16545] vfs_read+0x5cc/0x6f0 [ 192.367885][T16545] ksys_read+0xe8/0x1b0 [ 192.367903][T16545] __x64_sys_read+0x42/0x50 [ 192.367923][T16545] x64_sys_call+0x2874/0x2dc0 [ 192.368023][T16545] do_syscall_64+0xc9/0x1c0 [ 192.368086][T16545] ? clear_bhb_loop+0x55/0xb0 [ 192.368186][T16545] ? clear_bhb_loop+0x55/0xb0 [ 192.368207][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.368227][T16545] RIP: 0033:0x7f6dffd5cda9 [ 192.368240][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.368309][T16545] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.368326][T16545] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 192.368335][T16545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 192.368345][T16545] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 192.368354][T16545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.368400][T16545] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 192.368492][T16545] [ 192.609266][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3107'. [ 192.694165][T16561] 9pnet_fd: Insufficient options for proto=fd [ 192.865144][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 193.130801][T16602] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3132'. [ 193.810156][T16636] __nla_validate_parse: 1 callbacks suppressed [ 193.810170][T16636] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3142'. [ 193.844656][T16639] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3143'. [ 193.861134][T16640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3137'. [ 194.445239][T16665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 195.137145][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 195.137157][ T29] audit: type=1107 audit(1738244086.981:13843): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 195.162164][ T29] audit: type=1400 audit(1738244087.001:13844): avc: denied { write } for pid=16687 comm="syz.7.3166" name="snmp6" dev="proc" ino=4026533110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 195.193741][ T29] audit: type=1107 audit(1738244087.031:13845): pid=16694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 195.214298][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3169'. [ 195.246768][ T29] audit: type=1326 audit(1738244087.091:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16700 comm="syz.7.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dffd5cda9 code=0x7ffc0000 [ 195.299975][T16701] ip6gretap0 speed is unknown, defaulting to 1000 [ 195.368687][T16706] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 195.376506][T16706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3172'. [ 195.386227][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 195.395540][T16706] 9pnet_virtio: no channels available for device [ 195.413885][ T29] audit: type=1326 audit(1738244087.251:13847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.437623][ T29] audit: type=1326 audit(1738244087.251:13848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.461344][ T29] audit: type=1326 audit(1738244087.271:13849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.485083][ T29] audit: type=1326 audit(1738244087.271:13850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.508913][ T29] audit: type=1326 audit(1738244087.271:13851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.532505][ T29] audit: type=1326 audit(1738244087.271:13852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16705 comm="syz.0.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 195.655818][T16713] FAULT_INJECTION: forcing a failure. [ 195.655818][T16713] name failslab, interval 1, probability 0, space 0, times 0 [ 195.668466][T16713] CPU: 1 UID: 0 PID: 16713 Comm: syz.7.3174 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 195.668501][T16713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 195.668511][T16713] Call Trace: [ 195.668516][T16713] [ 195.668523][T16713] dump_stack_lvl+0xf2/0x150 [ 195.668549][T16713] dump_stack+0x15/0x1a [ 195.668569][T16713] should_fail_ex+0x24a/0x260 [ 195.668595][T16713] should_failslab+0x8f/0xb0 [ 195.668635][T16713] __kmalloc_noprof+0xab/0x3f0 [ 195.668664][T16713] ? p9_client_prepare_req+0x29d/0x870 [ 195.668713][T16713] p9_client_prepare_req+0x29d/0x870 [ 195.668735][T16713] ? p9_client_rpc+0x526/0x710 [ 195.668756][T16713] p9_client_rpc+0xf0/0x710 [ 195.668826][T16713] p9_client_wstat+0x162/0x1a0 [ 195.668876][T16713] v9fs_vfs_setattr+0x467/0x670 [ 195.668895][T16713] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 195.668911][T16713] notify_change+0x85c/0x8e0 [ 195.668924][T16713] chmod_common+0x13c/0x270 [ 195.669032][T16713] __x64_sys_chmod+0x92/0x110 [ 195.669046][T16713] x64_sys_call+0x1487/0x2dc0 [ 195.669067][T16713] do_syscall_64+0xc9/0x1c0 [ 195.669110][T16713] ? clear_bhb_loop+0x55/0xb0 [ 195.669125][T16713] ? clear_bhb_loop+0x55/0xb0 [ 195.669138][T16713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.669152][T16713] RIP: 0033:0x7f6dffd5cda9 [ 195.669161][T16713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.669190][T16713] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 195.669200][T16713] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 195.669207][T16713] RDX: 0000000000000000 RSI: 0000000000000106 RDI: 00000000200000c0 [ 195.669223][T16713] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 195.669229][T16713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.669235][T16713] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 195.669329][T16713] [ 195.878072][T16487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.888608][T16487] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.899346][T16487] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.912726][T16487] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.960605][T16723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=16723 comm=syz.7.3179 [ 196.067521][T16735] bridge0: port 3(vlan2) entered blocking state [ 196.073810][T16735] bridge0: port 3(vlan2) entered disabled state [ 196.080404][T16735] vlan2: entered allmulticast mode [ 196.086333][T16735] vlan2: left allmulticast mode [ 196.120431][T16736] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3184'. [ 196.195798][T16740] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.248005][T16740] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.287438][T16746] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 196.298262][T16740] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.357680][T16740] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.411500][T16740] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.422389][T16740] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.434008][T16740] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.444607][T16740] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.504064][T16772] FAULT_INJECTION: forcing a failure. [ 196.504064][T16772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.517172][T16772] CPU: 1 UID: 0 PID: 16772 Comm: syz.7.3199 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 196.517212][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 196.517223][T16772] Call Trace: [ 196.517227][T16772] [ 196.517234][T16772] dump_stack_lvl+0xf2/0x150 [ 196.517259][T16772] dump_stack+0x15/0x1a [ 196.517278][T16772] should_fail_ex+0x24a/0x260 [ 196.517307][T16772] should_fail+0xb/0x10 [ 196.517378][T16772] should_fail_usercopy+0x1a/0x20 [ 196.517407][T16772] _copy_from_user+0x1c/0xa0 [ 196.517427][T16772] memdup_user+0x64/0xc0 [ 196.517446][T16772] strndup_user+0x68/0xa0 [ 196.517545][T16772] __se_sys_mount+0x91/0x2d0 [ 196.517567][T16772] ? fput+0x1c4/0x200 [ 196.517593][T16772] ? ksys_write+0x176/0x1b0 [ 196.517613][T16772] __x64_sys_mount+0x67/0x80 [ 196.517648][T16772] x64_sys_call+0x2c84/0x2dc0 [ 196.517671][T16772] do_syscall_64+0xc9/0x1c0 [ 196.517695][T16772] ? clear_bhb_loop+0x55/0xb0 [ 196.517794][T16772] ? clear_bhb_loop+0x55/0xb0 [ 196.517816][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.517839][T16772] RIP: 0033:0x7f6dffd5cda9 [ 196.517878][T16772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.517917][T16772] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 196.517934][T16772] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 196.517944][T16772] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 196.517955][T16772] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 196.517967][T16772] R10: 0000000000075809 R11: 0000000000000246 R12: 0000000000000001 [ 196.517977][T16772] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 196.518014][T16772] [ 196.604953][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3196'. [ 197.038333][T16826] bond_slave_1: entered promiscuous mode [ 197.044704][T16826] bond_slave_1: left promiscuous mode [ 197.076379][T16826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3222'. [ 197.480713][T16831] FAULT_INJECTION: forcing a failure. [ 197.480713][T16831] name failslab, interval 1, probability 0, space 0, times 0 [ 197.493452][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.4.3224 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 197.493467][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.493474][T16831] Call Trace: [ 197.493478][T16831] [ 197.493482][T16831] dump_stack_lvl+0xf2/0x150 [ 197.493498][T16831] dump_stack+0x15/0x1a [ 197.493516][T16831] should_fail_ex+0x24a/0x260 [ 197.493569][T16831] ? nft_trans_table_add+0x38/0x1a0 [ 197.493580][T16831] should_failslab+0x8f/0xb0 [ 197.493594][T16831] __kmalloc_cache_noprof+0x4e/0x320 [ 197.493612][T16831] nft_trans_table_add+0x38/0x1a0 [ 197.493623][T16831] nf_tables_newtable+0x9a6/0xee0 [ 197.493709][T16831] nfnetlink_rcv+0xb3e/0x15d0 [ 197.493754][T16831] ? kmem_cache_free+0xdc/0x2d0 [ 197.493780][T16831] netlink_unicast+0x599/0x670 [ 197.493844][T16831] netlink_sendmsg+0x5cc/0x6e0 [ 197.493856][T16831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.493879][T16831] __sock_sendmsg+0x140/0x180 [ 197.493892][T16831] ____sys_sendmsg+0x312/0x410 [ 197.493910][T16831] __sys_sendmsg+0x19d/0x230 [ 197.493940][T16831] __x64_sys_sendmsg+0x46/0x50 [ 197.494109][T16831] x64_sys_call+0x2734/0x2dc0 [ 197.494122][T16831] do_syscall_64+0xc9/0x1c0 [ 197.494137][T16831] ? clear_bhb_loop+0x55/0xb0 [ 197.494151][T16831] ? clear_bhb_loop+0x55/0xb0 [ 197.494219][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.494233][T16831] RIP: 0033:0x7f6e2b5ccda9 [ 197.494241][T16831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.494303][T16831] RSP: 002b:00007f6e29c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.494320][T16831] RAX: ffffffffffffffda RBX: 