last executing test programs: 5m33.151138605s ago: executing program 32 (id=223): open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m23.856645762s ago: executing program 33 (id=6162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) alarm(0x9) fchmod(0xffffffffffffffff, 0x98) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0xe9}, &(0x7f00000005c0)=0x8) ustat(0x3, &(0x7f0000000240)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x11e, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x280, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0xc0, 0x7}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "c752"}}]}, @REJECT={0x28}}, {{@ip={@broadcast, @broadcast, 0xff000000, 0xffffff00, 'bond_slave_1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x6, 0x1, 0x2}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010105}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x54}, 0x40800) 1m20.647903157s ago: executing program 34 (id=6184): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 1m20.223626608s ago: executing program 35 (id=6186): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110385ac40000009560"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x1, 0xfffffffffffffffe}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x9}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x300}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1m10.349319413s ago: executing program 8 (id=6290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x826, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x4, 0xe9, 0x7a}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) close_range(r0, r2, 0x0) 1m10.183263236s ago: executing program 8 (id=6295): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x80001, 0xd1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x3, 0x1, 0x1]}, &(0x7f0000000180)=0xa) writev(r4, &(0x7f0000000940)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r5 = memfd_secret(0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x2e, 0x4608, @void}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.604922438s ago: executing program 8 (id=6305): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f00000004c0)}, 0x115428, 0x0, 0x3, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m9.511319505s ago: executing program 8 (id=6307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x36b8, 0x100000001}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0xffff, {0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000"], 0x70}}, 0x0) socket(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x500}, {r3, 0x4420}], 0x2, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0), 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000017c0)=""/4093, 0xffd}], 0x1}, 0xd619}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122) 1m9.323459179s ago: executing program 8 (id=6310): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0xb}], ['\x00']}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='mm_page_free\x00', r5}, 0x18) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ftruncate(0xffffffffffffffff, 0x2007ffb) 1m8.461029612s ago: executing program 8 (id=6319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f00000004c0)}, 0x115428, 0x0, 0x3, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m8.460850822s ago: executing program 36 (id=6319): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f00000004c0)}, 0x115428, 0x0, 0x3, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m3.953599253s ago: executing program 7 (id=6387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r1, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 1m3.056840859s ago: executing program 7 (id=6404): r0 = socket(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100000008000000b703003a437200000000f0850000002d0000000000000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000300)) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_setlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@numtail}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r5, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r5, 0x0) 1m2.993160504s ago: executing program 7 (id=6406): r0 = syz_io_uring_setup(0x3558, &(0x7f00000000c0)={0x0, 0xdbfe, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() socket(0xa, 0x3, 0x3a) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x188, 0xe0, 0xffffffff, 0x2a0, 0x0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000080, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m2.285468275s ago: executing program 7 (id=6416): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x36b8, 0x100000001}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0xffff, {0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000"], 0x70}}, 0x0) socket(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x500}, {r3, 0x4420}], 0x2, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0), 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000017c0)=""/4093, 0xffd}], 0x1}, 0xd619}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122) 1m2.003516726s ago: executing program 7 (id=6423): creat(&(0x7f0000000080)='./file0\x00', 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 1m1.234925423s ago: executing program 7 (id=6435): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x80001, 0xd1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x3, 0x1, 0x1]}, &(0x7f0000000180)=0xa) writev(r3, &(0x7f0000000940)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = memfd_secret(0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x2e, 0x4608, @void}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.189224006s ago: executing program 37 (id=6435): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x80001, 0xd1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x3, 0x1, 0x1]}, &(0x7f0000000180)=0xa) writev(r3, &(0x7f0000000940)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = memfd_secret(0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r4, 0x2e, 0x4608, @void}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 55.647587803s ago: executing program 9 (id=6539): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 55.372502813s ago: executing program 9 (id=6545): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@'], 0xfe33) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) 55.225464024s ago: executing program 9 (id=6549): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x61d2, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80001, 0xd1) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) writev(r1, &(0x7f0000000940)=[{0x0}], 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = memfd_secret(0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x2e, 0x4608, @void}, 0x10) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 54.878728139s ago: executing program 9 (id=6551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000380)=0xe6e, 0x29, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x8020) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x860240, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = syz_io_uring_setup(0x24fd, &(0x7f00000003c0)={0x0, 0x20, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r11, &(0x7f00000004c0)=ANY=[], 0x56) io_uring_enter(r7, 0x1d2d, 0x0, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x40, 0xfffc, 0x0, 0x0, 0x0, 0x0, r4}, {@in6=@empty, 0x4d3, 0x32}, @in=@multicast2, {}, {}, {0x35a3}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(r12, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000c06050000000000000000000a000000050001000700000005000100072000000900020073797a310000000005000100070000000900020073797a320000000005000100070000000900020073797a310000000006177332ca8e5f167a71ca4f0464142ef616e8fa1e0d206b298575b0ddad012689bd9b05000000000000006f1e36"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000200)={'rose0\x00', 0x4206}) r14 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fremovexattr(r14, &(0x7f0000000580)=@known='trusted.overlay.impure\x00') setsockopt$inet_MCAST_JOIN_GROUP(r14, 0x0, 0x2a, &(0x7f0000000080)={0x8, {{0x2, 0x4e20, @multicast1}}}, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) 54.704643782s ago: executing program 9 (id=6553): socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "635d509d2718c014df1a4569ec44cf1dd88567", 0x5}) r1 = io_uring_setup(0x766a, &(0x7f0000000880)={0x0, 0xd277, 0x0, 0x0, 0x128}) r2 = dup(0xffffffffffffffff) r3 = syz_io_uring_setup(0x6acf, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000740), 0x5}, 0x1100, 0x5dd8, 0x4, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x10, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000001000000000000000e000000200001000000005000000000000000000000000080a00000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000"], 0x254}}, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000015c0)=""/232) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001c80)={0x7, 0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000680)=""/128, 0x80}, {&(0x7f0000000d80)=""/81, 0x51}, {&(0x7f0000000e00)=""/184, 0xb8}, {&(0x7f0000000ec0)=""/95, 0x5f}, {&(0x7f0000000f40)=""/204, 0xcc}, {&(0x7f0000001040)=""/209, 0xd1}, {&(0x7f0000000700)=""/25, 0x19}], &(0x7f0000000540)}, 0x20) preadv(r2, 0x0, 0x0, 0xa30a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x202000, 0x18f2eb1b72dd4726) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x1e25f469e823c746, 0x18, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x10, 0xe5, &(0x7f00000002c0)=""/229, 0x40f00, 0x4c, '\x00', r6, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x3, 0x9}, 0x10, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000580)=[r0, r7, r2, r0], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfc5, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f0000000000)=""/24, &(0x7f0000000040)=0x18) close_range(r1, 0xffffffffffffffff, 0x0) 54.569294502s ago: executing program 9 (id=6555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x300, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) pipe(&(0x7f0000000100)) (async) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) close(r2) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x300, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0) (async) 39.504404309s ago: executing program 38 (id=6555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x300, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) pipe(&(0x7f0000000100)) (async) creat(&(0x7f0000000280)='./file0\x00', 0x0) (async) close(r2) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x300, {0x800, 0xb}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x60}}, 0x0) (async) 26.636952113s ago: executing program 4 (id=7047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200038, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0xfffffffffffffef6, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 26.600501506s ago: executing program 4 (id=7049): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 26.288062709s ago: executing program 4 (id=7051): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xfffffffffffffda0, 0xffffff5a}, 0x40) 26.158783668s ago: executing program 4 (id=7053): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x36b8, 0x100000001}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0xffff, {0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000"], 0x70}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000c40)=""/122) 26.084745294s ago: executing program 4 (id=7056): r0 = socket(0x2, 0x3, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) recvfrom$unix(r0, 0x0, 0x14, 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000800000e6ffffffffffffff00"/28], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, &(0x7f0000000040)=0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x2000000000000000}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x205}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x901}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=ANY=[@ANYBLOB="1c0000001a00010000000000fbdbdf2581208000"], 0x44}}, 0x0) 23.773399764s ago: executing program 4 (id=7088): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xfffffffffffffda0, 0xffffff5a}, 0x40) 23.738165556s ago: executing program 39 (id=7088): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xfffffffffffffda0, 0xffffff5a}, 0x40) 17.802664002s ago: executing program 0 (id=7161): socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000003fb53dbdbbd08adc30000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000002000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000400000000000000000000000000000001000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 17.735662317s ago: executing program 0 (id=7163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x0) 17.616423046s ago: executing program 0 (id=7167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 17.541235921s ago: executing program 0 (id=7169): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x36b8, 0x100000001}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0xffff, {0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000"], 0x70}}, 0x0) socket(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x500}, {r3, 0x4420}], 0x2, 0x0, 0x0, 0x0) bind$can_raw(r1, &(0x7f00000001c0), 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122) 17.405356771s ago: executing program 0 (id=7171): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 16.160999052s ago: executing program 0 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x0) 16.142223294s ago: executing program 40 (id=7191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r4], 0x40}}, 0x0) 2.357791547s ago: executing program 2 (id=7364): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 2.249237734s ago: executing program 2 (id=7367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) dup3(r1, r1, 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0x96000be8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a000000", @ANYRES16, @ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) flock(r2, 0x2) 1.399944556s ago: executing program 2 (id=7391): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000001340)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1.336824432s ago: executing program 2 (id=7392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200038, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0xfffffffffffffef6, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.336534692s ago: executing program 2 (id=7393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x2000000000000085, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = memfd_secret(0x80000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.315747993s ago: executing program 2 (id=7394): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x5, 0x400}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff6d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r3, &(0x7f00000007c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[], 0x0) 1.239431978s ago: executing program 5 (id=7396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb050004000500000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.161546634s ago: executing program 5 (id=7398): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x5, 