00007f6e2b7e5fa0 RCX: 00007f6e2b5ccda9 [ 197.494326][T16831] RDX: 0000000004008090 RSI: 00000000200000c0 RDI: 0000000000000003 [ 197.494333][T16831] RBP: 00007f6e29c31090 R08: 0000000000000000 R09: 0000000000000000 [ 197.494339][T16831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.494345][T16831] R13: 0000000000000000 R14: 00007f6e2b7e5fa0 R15: 00007ffcbc2f3418 [ 197.494354][T16831] [ 197.757320][T16853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.931454][T16879] FAULT_INJECTION: forcing a failure. [ 197.931454][T16879] name failslab, interval 1, probability 0, space 0, times 0 [ 197.944112][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.0.3244 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 197.944133][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.944182][T16879] Call Trace: [ 197.944188][T16879] [ 197.944194][T16879] dump_stack_lvl+0xf2/0x150 [ 197.944223][T16879] dump_stack+0x15/0x1a [ 197.944274][T16879] should_fail_ex+0x24a/0x260 [ 197.944363][T16879] should_failslab+0x8f/0xb0 [ 197.944430][T16879] __kmalloc_node_noprof+0xad/0x410 [ 197.944460][T16879] ? __kvmalloc_node_noprof+0x72/0x170 [ 197.944482][T16879] ? __rmqueue_pcplist+0xf7e/0x1110 [ 197.944504][T16879] __kvmalloc_node_noprof+0x72/0x170 [ 197.944523][T16879] seq_read_iter+0x144/0x930 [ 197.944561][T16879] ? should_fail_ex+0xd7/0x260 [ 197.944587][T16879] kernfs_fop_read_iter+0xc0/0x310 [ 197.944653][T16879] copy_splice_read+0x383/0x5b0 [ 197.944677][T16879] ? __pfx_copy_splice_read+0x10/0x10 [ 197.944696][T16879] splice_direct_to_actor+0x269/0x670 [ 197.944755][T16879] ? __pfx_direct_splice_actor+0x10/0x10 [ 197.944777][T16879] do_splice_direct+0xd7/0x150 [ 197.944797][T16879] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 197.944860][T16879] do_sendfile+0x398/0x660 [ 197.944927][T16879] __x64_sys_sendfile64+0x110/0x150 [ 197.944955][T16879] x64_sys_call+0xfbd/0x2dc0 [ 197.945015][T16879] do_syscall_64+0xc9/0x1c0 [ 197.945038][T16879] ? clear_bhb_loop+0x55/0xb0 [ 197.945061][T16879] ? clear_bhb_loop+0x55/0xb0 [ 197.945149][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.945185][T16879] RIP: 0033:0x7f901f9acda9 [ 197.945198][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.945275][T16879] RSP: 002b:00007f901e017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 197.945290][T16879] RAX: ffffffffffffffda RBX: 00007f901fbc5fa0 RCX: 00007f901f9acda9 [ 197.945299][T16879] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 197.945309][T16879] RBP: 00007f901e017090 R08: 0000000000000000 R09: 0000000000000000 [ 197.945330][T16879] R10: 0040000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 197.945342][T16879] R13: 0000000000000000 R14: 00007f901fbc5fa0 R15: 00007ffed7b1efc8 [ 197.945358][T16879] [ 198.173773][T16883] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.236603][T16883] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.279863][T16889] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.291495][T16883] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.349790][T16892] netlink: 'syz.0.3250': attribute type 13 has an invalid length. [ 198.366691][T16889] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.382802][T16883] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.405282][T16899] FAULT_INJECTION: forcing a failure. [ 198.405282][T16899] name failslab, interval 1, probability 0, space 0, times 0 [ 198.418161][T16899] CPU: 0 UID: 0 PID: 16899 Comm: syz.0.3253 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 198.418245][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.418257][T16899] Call Trace: [ 198.418263][T16899] [ 198.418270][T16899] dump_stack_lvl+0xf2/0x150 [ 198.418370][T16899] dump_stack+0x15/0x1a [ 198.418390][T16899] should_fail_ex+0x24a/0x260 [ 198.418415][T16899] should_failslab+0x8f/0xb0 [ 198.418434][T16899] __kmalloc_node_noprof+0xad/0x410 [ 198.418470][T16899] ? __kvmalloc_node_noprof+0x72/0x170 [ 198.418494][T16899] __kvmalloc_node_noprof+0x72/0x170 [ 198.418518][T16899] xt_alloc_entry_offsets+0x47/0x50 [ 198.418542][T16899] translate_table+0xa3/0x1040 [ 198.418592][T16899] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 198.418626][T16899] ? _copy_from_user+0x89/0xa0 [ 198.418643][T16899] do_ip6t_set_ctl+0x7cc/0x8c0 [ 198.418736][T16899] ? kstrtouint+0x77/0xc0 [ 198.418761][T16899] nf_setsockopt+0x195/0x1b0 [ 198.418799][T16899] ipv6_setsockopt+0x10f/0x130 [ 198.418826][T16899] tcp_setsockopt+0x93/0xb0 [ 198.418918][T16899] sock_common_setsockopt+0x64/0x80 [ 198.419033][T16899] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 198.419054][T16899] __sys_setsockopt+0x187/0x200 [ 198.419079][T16899] __x64_sys_setsockopt+0x66/0x80 [ 198.419103][T16899] x64_sys_call+0x282e/0x2dc0 [ 198.419169][T16899] do_syscall_64+0xc9/0x1c0 [ 198.419191][T16899] ? clear_bhb_loop+0x55/0xb0 [ 198.419213][T16899] ? clear_bhb_loop+0x55/0xb0 [ 198.419237][T16899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.419301][T16899] RIP: 0033:0x7f901f9acda9 [ 198.419318][T16899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.419334][T16899] RSP: 002b:00007f901e017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 198.419351][T16899] RAX: ffffffffffffffda RBX: 00007f901fbc5fa0 RCX: 00007f901f9acda9 [ 198.419369][T16899] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 198.419379][T16899] RBP: 00007f901e017090 R08: 0000000000000408 R09: 0000000000000000 [ 198.419390][T16899] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 198.419401][T16899] R13: 0000000000000000 R14: 00007f901fbc5fa0 R15: 00007ffed7b1efc8 [ 198.419416][T16899] [ 198.420868][T16889] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.683087][T16883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.694854][T16883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.707547][T16883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.719755][T16883] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.734452][T16889] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.817810][T16925] ip6tnl1: entered promiscuous mode [ 198.841261][T16927] __nla_validate_parse: 4 callbacks suppressed [ 198.841276][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3266'. [ 199.000381][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3278'. [ 199.136604][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'. [ 199.240506][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3290'. [ 199.449812][T17000] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3297'. [ 199.465514][T17002] FAULT_INJECTION: forcing a failure. [ 199.465514][T17002] name failslab, interval 1, probability 0, space 0, times 0 [ 199.478180][T17002] CPU: 1 UID: 0 PID: 17002 Comm: syz.5.3296 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 199.478278][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 199.478285][T17002] Call Trace: [ 199.478289][T17002] [ 199.478294][T17002] dump_stack_lvl+0xf2/0x150 [ 199.478309][T17002] dump_stack+0x15/0x1a [ 199.478389][T17002] should_fail_ex+0x24a/0x260 [ 199.478406][T17002] should_failslab+0x8f/0xb0 [ 199.478419][T17002] kmem_cache_alloc_noprof+0x52/0x320 [ 199.478436][T17002] ? skb_clone+0x154/0x1f0 [ 199.478521][T17002] skb_clone+0x154/0x1f0 [ 199.478569][T17002] __netlink_deliver_tap+0x2bd/0x4f0 [ 199.478593][T17002] netlink_sendskb+0x126/0x150 [ 199.478617][T17002] netlink_unicast+0x291/0x670 [ 199.478634][T17002] netlink_ack+0x4bb/0x4f0 [ 199.478693][T17002] netlink_rcv_skb+0x19c/0x230 [ 199.478703][T17002] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.478728][T17002] rtnetlink_rcv+0x1c/0x30 [ 199.478744][T17002] netlink_unicast+0x599/0x670 [ 199.478836][T17002] netlink_sendmsg+0x5cc/0x6e0 [ 199.478914][T17002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.478925][T17002] __sock_sendmsg+0x140/0x180 [ 199.479022][T17002] ____sys_sendmsg+0x312/0x410 [ 199.479040][T17002] __sys_sendmsg+0x19d/0x230 [ 199.479063][T17002] __x64_sys_sendmsg+0x46/0x50 [ 199.479131][T17002] x64_sys_call+0x2734/0x2dc0 [ 199.479144][T17002] do_syscall_64+0xc9/0x1c0 [ 199.479159][T17002] ? clear_bhb_loop+0x55/0xb0 [ 199.479213][T17002] ? clear_bhb_loop+0x55/0xb0 [ 199.479227][T17002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.479305][T17002] RIP: 0033:0x7ff43deccda9 [ 199.479346][T17002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.479356][T17002] RSP: 002b:00007ff43c531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.479366][T17002] RAX: ffffffffffffffda RBX: 00007ff43e0e5fa0 RCX: 00007ff43deccda9 [ 199.479372][T17002] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 199.479379][T17002] RBP: 00007ff43c531090 R08: 0000000000000000 R09: 0000000000000000 [ 199.479385][T17002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.479391][T17002] R13: 0000000000000000 R14: 00007ff43e0e5fa0 R15: 00007ffc43e50638 [ 199.479400][T17002] [ 199.775899][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 199.888181][T17033] FAULT_INJECTION: forcing a failure. [ 199.888181][T17033] name failslab, interval 1, probability 0, space 0, times 0 [ 199.900860][T17033] CPU: 0 UID: 0 PID: 17033 Comm: syz.5.3311 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 199.900952][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 199.900961][T17033] Call Trace: [ 199.900966][T17033] [ 199.900971][T17033] dump_stack_lvl+0xf2/0x150 [ 199.900996][T17033] dump_stack+0x15/0x1a [ 199.901015][T17033] should_fail_ex+0x24a/0x260 [ 199.901110][T17033] should_failslab+0x8f/0xb0 [ 199.901130][T17033] __kmalloc_node_noprof+0xad/0x410 [ 199.901155][T17033] ? __kvmalloc_node_noprof+0x72/0x170 [ 199.901179][T17033] __kvmalloc_node_noprof+0x72/0x170 [ 199.901215][T17033] nf_hook_entries_grow+0x1bd/0x470 [ 199.901241][T17033] __nf_register_net_hook+0x16b/0x480 [ 199.901350][T17033] nf_register_net_hook+0x88/0x130 [ 199.901481][T17033] nf_register_net_hooks+0x41/0x140 [ 199.901507][T17033] nf_defrag_ipv4_enable+0x6c/0xc0 [ 199.901576][T17033] nf_ct_netns_do_get+0x139/0x370 [ 199.901604][T17033] ? pcpu_block_update_hint_alloc+0x685/0x6a0 [ 199.901639][T17033] nf_ct_netns_get+0x83/0xb0 [ 199.901838][T17033] xt_ct_tg_check+0x81/0x790 [ 199.901861][T17033] xt_ct_tg_check_v0+0xc3/0x130 [ 199.901934][T17033] xt_check_target+0x266/0x480 [ 199.901956][T17033] ? xt_find_match+0x1c1/0x1e0 [ 199.902009][T17033] ? strnlen+0x28/0x50 [ 199.902036][T17033] ? strcmp+0x21/0x50 [ 199.902060][T17033] ? xt_find_target+0x1bd/0x1e0 [ 199.902081][T17033] translate_table+0xc1e/0xf70 [ 199.902121][T17033] do_ipt_set_ctl+0x7bd/0x8b0 [ 199.902139][T17033] ? tcp_release_cb+0xfe/0x380 [ 199.902164][T17033] nf_setsockopt+0x195/0x1b0 [ 