0x400}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x48) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff6d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r3, &(0x7f00000007c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000080}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.105157529s ago: executing program 6 (id=7401): r0 = syz_io_uring_setup(0x412c, &(0x7f0000000040)={0x0, 0x8a40, 0x8000, 0x1fc, 0x1a8}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000180)={0x8, 0x8, 0x9}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000b80)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2f, 0x24, 0x68, 0x0, 0x5, 0x21, 0x0, @multicast1, @rand_addr=0x64010101}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x5, 0x0, 0x0, 0x0, 0x2, "35b85b", 0x20, "0fd518"}}}}}}, 0x0) 1.104885689s ago: executing program 6 (id=7402): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000001340)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 1.040914243s ago: executing program 6 (id=7403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 888.020534ms ago: executing program 6 (id=7406): r0 = socket(0x2, 0x3, 0x5) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0xc, @local}, 0x10) recvfrom$unix(r0, 0x0, 0x14, 0x42, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000800000e6ffffffffffffff00"/28], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f00000000c0)=0x1, 0x0, 0x4) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0xc0085508, &(0x7f0000000040)=0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x2000000000000000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=ANY=[@ANYBLOB="1c0000001a00010000000000fbdbdf2581208000"], 0x44}}, 0x0) 615.523034ms ago: executing program 3 (id=7415): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x1, 0xfffffffffffffffe}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x300}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 598.024315ms ago: executing program 3 (id=7416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c57596", 0xf}, {&(0x7f0000000140)="100000", 0x3}], 0x2) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 533.36395ms ago: executing program 3 (id=7417): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 332.151745ms ago: executing program 3 (id=7420): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000008050000000000000000000000a8d755af06000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r6}, 0x10) bind$can_raw(r1, &(0x7f00000004c0), 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000480)='./file0\x00') r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r9}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x5}}], 0x48, 0x20000081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 331.688385ms ago: executing program 1 (id=7430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 301.834337ms ago: executing program 1 (id=7421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f00000002c0)=ANY=[@ANYBLOB="24af0000bb001000001f00f9d31754661da7a621a500"/31], 0x0) 301.003687ms ago: executing program 5 (id=7422): prctl$PR_SET_NAME(0xf, 0x0) r0 = socket(0x1, 0x80802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) getpeername$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x7, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0071bb00552d43f02a4e010000bd00850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x29, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(&(0x7f00000014c0)={&(0x7f0000000240), 0x80000000}, 0x0) 287.188958ms ago: executing program 1 (id=7423): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000180)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xc0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 277.433579ms ago: executing program 3 (id=7424): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 275.443909ms ago: executing program 5 (id=7425): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010001fff000000000007000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000300012800b000100697036746e6c0000200002801400020000000000000000000000ffffac1414bb050004000500000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 189.006995ms ago: executing program 5 (id=7426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 165.019657ms ago: executing program 5 (id=7427): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x3000000) 134.685129ms ago: executing program 6 (id=7428): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x10, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x1d, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r6, &(0x7f0000000180), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x1, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}}}, 0x24}}, 0x0) 128.89566ms ago: executing program 3 (id=7429): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x7, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000ac000000ac0000000b000000060000000000000700000000000000000600000d000000000d000000040000000f00000005000000050000000100000002000000030000000d00000005000000000000000100000001000000000000010000000066005602000000000500000d00000000060000000000000002000000020000000e0000000000000010000000030000000a00000001000000030000000000001002000000000000000100000d000000000b000000054000000030002e305f00302e6100"], &(0x7f0000000580)=""/96, 0xcf, 0x60, 0x0, 0x4, 0x10000, @value=r0}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x5dd8, 0x1, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24008000) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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"/913, 0x391}], 0x1}}], 0x2, 0x2004c000) close_range(r1, 0xffffffffffffffff, 0x0) 38.686917ms ago: executing program 1 (id=7431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20) 21.130358ms ago: executing program 1 (id=7432): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 855.32µs ago: executing program 1 (id=7433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) close_range(r2, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) 0s ago: executing program 6 (id=7434): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1f, &(0x7f00000002c0)=ANY=[@ANYBLOB="24af0000bb001000001f00f9d31754661da7a621a500"/31], 0x0) kernel console output (not intermixed with test programs): 0x10/0x10 [ 327.528136][T22753] vfs_write+0x27d/0x920 [ 327.528164][T22753] ? __fget_files+0x17c/0x1c0 [ 327.528201][T22753] ksys_write+0xe8/0x1b0 [ 327.528227][T22753] __x64_sys_write+0x42/0x50 [ 327.528283][T22753] x64_sys_call+0x287e/0x2dc0 [ 327.528316][T22753] do_syscall_64+0xc9/0x1c0 [ 327.528347][T22753] ? clear_bhb_loop+0x55/0xb0 [ 327.528409][T22753] ? clear_bhb_loop+0x55/0xb0 [ 327.528443][T22753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.528476][T22753] RIP: 0033:0x7fe019dacde9 [ 327.528494][T22753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.528567][T22753] RSP: 002b:00007fe018417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.528590][T22753] RAX: ffffffffffffffda RBX: 00007fe019fc5fa0 RCX: 00007fe019dacde9 [ 327.528605][T22753] RDX: 0000000000000004 RSI: 0000400000000080 RDI: 0000000000000007 [ 327.528620][T22753] RBP: 00007fe018417090 R08: 0000000000000000 R09: 0000000000000000 [ 327.528635][T22753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.528650][T22753] R13: 0000000000000000 R14: 00007fe019fc5fa0 R15: 00007fffb02ea4f8 [ 327.528673][T22753] [ 327.726680][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.734151][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.741822][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.749224][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x4 [ 327.756612][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.764129][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.771548][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.778953][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x4 [ 327.786374][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.793784][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.801194][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x4 [ 327.808638][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.816054][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.823546][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x4 [ 327.830946][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.838327][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.845791][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.853195][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.860714][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.868128][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.875587][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.882993][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.890427][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.897903][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.905420][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.912895][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.920441][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.927895][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.935394][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.942874][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.950302][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.957880][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.965371][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.972852][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.980322][T19433] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 327.991101][T19433] hid-generic 0003:0000:0000.0003: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 328.063513][T22755] xt_CT: No such helper "syz0" [ 328.080584][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6779'. [ 328.119688][T22777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6784'. [ 328.245743][T22802] ip6gretap0 speed is unknown, defaulting to 1000 [ 328.346591][T22815] xt_CT: No such helper "syz0" [ 328.352366][T22815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6795'. [ 328.431241][T22821] loop4: detected capacity change from 0 to 512 [ 328.438153][T22821] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 328.449551][T22821] EXT4-fs (loop4): 1 truncate cleaned up [ 328.455716][T22821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.500047][T21028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.554843][T22832] FAULT_INJECTION: forcing a failure. [ 328.554843][T22832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.568138][T22832] CPU: 1 UID: 0 PID: 22832 Comm: syz.4.6800 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 328.568167][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.568182][T22832] Call Trace: [ 328.568189][T22832] [ 328.568197][T22832] dump_stack_lvl+0xf2/0x150 [ 328.568265][T22832] dump_stack+0x15/0x1a [ 328.568287][T22832] should_fail_ex+0x24a/0x260 [ 328.568320][T22832] should_fail+0xb/0x10 [ 328.568349][T22832] should_fail_usercopy+0x1a/0x20 [ 328.568406][T22832] _copy_from_user+0x1c/0xa0 [ 328.568433][T22832] copy_msghdr_from_user+0x54/0x2a0 [ 328.568475][T22832] ? __fget_files+0x17c/0x1c0 [ 328.568559][T22832] __sys_sendmsg+0x13e/0x230 [ 328.568609][T22832] __x64_sys_sendmsg+0x46/0x50 [ 328.568641][T22832] x64_sys_call+0x2734/0x2dc0 [ 328.568667][T22832] do_syscall_64+0xc9/0x1c0 [ 328.568692][T22832] ? clear_bhb_loop+0x55/0xb0 [ 328.568804][T22832] ? clear_bhb_loop+0x55/0xb0 [ 328.568833][T22832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.568915][T22832] RIP: 0033:0x7fd6de8dcde9 [ 328.568928][T22832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.568951][T22832] RSP: 002b:00007fd6dcf47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.568967][T22832] RAX: ffffffffffffffda RBX: 00007fd6deaf5fa0 RCX: 00007fd6de8dcde9 [ 328.568985][T22832] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 328.568998][T22832] RBP: 00007fd6dcf47090 R08: 0000000000000000 R09: 0000000000000000 [ 328.569033][T22832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.569047][T22832] R13: 0000000000000000 R14: 00007fd6deaf5fa0 R15: 00007fffe09b0af8 [ 328.569068][T22832] [ 328.881176][T22850] ip6gretap0 speed is unknown, defaulting to 1000 [ 328.883845][T22846] xt_CT: No such helper "syz0" [ 328.899436][T22846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6807'. [ 328.991056][T22858] macvlan0: entered promiscuous mode [ 328.997524][T22858] ipvlan0: entered promiscuous mode [ 329.003671][T22858] ipvlan0: left promiscuous mode [ 329.008785][T22858] macvlan0: left promiscuous mode [ 329.262801][T22873] bond0: (slave bond_slave_0): Releasing backup interface [ 329.273536][T22873] bond0: (slave bond_slave_1): Releasing backup interface [ 329.283704][ T4671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.305067][T22873] team0: Port device team_slave_0 removed [ 329.315619][T22873] team0: Port device team_slave_1 removed [ 329.376098][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6817'. [ 329.444231][T22871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.458076][T22871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.516586][T22885] xt_CT: No such helper "syz0" [ 329.555908][T22890] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 329.574812][T22890] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.620356][T22890] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.670562][T22890] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.730436][T22890] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.786014][T22890] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.797265][T22890] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.809393][T22890] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.821996][T22890] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.905816][T22901] FAULT_INJECTION: forcing a failure. [ 329.905816][T22901] name failslab, interval 1, probability 0, space 0, times 0 [ 329.918566][T22901] CPU: 0 UID: 0 PID: 22901 Comm: syz.6.6824 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 329.918592][T22901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 329.918605][T22901] Call Trace: [ 329.918611][T22901] [ 329.918618][T22901] dump_stack_lvl+0xf2/0x150 [ 329.918652][T22901] dump_stack+0x15/0x1a [ 329.918744][T22901] should_fail_ex+0x24a/0x260 [ 329.918821][T22901] should_failslab+0x8f/0xb0 [ 329.918852][T22901] __kmalloc_node_noprof+0xad/0x410 [ 329.918894][T22901] ? __vmalloc_node_range_noprof+0x3dc/0xe70 [ 329.918977][T22901] __vmalloc_node_range_noprof+0x3dc/0xe70 [ 329.919004][T22901] ? mntput_no_expire+0x70/0x3d0 [ 329.919035][T22901] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 329.919145][T22901] __vmalloc_noprof+0x5e/0x70 [ 329.919235][T22901] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 329.919342][T22901] bpf_prog_alloc_no_stats+0x49/0x380 [ 329.919372][T22901] ? bpf_prog_alloc+0x28/0x150 [ 329.919397][T22901] bpf_prog_alloc+0x3a/0x150 [ 329.919428][T22901] bpf_prog_load+0x4d0/0x1070 [ 329.919460][T22901] ? __rcu_read_unlock+0x4e/0x70 [ 329.919551][T22901] __sys_bpf+0x463/0x7a0 [ 329.919589][T22901] __x64_sys_bpf+0x43/0x50 [ 329.919614][T22901] x64_sys_call+0x2914/0x2dc0 [ 329.919640][T22901] do_syscall_64+0xc9/0x1c0 [ 329.919668][T22901] ? clear_bhb_loop+0x55/0xb0 [ 329.919770][T22901] ? clear_bhb_loop+0x55/0xb0 [ 