199.902298][T17033] ip_setsockopt+0xea/0x100 [ 199.902323][T17033] ipv6_setsockopt+0xef/0x130 [ 199.902454][T17033] tcp_setsockopt+0x93/0xb0 [ 199.902481][T17033] sock_common_setsockopt+0x64/0x80 [ 199.902540][T17033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 199.902564][T17033] __sys_setsockopt+0x187/0x200 [ 199.902589][T17033] __x64_sys_setsockopt+0x66/0x80 [ 199.902627][T17033] x64_sys_call+0x282e/0x2dc0 [ 199.902653][T17033] do_syscall_64+0xc9/0x1c0 [ 199.902678][T17033] ? clear_bhb_loop+0x55/0xb0 [ 199.902763][T17033] ? clear_bhb_loop+0x55/0xb0 [ 199.902787][T17033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.902884][T17033] RIP: 0033:0x7ff43deccda9 [ 199.902952][T17033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.903041][T17033] RSP: 002b:00007ff43c531038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.903056][T17033] RAX: ffffffffffffffda RBX: 00007ff43e0e5fa0 RCX: 00007ff43deccda9 [ 199.903067][T17033] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000004 [ 199.903080][T17033] RBP: 00007ff43c531090 R08: 0000000000000308 R09: 0000000000000000 [ 199.903091][T17033] R10: 0000000020000c40 R11: 0000000000000246 R12: 0000000000000001 [ 199.903103][T17033] R13: 0000000000000000 R14: 00007ff43e0e5fa0 R15: 00007ffc43e50638 [ 199.903125][T17033] [ 200.196280][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 200.196294][ T29] audit: type=1400 audit(1738244092.031:14323): avc: denied { append } for pid=17021 comm="syz.0.3306" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.232725][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 200.299032][T17051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3306'. [ 200.344786][ T29] audit: type=1400 audit(1738244092.181:14324): avc: denied { create } for pid=17054 comm="syz.2.3318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.384093][ T29] audit: type=1400 audit(1738244092.221:14325): avc: denied { write } for pid=17021 comm="syz.0.3306" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 200.413915][ T29] audit: type=1107 audit(1738244092.251:14326): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 200.438597][ T29] audit: type=1400 audit(1738244092.271:14327): avc: denied { read } for pid=17063 comm="syz.2.3322" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.461565][ T29] audit: type=1400 audit(1738244092.271:14328): avc: denied { open } for pid=17063 comm="syz.2.3322" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.485017][ T29] audit: type=1400 audit(1738244092.271:14329): avc: denied { ioctl } for pid=17063 comm="syz.2.3322" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.509850][ T29] audit: type=1400 audit(1738244092.281:14330): avc: denied { append } for pid=17063 comm="syz.2.3322" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 200.678355][ T29] audit: type=1400 audit(1738244092.521:14331): avc: denied { mount } for pid=17063 comm="+}[@" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 200.700264][ T29] audit: type=1400 audit(1738244092.521:14332): avc: denied { mounton } for pid=17063 comm="+}[@" path="/100/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 200.700902][T17064] tmpfs: Unknown parameter 'm ol' [ 200.740857][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3323'. [ 200.790496][T17072] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.840983][T17076] wireguard0: entered promiscuous mode [ 200.846564][T17076] wireguard0: entered allmulticast mode [ 200.856521][T17072] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.896539][T17072] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.956677][T17072] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.058526][T17081] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.150166][T16889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.161411][T16889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.173409][T16889] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.184066][T16889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.313303][T17100] binfmt_misc: register: failed to install interpreter file ./file0 [ 201.349666][T17104] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.386437][T17104] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.410159][T17072] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.421203][T17072] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.431736][T17072] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.441514][T17104] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.454368][T17072] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.478075][T17106] binfmt_misc: register: failed to install interpreter file ./file0 [ 201.487354][T17104] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.578337][T17118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.609171][T17122] FAULT_INJECTION: forcing a failure. [ 201.609171][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 201.621840][T17122] CPU: 0 UID: 0 PID: 17122 Comm: syz.7.3348 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 201.621860][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.621939][T17122] Call Trace: [ 201.621953][T17122] [ 201.621961][T17122] dump_stack_lvl+0xf2/0x150 [ 201.621985][T17122] dump_stack+0x15/0x1a [ 201.622003][T17122] should_fail_ex+0x24a/0x260 [ 201.622069][T17122] should_failslab+0x8f/0xb0 [ 201.622083][T17122] kmem_cache_alloc_noprof+0x52/0x320 [ 201.622147][T17122] ? getname_flags+0x81/0x3b0 [ 201.622162][T17122] getname_flags+0x81/0x3b0 [ 201.622177][T17122] getname+0x17/0x20 [ 201.622190][T17122] __se_sys_sysfs+0x8d/0x2f0 [ 201.622275][T17122] __x64_sys_sysfs+0x43/0x50 [ 201.622324][T17122] x64_sys_call+0x2a8/0x2dc0 [ 201.622346][T17122] do_syscall_64+0xc9/0x1c0 [ 201.622361][T17122] ? clear_bhb_loop+0x55/0xb0 [ 201.622375][T17122] ? clear_bhb_loop+0x55/0xb0 [ 201.622388][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.622410][T17122] RIP: 0033:0x7f6dffd5cda9 [ 201.622419][T17122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.622428][T17122] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 201.622438][T17122] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 201.622445][T17122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 201.622452][T17122] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 201.622458][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.622493][T17122] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 201.622502][T17122] [ 201.833612][T17128] netlink: 'syz.7.3351': attribute type 4 has an invalid length. [ 201.907585][T17134] FAULT_INJECTION: forcing a failure. [ 201.907585][T17134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.921088][T17134] CPU: 0 UID: 0 PID: 17134 Comm: syz.7.3354 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 201.921110][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 201.921170][T17134] Call Trace: [ 201.921174][T17134] [ 201.921181][T17134] dump_stack_lvl+0xf2/0x150 [ 201.921206][T17134] dump_stack+0x15/0x1a [ 201.921226][T17134] should_fail_ex+0x24a/0x260 [ 201.921252][T17134] should_fail+0xb/0x10 [ 201.921316][T17134] should_fail_usercopy+0x1a/0x20 [ 201.921346][T17134] _copy_to_iter+0x248/0xd00 [ 201.921364][T17134] ? should_fail_ex+0xd7/0x260 [ 201.921386][T17134] ? down_read+0x171/0x4b0 [ 201.921437][T17134] copy_page_to_iter+0x171/0x2b0 [ 201.921506][T17134] process_vm_rw+0x5b6/0x890 [ 201.921606][T17134] ? ksys_write+0x176/0x1b0 [ 201.921624][T17134] __x64_sys_process_vm_readv+0x7a/0x90 [ 201.921656][T17134] x64_sys_call+0xb24/0x2dc0 [ 201.921691][T17134] do_syscall_64+0xc9/0x1c0 [ 201.921747][T17134] ? clear_bhb_loop+0x55/0xb0 [ 201.921772][T17134] ? clear_bhb_loop+0x55/0xb0 [ 201.921795][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.921825][T17134] RIP: 0033:0x7f6dffd5cda9 [ 201.921840][T17134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.921858][T17134] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 201.921876][T17134] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 201.921888][T17134] RDX: 0000000000000002 RSI: 0000000020008400 RDI: 00000000000001e1 [ 201.921900][T17134] RBP: 00007f6dfe3c7090 R08: 0000000000000286 R09: 0000000000000000 [ 201.921910][T17134] R10: 0000000020008640 R11: 0000000000000246 R12: 0000000000000002 [ 201.921920][T17134] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 201.921934][T17134] [ 202.277885][T17161] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3367'. [ 203.250564][T17226] hub 6-0:1.0: USB hub found [ 203.257800][T17226] hub 6-0:1.0: 8 ports detected [ 203.278583][T17226] team_slave_0: entered promiscuous mode [ 203.284329][T17226] team_slave_0: entered allmulticast mode [ 203.427046][T17250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.616413][T17276] bridge_slave_1: left allmulticast mode [ 203.622196][T17276] bridge_slave_1: left promiscuous mode [ 203.627998][T17276] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.636024][T17276] bridge_slave_0: left allmulticast mode [ 203.641749][T17276] bridge_slave_0: left promiscuous mode [ 203.647482][T17276] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.748292][T17104] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.762161][T17104] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.774067][T17104] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.787779][T17104] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.798979][T17288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.857331][T17298] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.908327][T17298] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.966711][T17298] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.007344][T17298] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.336774][T17320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.363603][T17322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.447981][T17322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.509235][T17322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.561785][T17322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.572536][T17331] FAULT_INJECTION: forcing a failure. [ 204.572536][T17331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.585698][T17331] CPU: 1 UID: 0 PID: 17331 Comm: syz.4.3445 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 204.585736][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 204.585817][T17331] Call Trace: [ 204.585823][T17331] [ 204.585830][T17331] dump_stack_lvl+0xf2/0x150 [ 204.585856][T17331] dump_stack+0x15/0x1a [ 204.585950][T17331] should_fail_ex+0x24a/0x260 [ 204.585979][T17331] should_fail+0xb/0x10 [ 204.586004][T17331] should_fail_usercopy+0x1a/0x20 [ 204.586066][T17331] _copy_from_user+0x1c/0xa0 [ 204.586084][T17331] memdup_user+0x64/0xc0 [ 204.586111][T17331] con_font_op+0x6ac/0x900 [ 204.586137][T17331] ? should_fail_ex+0xd7/0x260 [ 204.586166][T17331] vt_ioctl+0x1580/0x1810 [ 204.586189][T17331] tty_ioctl+0x815/0xbe0 [ 204.586289][T17331] ? __pfx_tty_ioctl+0x10/0x10 [ 204.586311][T17331] __se_sys_ioctl+0xc9/0x140 [ 204.586329][T17331] __x64_sys_ioctl+0x43/0x50 [ 204.586345][T17331] x64_sys_call+0x1690/0x2dc0 [ 204.586419][T17331] do_syscall_64+0xc9/0x1c0 [ 204.586476][T17331] ? clear_bhb_loop+0x55/0xb0 [ 204.586492][T17331] ? clear_bhb_loop+0x55/0xb0 [ 204.586521][T17331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.586534][T17331] RIP: 0033:0x7f6e2b5ccda9 [ 204.586543][T17331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.586558][T17331] RSP: 002b:00007f6e29c31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.586568][T17331] RAX: ffffffffffffffda RBX: 00007f6e2b7e5fa0 RCX: 00007f6e2b5ccda9 [ 204.586650][T17331] RDX: 0000000020000080 RSI: 0000000000004b72 RDI: 0000000000000008 [ 204.586657][T17331] RBP: 00007f6e29c31090 R08: 0000000000000000 R09: 0000000000000000 [ 204.586664][T17331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.586670][T17331] R13: 0000000000000000 R14: 00007f6e2b7e5fa0 R15: 00007ffcbc2f3418 [ 204.586686][T17331] [ 204.802206][T17322] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.814205][T17322] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.827075][T17322] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.840812][T17322] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.969456][T17354] __nla_validate_parse: 7 callbacks suppressed [ 204.969471][T17354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3455'. [ 204.985165][T17354] veth1_macvtap: left promiscuous mode [ 205.065803][T17364] FAULT_INJECTION: forcing a failure. [ 205.065803][T17364] name failslab, interval 1, probability 0, space 0, times 0 [ 205.078517][T17364] CPU: 0 UID: 0 PID: 17364 Comm: syz.7.3460 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 205.078540][T17364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.078631][T17364] Call Trace: [ 205.078636][T17364] [ 205.078641][T17364] dump_stack_lvl+0xf2/0x150 [ 205.078657][T17364] dump_stack+0x15/0x1a [ 205.078668][T17364] should_fail_ex+0x24a/0x260 [ 205.078684][T17364] ? shrinker_alloc+0x3b/0x5e0 [ 205.078706][T17364] should_failslab+0x8f/0xb0 [ 205.078793][T17364] __kmalloc_cache_noprof+0x4e/0x320 [ 205.078936][T17364] shrinker_alloc+0x3b/0x5e0 [ 205.078950][T17364] ? rcu_sync_init+0x32/0x40 [ 205.078963][T17364] alloc_super+0x451/0x5a0 [ 205.079036][T17364] ? __pfx_set_anon_super_fc+0x10/0x10 [ 205.079125][T17364] sget_fc+0x259/0x670 [ 205.079191][T17364] ? __pfx_set_anon_super_fc+0x10/0x10 [ 205.079202][T17364] ? __pfx_mqueue_fill_super+0x10/0x10 [ 205.079216][T17364] get_tree_nodev+0x28/0xf0 [ 205.079227][T17364] mqueue_get_tree+0x6b/0x90 [ 205.079298][T17364] vfs_get_tree+0x56/0x1e0 [ 205.079310][T17364] fc_mount+0x16/0x70 [ 205.079319][T17364] mq_init_ns+0x253/0x300 [ 205.079331][T17364] copy_ipcs+0x218/0x3b0 [ 205.079376][T17364] create_new_namespaces+0x135/0x430 [ 205.079409][T17364] ? security_capable+0x81/0x90 [ 205.079422][T17364] unshare_nsproxy_namespaces+0xe6/0x120 [ 205.079462][T17364] ksys_unshare+0x3c9/0x6e0 [ 205.079485][T17364] __x64_sys_unshare+0x1f/0x30 [ 205.079511][T17364] x64_sys_call+0x1a3e/0x2dc0 [ 205.079596][T17364] do_syscall_64+0xc9/0x1c0 [ 205.079611][T17364] ? clear_bhb_loop+0x55/0xb0 [ 205.079626][T17364] ? clear_bhb_loop+0x55/0xb0 [ 205.079639][T17364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.079725][T17364] RIP: 0033:0x7f6dffd5cda9 [ 205.079734][T17364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.079743][T17364] RSP: 002b:00007f6dfe3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 205.079754][T17364] RAX: ffffffffffffffda RBX: 00007f6dfff75fa0 RCX: 00007f6dffd5cda9 [ 205.079809][T17364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 205.079820][T17364] RBP: 00007f6dfe3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 205.079831][T17364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.079840][T17364] R13: 0000000000000000 R14: 00007f6dfff75fa0 R15: 00007fffc28e34e8 [ 205.079849][T17364] [ 205.329901][T17366] netlink: 'syz.7.3461': attribute type 1 has an invalid length. [ 205.341953][T17366] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.453833][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 205.453847][ T29] audit: type=1326 audit(1738244097.291:14865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17370 comm="syz.7.3463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dffd5cda9 code=0x0 [ 205.710421][T17385] FAULT_INJECTION: forcing a failure. [ 205.710421][T17385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.723637][T17385] CPU: 1 UID: 0 PID: 17385 Comm: syz.4.3467 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 205.723668][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 205.723679][T17385] Call Trace: [ 205.723684][T17385] [ 205.723756][T17385] dump_stack_lvl+0xf2/0x150 [ 205.723817][T17385] dump_stack+0x15/0x1a [ 205.723836][T17385] should_fail_ex+0x24a/0x260 [ 205.723866][T17385] should_fail+0xb/0x10 [ 205.723887][T17385] should_fail_usercopy+0x1a/0x20 [ 205.723913][T17385] _copy_from_user+0x1c/0xa0 [ 205.723972][T17385] copy_msghdr_from_user+0x54/0x2a0 [ 205.724046][T17385] ? __fget_files+0x17c/0x1c0 [ 205.724070][T17385] __sys_sendmsg+0x13e/0x230 [ 205.724167][T17385] __x64_sys_sendmsg+0x46/0x50 [ 205.724191][T17385] x64_sys_call+0x2734/0x2dc0 [ 205.724246][T17385] do_syscall_64+0xc9/0x1c0 [ 205.724270][T17385] ? clear_bhb_loop+0x55/0xb0 [ 205.724294][T17385] ? clear_bhb_loop+0x55/0xb0 [ 205.724316][T17385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.724339][T17385] RIP: 0033:0x7f6e2b5ccda9 [ 205.724392][T17385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.724416][T17385] RSP: 002b:00007f6e29c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.724434][T17385] RAX: ffffffffffffffda RBX: 00007f6e2b7e5fa0 RCX: 00007f6e2b5ccda9 [ 205.724445][T17385] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 205.724456][T17385] RBP: 00007f6e29c31090 R08: 0000000000000000 R09: 0000000000000000 [ 205.724466][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.724522][T17385] R13: 0000000000000000 R14: 00007f6e2b7e5fa0 R15: 00007ffcbc2f3418 [ 205.724538][T17385] [ 205.724627][ T29] audit: type=1400 audit(1738244097.571:14866): avc: denied { write } for pid=17386 comm="syz.5.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 205.786418][T17394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38154 sclass=netlink_route_socket pid=17394 comm=syz.5.3470 [ 205.789315][ T29] audit: type=1107 audit(1738244097.611:14867): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 205.903311][T17396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.917771][ T29] audit: type=1326 audit(1738244097.661:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 205.975688][ T29] audit: type=1326 audit(1738244097.661:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 205.999352][ T29] audit: type=1326 audit(1738244097.661:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 206.022999][ T29] audit: type=1326 audit(1738244097.661:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 206.046586][ T29] audit: type=1326 audit(1738244097.661:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 206.070276][ T29] audit: type=1326 audit(1738244097.661:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 206.093905][ T29] audit: type=1326 audit(1738244097.661:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17395 comm="syz.4.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 206.150016][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 206.285086][T17413] FAULT_INJECTION: forcing a failure. [ 206.285086][T17413] name failslab, interval 1, probability 0, space 0, times 0 [ 206.297806][T17413] CPU: 0 UID: 0 PID: 17413 Comm: +}[@ Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 206.297876][T17413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.297887][T17413] Call Trace: [ 206.297893][T17413] [ 206.297899][T17413] dump_stack_lvl+0xf2/0x150 [ 206.297926][T17413] dump_stack+0x15/0x1a [ 206.297946][T17413] should_fail_ex+0x24a/0x260 [ 206.298036][T17413] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 206.298065][T17413] should_failslab+0x8f/0xb0 [ 206.298086][T17413] __kmalloc_node_noprof+0xad/0x410 [ 206.298188][T17413] ? __kvmalloc_node_noprof+0x72/0x170 [ 206.298211][T17413] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 206.298239][T17413] __kvmalloc_node_noprof+0x72/0x170 [ 206.298335][T17413] alloc_netdev_mqs+0xa8/0xa20 [ 206.298361][T17413] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 206.298386][T17413] rtnl_create_link+0x233/0x680 [ 206.298417][T17413] rtnl_newlink_create+0x133/0x5d0 [ 206.298437][T17413] ? ns_capable+0x7d/0xb0 [ 206.298458][T17413] ? netlink_ns_capable+0x88/0xa0 [ 206.298494][T17413] rtnl_newlink+0xe9f/0x1250 [ 206.298525][T17413] ? xa_load+0xb9/0xe0 [ 206.298551][T17413] ? memcg_list_lru_alloc+0xce/0x4e0 [ 206.298599][T17413] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 206.298627][T17413] ? __rcu_read_unlock+0x4e/0x70 [ 206.298644][T17413] ? avc_has_perm_noaudit+0x1cc/0x210 [ 206.298665][T17413] ? selinux_capable+0x1f2/0x260 [ 206.298692][T17413] ? security_capable+0x81/0x90 [ 206.298713][T17413] ? ns_capable+0x7d/0xb0 [ 206.298728][T17413] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.298753][T17413] rtnetlink_rcv_msg+0x651/0x710 [ 206.298857][T17413] ? ref_tracker_free+0x3a5/0x410 [ 206.298880][T17413] ? __dev_queue_xmit+0x186/0x2090 [ 206.298940][T17413] netlink_rcv_skb+0x12c/0x230 [ 206.298957][T17413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.298985][T17413] rtnetlink_rcv+0x1c/0x30 [ 206.299014][T17413] netlink_unicast+0x599/0x670 [ 206.299101][T17413] netlink_sendmsg+0x5cc/0x6e0 [ 206.299121][T17413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.299142][T17413] __sock_sendmsg+0x140/0x180 [ 206.299165][T17413] ____sys_sendmsg+0x312/0x410 [ 206.299206][T17413] __sys_sendmsg+0x19d/0x230 [ 206.299245][T17413] __x64_sys_sendmsg+0x46/0x50 [ 206.299272][T17413] x64_sys_call+0x2734/0x2dc0 [ 206.299316][T17413] do_syscall_64+0xc9/0x1c0 [ 206.299339][T17413] ? clear_bhb_loop+0x55/0xb0 [ 206.299364][T17413] ? clear_bhb_loop+0x55/0xb0 [ 206.299384][T17413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.299399][T17413] RIP: 0033:0x7ff43deccda9 [ 206.299407][T17413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.299417][T17413] RSP: 002b:00007ff43c531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.299428][T17413] RAX: ffffffffffffffda RBX: 00007ff43e0e5fa0 RCX: 00007ff43deccda9 [ 206.299434][T17413] RDX: 000000000000c0b0 RSI: 0000000020000280 RDI: 0000000000000003 [ 206.299440][T17413] RBP: 00007ff43c531090 R08: 0000000000000000 R09: 0000000000000000 [ 206.299449][T17413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.299455][T17413] R13: 0000000000000000 R14: 00007ff43e0e5fa0 R15: 00007ffc43e50638 [ 206.299465][T17413] [ 206.622732][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3480'. [ 206.633048][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3480'. [ 206.642784][T17423] IPVS: Error joining to the multicast group [ 206.667786][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3484'. [ 207.300673][T17572] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.318194][T17573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3489'. [ 207.396530][T17572] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.477900][T17572] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.581369][T17572] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.622298][T17572] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.634014][T17572] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.646827][T17572] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.658626][T17572] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.007481][T17724] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.049963][T17730] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.063703][T17724] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.096502][T17730] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.137550][T17724] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.150348][T17730] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.177591][T17724] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.189921][T17730] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.231863][T17724] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.242863][T17724] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.253525][T17724] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.264776][T17724] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.439631][T17738] serio: Serial port ptm0 [ 208.712657][T17298] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.723265][T17298] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.733970][T17298] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.745398][T17298] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.336684][T17754] FAULT_INJECTION: forcing a failure. [ 209.336684][T17754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 209.349993][T17754] CPU: 1 UID: 0 PID: 17754 Comm: syz.5.3522 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 209.350014][T17754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.350040][T17754] Call Trace: [ 209.350046][T17754] [ 209.350052][T17754] dump_stack_lvl+0xf2/0x150 [ 209.350124][T17754] dump_stack+0x15/0x1a [ 209.350141][T17754] should_fail_ex+0x24a/0x260 [ 209.350228][T17754] should_fail_alloc_page+0xfd/0x110 [ 209.350251][T17754] __alloc_frozen_pages_noprof+0x109/0x340 [ 209.350277][T17754] alloc_pages_mpol+0xb4/0x260 [ 209.350365][T17754] vma_alloc_folio_noprof+0x1a0/0x310 [ 209.350397][T17754] handle_mm_fault+0xdd7/0x2ac0 [ 209.350451][T17754] exc_page_fault+0x3b9/0x650 [ 209.350472][T17754] asm_exc_page_fault+0x26/0x30 [ 209.350589][T17754] RIP: 0033:0x7ff43dd8fc50 [ 209.350604][T17754] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 209.350622][T17754] RSP: 002b:00007ff43c5304a0 EFLAGS: 00010206 [ 209.350716][T17754] RAX: 0000000000001000 RBX: 00007ff43c530540 RCX: 0000000000000003 [ 209.350728][T17754] RDX: 0000000000003fef RSI: 0000000000000bf0 RDI: 00007ff43c5305e0 [ 209.350817][T17754] RBP: 0000000000000004 R08: 00007ff434111000 R09: 000000000000000f [ 209.350829][T17754] R10: 0000000020000f42 R11: 0000000000000505 R12: 0000000000000801 [ 209.350841][T17754] R13: 00007ff43df693e0 R14: 0000000000000016 R15: 00007ff43c5305e0 [ 209.350858][T17754] [ 209.350878][T17754] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 209.597835][T17763] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.612659][T17765] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.636759][T17763] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.666558][T17765] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.696576][T17763] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.737490][T17765] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.777257][T17763] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.816331][T17765] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.900558][T17765] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.911285][T17765] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.922395][T17765] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.932938][T17765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.984360][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3538'. [ 210.019786][T17795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17795 comm=syz.0.3540 [ 210.045817][T17797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.298554][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 210.347753][T17822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=17822 comm=syz.4.3552 [ 210.581632][T17828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3553'. [ 210.698473][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 210.698488][ T29] audit: type=1326 audit(1738244102.541:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.700640][T17839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.716811][ T29] audit: type=1326 audit(1738244102.541:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.759957][ T29] audit: type=1326 audit(1738244102.541:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.783605][ T29] audit: type=1326 audit(1738244102.541:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.807212][ T29] audit: type=1326 audit(1738244102.541:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.830809][ T29] audit: type=1326 audit(1738244102.541:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.854474][ T29] audit: type=1326 audit(1738244102.541:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.857735][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3561'. [ 210.878183][ T29] audit: type=1326 audit(1738244102.541:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.878214][ T29] audit: type=1326 audit(1738244102.541:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 210.878237][ T29] audit: type=1326 audit(1738244102.541:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17838 comm="syz.2.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a22dcda9 code=0x7ffc0000 [ 211.037294][T17863] bridge0: entered promiscuous mode [ 211.044016][T17862] bridge0: left promiscuous mode [ 211.082233][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 211.091217][T17872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 211.100461][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3574'. [ 211.111235][T17872] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 211.175018][T17888] bridge0: entered promiscuous mode [ 211.181094][T17887] bridge0: left promiscuous mode [ 211.263320][T17907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.330005][T17924] FAULT_INJECTION: forcing a failure. [ 211.330005][T17924] name failslab, interval 1, probability 0, space 0, times 0 [ 211.342703][T17924] CPU: 0 UID: 0 PID: 17924 Comm: syz.0.3598 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 211.342722][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 211.342731][T17924] Call Trace: [ 211.342736][T17924] [ 211.342742][T17924] dump_stack_lvl+0xf2/0x150 [ 211.342773][T17924] dump_stack+0x15/0x1a [ 211.342792][T17924] should_fail_ex+0x24a/0x260 [ 211.342820][T17924] should_failslab+0x8f/0xb0 [ 211.342842][T17924] kmem_cache_alloc_node_noprof+0x59/0x320 [ 211.342912][T17924] ? __alloc_skb+0x10b/0x310 [ 211.342987][T17924] __alloc_skb+0x10b/0x310 [ 211.343010][T17924] netlink_alloc_large_skb+0xad/0xe0 [ 211.343059][T17924] netlink_sendmsg+0x3b4/0x6e0 [ 211.343081][T17924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.343097][T17924] __sock_sendmsg+0x140/0x180 [ 211.343116][T17924] ____sys_sendmsg+0x312/0x410 [ 211.343194][T17924] __sys_sendmsg+0x19d/0x230 [ 211.343226][T17924] __x64_sys_sendmsg+0x46/0x50 [ 211.343286][T17924] x64_sys_call+0x2734/0x2dc0 [ 211.343352][T17924] do_syscall_64+0xc9/0x1c0 [ 211.343446][T17924] ? clear_bhb_loop+0x55/0xb0 [ 211.343460][T17924] ? clear_bhb_loop+0x55/0xb0 [ 211.343474][T17924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.343487][T17924] RIP: 0033:0x7f901f9acda9 [ 211.343554][T17924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.343563][T17924] RSP: 002b:00007f901e017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.343574][T17924] RAX: ffffffffffffffda RBX: 00007f901fbc5fa0 RCX: 00007f901f9acda9 [ 211.343580][T17924] RDX: 00000000040c0080 RSI: 00000000200002c0 RDI: 0000000000000004 [ 211.343587][T17924] RBP: 00007f901e017090 R08: 0000000000000000 R09: 0000000000000000 [ 211.343593][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.343608][T17924] R13: 0000000000000000 R14: 00007f901fbc5fa0 R15: 00007ffed7b1efc8 [ 211.343616][T17924] [ 211.543528][T17730] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.557972][T17730] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.569682][T17730] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.580425][T17730] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.624184][T17937] ref_ctr_offset mismatch. inode: 0x569 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 211.746393][T17955] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.3607' sets config #0 [ 212.163715][T17967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.217765][T17967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.257225][T17967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.307486][T17967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.613654][T17763] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.625254][T17763] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.637156][T17763] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.648572][T17763] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.731351][T17975] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.762993][T17967] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.773500][T17983] Cannot