329.919804][T22901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.919832][T22901] RIP: 0033:0x7fe019dacde9 [ 329.919847][T22901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.919870][T22901] RSP: 002b:00007fe018417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.919892][T22901] RAX: ffffffffffffffda RBX: 00007fe019fc5fa0 RCX: 00007fe019dacde9 [ 329.919908][T22901] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005 [ 329.919922][T22901] RBP: 00007fe018417090 R08: 0000000000000000 R09: 0000000000000000 [ 329.919937][T22901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.919952][T22901] R13: 0000000000000000 R14: 00007fe019fc5fa0 R15: 00007fffb02ea4f8 [ 329.920038][T22901] [ 330.136626][T22901] syz.6.6824: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 330.154052][T22901] CPU: 0 UID: 0 PID: 22901 Comm: syz.6.6824 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 330.154085][T22901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.154179][T22901] Call Trace: [ 330.154186][T22901] [ 330.154192][T22901] dump_stack_lvl+0xf2/0x150 [ 330.154223][T22901] dump_stack+0x15/0x1a [ 330.154244][T22901] warn_alloc+0x145/0x1b0 [ 330.154270][T22901] __vmalloc_node_range_noprof+0x473/0xe70 [ 330.154369][T22901] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 330.154391][T22893] FAULT_INJECTION: forcing a failure. [ 330.154391][T22893] name failslab, interval 1, probability 0, space 0, times 0 [ 330.154402][T22901] __vmalloc_noprof+0x5e/0x70 [ 330.154430][T22901] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 330.154462][T22901] bpf_prog_alloc_no_stats+0x49/0x380 [ 330.154495][T22901] ? bpf_prog_alloc+0x28/0x150 [ 330.154638][T22901] bpf_prog_alloc+0x3a/0x150 [ 330.154669][T22901] bpf_prog_load+0x4d0/0x1070 [ 330.154703][T22901] ? __rcu_read_unlock+0x4e/0x70 [ 330.154740][T22901] __sys_bpf+0x463/0x7a0 [ 330.154852][T22901] __x64_sys_bpf+0x43/0x50 [ 330.154880][T22901] x64_sys_call+0x2914/0x2dc0 [ 330.154913][T22901] do_syscall_64+0xc9/0x1c0 [ 330.154966][T22901] ? clear_bhb_loop+0x55/0xb0 [ 330.155051][T22901] ? clear_bhb_loop+0x55/0xb0 [ 330.155168][T22901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.155201][T22901] RIP: 0033:0x7fe019dacde9 [ 330.155281][T22901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.155304][T22901] RSP: 002b:00007fe018417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.155326][T22901] RAX: ffffffffffffffda RBX: 00007fe019fc5fa0 RCX: 00007fe019dacde9 [ 330.155342][T22901] RDX: 0000000000000048 RSI: 000040000000e000 RDI: 0000000000000005 [ 330.155356][T22901] RBP: 00007fe018417090 R08: 0000000000000000 R09: 0000000000000000 [ 330.155382][T22901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.155393][T22901] R13: 0000000000000000 R14: 00007fe019fc5fa0 R15: 00007fffb02ea4f8 [ 330.155410][T22901] [ 330.155416][T22901] Mem-Info: [ 330.165300][T22893] CPU: 1 UID: 0 PID: 22893 Comm: syz.3.6822 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 330.165340][T22893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.165408][T22893] Call Trace: [ 330.165415][T22893] [ 330.165423][T22893] dump_stack_lvl+0xf2/0x150 [ 330.165454][T22893] dump_stack+0x15/0x1a [ 330.165480][T22893] should_fail_ex+0x24a/0x260 [ 330.165520][T22893] ? selinux_netlbl_sock_genattr+0x84/0x260 [ 330.165571][T22893] should_failslab+0x8f/0xb0 [ 330.165616][T22893] __kmalloc_cache_noprof+0x4e/0x320 [ 330.165659][T22893] ? __mptcp_nmpc_sk+0xb4/0x3c0 [ 330.165701][T22893] selinux_netlbl_sock_genattr+0x84/0x260 [ 330.165748][T22893] selinux_netlbl_socket_post_create+0x69/0x100 [ 330.165849][T22893] selinux_socket_post_create+0x20c/0x2a0 [ 330.165889][T22893] security_socket_post_create+0x5b/0xa0 [ 330.165920][T22893] __sock_create+0x35b/0x5a0 [ 330.165944][T22893] sock_create_kern+0x38/0x50 [ 330.165972][T22893] mptcp_subflow_create_socket+0x84/0x710 [ 330.166023][T22893] __mptcp_nmpc_sk+0xb4/0x3c0 [ 330.166094][T22893] mptcp_listen+0xbb/0x570 [ 330.166149][T22893] __x64_sys_listen+0x109/0x160 [ 330.166179][T22893] x64_sys_call+0x2630/0x2dc0 [ 330.166236][T22893] do_syscall_64+0xc9/0x1c0 [ 330.166297][T22893] ? clear_bhb_loop+0x55/0xb0 [ 330.166338][T22893] ? clear_bhb_loop+0x55/0xb0 [ 330.166393][T22893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.166425][T22893] RIP: 0033:0x7f857016cde9 [ 330.166442][T22893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.166464][T22893] RSP: 002b:00007f856e7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 330.166486][T22893] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016cde9 [ 330.166501][T22893] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 330.166543][T22893] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 330.166557][T22893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.166572][T22893] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 330.166593][T22893] [ 330.583622][T22901] active_anon:15940 inactive_anon:0 isolated_anon:0 [ 330.583622][T22901] active_file:4937 inactive_file:2496 isolated_file:0 [ 330.583622][T22901] unevictable:0 dirty:676 writeback:0 [ 330.583622][T22901] slab_reclaimable:3447 slab_unreclaimable:41127 [ 330.583622][T22901] mapped:28866 shmem:2810 pagetables:1357 [ 330.583622][T22901] sec_pagetables:0 bounce:0 [ 330.583622][T22901] kernel_misc_reclaimable:0 [ 330.583622][T22901] free:1847058 free_pcp:8455 free_cma:0 [ 330.628843][T22901] Node 0 active_anon:63760kB inactive_anon:0kB active_file:19748kB inactive_file:9984kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115464kB dirty:2704kB writeback:0kB shmem:11240kB writeback_tmp:0kB kernel_stack:4432kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no [ 330.656723][T22901] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.683769][T22901] lowmem_reserve[]: 0 2885 7863 0 [ 330.688844][T22901] Node 0 DMA32 free:2950960kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954492kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 330.717684][T22901] lowmem_reserve[]: 0 0 4978 0 [ 330.722691][T22901] Node 0 Normal free:4421912kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:63760kB inactive_anon:0kB active_file:19748kB inactive_file:9984kB unevictable:0kB writepending:2704kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:30288kB local_pcp:2332kB free_cma:0kB [ 330.752889][T22901] lowmem_reserve[]: 0 0 0 0 [ 330.757487][T22901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 330.770209][T22901] Node 0 DMA32: 4*4kB (M) 0*8kB 4*16kB (M) 3*32kB (M) 4*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950960kB [ 330.786089][T22901] Node 0 Normal: 4*4kB (UE) 3*8kB (UME) 37*16kB (UE) 685*32kB (UME) 628*64kB (UME) 1030*128kB (UM) 661*256kB (UME) 634*512kB (UME) 608*1024kB (UME) 115*2048kB (UM) 702*4096kB (UM) = 4421912kB [ 330.805350][T22901] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 330.814677][T22901] 10245 total pagecache pages [ 330.819370][T22901] 2 pages in swap cache [ 330.823515][T22901] Free swap = 124812kB [ 330.827679][T22901] Total swap = 124996kB [ 330.831899][T22901] 2097051 pages RAM [ 330.835724][T22901] 0 pages HighMem/MovableOnly [ 330.840485][T22901] 80036 pages reserved [ 330.850779][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 330.850793][ T29] audit: type=1326 audit(1739087795.295:34143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.4.6825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 330.891705][T22908] SELinux: syz.3.6826 (22908) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 330.939487][ T29] audit: type=1326 audit(1739087795.325:34144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 330.963423][ T29] audit: type=1326 audit(1739087795.325:34145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 330.987091][ T29] audit: type=1326 audit(1739087795.325:34146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.010869][ T29] audit: type=1326 audit(1739087795.325:34147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.034657][ T29] audit: type=1326 audit(1739087795.325:34148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.058365][ T29] audit: type=1326 audit(1739087795.335:34149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.081993][ T29] audit: type=1326 audit(1739087795.375:34150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.105759][ T29] audit: type=1326 audit(1739087795.375:34151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.116681][T22916] 9pnet_fd: Insufficient options for proto=fd [ 331.129359][ T29] audit: type=1326 audit(1739087795.375:34152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22910 comm="syz.5.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 331.264250][T22935] xt_CT: No such helper "syz0" [ 331.294961][T22918] ip6gretap0 speed is unknown, defaulting to 1000 [ 331.462214][T22948] ip6gretap0 speed is unknown, defaulting to 1000 [ 331.504576][T22918] chnl_net:caif_netlink_parms(): no params data found [ 331.606918][T22918] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.614056][T22918] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.622721][T22918] bridge_slave_0: entered allmulticast mode [ 331.633145][T22918] bridge_slave_0: entered promiscuous mode [ 331.642844][T22918] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.650033][T22918] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.657499][T22918] bridge_slave_1: entered allmulticast mode [ 331.672100][T22918] bridge_slave_1: entered promiscuous mode [ 331.751519][T22918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.772639][T22918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.810424][T22960] ip6gretap0 speed is unknown, defaulting to 1000 [ 331.811562][T22918] team0: Port device team_slave_0 added [ 331.841255][T22918] team0: Port device team_slave_1 added [ 331.939675][T22918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.946677][T22918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.972766][T22918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.017628][T22918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.024691][T22918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.050783][T22918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.196821][T22918] hsr_slave_0: entered promiscuous mode [ 332.223244][T22918] hsr_slave_1: entered promiscuous mode [ 332.241657][T22918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.261761][T22918] Cannot create hsr debugfs directory [ 332.360463][T22986] ip6gretap0 speed is unknown, defaulting to 1000 [ 332.371251][T22989] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 332.429717][T22989] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.468687][T22918] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.489851][T22989] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.512334][T22918] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.562729][T22989] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.612858][T22918] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.641432][T22989] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.694397][T22966] bond_slave_1: entered promiscuous mode [ 332.707241][T22994] netlink: 'syz.3.6851': attribute type 1 has an invalid length. [ 332.712376][T22966] bond_slave_1: left promiscuous mode [ 332.715089][T22994] __nla_validate_parse: 2 callbacks suppressed [ 332.715105][T22994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6851'. [ 332.739263][T22918] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.842732][T22989] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.858476][T22989] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.871683][T22989] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.885813][T22989] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.933252][T22918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 332.952149][T22918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.965654][T22918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.986382][T22918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.029816][T23011] ip6gretap0 speed is unknown, defaulting to 1000 [ 333.106368][T22918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.122778][T22918] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.139759][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.146924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.160562][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.167687][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.175138][T23023] loop4: detected capacity change from 0 to 2048 [ 333.209229][T23023] ext4: Unknown parameter 'audit' [ 333.288493][T23030] ip6gretap0 speed is unknown, defaulting to 1000 [ 333.349103][T22918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.465395][T22918] veth0_vlan: entered promiscuous mode [ 333.476301][T22918] veth1_vlan: entered promiscuous mode [ 333.508020][T22918] veth0_macvtap: entered promiscuous mode [ 333.526246][T22918] veth1_macvtap: entered promiscuous mode [ 333.575104][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.585808][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.595835][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.606356][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.678155][T22918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.715099][T23050] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 333.915431][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.926127][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.936084][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.946640][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.956534][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.967282][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.977202][T22918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.987761][T22918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.182120][T22918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.221182][T22918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.230112][T22918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.239296][T22918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.248112][T22918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.341798][T23071] ip6gretap0 speed is unknown, defaulting to 1000 [ 334.400493][T22624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.577987][T23080] dccp_v6_rcv: dropped packet with invalid checksum [ 334.932557][T23093] ip6gretap0 speed is unknown, defaulting to 1000 [ 334.951918][T23095] ip6gretap0 speed is unknown, defaulting to 1000 [ 335.138523][T23099] FAULT_INJECTION: forcing a failure. [ 335.138523][T23099] name failslab, interval 1, probability 0, space 0, times 0 [ 335.151277][T23099] CPU: 0 UID: 0 PID: 23099 Comm: syz.3.6888 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 335.151309][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 335.151324][T23099] Call Trace: [ 335.151331][T23099] [ 335.151340][T23099] dump_stack_lvl+0xf2/0x150 [ 335.151383][T23099] dump_stack+0x15/0x1a [ 335.151405][T23099] should_fail_ex+0x24a/0x260 [ 335.151441][T23099] should_failslab+0x8f/0xb0 [ 335.151510][T23099] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 335.151602][T23099] ? __d_alloc+0x3d/0x340 [ 335.151673][T23099] ? __d_lookup+0x342/0x370 [ 335.151693][T23099] __d_alloc+0x3d/0x340 [ 335.151727][T23099] d_alloc+0x2e/0x100 [ 335.151780][T23099] lookup_one_qstr_excl+0x9a/0x1c0 [ 335.151815][T23099] filename_create+0x14d/0x2b0 [ 335.151838][T23099] do_mkdirat+0x63/0x2c0 [ 335.151917][T23099] __x64_sys_mkdir+0x42/0x50 [ 335.151939][T23099] x64_sys_call+0x1b2b/0x2dc0 [ 335.151966][T23099] do_syscall_64+0xc9/0x1c0 [ 335.151991][T23099] ? clear_bhb_loop+0x55/0xb0 [ 335.152019][T23099] ? clear_bhb_loop+0x55/0xb0 [ 335.152112][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.152141][T23099] RIP: 0033:0x7f857016cde9 [ 335.152172][T23099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.152204][T23099] RSP: 002b:00007f856e7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 335.152224][T23099] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016cde9 [ 335.152237][T23099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00004000000003c0 [ 335.152250][T23099] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 335.152262][T23099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.152275][T23099] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 335.152294][T23099] [ 335.485845][T23118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6892'. [ 335.504458][T19681] udevd[19681]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 335.517497][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6892'. [ 335.595005][T23123] ip6gretap0 speed is unknown, defaulting to 1000 [ 335.643563][T23129] loop4: detected capacity change from 0 to 512 [ 335.689307][T23129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0002] [ 335.694171][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6899'. [ 335.706356][T23129] EXT4-fs (loop4): orphan cleanup on readonly fs [ 335.731000][T23129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6892: bg 0: block 328: padding at end of block bitmap is not set [ 335.771098][T23129] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 335.807107][T23129] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6892: invalid indirect mapped block 65280 (level 0) [ 335.864565][T23129] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.6892: attempt to clear invalid blocks 33619980 len 1 [ 335.888459][T23129] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6892: invalid indirect mapped block 1819239214 (level 0) [ 335.888960][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 335.889014][ T29] audit: type=1326 audit(1739087800.325:34696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23145 comm="syz.5.6904" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f599e6bcde9 code=0x0 [ 335.912509][T23129] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.6892: invalid indirect mapped block 1819239214 (level 1) [ 335.950274][T23147] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 335.962555][T23129] EXT4-fs (loop4): 1 orphan inode deleted [ 335.964566][ T29] audit: type=1400 audit(1739087800.395:34697): avc: denied { relabelfrom } for pid=23140 comm="syz.2.6903" name="UNIX-STREAM" dev="sockfs" ino=86248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 335.970126][T23129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 335.992811][ T29] audit: type=1400 audit(1739087800.405:34698): avc: denied { relabelto } for pid=23140 comm="syz.2.6903" name="UNIX-STREAM" dev="sockfs" ino=86248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_stream_socket permissive=1 trawcon="system_u:object_r:shell_exec_t:s0" [ 336.033810][T23148] x_tables: duplicate underflow at hook 1 [ 336.035372][ T29] audit: type=1326 audit(1739087800.455:34699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23142 comm="syz.5.6900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 336.167737][T23151] ip6gretap0 speed is unknown, defaulting to 1000 [ 336.290237][ T29] audit: type=1326 audit(1739087800.735:34700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 336.292442][T23154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6906'. [ 336.313971][ T29] audit: type=1326 audit(1739087800.735:34701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 336.346996][ T29] audit: type=1326 audit(1739087800.735:34702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 336.351025][T23154] netlink: 'syz.3.6906': attribute type 13 has an invalid length. [ 336.370693][ T29] audit: type=1326 audit(1739087800.735:34703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 336.402195][ T29] audit: type=1326 audit(1739087800.735:34704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f857016ed07 code=0x7ffc0000 [ 336.425767][ T29] audit: type=1326 audit(1739087800.735:34705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23153 comm="syz.3.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f857016ec7c code=0x7ffc0000 [ 336.492538][T21028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.594406][T23154] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.601692][T23154] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.704691][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 336.843728][T23154] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.852279][T23191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6914'. [ 336.861712][T23154] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.870151][T23154] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.878653][T23154] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.926171][T23194] xt_CT: No such helper "syz0" [ 336.939425][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6913'. [ 337.113038][T23206] ip6gretap0 speed is unknown, defaulting to 1000 [ 337.222192][T23212] xt_CT: No such helper "syz0" [ 337.230191][T23212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6921'. [ 337.552676][T23232] FAULT_INJECTION: forcing a failure. [ 337.552676][T23232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.565912][T23232] CPU: 0 UID: 0 PID: 23232 Comm: syz.2.6927 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 337.565941][T23232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 337.565957][T23232] Call Trace: [ 337.565964][T23232] [ 337.565972][T23232] dump_stack_lvl+0xf2/0x150 [ 337.566000][T23232] dump_stack+0x15/0x1a [ 337.566020][T23232] should_fail_ex+0x24a/0x260 [ 337.566078][T23232] should_fail+0xb/0x10 [ 337.566110][T23232] should_fail_usercopy+0x1a/0x20 [ 337.566128][T23232] _copy_from_user+0x1c/0xa0 [ 337.566153][T23232] copy_msghdr_from_user+0x54/0x2a0 [ 337.566198][T23232] ? __fget_files+0x17c/0x1c0 [ 337.566231][T23232] __sys_sendmmsg+0x1e8/0x4b0 [ 337.566278][T23232] __x64_sys_sendmmsg+0x57/0x70 [ 337.566311][T23232] x64_sys_call+0x29aa/0x2dc0 [ 337.566418][T23232] do_syscall_64+0xc9/0x1c0 [ 337.566515][T23232] ? clear_bhb_loop+0x55/0xb0 [ 337.566576][T23232] ? clear_bhb_loop+0x55/0xb0 [ 337.566607][T23232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.566633][T23232] RIP: 0033:0x7f6b88c5cde9 [ 337.566651][T23232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.566738][T23232] RSP: 002b:00007f6b872c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 337.566762][T23232] RAX: ffffffffffffffda RBX: 00007f6b88e75fa0 RCX: 00007f6b88c5cde9 [ 337.566774][T23232] RDX: 0000000000000588 RSI: 0000400000001500 RDI: 0000000000000005 [ 337.566792][T23232] RBP: 00007f6b872c1090 R08: 0000000000000000 R09: 0000000000000000 [ 337.566804][T23232] R10: 0000000003000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.566816][T23232] R13: 0000000000000000 R14: 00007f6b88e75fa0 R15: 00007ffffdf080c8 [ 337.566837][T23232] [ 337.771716][T23234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6928'. [ 337.852994][T23240] xt_CT: No such helper "syz0" [ 337.858426][T23240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6931'. [ 337.869333][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.876894][T23240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.886751][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.894689][T23240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.954757][T23244] ip6gretap0 speed is unknown, defaulting to 1000 [ 337.993407][T19389] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 338.004395][T19389] CPU: 0 UID: 0 PID: 19389 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 338.004491][T19389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 338.004504][T19389] Call Trace: [ 338.004511][T19389] [ 338.004518][T19389] dump_stack_lvl+0xf2/0x150 [ 338.004546][T19389] dump_stack+0x15/0x1a [ 338.004584][T19389] dump_header+0x83/0x2d0 [ 338.004621][T19389] oom_kill_process+0x341/0x4c0 [ 338.004651][T19389] out_of_memory+0x9af/0xbe0 [ 338.004730][T19389] ? css_next_descendant_pre+0x11c/0x140 [ 338.004758][T19389] mem_cgroup_out_of_memory+0x13e/0x190 [ 338.004838][T19389] try_charge_memcg+0x508/0x7f0 [ 338.004938][T19389] charge_memcg+0x50/0xc0 [ 338.004957][T19389] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 338.004979][T19389] __read_swap_cache_async+0x236/0x480 [ 338.005006][T19389] swap_cluster_readahead+0x381/0x3f0 [ 338.005092][T19389] swapin_readahead+0xe4/0x6f0 [ 338.005116][T19389] ? __rcu_read_unlock+0x34/0x70 [ 338.005144][T19389] ? swap_cache_get_folio+0x77/0x210 [ 338.005166][T19389] do_swap_page+0x31b/0x2550 [ 338.005238][T19389] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 338.005378][T19389] ? __list_del_entry_valid_or_report+0x66/0x130 [ 338.005410][T19389] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 338.005441][T19389] ? __rcu_read_lock+0x36/0x50 [ 338.005541][T19389] ? __pfx_default_wake_function+0x10/0x10 [ 338.005581][T19389] handle_mm_fault+0x8e4/0x2ac0 [ 338.005733][T19389] exc_page_fault+0x3b9/0x650 [ 338.005787][T19389] asm_exc_page_fault+0x26/0x30 [ 338.005841][T19389] RIP: 0033:0x7f856ffdec69 [ 338.005864][T19389] Code: 48 89 5d d0 31 c0 48 81 fb 00 ca 9a 3b 72 18 48 81 c3 00 36 65 c4 48 89 5d d0 ff c0 48 81 fb ff c9 9a 3b 77 ea 89 c0 48 01 c8 <48> 89 06 48 89 5e 08 31 c0 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f [ 338.005882][T19389] RSP: 002b:00007ffea4889f28 EFLAGS: 00010202 [ 338.005923][T19389] RAX: 0000000000000151 RBX: 0000000038f9d8c2 RCX: 0000000000000151 [ 338.005935][T19389] RDX: 00000000000000ae RSI: 00007ffea488a040 RDI: 0000000000000001 [ 338.005947][T19389] RBP: 00007ffea4889f90 R08: 0000000038f9d8c2 R09: 7fffffffffffffff [ 338.005977][T19389] R10: 00007f856ffda038 R11: 0000000000000010 R12: 0000000000001388 [ 338.005989][T19389] R13: 00000000000927c0 R14: 00007f856ffda000 R15: 000000000000f63a [ 338.006009][T19389] [ 338.006017][T19389] memory: usage 307200kB, limit 307200kB, failcnt 2174 [ 338.237325][T19389] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 338.245356][T19389] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 338.252687][T19389] Memory cgroup stats for /syz3: [ 338.252854][T19389] cache 0 [ 338.260787][T19389] rss 0 [ 338.263561][T19389] shmem 0 [ 338.266502][T19389] mapped_file 0 [ 338.269986][T19389] dirty 0 [ 338.272937][T19389] writeback 0 [ 338.276287][T19389] workingset_refault_anon 878 [ 338.281011][T19389] workingset_refault_file 3556 [ 338.285779][T19389] swap 724992 [ 338.289120][T19389] swapcached 8192 [ 338.292947][T19389] pgpgin 363166 [ 338.296545][T19389] pgpgout 363164 [ 338.300151][T19389] pgfault 399596 [ 338.303741][T19389] pgmajfault 576 [ 338.307291][T19389] inactive_anon 8192 [ 338.311197][T19389] active_anon 0 [ 338.314646][T19389] inactive_file 0 [ 338.318273][T19389] active_file 0 [ 338.321818][T19389] unevictable 0 [ 338.325285][T19389] hierarchical_memory_limit 314572800 [ 338.330742][T19389] hierarchical_memsw_limit 9223372036854771712 [ 338.336949][T19389] total_cache 0 [ 338.340443][T19389] total_rss 0 [ 338.343858][T19389] total_shmem 0 [ 338.347303][T19389] total_mapped_file 0 [ 338.351317][T19389] total_dirty 0 [ 338.354764][T19389] total_writeback 0 [ 338.358636][T19389] total_workingset_refault_anon 878 [ 338.363855][T19389] total_workingset_refault_file 3556 [ 338.369181][T19389] total_swap 724992 [ 338.373069][T19389] total_swapcached 8192 [ 338.377263][T19389] total_pgpgin 363166 [ 338.381257][T19389] total_pgpgout 363164 [ 338.385416][T19389] total_pgfault 399596 [ 338.389629][T19389] total_pgmajfault 576 [ 338.393712][T19389] total_inactive_anon 8192 [ 338.398116][T19389] total_active_anon 0 [ 338.402244][T19389] total_inactive_file 0 [ 338.406389][T19389] total_active_file 0 [ 338.410426][T19389] total_unevictable 0 [ 338.414397][T19389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6919,pid=23207,uid=0 [ 338.429263][T19389] Memory cgroup out of memory: Killed process 23207 (syz.3.6919) total-vm:93712kB, anon-rss:1044kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 338.513331][T23253] ip6gretap0 speed is unknown, defaulting to 1000 [ 338.567580][T23255] veth0_to_batadv: entered promiscuous mode [ 338.576966][T23255] veth0_to_batadv: left promiscuous mode [ 338.598800][T23259] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6938'. [ 338.654560][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6939'. [ 338.804262][T23274] ip6gretap0 speed is unknown, defaulting to 1000 [ 338.887744][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6949'. [ 339.042817][T23300] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.385724][T23330] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.435799][T23332] ip6gretap0 speed is unknown, defaulting to 1000 [ 339.524265][T22624] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.650922][T23337] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.680050][T23337] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.741355][T23337] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.821259][T23337] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.891705][T23337] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.967801][T23337] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.011122][T23337] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.028393][T23337] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.051957][T23337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.155516][T23369] FAULT_INJECTION: forcing a failure. [ 340.155516][T23369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.168761][T23369] CPU: 1 UID: 0 PID: 23369 Comm: syz.4.6983 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 340.168863][T23369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 340.168881][T23369] Call Trace: [ 340.168889][T23369] [ 340.168963][T23369] dump_stack_lvl+0xf2/0x150 [ 340.169071][T23369] dump_stack+0x15/0x1a [ 340.169142][T23369] should_fail_ex+0x24a/0x260 [ 340.169178][T23369] should_fail+0xb/0x10 [ 340.169279][T23369] should_fail_usercopy+0x1a/0x20 [ 340.169303][T23369] _copy_to_user+0x20/0xa0 [ 340.169386][T23369] simple_read_from_buffer+0xa0/0x110 [ 340.169416][T23369] proc_fail_nth_read+0xf9/0x140 [ 340.169490][T23369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.169515][T23369] vfs_read+0x19b/0x6f0 [ 340.169540][T23369] ? __rcu_read_unlock+0x4e/0x70 [ 340.169567][T23369] ? __fget_files+0x17c/0x1c0 [ 340.169655][T23369] ksys_read+0xe8/0x1b0 [ 340.169690][T23369] __x64_sys_read+0x42/0x50 [ 340.169712][T23369] x64_sys_call+0x2874/0x2dc0 [ 340.169763][T23369] do_syscall_64+0xc9/0x1c0 [ 340.169793][T23369] ? clear_bhb_loop+0x55/0xb0 [ 340.169869][T23369] ? clear_bhb_loop+0x55/0xb0 [ 340.169902][T23369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.169930][T23369] RIP: 0033:0x7fd6de8db7fc [ 340.169947][T23369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 340.169971][T23369] RSP: 002b:00007fd6dcf47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.169994][T23369] RAX: ffffffffffffffda RBX: 00007fd6deaf5fa0 RCX: 00007fd6de8db7fc [ 340.170010][T23369] RDX: 000000000000000f RSI: 00007fd6dcf470a0 RDI: 0000000000000007 [ 340.170064][T23369] RBP: 00007fd6dcf47090 R08: 0000000000000000 R09: 0000000000000000 [ 340.170076][T23369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.170087][T23369] R13: 0000000000000000 R14: 00007fd6deaf5fa0 R15: 00007fffe09b0af8 [ 340.170108][T23369] [ 340.371289][T23373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.392730][T23373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.517713][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6991'. [ 340.518120][T23388] tipc: Started in network mode [ 340.526788][T23392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6991'. [ 340.531667][T23388] tipc: Node identity 9ed302c9a79a, cluster identity 4711 [ 340.531735][T23388] tipc: Enabled bearer , priority 0 [ 340.610598][T23388] tipc: Resetting bearer [ 340.645369][T23388] tipc: Disabling bearer [ 340.750961][T23403] netlink: 'syz.4.6994': attribute type 13 has an invalid length. [ 340.762124][T23403] gretap0: refused to change device tx_queue_len [ 340.771309][T23403] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 340.814423][T23409] ip6gretap0 speed is unknown, defaulting to 1000 [ 340.898868][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 340.898886][ T29] audit: type=1326 audit(1739087805.335:35103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.4.