find del_set index 0 as target [ 212.773920][T17975] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.793045][T17967] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.804405][T17967] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.816152][T17967] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.872716][T17989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3624'. [ 212.989496][T17975] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.000431][T17989] IPVS: Unknown mcast interface: vcan0 [ 213.038610][T17975] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.077746][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3630'. [ 213.087433][T18003] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 213.537024][T18018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.690228][T18020] ip6gretap0 speed is unknown, defaulting to 1000 [ 213.736510][T17975] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.762782][T17975] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.779314][T17975] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.790569][T17975] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.016926][T18052] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3638'. [ 214.089215][T18063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.427176][T18116] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.487092][T18116] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.547107][T18116] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.616700][T18116] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.663506][T18116] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.685017][T18116] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.708889][T18116] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.733207][T18116] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.743872][ T29] kauditd_printk_skb: 428 callbacks suppressed [ 215.743885][ T29] audit: type=1400 audit(1738244107.581:15584): avc: denied { read append } for pid=18219 comm="syz.0.3675" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.783920][ T29] audit: type=1400 audit(1738244107.581:15585): avc: denied { open } for pid=18219 comm="syz.0.3675" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 215.816642][T18221] wg2: entered promiscuous mode [ 215.821544][T18221] wg2: entered allmulticast mode [ 215.872060][ T29] audit: type=1326 audit(1738244107.711:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 215.896478][ T29] audit: type=1326 audit(1738244107.711:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 215.975381][ T29] audit: type=1326 audit(1738244107.711:15588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.000300][ T29] audit: type=1326 audit(1738244107.711:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.024225][ T29] audit: type=1326 audit(1738244107.711:15590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.049131][ T29] audit: type=1326 audit(1738244107.761:15591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.072902][ T29] audit: type=1326 audit(1738244107.761:15592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.097557][ T29] audit: type=1326 audit(1738244107.851:15593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18232 comm="syz.0.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f901f9acda9 code=0x7ffc0000 [ 216.619718][T18379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3697'. [ 216.687614][T18391] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.726376][T18391] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.786981][T18391] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.836724][T18391] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.905757][T18391] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.931100][T18391] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.953846][T18391] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.988561][T18391] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.293424][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3722'. [ 217.619234][T18573] wg2: entered promiscuous mode [ 217.624141][T18573] wg2: entered allmulticast mode [ 218.600769][T18713] tmpfs: Bad value for 'nr_blocks' [ 218.730876][T18738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.769315][T18738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.784240][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'. [ 218.793185][T18742] bridge_slave_1: left allmulticast mode [ 218.799621][T18742] bridge_slave_1: left promiscuous mode [ 218.805426][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.813186][T18742] bridge_slave_0: left allmulticast mode [ 218.818986][T18742] bridge_slave_0: left promiscuous mode [ 218.824643][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.879867][T18738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.961178][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3760'. [ 218.971876][T18738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.983858][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3760'. [ 219.022983][T18738] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.034404][T18738] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.047167][T18738] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.059768][T18738] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.129483][T18772] netlink: 'syz.7.3767': attribute type 4 has an invalid length. [ 219.624773][T18791] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.716476][T18791] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.726342][T18801] Cannot find del_set index 0 as target [ 219.746004][T18803] Cannot find set identified by id 632 to match [ 219.768757][T18791] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.819395][T18806] netlink: 876 bytes leftover after parsing attributes in process `syz.5.3783'. [ 219.861064][T18791] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.896767][T18809] hub 6-0:1.0: USB hub found [ 219.904923][T18809] hub 6-0:1.0: 8 ports detected [ 219.935402][T18809] team_slave_0: entered promiscuous mode [ 219.941087][T18809] team_slave_0: entered allmulticast mode [ 219.989695][T18791] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.013141][T18791] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.050737][T18791] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.096773][T18791] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.297745][T18840] FAULT_INJECTION: forcing a failure. [ 220.297745][T18840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.311540][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.0.3795 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 220.311561][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 220.311571][T18840] Call Trace: [ 220.311578][T18840] [ 220.311585][T18840] dump_stack_lvl+0xf2/0x150 [ 220.311689][T18840] dump_stack+0x15/0x1a [ 220.311707][T18840] should_fail_ex+0x24a/0x260 [ 220.311733][T18840] should_fail+0xb/0x10 [ 220.311802][T18840] should_fail_usercopy+0x1a/0x20 [ 220.311827][T18840] _copy_to_user+0x20/0xa0 [ 220.311845][T18840] simple_read_from_buffer+0xa0/0x110 [ 220.311877][T18840] proc_fail_nth_read+0xf9/0x140 [ 220.312032][T18840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.312053][T18840] vfs_read+0x19b/0x6f0 [ 220.312069][T18840] ? __rcu_read_unlock+0x4e/0x70 [ 220.312147][T18840] ? __fget_files+0x17c/0x1c0 [ 220.312173][T18840] ksys_read+0xe8/0x1b0 [ 220.312193][T18840] __x64_sys_read+0x42/0x50 [ 220.312246][T18840] x64_sys_call+0x2874/0x2dc0 [ 220.312271][T18840] do_syscall_64+0xc9/0x1c0 [ 220.312376][T18840] ? clear_bhb_loop+0x55/0xb0 [ 220.312462][T18840] ? clear_bhb_loop+0x55/0xb0 [ 220.312482][T18840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.312515][T18840] RIP: 0033:0x7f901f9ab7bc [ 220.312528][T18840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.312555][T18840] RSP: 002b:00007f901e017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.312573][T18840] RAX: ffffffffffffffda RBX: 00007f901fbc5fa0 RCX: 00007f901f9ab7bc [ 220.312593][T18840] RDX: 000000000000000f RSI: 00007f901e0170a0 RDI: 0000000000000004 [ 220.312604][T18840] RBP: 00007f901e017090 R08: 0000000000000000 R09: 0000000000000000 [ 220.312616][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.312626][T18840] R13: 0000000000000000 R14: 00007f901fbc5fa0 R15: 00007ffed7b1efc8 [ 220.312641][T18840] [ 220.659000][T18860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.751998][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 220.752084][ T29] audit: type=1400 audit(1738244112.591:16180): avc: denied { mac_admin } for pid=18869 comm="syz.7.3805" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 220.779537][ T29] audit: type=1400 audit(1738244112.591:16181): avc: denied { relabelto } for pid=18869 comm="syz.7.3805" name="file1" dev="tmpfs" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 220.807093][ T29] audit: type=1400 audit(1738244112.591:16182): avc: denied { associate } for pid=18869 comm="syz.7.3805" name="file1" dev="tmpfs" ino=1737 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:scsi_generic_device_t:s0" [ 220.912397][ T29] audit: type=1400 audit(1738244112.721:16183): avc: denied { create } for pid=18869 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.932150][ T29] audit: type=1400 audit(1738244112.721:16184): avc: denied { connect } for pid=18869 comm="syz.7.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.953671][ T29] audit: type=1400 audit(1738244112.801:16185): avc: denied { unlink } for pid=18869 comm="syz.7.3805" name="file1" dev="tmpfs" ino=1737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:scsi_generic_device_t:s0" [ 220.981204][ T29] audit: type=1326 audit(1738244112.801:16186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.4.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 220.981232][ T29] audit: type=1326 audit(1738244112.801:16187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.4.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 220.981266][ T29] audit: type=1326 audit(1738244112.801:16188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.4.