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 340.931221][ T29] audit: type=1326 audit(1739087805.375:35104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.4.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 340.976199][ T29] audit: type=1326 audit(1739087805.395:35105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.4.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 340.999893][ T29] audit: type=1326 audit(1739087805.395:35106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.4.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 341.023736][ T29] audit: type=1326 audit(1739087805.395:35107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23414 comm="syz.4.6998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6de8dcde9 code=0x7ffc0000 [ 341.104634][T23424] FAULT_INJECTION: forcing a failure. [ 341.104634][T23424] name failslab, interval 1, probability 0, space 0, times 0 [ 341.117428][T23424] CPU: 0 UID: 0 PID: 23424 Comm: syz.6.7002 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 341.117454][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 341.117478][T23424] Call Trace: [ 341.117485][T23424] [ 341.117493][T23424] dump_stack_lvl+0xf2/0x150 [ 341.117523][T23424] dump_stack+0x15/0x1a [ 341.117624][T23424] should_fail_ex+0x24a/0x260 [ 341.117657][T23424] should_failslab+0x8f/0xb0 [ 341.117682][T23424] kmem_cache_alloc_noprof+0x52/0x320 [ 341.117777][T23424] ? audit_log_start+0x34c/0x6b0 [ 341.117809][T23424] audit_log_start+0x34c/0x6b0 [ 341.117843][T23424] audit_seccomp+0x4b/0x130 [ 341.117871][T23424] __seccomp_filter+0x6fa/0x1180 [ 341.117905][T23424] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.117931][T23424] ? vfs_write+0x644/0x920 [ 341.117951][T23424] ? putname+0xcf/0xf0 [ 341.117983][T23424] __secure_computing+0x9f/0x1c0 [ 341.118071][T23424] syscall_trace_enter+0xd1/0x1f0 [ 341.118093][T23424] ? fpregs_assert_state_consistent+0x83/0xa0 [ 341.118131][T23424] do_syscall_64+0xaa/0x1c0 [ 341.118210][T23424] ? clear_bhb_loop+0x55/0xb0 [ 341.118305][T23424] ? clear_bhb_loop+0x55/0xb0 [ 341.118332][T23424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.118358][T23424] RIP: 0033:0x7fe019dacde9 [ 341.118373][T23424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.118457][T23424] RSP: 002b:00007fe018417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 341.118481][T23424] RAX: ffffffffffffffda RBX: 00007fe019fc5fa0 RCX: 00007fe019dacde9 [ 341.118493][T23424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 341.118505][T23424] RBP: 00007fe018417090 R08: 0000000000000000 R09: 0000000000000000 [ 341.118516][T23424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.118527][T23424] R13: 0000000000000000 R14: 00007fe019fc5fa0 R15: 00007fffb02ea4f8 [ 341.118545][T23424] [ 341.118603][T23424] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 341.120864][ T29] audit: type=1326 audit(1739087805.545:35108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe019dacde9 code=0x7ffc0000 [ 341.129478][T23424] audit: out of memory in audit_log_start [ 341.139567][ T29] audit: type=1326 audit(1739087805.545:35109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe019dab750 code=0x7ffc0000 [ 341.139604][ T29] audit: type=1326 audit(1739087805.545:35110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23422 comm="syz.6.7002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe019dab89f code=0x7ffc0000 [ 341.200974][T23428] ip6gretap0 speed is unknown, defaulting to 1000 [ 341.690625][T23444] ip6gretap0 speed is unknown, defaulting to 1000 [ 341.768045][T23443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7010'. [ 342.106512][T23456] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.237653][T23465] FAULT_INJECTION: forcing a failure. [ 342.237653][T23465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.251045][T23465] CPU: 1 UID: 0 PID: 23465 Comm: syz.3.7018 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 342.251152][T23465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 342.251167][T23465] Call Trace: [ 342.251174][T23465] [ 342.251228][T23465] dump_stack_lvl+0xf2/0x150 [ 342.251262][T23465] dump_stack+0x15/0x1a [ 342.251288][T23465] should_fail_ex+0x24a/0x260 [ 342.251370][T23465] should_fail+0xb/0x10 [ 342.251399][T23465] should_fail_usercopy+0x1a/0x20 [ 342.251419][T23465] strncpy_from_user+0x25/0x210 [ 342.251451][T23465] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 342.251492][T23465] ? getname_flags+0x81/0x3b0 [ 342.251608][T23465] getname_flags+0xb0/0x3b0 [ 342.251645][T23465] user_path_at+0x26/0x120 [ 342.251676][T23465] __se_sys_inotify_add_watch+0x10f/0x790 [ 342.251709][T23465] ? __secure_computing+0x9f/0x1c0 [ 342.251739][T23465] __x64_sys_inotify_add_watch+0x43/0x50 [ 342.251829][T23465] x64_sys_call+0x1f6d/0x2dc0 [ 342.251855][T23465] do_syscall_64+0xc9/0x1c0 [ 342.251879][T23465] ? clear_bhb_loop+0x55/0xb0 [ 342.251938][T23465] ? clear_bhb_loop+0x55/0xb0 [ 342.251971][T23465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.252004][T23465] RIP: 0033:0x7f857016cde9 [ 342.252023][T23465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.252046][T23465] RSP: 002b:00007f856e7d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 342.252148][T23465] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016cde9 [ 342.252162][T23465] RDX: 00000000050007a2 RSI: 0000400000000000 RDI: 0000000000000003 [ 342.252176][T23465] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 342.252191][T23465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.252252][T23465] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 342.252275][T23465] [ 342.497566][T23475] FAULT_INJECTION: forcing a failure. [ 342.497566][T23475] name failslab, interval 1, probability 0, space 0, times 0 [ 342.510276][T23475] CPU: 0 UID: 0 PID: 23475 Comm: syz.3.7022 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 342.510309][T23475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 342.510324][T23475] Call Trace: [ 342.510331][T23475] [ 342.510340][T23475] dump_stack_lvl+0xf2/0x150 [ 342.510406][T23475] dump_stack+0x15/0x1a [ 342.510427][T23475] should_fail_ex+0x24a/0x260 [ 342.510527][T23475] should_failslab+0x8f/0xb0 [ 342.510552][T23475] kmem_cache_alloc_node_noprof+0x59/0x320 [ 342.510699][T23475] ? __alloc_skb+0x10b/0x310 [ 342.510730][T23475] __alloc_skb+0x10b/0x310 [ 342.510759][T23475] netlink_alloc_large_skb+0xad/0xe0 [ 342.510868][T23475] netlink_sendmsg+0x3b4/0x6e0 [ 342.510930][T23475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.510962][T23475] __sock_sendmsg+0x140/0x180 [ 342.510985][T23475] ____sys_sendmsg+0x312/0x410 [ 342.511095][T23475] __sys_sendmsg+0x19d/0x230 [ 342.511214][T23475] __x64_sys_sendmsg+0x46/0x50 [ 342.511250][T23475] x64_sys_call+0x2734/0x2dc0 [ 342.511285][T23475] do_syscall_64+0xc9/0x1c0 [ 342.511315][T23475] ? clear_bhb_loop+0x55/0xb0 [ 342.511347][T23475] ? clear_bhb_loop+0x55/0xb0 [ 342.511380][T23475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.511418][T23475] RIP: 0033:0x7f857016cde9 [ 342.511448][T23475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.511471][T23475] RSP: 002b:00007f856e7d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.511494][T23475] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016cde9 [ 342.511508][T23475] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000005 [ 342.511520][T23475] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 342.511532][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.511543][T23475] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 342.511687][T23475] [ 342.798046][T23481] ip6gretap0 speed is unknown, defaulting to 1000 [ 342.996554][T23506] bridge0: entered promiscuous mode [ 343.001979][T23506] macvlan2: entered promiscuous mode [ 343.010078][T23506] bridge0: port 3(macvlan2) entered blocking state [ 343.016727][T23506] bridge0: port 3(macvlan2) entered disabled state [ 343.028334][T23508] FAULT_INJECTION: forcing a failure. [ 343.028334][T23508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.034686][T23506] macvlan2: entered allmulticast mode [ 343.041503][T23508] CPU: 0 UID: 0 PID: 23508 Comm: +}[@ Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 343.041599][T23508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.041622][T23508] Call Trace: [ 343.041630][T23508] [ 343.041639][T23508] dump_stack_lvl+0xf2/0x150 [ 343.041674][T23508] dump_stack+0x15/0x1a [ 343.041699][T23508] should_fail_ex+0x24a/0x260 [ 343.041772][T23508] should_fail+0xb/0x10 [ 343.041869][T23508] should_fail_usercopy+0x1a/0x20 [ 343.041892][T23508] strncpy_from_user+0x25/0x210 [ 343.041924][T23508] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 343.041966][T23508] ? getname_flags+0x81/0x3b0 [ 343.042077][T23508] getname_flags+0xb0/0x3b0 [ 343.042114][T23508] __x64_sys_mkdirat+0x41/0x60 [ 343.042141][T23508] x64_sys_call+0x1b6f/0x2dc0 [ 343.042175][T23508] do_syscall_64+0xc9/0x1c0 [ 343.042315][T23508] ? clear_bhb_loop+0x55/0xb0 [ 343.042348][T23508] ? clear_bhb_loop+0x55/0xb0 [ 343.042381][T23508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.042414][T23508] RIP: 0033:0x7f857016cde9 [ 343.042432][T23508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.042490][T23508] RSP: 002b:00007f856e7d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 343.042512][T23508] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016cde9 [ 343.042528][T23508] RDX: 0000000000000000 RSI: 00004000000005c0 RDI: ffffffffffffff9c [ 343.042542][T23508] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 343.042557][T23508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.042572][T23508] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 343.042594][T23508] [ 343.224258][T23506] bridge0: entered allmulticast mode [ 343.244776][T23506] macvlan2: left allmulticast mode [ 343.250016][T23506] bridge0: left allmulticast mode [ 343.262771][T23506] bridge0: left promiscuous mode [ 343.272515][T23502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7032'. [ 343.407205][T23520] FAULT_INJECTION: forcing a failure. [ 343.407205][T23520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.420664][T23520] CPU: 1 UID: 0 PID: 23520 Comm: syz.2.7039 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 343.420690][T23520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.420749][T23520] Call Trace: [ 343.420757][T23520] [ 343.420767][T23520] dump_stack_lvl+0xf2/0x150 [ 343.420808][T23520] dump_stack+0x15/0x1a [ 343.420828][T23520] should_fail_ex+0x24a/0x260 [ 343.420865][T23520] should_fail+0xb/0x10 [ 343.420905][T23520] should_fail_usercopy+0x1a/0x20 [ 343.420923][T23520] _copy_to_user+0x20/0xa0 [ 343.420948][T23520] simple_read_from_buffer+0xa0/0x110 [ 343.420986][T23520] proc_fail_nth_read+0xf9/0x140 [ 343.421017][T23520] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.421065][T23520] vfs_read+0x19b/0x6f0 [ 343.421087][T23520] ? ip_setsockopt+0xa3/0x100 [ 343.421124][T23520] ? __rcu_read_unlock+0x4e/0x70 [ 343.421151][T23520] ? __fget_files+0x17c/0x1c0 [ 343.421180][T23520] ksys_read+0xe8/0x1b0 [ 343.421219][T23520] __x64_sys_read+0x42/0x50 [ 343.421239][T23520] x64_sys_call+0x2874/0x2dc0 [ 343.421269][T23520] do_syscall_64+0xc9/0x1c0 [ 343.421300][T23520] ? clear_bhb_loop+0x55/0xb0 [ 343.421330][T23520] ? clear_bhb_loop+0x55/0xb0 [ 343.421435][T23520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.421469][T23520] RIP: 0033:0x7f6b88c5b7fc [ 343.421485][T23520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 343.421503][T23520] RSP: 002b:00007f6b872c1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.421527][T23520] RAX: ffffffffffffffda RBX: 00007f6b88e75fa0 RCX: 00007f6b88c5b7fc [ 343.421541][T23520] RDX: 000000000000000f RSI: 00007f6b872c10a0 RDI: 0000000000000004 [ 343.421555][T23520] RBP: 00007f6b872c1090 R08: 0000000000000000 R09: 0000000000000000 [ 343.421570][T23520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.421585][T23520] R13: 0000000000000000 R14: 00007f6b88e75fa0 R15: 00007ffffdf080c8 [ 343.421641][T23520] [ 343.636615][T23522] x_tables: duplicate underflow at hook 1 [ 343.828298][T23542] FAULT_INJECTION: forcing a failure. [ 343.828298][T23542] name failslab, interval 1, probability 0, space 0, times 0 [ 343.841122][T23542] CPU: 0 UID: 0 PID: 23542 Comm: syz.4.7049 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 343.841152][T23542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.841170][T23542] Call Trace: [ 343.841179][T23542] [ 343.841187][T23542] dump_stack_lvl+0xf2/0x150 [ 343.841220][T23542] dump_stack+0x15/0x1a [ 343.841252][T23542] should_fail_ex+0x24a/0x260 [ 343.841285][T23542] should_failslab+0x8f/0xb0 [ 343.841384][T23542] kmem_cache_alloc_node_noprof+0x59/0x320 [ 343.841492][T23542] ? dup_task_struct+0x6c/0x710 [ 343.841528][T23542] dup_task_struct+0x6c/0x710 [ 343.841553][T23542] ? trace_event_buffer_commit+0x18f/0x620 [ 343.841578][T23542] copy_process+0x3a9/0x1fb0 [ 343.841678][T23542] ? bpf_bprintf_cleanup+0x82/0xb0 [ 343.841704][T23542] ? __pfx_io_wq_worker+0x10/0x10 [ 343.841746][T23542] create_io_thread+0x9e/0xd0 [ 343.841784][T23542] ? __pfx_io_wq_worker+0x10/0x10 [ 343.841823][T23542] create_io_worker+0xe9/0x330 [ 343.841844][T23542] io_wq_enqueue+0x35f/0x440 [ 343.841939][T23542] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 343.841974][T23542] io_queue_iowq+0x248/0x380 [ 343.841998][T23542] io_queue_async+0x2f3/0x320 [ 343.842028][T23542] io_req_task_submit+0xb9/0xc0 [ 343.842077][T23542] ? __pfx_io_req_task_submit+0x10/0x10 [ 343.842107][T23542] io_handle_tw_list+0x1b9/0x200 [ 343.842131][T23542] tctx_task_work_run+0x6e/0x1c0 [ 343.842157][T23542] tctx_task_work+0x40/0x80 [ 343.842180][T23542] task_work_run+0x13a/0x1a0 [ 343.842211][T23542] get_signal+0xe78/0x1000 [ 343.842256][T23542] ? proc_fail_nth_write+0x12a/0x150 [ 343.842287][T23542] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 343.842367][T23542] ? __fget_files+0x17c/0x1c0 [ 343.842402][T23542] arch_do_signal_or_restart+0x95/0x4b0 [ 343.842475][T23542] syscall_exit_to_user_mode+0x62/0x120 [ 343.842503][T23542] do_syscall_64+0xd6/0x1c0 [ 343.842531][T23542] ? clear_bhb_loop+0x55/0xb0 [ 343.842611][T23542] ? clear_bhb_loop+0x55/0xb0 [ 343.842643][T23542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.842691][T23542] RIP: 0033:0x7fd6de8dcde9 [ 343.842707][T23542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.842800][T23542] RSP: 002b:00007fd6dcf47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 343.842823][T23542] RAX: 0000000000000001 RBX: 00007fd6deaf5fa0 RCX: 00007fd6de8dcde9 [ 343.842839][T23542] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 343.842852][T23542] RBP: 00007fd6dcf47090 R08: 0000000000000000 R09: 0000000000000000 [ 343.842864][T23542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.842876][T23542] R13: 0000000000000000 R14: 00007fd6deaf5fa0 R15: 00007fffe09b0af8 [ 343.842893][T23542] [ 344.157354][T23549] ip6gretap0 speed is unknown, defaulting to 1000 [ 344.182729][T23550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.193343][T23550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.206979][T23549] ip6tnl1: entered promiscuous mode [ 344.212275][T23549] ip6tnl1: entered allmulticast mode [ 344.255166][T23552] loop4: detected capacity change from 0 to 4096 [ 344.270932][T23552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.343028][T21028] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.377855][T21028] EXT4-fs error (device loop4): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.407145][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.419057][T21028] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.475559][T21028] EXT4-fs error (device loop4): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.497155][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.511039][T21028] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.534342][T21028] EXT4-fs error (device loop4): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.556159][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.576274][T21028] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.613311][T21028] EXT4-fs error (device loop4): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.654552][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.680045][T21028] EXT4-fs error (device loop4): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /97/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.751813][T23574] ip6gretap0 speed is unknown, defaulting to 1000 [ 344.761644][T21028] EXT4-fs error (device loop4): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 344.788194][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.803148][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.816748][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.831552][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.843929][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 344.859363][T21028] EXT4-fs warning (device loop4): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 345.097002][T23587] xt_CT: No such helper "syz0" [ 345.103173][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7067'. [ 345.279977][ T4690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.385036][T23602] xt_CT: No such helper "syz0" [ 345.392255][T23602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7072'. [ 345.451874][T23610] ip6gretap0 speed is unknown, defaulting to 1000 [ 345.632936][T23618] ip6gretap0 speed is unknown, defaulting to 1000 [ 345.671590][T23620] ip6tnl1: entered promiscuous mode [ 345.676836][T23620] ip6tnl1: entered allmulticast mode [ 345.907316][ T29] kauditd_printk_skb: 1084 callbacks suppressed [ 345.907331][ T29] audit: type=1326 audit(1739087810.345:36195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.3.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 345.942330][ T29] audit: type=1326 audit(1739087810.385:36196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.3.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8570108fb9 code=0x7ffc0000 [ 345.966036][ T29] audit: type=1326 audit(1739087810.385:36197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.3.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 345.989618][ T29] audit: type=1326 audit(1739087810.385:36198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.3.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8570108fb9 code=0x7ffc0000 [ 346.013187][ T29] audit: type=1326 audit(1739087810.385:36199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23591 comm="syz.3.7068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 346.128277][ T29] audit: type=1326 audit(1739087810.385:36200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.2.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 346.152027][ T29] audit: type=1326 audit(1739087810.385:36201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.2.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 346.175690][ T29] audit: type=1326 audit(1739087810.385:36202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.2.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 346.199342][ T29] audit: type=1326 audit(1739087810.385:36203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.2.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 346.222947][ T29] audit: type=1326 audit(1739087810.385:36204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23631 comm="syz.2.7083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 346.621638][T21028] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.893710][T23658] ip6tnl1: entered promiscuous mode [ 346.899129][T23658] ip6tnl1: entered allmulticast mode [ 347.097628][T23650] ip6gretap0 speed is unknown, defaulting to 1000 [ 347.169992][T23666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7093'. [ 347.179077][T23666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7093'. [ 347.188260][T23666] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7093'. [ 347.245632][T23650] chnl_net:caif_netlink_parms(): no params data found [ 347.245811][T23677] netlink: 'syz.5.7096': attribute type 4 has an invalid length. [ 347.353726][T23650] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.361030][T23650] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.368895][T23650] bridge_slave_0: entered allmulticast mode [ 347.375661][T23650] bridge_slave_0: entered promiscuous mode [ 347.381872][T23687] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 347.405573][T23650] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.412709][T23650] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.420230][T23650] bridge_slave_1: entered allmulticast mode [ 347.426749][T23650] bridge_slave_1: entered promiscuous mode [ 347.433240][T23685] ip6gretap0 speed is unknown, defaulting to 1000 [ 347.440890][T23687] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.485983][T23687] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.510994][T23701] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 347.525722][T23650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.540434][T23687] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.554414][T23650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.587036][T23650] team0: Port device team_slave_0 added [ 347.596167][T23687] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.614606][T23650] team0: Port device team_slave_1 added [ 347.644741][T23650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.651837][T23650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.678037][T23650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.690056][T23650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.697147][T23650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.723297][T23650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.787273][T23710] netlink: 'syz.2.7108': attribute type 4 has an invalid length. [ 347.804018][T23687] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.827911][T23687] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.845355][T23687] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.863046][T23650] hsr_slave_0: entered promiscuous mode [ 347.876896][T23650] hsr_slave_1: entered promiscuous mode [ 347.893257][T23650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.903470][T23650] Cannot create hsr debugfs directory [ 347.913193][T23687] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.940569][T23713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7109'. [ 348.282873][T23650] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.295148][T23650] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.305440][T23650] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.367714][T23650] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.488430][T23650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.537900][T23650] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.559256][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.566429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.611269][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.618400][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.760405][T23650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.796586][T23773] xt_CT: No such helper "syz0" [ 348.870220][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7116'. [ 348.899831][T23795] ip6gretap0 speed is unknown, defaulting to 1000 [ 348.997460][T23650] veth0_vlan: entered promiscuous mode [ 349.038401][T23650] veth1_vlan: entered promiscuous mode [ 349.062592][T23807] ip6gretap0 speed is unknown, defaulting to 1000 [ 349.163330][T23650] veth0_macvtap: entered promiscuous mode [ 349.189861][T23650] veth1_macvtap: entered promiscuous mode [ 349.208781][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.219327][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.229223][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.239719][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.251999][T23650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.268412][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.278953][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.288913][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.299436][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.309307][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.319825][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.329781][T23650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.340234][T23650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.352009][T23650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.361365][T23650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.370149][T23650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.378938][T23650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.387707][T23650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.503374][T23834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7121'. [ 349.838127][T23868] xt_CT: No such helper "syz0" [ 349.844112][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7126'. [ 349.858813][T23868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.866417][T23868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.892739][T23868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.900332][T23868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.975744][T23882] FAULT_INJECTION: forcing a failure. [ 349.975744][T23882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.989463][T23882] CPU: 0 UID: 0 PID: 23882 Comm: syz.2.7127 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 349.989488][T23882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 349.989501][T23882] Call Trace: [ 349.989506][T23882] [ 349.989513][T23882] dump_stack_lvl+0xf2/0x150 [ 349.989611][T23882] dump_stack+0x15/0x1a [ 349.989643][T23882] should_fail_ex+0x24a/0x260 [ 349.989683][T23882] should_fail+0xb/0x10 [ 349.989719][T23882] should_fail_usercopy+0x1a/0x20 [ 349.989818][T23882] _copy_from_user+0x1c/0xa0 [ 349.989898][T23882] __sys_bpf+0x14e/0x7a0 [ 349.989939][T23882] __x64_sys_bpf+0x43/0x50 [ 349.990032][T23882] x64_sys_call+0x2914/0x2dc0 [ 349.990063][T23882] do_syscall_64+0xc9/0x1c0 [ 349.990102][T23882] ? clear_bhb_loop+0x55/0xb0 [ 349.990136][T23882] ? clear_bhb_loop+0x55/0xb0 [ 349.990170][T23882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.990204][T23882] RIP: 0033:0x7f6b88c5cde9 [ 349.990221][T23882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.990244][T23882] RSP: 002b:00007f6b872c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.990328][T23882] RAX: ffffffffffffffda RBX: 00007f6b88e75fa0 RCX: 00007f6b88c5cde9 [ 349.990344][T23882] RDX: 0000000000000010 RSI: 0000400000000340 RDI: 000000000000000f [ 349.990418][T23882] RBP: 00007f6b872c1090 R08: 0000000000000000 R09: 0000000000000000 [ 349.990432][T23882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.990443][T23882] R13: 0000000000000000 R14: 00007f6b88e75fa0 R15: 00007ffffdf080c8 [ 349.990461][T23882] [ 350.212995][T23890] netlink: 'syz.2.7128': attribute type 4 has an invalid length. [ 350.918712][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 350.918728][ T29] audit: type=1326 audit(1739087815.355:37189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 350.918839][ T29] audit: type=1326 audit(1739087815.355:37190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8570108fb9 code=0x7ffc0000 [ 350.918913][ T29] audit: type=1326 audit(1739087815.355:37191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 350.928826][ T29] audit: type=1326 audit(1739087815.365:37192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 350.928865][ T29] audit: type=1326 audit(1739087815.365:37193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8570108fb9 code=0x7ffc0000 [ 350.928939][ T29] audit: type=1326 audit(1739087815.365:37194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 350.938836][ T29] audit: type=1326 audit(1739087815.375:37195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 350.938874][ T29] audit: type=1326 audit(1739087815.375:37196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8570108fb9 code=0x7ffc0000 [ 350.938952][ T29] audit: type=1326 audit(1739087815.375:37197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f857016cde9 code=0x7ffc0000 [ 350.948714][ T29] audit: type=1326 audit(1739087815.385:37198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23892 comm="syz.3.7130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8570163da7 code=0x7ffc0000 [ 351.050452][T22623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.576915][T23983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23983 comm=syz.3.7135 [ 351.749372][T24013] FAULT_INJECTION: forcing a failure. [ 351.749372][T24013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.762663][T24013] CPU: 1 UID: 0 PID: 24013 Comm: syz.6.7140 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 351.762734][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 351.762746][T24013] Call Trace: [ 351.762751][T24013] [ 