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 220.981329][ T29] audit: type=1326 audit(1738244112.801:16189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18883 comm="syz.4.3789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2b5ccda9 code=0x7ffc0000 [ 221.038159][T18915] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3803'. [ 221.306709][T18947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.320627][T18947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.617120][T18994] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 221.963875][T19029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.028502][T19034] 9pnet_fd: Insufficient options for proto=fd [ 222.049675][T19029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.116692][T19029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.186917][T19029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.209757][T19059] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 222.218073][T19059] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 222.237202][T19061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.256742][T19064] netlink: 'syz.4.3861': attribute type 4 has an invalid length. [ 222.264782][T19064] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3861'. [ 222.277977][T19063] netlink: 'syz.4.3861': attribute type 4 has an invalid length. [ 222.286957][T19063] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3861'. [ 222.324491][T19063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19063 comm=syz.4.3861 [ 222.441938][T19074] 9pnet_fd: Insufficient options for proto=fd [ 222.973205][T19090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.985810][T19092] Cannot find set identified by id 632 to match [ 222.998507][T19092] netlink: 876 bytes leftover after parsing attributes in process `syz.4.3872'. [ 223.015240][T19092] netlink: 876 bytes leftover after parsing attributes in process `syz.4.3872'. [ 223.097041][T19103] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3879'. [ 223.112771][T19103] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.121122][T19103] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.129419][T19103] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.137700][T19103] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 223.188124][T19109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3880'. [ 223.288518][T19118] bond0: (slave bond_slave_0): Releasing backup interface [ 223.301425][T19118] bond0: (slave bond_slave_1): Releasing backup interface [ 223.320315][T19118] team0: Port device team_slave_0 removed [ 223.329526][T19118] team0: Port device team_slave_1 removed [ 223.337990][T19118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.345492][T19118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.358163][T19118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.365876][T19118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.671263][T19156] FAULT_INJECTION: forcing a failure. [ 223.671263][T19156] name failslab, interval 1, probability 0, space 0, times 0 [ 223.684580][T19156] CPU: 0 UID: 0 PID: 19156 Comm: syz.4.3902 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 223.684605][T19156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 223.684614][T19156] Call Trace: [ 223.684620][T19156] [ 223.684626][T19156] dump_stack_lvl+0xf2/0x150 [ 223.684649][T19156] dump_stack+0x15/0x1a [ 223.684674][T19156] should_fail_ex+0x24a/0x260 [ 223.684698][T19156] should_failslab+0x8f/0xb0 [ 223.684718][T19156] kmem_cache_alloc_node_noprof+0x59/0x320 [ 223.684809][T19156] ? __alloc_skb+0x10b/0x310 [ 223.684831][T19156] __alloc_skb+0x10b/0x310 [ 223.684860][T19156] netlink_alloc_large_skb+0xad/0xe0 [ 223.684927][T19156] netlink_sendmsg+0x3b4/0x6e0 [ 223.684951][T19156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.685029][T19156] __sock_sendmsg+0x140/0x180 [ 223.685048][T19156] ____sys_sendmsg+0x312/0x410 [ 223.685073][T19156] __sys_sendmsg+0x19d/0x230 [ 223.685107][T19156] __x64_sys_sendmsg+0x46/0x50 [ 223.685130][T19156] x64_sys_call+0x2734/0x2dc0 [ 223.685173][T19156] do_syscall_64+0xc9/0x1c0 [ 223.685193][T19156] ? clear_bhb_loop+0x55/0xb0 [ 223.685213][T19156] ? clear_bhb_loop+0x55/0xb0 [ 223.685232][T19156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.685296][T19156] RIP: 0033:0x7f6e2b5ccda9 [ 223.685308][T19156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.685342][T19156] RSP: 002b:00007f6e29c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.685356][T19156] RAX: ffffffffffffffda RBX: 00007f6e2b7e5fa0 RCX: 00007f6e2b5ccda9 [ 223.685439][T19156] RDX: 0000000004000104 RSI: 00000000200005c0 RDI: 0000000000000003 [ 223.685449][T19156] RBP: 00007f6e29c31090 R08: 0000000000000000 R09: 0000000000000000 [ 223.685458][T19156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.685467][T19156] R13: 0000000000000000 R14: 00007f6e2b7e5fa0 R15: 00007ffcbc2f3418 [ 223.685496][T19156] [ 224.903706][T19328] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3925'. [ 224.915095][T19328] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.923415][T19328] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.931735][T19328] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.940036][T19328] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 224.981128][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3927'. [ 225.004897][T19338] Process accounting resumed [ 225.005471][T19339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3923'. [ 225.302654][T19029] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.351577][T19029] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.417047][T19029] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.430967][T19029] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.948417][T19419] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3939'. [ 226.008337][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 226.008399][ T29] audit: type=1326 audit(1738244117.851:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.065895][ T29] audit: type=1326 audit(1738244117.851:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.089678][ T29] audit: type=1326 audit(1738244117.851:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.113289][ T29] audit: type=1326 audit(1738244117.851:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.136944][ T29] audit: type=1326 audit(1738244117.851:16635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.160664][ T29] audit: type=1326 audit(1738244117.851:16636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.184281][ T29] audit: type=1326 audit(1738244117.851:16637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.208002][ T29] audit: type=1326 audit(1738244117.851:16638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.235736][ T29] audit: type=1326 audit(1738244117.851:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19440 comm="syz.5.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43deccda9 code=0x7ffc0000 [ 226.294701][ T29] audit: type=1400 audit(1738244118.081:16640): avc: denied { nlmsg_write } for pid=19460 comm="syz.7.3943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 226.392353][T19475] 9pnet_fd: Insufficient options for proto=fd [ 226.439765][T19490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.630132][T19536] 9pnet_fd: Insufficient options for proto=fd [ 226.834153][T19575] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.844068][T19575] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.917306][T19575] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.927199][T19575] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 226.970282][T19591] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.978636][T19591] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.986922][T19591] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.995204][T19591] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 227.017273][T19575] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.027151][T19575] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.086963][T19575] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.096773][T19575] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.193770][T19575] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.202178][T19575] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.215727][T19575] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.224000][T19575] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.237964][T19575] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.246286][T19575] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.258402][T19575] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.266749][T19575] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.335804][T19662] __nla_validate_parse: 4 callbacks suppressed [ 227.335818][T19662] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3979'. [ 227.361128][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3982'. [ 227.498376][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3983'. [ 227.505685][T19679] FAULT_INJECTION: forcing a failure. [ 227.505685][T19679] name failslab, interval 1, probability 0, space 0, times 0 [ 227.520053][T19679] CPU: 0 UID: 0 PID: 19679 Comm: syz.4.3987 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 227.520085][T19679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.520096][T19679] Call Trace: [ 227.520102][T19679] [ 227.520108][T19679] dump_stack_lvl+0xf2/0x150 [ 227.520142][T19679] dump_stack+0x15/0x1a [ 227.520161][T19679] should_fail_ex+0x24a/0x260 [ 227.520243][T19679] should_failslab+0x8f/0xb0 [ 227.520268][T19679] kmem_cache_alloc_noprof+0x52/0x320 [ 227.520349][T19679] ? skb_clone+0x154/0x1f0 [ 227.520379][T19679] skb_clone+0x154/0x1f0 [ 227.520403][T19679] __netlink_deliver_tap+0x2bd/0x4f0 [ 227.520429][T19679] netlink_unicast+0x64a/0x670 [ 227.520460][T19679] netlink_sendmsg+0x5cc/0x6e0 [ 227.520544][T19679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.520560][T19679] __sock_sendmsg+0x140/0x180 [ 227.520583][T19679] ____sys_sendmsg+0x312/0x410 [ 227.520614][T19679] __sys_sendmsg+0x19d/0x230 [ 227.520708][T19679] __x64_sys_sendmsg+0x46/0x50 [ 227.520738][T19679] x64_sys_call+0x2734/0x2dc0 [ 227.520761][T19679] do_syscall_64+0xc9/0x1c0 [ 227.520833][T19679] ? clear_bhb_loop+0x55/0xb0 [ 227.520853][T19679] ? clear_bhb_loop+0x55/0xb0 [ 227.520878][T19679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.520926][T19679] RIP: 0033:0x7f6e2b5ccda9 [ 227.520995][T19679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.521012][T19679] RSP: 002b:00007f6e29c31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.521029][T19679] RAX: ffffffffffffffda RBX: 00007f6e2b7e5fa0 RCX: 00007f6e2b5ccda9 [ 227.521094][T19679] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 227.521106][T19679] RBP: 00007f6e29c31090 R08: 0000000000000000 R09: 0000000000000000 [ 