351.762759][T24013] dump_stack_lvl+0xf2/0x150 [ 351.762789][T24013] dump_stack+0x15/0x1a [ 351.762811][T24013] should_fail_ex+0x24a/0x260 [ 351.762919][T24013] should_fail+0xb/0x10 [ 351.762948][T24013] should_fail_usercopy+0x1a/0x20 [ 351.763040][T24013] strncpy_from_user+0x25/0x210 [ 351.763072][T24013] ? kstrtouint_from_user+0xb0/0xe0 [ 351.763108][T24013] path_setxattrat+0xed/0x310 [ 351.763162][T24013] __x64_sys_fsetxattr+0x6d/0x80 [ 351.763198][T24013] x64_sys_call+0x29d2/0x2dc0 [ 351.763293][T24013] do_syscall_64+0xc9/0x1c0 [ 351.763322][T24013] ? clear_bhb_loop+0x55/0xb0 [ 351.763349][T24013] ? clear_bhb_loop+0x55/0xb0 [ 351.763456][T24013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.763481][T24013] RIP: 0033:0x7fe019dacde9 [ 351.763499][T24013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.763555][T24013] RSP: 002b:00007fe018417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 351.763633][T24013] RAX: ffffffffffffffda RBX: 00007fe019fc5fa0 RCX: 00007fe019dacde9 [ 351.763645][T24013] RDX: 0000000000000000 RSI: 0000400000000380 RDI: 0000000000000003 [ 351.763656][T24013] RBP: 00007fe018417090 R08: 0000000000000000 R09: 0000000000000000 [ 351.763667][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.763679][T24013] R13: 0000000000000000 R14: 00007fe019fc5fa0 R15: 00007fffb02ea4f8 [ 351.763698][T24013] [ 352.119627][T24034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 352.159393][T24035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7145'. [ 352.174292][T24034] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.242160][T24034] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.260708][T24047] ip6gretap0 speed is unknown, defaulting to 1000 [ 352.290864][T24052] ip6tnl1: entered promiscuous mode [ 352.296161][T24052] ip6tnl1: entered allmulticast mode [ 352.340801][T24034] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.411902][T24034] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.438500][T24077] SELinux: policydb version 0 does not match my version range 15-34 [ 352.454035][T24077] SELinux: failed to load policy [ 352.476755][T24034] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.498394][T24034] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.543735][T24034] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.583448][T24034] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.714188][T24118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7163'. [ 352.864139][T24132] ip6tnl1: entered promiscuous mode [ 352.869554][T24132] ip6tnl1: entered allmulticast mode [ 352.942573][T24137] loop0: detected capacity change from 0 to 4096 [ 352.958023][T24137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.040638][T23650] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.103437][T23650] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.170675][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.184715][T23650] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.209818][T23650] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.235062][T24163] netlink: 'syz.3.7174': attribute type 4 has an invalid length. [ 353.254993][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.283493][T23650] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.360049][T23650] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.444646][T24178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7178'. [ 353.457860][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.489212][T23650] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.526850][T23650] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.572959][T24190] ip6tnl1: entered promiscuous mode [ 353.577984][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.578196][T24190] ip6tnl1: entered allmulticast mode [ 353.591914][T23650] EXT4-fs error (device loop0): ext4_readdir:261: inode #12: block 80: comm syz-executor: path /8/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.631030][T24186] ip6gretap0 speed is unknown, defaulting to 1000 [ 353.631116][T23650] EXT4-fs error (device loop0): ext4_empty_dir:3112: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 353.681540][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.703564][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.705162][T24198] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.752788][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.768809][T24198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.785620][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.810374][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.824504][T24198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.837244][T23650] EXT4-fs warning (device loop0): ext4_empty_dir:3114: inode #12: comm syz-executor: directory missing '..' [ 353.907095][T24218] netlink: 'syz.6.7185': attribute type 4 has an invalid length. [ 353.931867][T24198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.012783][T24224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 354.031301][T24198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.067731][T24224] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.119904][T24224] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.147964][T24198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.170765][T23650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.183845][T24198] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.203148][ T4671] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.225475][T24224] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.245926][T24198] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.260017][ T4671] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.282748][T24198] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.314929][T24224] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.349386][ T4671] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.403993][ T4671] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.485254][T24256] ip6gretap0 speed is unknown, defaulting to 1000 [ 354.562257][ T4671] bridge_slave_1: left allmulticast mode [ 354.567957][ T4671] bridge_slave_1: left promiscuous mode [ 354.573714][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.601669][ T4671] bridge_slave_0: left allmulticast mode [ 354.607404][ T4671] bridge_slave_0: left promiscuous mode [ 354.613226][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.628508][T24296] program syz.3.7197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.638242][T24296] FAULT_INJECTION: forcing a failure. [ 354.638242][T24296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.651786][T24296] CPU: 1 UID: 0 PID: 24296 Comm: syz.3.7197 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 354.651818][T24296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.651834][T24296] Call Trace: [ 354.651841][T24296] [ 354.651849][T24296] dump_stack_lvl+0xf2/0x150 [ 354.651882][T24296] dump_stack+0x15/0x1a [ 354.651907][T24296] should_fail_ex+0x24a/0x260 [ 354.651973][T24296] should_fail+0xb/0x10 [ 354.652009][T24296] should_fail_usercopy+0x1a/0x20 [ 354.652140][T24296] _copy_to_user+0x20/0xa0 [ 354.652168][T24296] simple_read_from_buffer+0xa0/0x110 [ 354.652222][T24296] proc_fail_nth_read+0xf9/0x140 [ 354.652255][T24296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.652291][T24296] vfs_read+0x19b/0x6f0 [ 354.652315][T24296] ? __rcu_read_unlock+0x4e/0x70 [ 354.652363][T24296] ? __fget_files+0x17c/0x1c0 [ 354.652394][T24296] ksys_read+0xe8/0x1b0 [ 354.652489][T24296] __x64_sys_read+0x42/0x50 [ 354.652514][T24296] x64_sys_call+0x2874/0x2dc0 [ 354.652545][T24296] do_syscall_64+0xc9/0x1c0 [ 354.652576][T24296] ? clear_bhb_loop+0x55/0xb0 [ 354.652629][T24296] ? clear_bhb_loop+0x55/0xb0 [ 354.652660][T24296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.652693][T24296] RIP: 0033:0x7f857016b7fc [ 354.652711][T24296] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.652734][T24296] RSP: 002b:00007f856e7d1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.652755][T24296] RAX: ffffffffffffffda RBX: 00007f8570385fa0 RCX: 00007f857016b7fc [ 354.652818][T24296] RDX: 000000000000000f RSI: 00007f856e7d10a0 RDI: 0000000000000007 [ 354.652832][T24296] RBP: 00007f856e7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 354.652863][T24296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.652877][T24296] R13: 0000000000000000 R14: 00007f8570385fa0 R15: 00007ffea4889c28 [ 354.652977][T24296] [ 354.859515][T24298] netlink: 'syz.5.7198': attribute type 4 has an invalid length. [ 354.962711][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.977719][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.989721][ T4671] bond0 (unregistering): Released all slaves [ 355.046719][T24256] chnl_net:caif_netlink_parms(): no params data found [ 355.073807][ T4671] hsr_slave_0: left promiscuous mode [ 355.081844][ T4671] hsr_slave_1: left promiscuous mode [ 355.094789][ T4671] veth1_macvtap: left promiscuous mode [ 355.101816][ T4671] veth0_macvtap: left promiscuous mode [ 355.107381][ T4671] veth1_vlan: left promiscuous mode [ 355.113002][ T4671] veth0_vlan: left promiscuous mode [ 355.211893][ T4671] team0 (unregistering): Port device team_slave_1 removed [ 355.233867][ T4671] team0 (unregistering): Port device team_slave_0 removed [ 355.353923][T24309] xt_CT: No such helper "syz0" [ 355.366078][T24256] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.373294][T24256] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.386210][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7201'. [ 355.408423][T24256] bridge_slave_0: entered allmulticast mode [ 355.415720][T24256] bridge_slave_0: entered promiscuous mode [ 355.425137][T24256] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.432282][T24256] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.442501][T24256] bridge_slave_1: entered allmulticast mode [ 355.449279][T24256] bridge_slave_1: entered promiscuous mode [ 355.473271][T24256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.489867][T24256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.542776][T24256] team0: Port device team_slave_0 added [ 355.552314][T24256] team0: Port device team_slave_1 added [ 355.579548][T24256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.586633][T24256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.612731][T24256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.645684][T24256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.652832][T24256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.678804][T24256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.721598][T24256] hsr_slave_0: entered promiscuous mode [ 355.728058][T24256] hsr_slave_1: entered promiscuous mode [ 355.743410][T24256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.760709][T24256] Cannot create hsr debugfs directory [ 355.926527][ T29] kauditd_printk_skb: 1031 callbacks suppressed [ 355.926545][ T29] audit: type=1326 audit(1739087820.365:38228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f599e6b3da7 code=0x7ffc0000 [ 355.977989][ T29] audit: type=1326 audit(1739087820.385:38229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f599e658fb9 code=0x7ffc0000 [ 356.001701][ T29] audit: type=1326 audit(1739087820.385:38230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 356.025478][ T29] audit: type=1326 audit(1739087820.405:38231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f599e6b3da7 code=0x7ffc0000 [ 356.049091][ T29] audit: type=1326 audit(1739087820.405:38232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f599e658fb9 code=0x7ffc0000 [ 356.072714][ T29] audit: type=1326 audit(1739087820.405:38233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 356.096525][ T29] audit: type=1326 audit(1739087820.405:38234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f599e6b3da7 code=0x7ffc0000 [ 356.120133][ T29] audit: type=1326 audit(1739087820.405:38235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f599e658fb9 code=0x7ffc0000 [ 356.143682][ T29] audit: type=1326 audit(1739087820.405:38236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 356.167558][ T29] audit: type=1326 audit(1739087820.415:38237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24315 comm="syz.5.7202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f599e6b3da7 code=0x7ffc0000 [ 356.296403][T24224] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.320814][T24224] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.329987][T24394] SELinux: failed to load policy [ 356.342969][T24224] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.360329][T24224] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.379812][T24256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.398152][T24256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.446350][T24256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.458769][T24256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.468855][T24405] ip6gretap0 speed is unknown, defaulting to 1000 [ 356.572899][T24256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.602975][T24256] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.607185][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.616815][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.628496][T22624] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.635627][T22624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.802016][ T4690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.804276][T24256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.812704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.832072][T24256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.895683][T24441] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 357.959985][T24256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.312684][T24505] ip6gretap0 speed is unknown, defaulting to 1000 [ 358.392771][T24256] veth0_vlan: entered promiscuous mode [ 358.402209][T24256] veth1_vlan: entered promiscuous mode [ 358.432682][T24256] veth0_macvtap: entered promiscuous mode [ 358.442793][T24526] ip6gretap0 speed is unknown, defaulting to 1000 [ 358.450890][T24256] veth1_macvtap: entered promiscuous mode [ 358.480707][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.491222][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.501387][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.511887][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.523207][T24256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.540710][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.551262][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.561219][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.571784][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.581779][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.592309][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.602307][T24256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.612764][T24256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.623658][T24256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.632457][T24256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.641263][T24256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.650090][T24256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.658830][T24256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.232822][T24630] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 359.580349][T24680] ip6tnl1: entered promiscuous mode [ 359.585760][T24680] ip6tnl1: entered allmulticast mode [ 359.782234][T24706] SELinux: failed to load policy [ 360.185330][T24762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 360.206640][T24762] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.250681][T24762] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.301386][T24762] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.361245][T24762] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.428784][T24762] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.441745][T24762] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.453792][T24762] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.468094][T24762] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.715890][T24847] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 360.891192][T24868] xt_CT: No such helper "syz0" [ 360.895189][T24869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.896658][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7243'. [ 360.979889][ T29] kauditd_printk_skb: 638 callbacks suppressed [ 360.979906][ T29] audit: type=1326 audit(1739087825.425:38876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.2.