227.521118][T19679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.521129][T19679] R13: 0000000000000000 R14: 00007f6e2b7e5fa0 R15: 00007ffcbc2f3418 [ 227.521147][T19679] [ 227.522239][T19679] netlink: 'syz.4.3987': attribute type 16 has an invalid length. [ 227.731105][T19679] netlink: 'syz.4.3987': attribute type 17 has an invalid length. [ 227.752108][T19679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.812104][T19688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.822563][T19688] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.876269][T19692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.896947][T19688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.906817][T19688] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.956795][T19688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.966636][T19688] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 227.997803][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3994'. [ 228.048543][T19688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.058400][T19688] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 228.112483][T19688] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.120918][T19688] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 228.132119][T19688] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.140574][T19688] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 228.162018][T19688] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.170379][T19688] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 228.183627][T19688] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 228.191960][T19688] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 228.227188][T19719] tmpfs: Unknown parameter '00000000000000000520' [ 228.723987][ T3288] ================================================================== [ 228.732076][ T3288] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 228.740295][ T3288] [ 228.742622][ T3288] write to 0xffff888101f76f78 of 2 bytes by interrupt on cpu 0: [ 228.750228][ T3288] virtqueue_disable_cb+0x85/0x180 [ 228.755321][ T3288] skb_xmit_done+0x5f/0x140 [ 228.759816][ T3288] vring_interrupt+0x161/0x190 [ 228.764559][ T3288] __handle_irq_event_percpu+0x95/0x490 [ 228.770081][ T3288] handle_irq_event+0x64/0xf0 [ 228.774735][ T3288] handle_edge_irq+0x16d/0x5b0 [ 228.779481][ T3288] __common_interrupt+0x58/0xe0 [ 228.784309][ T3288] common_interrupt+0x7c/0x90 [ 228.788971][ T3288] asm_common_interrupt+0x26/0x40 [ 228.793974][ T3288] kcsan_setup_watchpoint+0x404/0x410 [ 228.799327][ T3288] __unix_dgram_recvmsg+0x59b/0x860 [ 228.804523][ T3288] unix_dgram_recvmsg+0x81/0x90 [ 228.809355][ T3288] sock_recvmsg_nosec+0x107/0x140 [ 228.814356][ T3288] ____sys_recvmsg+0x271/0x280 [ 228.819102][ T3288] do_recvmmsg+0x2aa/0x6d0 [ 228.823493][ T3288] __x64_sys_recvmmsg+0xe2/0x170 [ 228.828406][ T3288] x64_sys_call+0x2a9a/0x2dc0 [ 228.833062][ T3288] do_syscall_64+0xc9/0x1c0 [ 228.837545][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.843436][ T3288] [ 228.845743][ T3288] read to 0xffff888101f76f78 of 2 bytes by task 3288 on cpu 1: [ 228.853265][ T3288] virtqueue_disable_cb+0x63/0x180 [ 228.858356][ T3288] start_xmit+0x15c/0x1310 [ 228.862747][ T3288] dev_hard_start_xmit+0x119/0x3f0 [ 228.867839][ T3288] sch_direct_xmit+0x1a9/0x580 [ 228.872585][ T3288] __dev_queue_xmit+0xf6a/0x2090 [ 228.877512][ T3288] ip_finish_output2+0x71b/0x880 [ 228.882427][ T3288] ip_finish_output+0x11a/0x2a0 [ 228.887256][ T3288] ip_output+0xab/0x170 [ 228.891384][ T3288] __ip_queue_xmit+0xb34/0xb50 [ 228.896125][ T3288] ip_queue_xmit+0x38/0x50 [ 228.900526][ T3288] __tcp_transmit_skb+0x15ca/0x1980 [ 228.905703][ T3288] tcp_write_xmit+0x1410/0x3220 [ 228.910547][ T3288] __tcp_push_pending_frames+0x6a/0x1a0 [ 228.916076][ T3288] tcp_push+0x320/0x340 [ 228.920228][ T3288] tcp_sendmsg_locked+0x21a1/0x26a0 [ 228.925407][ T3288] tcp_sendmsg+0x30/0x50 [ 228.929639][ T3288] inet_sendmsg+0x77/0xd0 [ 228.933948][ T3288] __sock_sendmsg+0x102/0x180 [ 228.938609][ T3288] sock_write_iter+0x15e/0x1a0 [ 228.943359][ T3288] vfs_write+0x77b/0x920 [ 228.947580][ T3288] ksys_write+0xe8/0x1b0 [ 228.951801][ T3288] __x64_sys_write+0x42/0x50 [ 228.956365][ T3288] x64_sys_call+0x287e/0x2dc0 [ 228.961018][ T3288] do_syscall_64+0xc9/0x1c0 [ 228.965505][ T3288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.971388][ T3288] [ 228.973689][ T3288] value changed: 0x0000 -> 0x0001 [ 228.978701][ T3288] [ 228.981003][ T3288] Reported by Kernel Concurrency Sanitizer on: [ 228.987127][ T3288] CPU: 1 UID: 0 PID: 3288 Comm: syz-executor Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 228.997603][ T3288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 229.007635][ T3288] ================================================================== SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 229.137511][ T3288] syz-executor (3288) used greatest stack depth: 9392 bytes left [ 229.918246][T19344] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.016453][T19344] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.075973][T19344] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.116436][T19344] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.207680][T19344] bond0 (unregistering): Released all slaves [ 230.321708][T19344] hsr_slave_0: left promiscuous mode [ 230.327326][T19344] hsr_slave_1: left promiscuous mode [ 230.334585][T19344] veth0_macvtap: left promiscuous mode [ 230.340184][T19344] veth1_vlan: left promiscuous mode [ 230.346124][T19344] veth0_vlan: left promiscuous mode [ 230.708590][T19344] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.776518][T19344] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.816251][T19344] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.856514][T19344] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.905328][T19344] bridge_slave_1: left allmulticast mode [ 230.910964][T19344] bridge_slave_1: left promiscuous mode [ 230.916635][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.924238][T19344] bridge_slave_0: left allmulticast mode [ 230.929927][T19344] bridge_slave_0: left promiscuous mode [ 230.935673][T19344] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.962497][ T3376] ip6gretap0 speed is unknown, defaulting to 1000 [ 231.007578][T19344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.017693][T19344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.026964][T19344] bond0 (unregistering): Released all slaves [ 231.100938][T19344] hsr_slave_0: left promiscuous mode [ 231.106900][T19344] hsr_slave_1: left promiscuous mode [ 231.112337][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.119889][T19344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.127396][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.134782][T19344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.144213][T19344] veth1_macvtap: left promiscuous mode [ 231.149740][T19344] veth0_macvtap: left promiscuous mode [ 231.155305][T19344] veth1_vlan: left promiscuous mode [ 231.160507][T19344] veth0_vlan: left promiscuous mode [ 231.211606][T19344] team0 (unregistering): Port device team_slave_1 removed [ 231.220765][T19344] team0 (unregistering): Port device team_slave_0 removed [ 231.687348][T19344] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.697249][T19344] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.736224][T19344] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.746150][T19344] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.796435][T19344] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.806388][T19344] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.856249][T19344] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 231.866152][T19344] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 231.959427][T19344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.969108][T19344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.978709][T19344] bond0 (unregistering): Released all slaves [ 232.051382][T19344] hsr_slave_0: left promiscuous mode [ 232.057173][T19344] hsr_slave_1: left promiscuous mode [ 232.062748][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.070159][T19344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.077720][T19344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.085124][T19344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.093760][T19344] veth1_macvtap: left promiscuous mode [ 232.099329][T19344] veth0_macvtap: left promiscuous mode [ 232.104785][T19344] veth1_vlan: left promiscuous mode [ 232.110030][T19344] veth0_vlan: left promiscuous mode [ 232.162435][T19344] team0 (unregistering): Port device team_slave_1 removed [ 232.171734][T19344] team0 (unregistering): Port device team_slave_0 removed [ 232.698730][T12780] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.708615][T12780] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.746364][T12780] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.756304][T12780] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.816531][T12780] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.826381][T12780] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.896126][T12780] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 232.905979][T12780] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 232.946047][T12780] bridge_slave_1: left allmulticast mode [ 232.951694][T12780] bridge_slave_1: left promiscuous mode [ 232.957292][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.965036][T12780] bridge_slave_0: left allmulticast mode [ 232.970672][T12780] bridge_slave_0: left promiscuous mode [ 232.976436][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.047612][T12780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.057404][T12780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.066474][T12780] bond0 (unregistering): Released all slaves [ 233.140806][T12780] hsr_slave_0: left promiscuous mode [ 233.146430][T12780] hsr_slave_1: left promiscuous mode [ 233.151945][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.159416][T12780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.166779][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.174147][T12780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.183090][T12780] veth1_macvtap: left promiscuous mode [ 233.189816][T12780] veth0_macvtap: left promiscuous mode [ 233.195444][T12780] veth1_vlan: left promiscuous mode [ 233.200647][T12780] veth0_vlan: left promiscuous mode [ 233.253709][T12780] team0 (unregistering): Port device team_slave_1 removed [ 233.263094][T12780] team0 (unregistering): Port device team_slave_0 removed