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 361.024568][ T29] audit: type=1326 audit(1739087825.455:38877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.2.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 361.048318][ T29] audit: type=1326 audit(1739087825.455:38878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.2.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 361.072040][ T29] audit: type=1326 audit(1739087825.455:38879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.2.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 361.095656][ T29] audit: type=1326 audit(1739087825.455:38880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24882 comm="syz.2.7245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b88c5cde9 code=0x7ffc0000 [ 361.133717][ T29] audit: type=1326 audit(1739087825.575:38881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24894 comm="syz.5.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 361.181071][T24902] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 361.192784][ T29] audit: type=1326 audit(1739087825.605:38882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24894 comm="syz.5.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 361.216744][ T29] audit: type=1326 audit(1739087825.605:38883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24894 comm="syz.5.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 361.249947][T24902] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.283983][T24907] ip6gretap0 speed is unknown, defaulting to 1000 [ 361.311699][T24902] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.324400][T24909] ip6gretap0 speed is unknown, defaulting to 1000 [ 361.360839][T24902] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.410827][T24902] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.488429][T24902] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.525039][T24902] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.537837][T24902] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.552364][T24902] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.562194][T24917] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7255'. [ 361.595288][ T29] audit: type=1400 audit(1739087826.035:38884): avc: denied { append } for pid=24916 comm="syz.6.7255" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 361.701519][T24927] ip6gretap0 speed is unknown, defaulting to 1000 [ 361.724897][T24925] xt_CT: No such helper "syz0" [ 361.736106][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7258'. [ 361.788147][ T29] audit: type=1326 audit(1739087826.225:38885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24934 comm="syz.5.7261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f599e6bcde9 code=0x7ffc0000 [ 361.851875][T24946] veth0_to_batadv: entered promiscuous mode [ 361.858906][T24946] veth0_to_batadv: left promiscuous mode [ 362.068943][T24964] xt_CT: No such helper "syz0" [ 362.075055][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7272'. [ 362.293220][T24983] ip6gretap0 speed is unknown, defaulting to 1000 [ 362.332850][T24869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.346426][T24986] ip6gretap0 speed is unknown, defaulting to 1000 [ 362.383000][T24869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.432254][T24869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.497563][T24869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.509837][T24869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.523350][T24869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.549734][T24869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.561794][ T4673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.606599][T24998] xt_CT: No such helper "syz0" [ 362.612185][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7285'. [ 362.621347][T24998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.628906][T24998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.636835][T24998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.644712][T24998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.682120][T25002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.691070][T25002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.959918][T25022] ip6tnl1: entered promiscuous mode [ 362.965229][T25022] ip6tnl1: entered allmulticast mode [ 362.992453][T25024] ip6gretap0 speed is unknown, defaulting to 1000 [ 363.060163][T25027] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 363.423029][T25033] ip6gretap0 speed is unknown, defaulting to 1000 [ 364.531029][T25051] ip6gretap0 speed is unknown, defaulting to 1000 [ 364.627083][T25054] ip6gretap0 speed is unknown, defaulting to 1000 [ 365.037009][T25068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.045780][T25068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.067362][T25071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 365.186698][T25076] xt_CT: No such helper "syz0" [ 365.207661][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7314'. [ 365.452942][T25091] ip6gretap0 speed is unknown, defaulting to 1000 [ 365.877208][T25108] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7326'. [ 365.933941][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7326'. [ 366.357276][T25099] syz.3.7323 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 366.368305][T25099] CPU: 1 UID: 0 PID: 25099 Comm: syz.3.7323 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 366.368337][T25099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.368415][T25099] Call Trace: [ 366.368424][T25099] [ 366.368434][T25099] dump_stack_lvl+0xf2/0x150 [ 366.368466][T25099] dump_stack+0x15/0x1a [ 366.368517][T25099] dump_header+0x83/0x2d0 [ 366.368555][T25099] oom_kill_process+0x341/0x4c0 [ 366.368594][T25099] out_of_memory+0x9af/0xbe0 [ 366.368662][T25099] ? css_next_descendant_pre+0x11c/0x140 [ 366.368684][T25099] mem_cgroup_out_of_memory+0x13e/0x190 [ 366.368711][T25099] try_charge_memcg+0x508/0x7f0 [ 366.368753][T25099] charge_memcg+0x50/0xc0 [ 366.368920][T25099] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 366.368950][T25099] __read_swap_cache_async+0x236/0x480 [ 366.368985][T25099] swap_cluster_readahead+0x279/0x3f0 [ 366.369014][T25099] swapin_readahead+0xe4/0x6f0 [ 366.369039][T25099] ? __rcu_read_unlock+0x34/0x70 [ 366.369167][T25099] ? swap_cache_get_folio+0x77/0x210 [ 366.369209][T25099] do_swap_page+0x31b/0x2550 [ 366.369244][T25099] ? __rcu_read_lock+0x36/0x50 [ 366.369345][T25099] ? __pfx_default_wake_function+0x10/0x10 [ 366.369384][T25099] handle_mm_fault+0x8e4/0x2ac0 [ 366.369432][T25099] exc_page_fault+0x3b9/0x650 [ 366.369455][T25099] asm_exc_page_fault+0x26/0x30 [ 366.369483][T25099] RIP: 0033:0x7f8570043b9c [ 366.369558][T25099] Code: 66 0f 1f 44 00 00 69 3d 16 1b e7 00 e8 03 00 00 48 8d 1d 17 24 34 00 e8 b2 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 366.369575][T25099] RSP: 002b:00007ffea4889d90 EFLAGS: 00010283 [ 366.369590][T25099] RAX: 0000000000000000 RBX: 00007f8570386080 RCX: 0000000000000000 [ 366.369667][T25099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555558859808 [ 366.369682][T25099] RBP: 00007f8570387ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 366.369696][T25099] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000597a1 [ 366.369707][T25099] R13: 00007f8570386080 R14: ffffffffffffffff R15: 00007ffea4889ea0 [ 366.369725][T25099] [ 366.574373][T25099] memory: usage 307200kB, limit 307200kB, failcnt 2645 [ 366.581602][T25099] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 366.589535][T25099] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 366.596840][T25099] Memory cgroup stats for /syz3: [ 366.597644][T25099] cache 0 [ 366.605563][T25099] rss 0 [ 366.608442][T25099] shmem 0 [ 366.611508][T25099] mapped_file 0 [ 366.614972][T25099] dirty 0 [ 366.617963][T25099] writeback 4096 [ 366.621601][T25099] workingset_refault_anon 1195 [ 366.626384][T25099] workingset_refault_file 4154 [ 366.631157][T25099] swap 724992 [ 366.634434][T25099] swapcached 8192 [ 366.638147][T25099] pgpgin 387614 [ 366.641647][T25099] pgpgout 387612 [ 366.645186][T25099] pgfault 429061 [ 366.648726][T25099] pgmajfault 788 [ 366.652284][T25099] inactive_anon 8192 [ 366.656189][T25099] active_anon 0 [ 366.659682][T25099] inactive_file 0 [ 366.663328][T25099] active_file 0 [ 366.666799][T25099] unevictable 0 [ 366.670443][T25099] hierarchical_memory_limit 314572800 [ 366.675850][T25099] hierarchical_memsw_limit 9223372036854771712 [ 366.682102][T25099] total_cache 0 [ 366.685550][T25099] total_rss 0 [ 366.688915][T25099] total_shmem 0 [ 366.692443][T25099] total_mapped_file 0 [ 366.696443][T25099] total_dirty 0 [ 366.700382][T25099] total_writeback 4096 [ 366.704454][T25099] total_workingset_refault_anon 1195 [ 366.709822][T25099] total_workingset_refault_file 4154 [ 366.715425][T25099] total_swap 724992 [ 366.719357][T25099] total_swapcached 8192 [ 366.723518][T25099] total_pgpgin 387614 [ 366.727557][T25099] total_pgpgout 387612 [ 366.731657][T25099] total_pgfault 429061 [ 366.735715][T25099] total_pgmajfault 788 [ 366.739857][T25099] total_inactive_anon 8192 [ 366.744275][T25099] total_active_anon 0 [ 366.748253][T25099] total_inactive_file 0 [ 366.752460][T25099] total_active_file 0 [ 366.756563][T25099] total_unevictable 0 [ 366.760591][T25099] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7323,pid=25099,uid=0 [ 366.775515][T25099] Memory cgroup out of memory: Killed process 25099 (syz.3.7323) total-vm:93712kB, anon-rss:912kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 366.942728][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 366.942746][ T29] audit: type=1326 audit(1739087831.385:39235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 366.976332][ T29] audit: type=1326 audit(1739087831.385:39236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.000114][ T29] audit: type=1326 audit(1739087831.425:39237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.023987][ T29] audit: type=1326 audit(1739087831.425:39238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.048225][ T29] audit: type=1326 audit(1739087831.425:39239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.087197][ T29] audit: type=1326 audit(1739087831.425:39240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.111544][ T29] audit: type=1326 audit(1739087831.425:39241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.135346][ T29] audit: type=1326 audit(1739087831.425:39242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.143923][T25123] ip6gretap0 speed is unknown, defaulting to 1000 [ 367.159004][ T29] audit: type=1326 audit(1739087831.455:39243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.159043][ T29] audit: type=1326 audit(1739087831.455:39244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25117 comm="syz.1.7329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ce34cde9 code=0x7ffc0000 [ 367.299709][T25139] ip6gretap0 speed is unknown, defaulting to 1000 [ 367.931837][T25182] SELinux: failed to load policy [ 368.120164][T25211] xt_CT: No such helper "syz0" [ 368.128739][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7364'. [ 368.320095][ T4673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.341320][T25239] ip6tnl1: entered promiscuous mode [ 368.346565][T25239] ip6tnl1: entered allmulticast mode [ 368.435068][T25248] ip6gretap0 speed is unknown, defaulting to 1000 [ 369.042612][T25281] ip6gretap0 speed is unknown, defaulting to 1000 [ 369.191839][T25294] ip6tnl1: entered promiscuous mode [ 369.197081][T25294] ip6tnl1: entered allmulticast mode [ 369.220501][T25295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.229305][T25295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.658920][T25333] ip6tnl1: entered promiscuous mode [ 369.664395][T25333] ip6tnl1: entered allmulticast mode [ 369.743628][T25336] ip6gretap0 speed is unknown, defaulting to 1000 [ 370.161394][T25368] ip6tnl1: entered promiscuous mode [ 370.166660][T25368] ip6tnl1: entered allmulticast mode [ 370.185828][T25365] ip6gretap0 speed is unknown, defaulting to 1000 [ 370.224485][T25366] xt_CT: No such helper "syz0" [ 370.249249][T25366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7424'. [ 370.331706][T25378] xt_CT: No such helper "syz0" [ 370.349377][T25378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7428'. [ 370.434238][T25394] ================================================================== [ 370.442362][T25394] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 370.449253][T25394] [ 370.451587][T25394] write to 0xffff888146853d78 of 8 bytes by task 25391 on cpu 1: [ 370.459310][T25394] vms_clear_ptes+0x1a2/0x300 [ 370.464013][T25394] mmap_region+0x659/0x1620 [ 370.468540][T25394] do_mmap+0x98a/0xc30 [ 370.472619][T25394] vm_mmap_pgoff+0x16d/0x2d0 [ 370.477218][T25394] ksys_mmap_pgoff+0xd0/0x330 [ 370.481905][T25394] x64_sys_call+0x1940/0x2dc0 [ 370.486593][T25394] do_syscall_64+0xc9/0x1c0 [ 370.491105][T25394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.497099][T25394] [ 370.499425][T25394] read to 0xffff888146853d78 of 8 bytes by task 25394 on cpu 0: [ 370.507145][T25394] getrusage+0xa15/0xb70 [ 370.511405][T25394] io_sq_thread+0x5f9/0x1100 [ 370.516011][T25394] ret_from_fork+0x4b/0x60 [ 370.520440][T25394] ret_from_fork_asm+0x1a/0x30 [ 370.525214][T25394] [ 370.527567][T25394] value changed: 0x00000000000014e4 -> 0x00000000000016ae [ 370.534670][T25394] [ 370.536990][T25394] Reported by Kernel Concurrency Sanitizer on: [ 370.543143][T25394] CPU: 0 UID: 0 PID: 25394 Comm: iou-sqp-25391 Not tainted 6.14.0-rc1-syzkaller-00235-g9946eaf552b1 #0 [ 370.554165][T25394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 370.564309][T25394] ================================================================== [ 372.161010][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.440283][ T4673] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.559891][ T4671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration