last executing test programs: 1m0.164607645s ago: executing program 1 (id=2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0xffffffdd, 0x54, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0xe, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) r6 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @nfc={0x27, 0x0, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6, 0x4}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xc, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 59.163652714s ago: executing program 1 (id=8): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000800000000ff0000000000000000ce359a5c075b462d8c4b09b58edfabc6371654422915201eab11a3f4e66265200a70c65c38869c6fc338acc87102eded10829d2e8127d83971f82f0f6439", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_io_uring_setup(0x730f, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000040), 0x41, 0x43d, &(0x7f0000000900)="$eJzs289rHFUcAPDv7Cap/aFdS/3RWDVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU+CV71LoUgurXpZmcxMsrvZTbtxk63u5wOTvDfzNu99d+btvnkvE0DfGkl/JBH7IuLXiNifZRsLjGS/bqwsTf+5sjSdRK32xh/JarnrK0vTRdHidXuLzEBE6ZMkHmhR78LFS2enqtXZC3l+fPHcu+MLFy89M3du6szsmdnzkydPHj828dyJyWe7Emca1/XhD+YPH3rlrSuvTZ+68vaPXydF/E1xdMnIZgcfr9W6XF1v3VmXTgZ62BA6Us66aQyu9v/9UY71k7c/Xv64p40DtlWtVqvd2/7wcg34H0ui1y0AeqP4ok/vf4tth4Yet4VrL2Q3QGncN/ItOzIQpbzMYNP9bTeNRMSp5b++SLfYnnkIAIAG36bjn6fz8V/Dwk8p6ueF7srXUCoRcXdEHIiIExFxMCLuiVgte19E3N9h/c2LJBvHP6WrHf7JjqTjv+fzta3G8V8x+otKOeLvYrhcicHk9Fx19mj+nozG4K40P7FJHd+99Mtn7Y7Vj//SLa2/GAvm7bg6sKvxNTNTi1P/JuZ61z6KGB5oFX+ythKQXhaHImJ4i3XMPfnV4XbHbh5/o6H6TBfWmWpfRjyRnf/laIq/kKbGl9uuT47fEdXZo+PFVbHRTz9ffr1d/Z3G323p+d/T8vpfi7+S1K/XLnRex+XfPm17T7PV638oebNh3/tTi4sXJiKGklezRtfvn2wqN7lePo1/9Ejr/n8gincia0B6ET8YEQ9FxMN52x+JiEcj4sgm8f/w4mPvNO5JOoh/e6Xxz3R0/tcTQ9G8p3WifPb7bxoqrUQH8afn//hqajTfcyuff7fSrq1dzQAAAPDfU4qIfZGUxtbSpdLYWPY//AdjT6k6v7D41On5987PZM8IVGKwVMx0ZfPB2XzoRH5bX+Qnm/LH8nnjz8u7V/Nj0/PVmV4HD31ub5v+n/q93OvWAdvO81rQv/R/6F/6P/Qv/R/6V4v+v7sX7QB2Xqvv/w970A5g5zX1f8t+0Efc/0P/0v+hf+n/0JcWdsfNH5KXkNiQiNJt0QyJbUr0+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//yzB6iM=") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x1b5) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x63, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84003, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) unshare(0x24060400) 57.682861611s ago: executing program 1 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xa0c2, 0x51) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100e1fffffffbdbdf25010000000400018010000280"], 0x28}}, 0x2000c050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105000000c93df92089c2e9d20000"], 0x20}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) 56.081991005s ago: executing program 1 (id=50): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) (fail_nth: 2) 56.040972127s ago: executing program 32 (id=50): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) (fail_nth: 2) 1.998458423s ago: executing program 2 (id=836): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)={0x20, 0x10, 0x701, 0x0, 0x0, {0x6}, [@typed={0xc, 0x116, 0x0, 0x0, @u64=0x6}]}, 0x20}}, 0x0) close_range(r2, r2, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10506, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000000)='cpu&\t\t') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @fwd={0x4}, @struct={0xe, 0x2, 0x0, 0x4, 0x1, 0xbc52, [{0x4, 0x1, 0x4}, {0x6, 0x4, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x8}}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f00000001c0)=""/195, 0x73, 0xc3, 0x0, 0x7, 0x10000, @value=r3}, 0x28) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0xc, 0x0, "9e999c1d7683c3089f9c8ec53c4c46453fbb880f8c9db1dd22c608b00efe7541a9b996d3d25409c2433ae7f890491b642356bd1db15b4dad9acab3f803e497e9f9d1b1e859d3d9c8b4d5aa422e40c083"}, 0xd8) 1.935526027s ago: executing program 0 (id=838): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r6 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0x1076a, 0x10100, 0x3, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r6, 0x11d30, 0x0, 0x0, 0x0, 0x0) 1.845805652s ago: executing program 5 (id=840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), 0x0}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x50) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000210001000000000001000000ff010000000000000000000000000001fe8000000000000000000000000000bb00000800000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="98822986"], 0x50}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000b, 0x12, r4, 0x547d9000) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r9 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', 0x0}) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) creat(&(0x7f0000000380)='./file0\x00', 0x80) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b456fc057fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004093b09000000ffffffffffffffffffffffe7eef9ffffff0000", 0x53}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500300012800b00010062726964676500002000028005001900020600000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 1.482304753s ago: executing program 0 (id=841): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400c040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) capget(&(0x7f0000000080)={0x20071026, r3}, &(0x7f00000000c0)={0x5, 0x9, 0xff, 0x2, 0xffff018c, 0x1}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x106, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000280)="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", 0x0, 0x1000, 0x2, 0x0, 0x0}) 1.398277018s ago: executing program 4 (id=844): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x100005, 0x62000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="56ec", 0x2}], 0x1}], 0x1, 0x884) sendmmsg$inet_sctp(r6, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.398002928s ago: executing program 0 (id=845): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0xffffffdd, 0x54, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0xe, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, 0x4}, @nl=@kern={0x10, 0x0, 0x0, 0x2000}, @nfc={0x27, 0x0, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x6, 0x4}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xc, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 1.262305416s ago: executing program 2 (id=847): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000404730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf1e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r4}, 0x20) dup3(r2, r4, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x700, 0x900, 0x73, 0x8, {{0x2a, 0x4, 0x2, 0x15, 0xa8, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x13, 0x3, [{0x5, 0x4, "9e71"}, {0x6, 0x9, "54921e7c9f83ca"}]}, @timestamp={0x44, 0x20, 0x23, 0x0, 0x2, [0xffffffff, 0x9, 0x7ff, 0x6, 0x0, 0x80, 0x67e18106]}, @end, @cipso={0x86, 0x9, 0x2, [{0x167afb63866d93fe, 0x3, "a2"}]}, @generic={0x7, 0x12, "207892ece8f18049be9ef2f7f5f5997c"}, @end, @rr={0x7, 0xb, 0x17, [@multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0xef, 0x3, 0x1, [{@loopback}, {@empty, 0x9}, {@private=0xa010101, 0x195d59b9}, {@private=0xa010101, 0x80000000}, {@loopback}, {@multicast1, 0xa6}]}, @ra={0x94, 0x4}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xc, 0x7d, 0x800, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xa, @void, @value, @void, @value}, 0x50) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x7, 0x1, 0x0, r2}, @ldst={0x1, 0x2, 0x4, 0x1, 0x3, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x6, 0xb, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe0, &(0x7f0000000240)=""/224, 0x41100, 0x4, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r7, 0x1, r8, r9], &(0x7f0000000600)=[{0x3, 0x4, 0xe}, {0x2, 0x4, 0xf, 0x9}, {0x3, 0x3, 0x0, 0x8}, {0x2, 0x1, 0x10, 0x7}, {0x2, 0x5, 0x7, 0xb}, {0x2, 0x5}], 0x10, 0x3, @void, @value}, 0x94) 1.18664905s ago: executing program 3 (id=848): r0 = epoll_create1(0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) (rerun: 64) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) ioperm(0x8, 0xae4, 0x10000000000002) msync(&(0x7f000090c000/0x6000)=nil, 0x6000, 0x5) (async, rerun: 64) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x1100, 0x0) (rerun: 64) fsmount(r3, 0x1, 0x82) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x41, 0xb00, 0xe640, 0x10000, r3, 0xa6c, '\x00', r4, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x6, @void, @value, @value=r3}, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000800)="b634d2fb17625a413296bfbbb31a757f36e171610c53d6984d412c5c73f66816745e0c007b42fab07b1189a9a4b50a67a3710555cafd74784aff2c78845f98987b408fbaedfce3873f4087d41a8569f316b80885b046215413fc44575a17c8d499953bf8604d85b5ec22df8d41847c7221c29e0d035d563cbecd6b9eba5460033db776ea09c2e92fbfbc01701ecc375f26d3604cf7837b35cad46ce811282c5aadc82f09cdda750536fd95e58013d1464f95f8d3fc52a953bac603b5cf375bde2b9e0061139fe205a2177bb0d32a254e2e75a969", 0xd4, 0x50, &(0x7f0000000540)={0x11, 0x1c, r4, 0x1, 0xff, 0x6, @multicast}, 0x14) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) (rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cff0000000600000000000000000000000100000000000000000000000000000001"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1200c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x401, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000010c0)=""/4097, 0x1001}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x80) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x1) (rerun: 32) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xe, @mcast2, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000000c0)="254d72e7b895e5da31a2debaa889dd8c0cdf70b44a9305ca20", 0x19}, {&(0x7f0000000100)="ddca3f4be6307568794b4fc8c6435c972b7253d853df74b04f840641089339bd7be9561e0bbcc97ad80d450c71", 0x2d}, {&(0x7f0000000280)="a557ec245e72eec1ecf8496d2ed2950dd34de4607d24def8e865531b059213f3e84f2fb505ad26f428704456efed9deb13042969e83cee7531266e57c7720617eb7483430a75f4c425c937eae0214b99a316e1dc1fd0b31f935ae44cdd6dcc46ccb6ab5f42cc407df6ffdac9e4dc45adae85f4d3b8", 0x75}, {&(0x7f0000000300)="bc7b3286417d95163d589001a67dbdf5fb18aa81e03dae709e24eeaefdad425c53ad9a8a3af9ddbb0c77766a004f71cffc5ec1711a6609478e52f57486a709635106f0a37119d2cae0e88b44d23a6186ba064eb2f2662c7c57b51c9f6c467e6253e716d0f3bf96f12f9bc8c151543074a3e784a248aada64c5da58a6bfd6f9b6dee6a0951046c31106e86912fd9ba8be52aec28779a3d62b7d1d0ffc6e2a64", 0x9f}], 0x4, &(0x7f00000005c0)=[@dstopts_2292={{0x90, 0x29, 0x4, {0x92, 0xe, '\x00', [@ra={0x5, 0x2, 0xb}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @loopback}, @generic={0x5, 0x4a, "871a877c28d15a730c84985e53ce087e2e7fa875a22aa2881d19b0b059b9e9fadd7e9fc8d2a7265cfc29eba80895ceb68222490043d3aaf7a1f19e9dfaa7480571d454718d5b411f15e8"}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hopopts_2292={{0x120, 0x29, 0x36, {0x11, 0x20, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x4, 0xf7, "bbbfd61d6143ac01bc2338df8894e6f4bdcd3c7b3e37fbfba972c1821274a16bbab91f88bb29cdd78da3661f65e0e759de6fd4d08043011c4c3baaf5535dea40be3c0020462865073c148260cfa3ee3627af74b0c2966a9f07e371100ffb30bbf51afd770fec028e5f6f8360543888f32a575e7fb55baa1bdcdedeaea8eac05bdf8d0646a8a0baffa523a959a7ba2b4c8db1ae83b45abc6c01f99d2ae913936e47559c889c43cc62ccbaf85069f10abbc16dfd227fbe7ed17f725a4b4b1876ac0114b549f00f020541f8a899be0d05006f9292b122d7db61aa50dfd079d925a56fbf351348fd13dfdedf13cf2116a0cce4db6b5d02de84"}, @pad1]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0xff, 0xe, 0x2, 0x1, 0x0, [@mcast2, @remote, @private0, @private1, @remote, @remote, @local]}}}], 0x238}}], 0x1, 0x24004004) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) (async, rerun: 32) clock_adjtime(0x0, 0x0) (async, rerun: 32) unlinkat(r8, &(0x7f00000004c0)='./file0\x00', 0x200) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0xb0000002}) 1.130287534s ago: executing program 2 (id=849): ioperm(0x9fda, 0x85, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40101, 0x0) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={0x42c, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfd, {0x6, 0x1, 0xa, [0x9, 0x4, 0x8, 0x3, 0x9, 0x2, 0x0, 0x8, 0x800, 0x2, 0x7fffffff, 0x2, 0xf, 0x1, 0x9, 0x2, 0x2, 0x2, 0x400, 0x1, 0x8e4, 0xf, 0x3ff, 0x4, 0x4eb52d92, 0x400, 0x0, 0x7fff, 0x3, 0x3, 0xfffffff6, 0x2, 0x6, 0x7, 0x94, 0x1, 0x5, 0x6, 0x2, 0x1, 0xb1c, 0x7, 0x2, 0x5, 0x10, 0x7, 0x5, 0x5, 0x7f, 0x8, 0x8, 0x1000, 0x5, 0xcfc, 0x10001, 0x3, 0x6, 0x8, 0x2, 0x7ff, 0x1, 0x5, 0x4, 0xffffffff], [0xc, 0x3, 0x3, 0xde8, 0xe5, 0x2, 0xc, 0x4, 0x8, 0x81, 0x2, 0x5, 0x8, 0x2, 0xfffffffe, 0x5, 0xfffffffd, 0x4, 0x0, 0xfb, 0x1, 0x6, 0x159, 0x592, 0x1, 0x3, 0x1, 0x2, 0x0, 0x400, 0x9, 0x2, 0x7, 0x1, 0xc4, 0xf, 0xff, 0x9, 0x4, 0xbf2, 0x0, 0x1, 0x1, 0x8, 0x0, 0xed07, 0xff, 0x6, 0xa34, 0xe, 0xfffffffa, 0xffff, 0x9, 0x7, 0x9, 0x1, 0x4, 0xfcf3, 0x3, 0x0, 0xfff, 0x6, 0xbc, 0x8000], [0x0, 0xec4f, 0x9, 0xa, 0xc, 0x2, 0x4, 0x8001, 0x8001, 0x2, 0x7, 0x1, 0x8, 0x3, 0x3, 0x4, 0x9411, 0x5, 0xb, 0x0, 0x7fff, 0xb, 0xe9e, 0x8000, 0xfffff000, 0x3, 0x1b, 0x4, 0x50000000, 0xc, 0x4, 0xecd, 0x1, 0xcf, 0x400, 0x9, 0x8000, 0x7, 0x45f, 0x3, 0x4, 0x1000, 0x2, 0x8001, 0x1, 0x7, 0x4, 0x4, 0x3, 0x40, 0xffff8001, 0x535c, 0x8001, 0x9, 0xe10, 0xd1, 0x7f, 0x7, 0x800000, 0x1, 0x0, 0x2, 0x0, 0xf], [0x3, 0x5, 0xf, 0x10, 0x9, 0x200, 0x5828816d, 0x1, 0x63f4fb4d, 0x1147, 0x1, 0xab, 0x8, 0x80, 0x2, 0x6, 0x9, 0x41, 0x0, 0x7, 0x80000001, 0x3, 0x1, 0x9, 0x4, 0x7fffffff, 0x5, 0x0, 0x3, 0x6, 0xcf2, 0x8, 0x81, 0x3, 0x4, 0x800, 0x2, 0xfffffffa, 0x4, 0x1, 0x7fffffff, 0x9, 0x9, 0x8, 0x6, 0x5d0, 0x4, 0x9, 0x1f73c000, 0x54, 0xffff, 0x3, 0xf6, 0x40, 0x9, 0x80000000, 0x92, 0x29, 0x80000000, 0x8000, 0x7, 0x4, 0xc, 0x9], 0xa, ['\'\x00', 'GPL\x00', 'GPL\x00']}, ["", "", "", "", "", "", "", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x84}, 0x48891) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={0x0, &(0x7f0000001280)=""/3, 0x0, 0x3, 0x1, 0x10, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001"], 0x30}}, 0x4) 1.130129224s ago: executing program 3 (id=850): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x97, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.105063725s ago: executing program 2 (id=851): gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x37, 0x0, @thr={&(0x7f0000000dc0)="a6efc8488f0d46dbd3b909ab954a57a41754cef8e9d6452cb33b2e2c1ddfa1b38fcf65f7761852b7928ec193d80773c7563b68a195d0ae1fbc9240c9601ffb901c71cd0c34c656cdb9b65716cd38a45645859dabea82c4fcab1a8c364a58f7ddd101a0fc0d6cc0170ad73cde6451a419f2f3d5d13aec65a4780e56225c1353d11951771a677f321e84d33965491849057a103329f171056d19c845950551c2dd3437844db0e5174fb9fcc28744a7f1ab1925f13d30cb1929a82726fc484086ce0750a0ec6c63644cf24e9c23ebb4d70f55a0ea928ef318edb41f51cfcf435cb80500a600000000", &(0x7f0000000f40)="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"}}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_read_part_table(0x593, &(0x7f0000001580)="$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") r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000d80)={0x0, 0x6}, 0x4) iopl(0xd5) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) close(r1) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x31, &(0x7f0000000240), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000440), 0x82, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{}, &(0x7f0000000380), &(0x7f0000000080)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x98, 0x2000c815, &(0x7f0000b63fe4)={0xa, 0x2, 0x1}, 0x1c) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000bc0)=""/68, 0x44}, {&(0x7f00000014c0)=""/130, 0x82}, {&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000000cc0)=""/183, 0xb7}, {&(0x7f0000001180)=""/101, 0x65}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f00000012c0)=""/95, 0x5f}], 0x9}, 0x121) 1.065564448s ago: executing program 3 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0xa0c2, 0x51) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100e1fffffffbdbdf25010000000400018010000280"], 0x28}}, 0x2000c050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105000000c93df92089c2e9d2000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) 850.367391ms ago: executing program 5 (id=853): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) 850.07699ms ago: executing program 5 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 787.718224ms ago: executing program 5 (id=855): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r1 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x4000001, 0x2, 0x0, 0x40003bd}) r2 = syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}]}, 0x3, 0x4ee, &(0x7f0000002680)="$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") (async) syz_io_uring_setup(0x6bd2, &(0x7f00000004c0)={0x0, 0x81fb, 0x4, 0x1, 0x1c5, 0x0, r1}, &(0x7f0000000280), &(0x7f0000000380)) sysinfo(0x0) (async) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000200)=0x9, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000540), 0x944000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '#! '}}, {@version_u}], [{@smackfshat}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}}]}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18) (async) r10 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r10, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 662.217981ms ago: executing program 5 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000200), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21080e, &(0x7f0000000700), 0x1, 0x510, &(0x7f0000001740)="$eJzs3c9vI1cdAPDveNeJdzdt0tIDIGiXtrCg1TqJt42qHqAcEaqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU40SN/AOeeOHDjguDGpRyQ+BGBGiQOg2Y8Sb1Zu7E2iR3Fn480mnnzZv39vjh+b+c59gtgYt2OiP2ImIqIdyNitjifFFu81d2y6z49eLRyePBoJYk0feefSV6fnYuef5O5VTxmJSJ++FHET5In47Z39zaWG436dlGe7zS35tu7e/fWm8tr9bX6Zq22tLi08Mb912vn1taXmlPF0Vc/+cP+t36WpTVTnOltx3nqNr18HCdzPSK+fxHBxuBa0Z6pcSfCUylFxPMR8XL++p+Na/mzCQBcZWk6G+lsbxkAuOpK+RxYUqoWcwEzUSpVq905vBfiZqnRanfuPmztbM5058rmolx6uN6oLxRzhXNRTrLyYn78Wbl2onw/Ip6LiF9M38jL1ZVWY3Wc//EBgAl268T4/5/p7vgPAFxxlXEnAACM3IDxf3/UeQAAo+P+HwAmj/EfACZPd/y/Me40AIARcv8PAJPH+A8AE+UHb7+dbelh8f3Xq+/t7my03ru3Wm9vVJs7K9WV1vZWda3VWsu/s6d52uM1Wq2txddi5/25b2+1O/Pt3b0HzdbOZudB/r3eD+rl/CqfLACAcXrupY//nGQj8ps38i161nIojzUz4KKVxp0AMDbXxp0AMDZW+4LJdYZ7fNMDcEX0WaL3MZV+HxBK0zS9uJSAC3bnS+b/YVL1zP/7K2CYMOb/YXKZ/4fJlabJsGv+x7AXAgCXmzl+YMD7/88X+98Ubw78ePXkFR9eZFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuR2t/1st1gKfiVKpWo14JiLmopw8XG/UFyLi2Yj403R5OisvjjlnAOCsSn9LivW/7sy+OvNY1Yu3jg+nIuKnv3rnl+8vdzrbf4yYSv41fXS+82Fxvjb67AGA0x2N0/m+50b+04NHK0fbKPP5+3cjotKNf3gwFYfH8a/H9XxfiXJE3Px3UpS7kp65i7PY/yAivtiv/UnM5HMg3ZVPT8bPYj8z0vilx+KX8rruPvtZfOEccoFJ83HW/7zV7/VXitv5vv/rv5L3UGdX9H/ZQ60c5n3gZ/GP+r9rA/q/28PGeO133+se3Xiy7oOIL1+POIp92NP/HMVPBsR/dcj4f/nKiy8Pqkt/HXEn+sfvjTXfaW7Nt3f37q03l9fqa/XNWm1pcWnhjfuv1+bzOer5waPBP968++yguqz9NwfEr5zS/q8P2f6P/vfuj772OfG/+Uq/+KV44XPiZ2PiN4aMv3zzt5VBdVn81QHtP+35vztk/E/+uvfEsuEAwPi0d/c2lhuN+vZEHsRwF/+++GFdipwn+iB7Fi5BGn0PvlMcpMkFx5qK/lU/f6X7azod0fuLnaZPFWtQj3Ees27AZXD8oo+I/447GQAAAAAAAAAAAAAAoK9RfDpq3G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//+QbMrN") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) munlockall() remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000034c292df4f3e1ab320c59d7347497516963167a0ae2e675a38d9ea6c49e7b71e4f5bb75e4982f65654a32e9d0635943168d6e03a904bd9b4c3794768f2694ebfaf832ab46f7994a5a248ae6c69977e4587f46de5142c097c9a0b30da269747fc42c18e20f0b8b0c9cf6b4026aa5ab8ebb21008632e6d4c3c4406cb977bbbf6b1538cf9772dd6e85476ad4501932af5e4227c8a7eb9ff3865d3546412b99ebd0b8b236b2ef0be5a56cbb6bad6758a3636a25a4a"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000090000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[], 0x48) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000023050000005946d1d372", @ANYBLOB="0b3a32415ba31dc252551919cd9d2a1ed05bbebd934619b0ab3b510c015f30879ac2f0045d0d16527d5d8d7dc0914f516199750383c7a208a70d41a41d79abad779ea1a400d60726bb5409f6270863fed7dac38e1976b4a13d788313aa672010e6697851315b2f0fcf53db202f384aa66a0929d735c96af4397762c89641b98630914f99141138bdda2b0ab64a32b9a2fa004864879af04e", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0xe3d, &(0x7f0000000140)={0x0, 0x211c, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, &(0x7f0000000040)='./file0/file0\x00', 0x18}) 596.930115ms ago: executing program 0 (id=857): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000fac700000000000062051a061882909358ad4eab76e4ecffa4984e1aae96cad195811ed96f2fcc11c8a3286e64bdb433d7b0005d4e2cf78e20748e9bdaaf825e5ef50883a89ede15c2ac715b0a39b8e7e1fb2ce26ac5ed8c76aa732a5d3e051f4a48bc3fba0a921cfe584473ee0c6449c4cca5470a9605b414d1ad5dbad649e25a06d7d50761ed79b086603659ccae68f433e4f1228aad526dcca659c78a3c4f939b3404be1bfb4bc0f05a26fbe07cff1d67c7580e07190454b24d484f65dd234611cf59116564f73b79c108ad2e46b26b7b52fed38746a6922b0f814b1a9700b6b587dcda2ef1b8fa186bd16a9fa8124658bc9c424234fb2ed43a8f001c8c224ebc022c1f45665f4a31593ba2c601b8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)=@ipv6_deladdr={0x20, 0x15, 0x400, 0x70bd2a, 0x25dfdbff, {0xa, 0x80, 0x8, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x44}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40086) write$9p(r5, &(0x7f0000000300)="050faeab8419b2a5bd177a4d808d8c34b7f6754ea16452ec1eeab0e59ae941f90773446638ad283d9acd608410d3740a262f435cf7697267d29e1141be2a213d3038a4fee49a23c766378f0e4d5f444f9e3d4ca3baf348411f8dd822a1adc3b123b656fb81edf90f766c0786f64e47ffd74ef0c4abb743defc150445fbacb32995734058f2c83b8401a5989094014b58a8f34dfab1908b9356576e903563dfb5fc226febda52f50469bfe68238973e22adddd1a41254a09f35e63606107485e674fc3be7b15e1d7270a66463eca8553dfaf9b84a", 0xd4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x5e, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x5, 0x274}, 0x0, 0xd10c45, 0x0, 0x9, 0x401, 0xfffffff8, 0xfffc, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f7c756e00000000000000000008ba8242f35663deb556b36a4a28310e5389f0a433c444f6"], 0x2c}}, 0x0) 573.447586ms ago: executing program 5 (id=858): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x8, 0xffffffdd, 0x54, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x10, 0xe, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) socket(0x2, 0x80805, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x20, 0xc, &(0x7f0000001780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) socket$inet_udp(0x2, 0x2, 0x0) 519.35646ms ago: executing program 0 (id=859): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 4) 519.03808ms ago: executing program 4 (id=860): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 422.215356ms ago: executing program 4 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc38396}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @random="8608119827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0x0, @private2, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/211, &(0x7f00000000c0)=0xd3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) setresgid(0x0, r4, 0x0) statx(0xffffffffffffffff, &(0x7f0000001740)='./file0\x00', 0x4000, 0x8, &(0x7f0000001780)) 421.945835ms ago: executing program 0 (id=862): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) socket$pppoe(0x18, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00\x00', 0x2}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400000000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000c14a738000000000000000008003d0000000200000000000000000008003d0000000000080001000000000008003d0005000000080003000300000008003d00050000000800010000000000a10e3809e819bf216f6d6321a06c73e76d3c91a031fe6ff5615438b1ad9ecbf96540b86484f1b72480d1f3e181a24902b6c73618be833697c369b55736a169675db1d74d0d4f4e4e8850f4d8363600e217e9ad21cb5be4f4d7cb10d63706c8fb78e2747e6546db393b8239c076a2d96629e242c02a66fe98ec83eb104f6a85ad9c1fe50e99e21b0e8b3e79b618addee673f11633da1bc5471c3755363a5d69c37a38"], 0x50}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000040), 0x12) r11 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r11, 0x5522) ioctl$USBDEVFS_BULK(r11, 0x5523, 0x0) 419.580865ms ago: executing program 4 (id=863): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast2}}}], 0x20}}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) writev(r2, &(0x7f00000008c0)=[{&(0x7f0000000740)="0e10f9d2534f5f73fdab06a6580abe11c96ab7497cc3236286c348d6dac0e9e3fa5c42459b637c9f63a4d025aad74cfea35333849cd2dfe36272e178ec82e88f5fad99cc53f37599f7218d1d143ce5b249fd3bcabd395056e824e97f3eeb0107b42204efb8872c8dd5c2814680c2806b39803214b65e92e985b6f3c2ff3ec53d358a5657781ab3ba576dac809d2340a0e55cb81245a35eeef167b239e054bf64a54523e91a688a21b0916b6dc786f258053e", 0xb2}, {&(0x7f0000000800)="e03b0dda822114a051a85e8fbd491b298f608fccf003c5bfc9c186b9f89e6aac95b12023f107a4b60a2d907c0bfc411c4a521342901614956ea458f6d284a1ac5e457b00b5a1bd0e7a46ee62c75cf282536e531c6aa5334d7cccab5bd3fd48ba58986bc3e6c14e1fa238f253fda0b8cdce2838ef450957b85a37fe2c5ce0de1b38636e7e446e1cfd8743a0a95bea6bc64d5a2c59bcb23d4177399f5674cf41", 0x9f}, {&(0x7f0000000540)="f246e5b396bbc65eb8f49427eabe2e20eb825baaba01b34a6be063a4d29099fa90176ea4ac158ffe3e368e04a3ade41f532b85fe76", 0x35}], 0x3) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000003c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000040)={r4}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000000)=0x7fff, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) r9 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000299bb0000000000000ff00000000000018000000000000002900000036000000"], 0x30}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000450000000000004b7b709f370000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r10}, 0x10) ioctl$sock_SIOCBRDELBR(r8, 0x89a1, &(0x7f0000000080)='bridge0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 245.505146ms ago: executing program 2 (id=864): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x4c}}, 0x800) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff0000ff, 'pim6reg\x00', 'syz_tun\x00', {0xff}, {}, 0x67, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@loopback, @broadcast, 0xff000000, 0xff0000ff, 'pim6reg\x00', 'syz_tun\x00', {0xff}, {}, 0x67, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18ff7f0000000000000000100000e6ff17110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b30000000000851000000200000085000011bf87170095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) (async) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xbe9}, 0x18) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @multicast, 'dummy0\x00'}}, 0x1e) (async) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @multicast, 'dummy0\x00'}}, 0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x18, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x18, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d40)=@IORING_OP_READV=@pass_iovec={0x1, 0x66, 0x6000, @fd=r4, 0xf29, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/112, 0x70}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000180)=""/45, 0x2d}], 0x3, 0x18, 0x1}) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x0, @remote, 'dvmrp1\x00'}}, 0x1e) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x94, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x94, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r7}, 0x10) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) finit_module(r8, 0x0, 0x3) (async) finit_module(r8, 0x0, 0x3) creat(&(0x7f00000002c0)='./file0\x00', 0x0) getresgid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000dc0)={[{@resgid}, {@dioread_nolock}, {@barrier}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") 199.727539ms ago: executing program 3 (id=865): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x5c8, 0x29, 0x3, "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"}], 0x5c8}, 0xf7e5) close(r3) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000000000)="e06414698786fb9d9fed9050277b452b0bc6e01ef3fca50a4175274c344144c428783ab7fa3fa022ffe4", 0x2a, 0x0, &(0x7f0000000200)={0xa, 0x4e22, 0x5, @private2, 0xbda}, 0x1c) 141.934102ms ago: executing program 3 (id=866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="7200fcffffffffdbdf250f000000050037000000000008000300", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5432, 0x0) r6 = io_uring_setup(0x2553, &(0x7f0000000280)) r7 = epoll_create1(0x0) dup3(r7, r6, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xb0ea8aa570af260a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="06", 0x1080}], 0x1}, 0x24004484) r12 = epoll_create(0x7fff) epoll_pwait2(r12, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x25) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 97.052365ms ago: executing program 4 (id=867): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 46.223868ms ago: executing program 2 (id=868): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = getpid() r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0xff, &(0x7f00000000c0)=""/86) syz_pidfd_open(r2, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffac, @loopback}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000400)=0x3, 0x4) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x1200, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048045}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) socket(0x10, 0x3, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r10, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 42.483308ms ago: executing program 4 (id=869): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') futex_waitv(&(0x7f00000027c0)=[{0x0, 0x0, 0x82}, {0x5, &(0x7f0000001480)=0x100, 0x82}, {0x2, &(0x7f00000014c0)=0x6, 0x82}, {0xa7, &(0x7f0000001500)=0x5d73, 0x82}, {0x2, &(0x7f0000001540)=0x4d, 0x2}, {0x3, &(0x7f0000001580)=0x9, 0x2}, {0xfffffffffffffffc, &(0x7f00000015c0), 0x82}, {0x9, &(0x7f00000001c0)=0xfffffffffffff800, 0x2}, {0x3, 0xffffffffffffffff, 0x82}, {0xffff, &(0x7f0000001640)=0xbdf, 0x2}, {0x8000000000000001, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xffffffffffffffc0, 0x0, 0x82}, {0xc, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x72c, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x7dae93e2, 0x0, 0x82}, {0xd3, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x2d82, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x100000000000000, 0x0, 0x82}, {0xffffffffffffffff, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x2, &(0x7f0000001e00)=0x38000000, 0x80}, {0x7, &(0x7f0000001e40)=0x2, 0x2}, {0x6, 0x0}, {0x9, 0x0, 0x2}, {0xcc, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}], 0x2d, 0x0, 0x0, 0x1) 0s ago: executing program 3 (id=870): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071111a000000000085100000020000008500000088000000950000bb939f18009500a59fe23711ed9a148fd56e51b00500000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xca, &(0x7f0000000300)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000040)={[{@auto_da_alloc}, {@nombcache}, {@jqfmt_vfsv1}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") r2 = creat(&(0x7f0000000140)='./file0\x00', 0x75) fallocate(r2, 0x0, 0x0, 0x2000402) lseek(r2, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d2bbfc42f61ad1538919ba9b24157e251b3f19256e68cd977e95bb2272ba8c455e1a4f0e7a1188f335a668353b9026a6856cab92157f0ec117ccd8000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) gettid() sendmsg(0xffffffffffffffff, 0x0, 0x4814) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) read(r7, &(0x7f0000001500)=""/4096, 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 8][ T5227] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ad9c7bc1f [ 70.745784][ T5227] RDX: 0000000000000001 RSI: 00007f6ad82e70a0 RDI: 0000000000000005 [ 70.745866][ T5227] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 [ 70.745905][ T5227] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 70.745920][ T5227] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 [ 70.745937][ T5227] May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:24 syzkaller kern.notice kernel: [ 69.442746][ T5160] FAULT_INJECTION: forcing a failure. May 18 03:33:24 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:25 syzkaller kern.notice kernel: [ 69.442746][ T5160] name failslab, interval 1, probability 0, space 0, times 0 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456044][ T5160] CPU: 1 UID: 0 PID: 5160 Comm: syz.4.555 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456104][ T5160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456119][ T5160] Call Trace: May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456127][ T5160] May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456135][ T51[ 71.107924][ T5252] IPVS: sh: UDP 224.0.0.2:0 - no destination available 60] dump_stack_lvl+0xf2/0x150 May 18 03:33:26 [ 71.119018][ T5244] Falling back ldisc for ttyS3. syzkaller kern.warn kernel: [ 69.456168][ T5160] dump_stack+0x15/0x1a May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456243][ T5160] should_fail_ex+0x24a/0x260 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456277][ T5160] should_failslab+0x8f/0xb0 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.456313][ T5160] kmem_cache_alloc_node_noprof+0x59/0x320 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL deviceMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: receMay 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemMay 18 03:33:26 syzkaller daemon.err dhcpcd[3037May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemonMay 18 03:33:26 May 18 03:33:26 syzkaller daemonMay 18 03:33:26 May 18 03:33:26 syzkaller daemonMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller kern.warn kernel: [ 69.457149][ T5160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: receMay 18 03:33:26 [ 71.454312][ T5268] FAULT_INJECTION: forcing a failure. [ 71.454312][ T5268] name failslab, interval 1, probability 0, space 0, times 0 syzkaller kern.w[ 71.468037][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.5.600 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 71.468127][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:26 [ 71.468142][ T5268] Call Trace: May 18 03:33:26 [ 71.468150][ T5268] May 18 03:33:26 [ 71.468159][ T5268] dump_stack_lvl+0xf2/0x150 May 18 03:33:26 [ 71.468205][ T5268] dump_stack+0x15/0x1a May 18 03:33:26 [ 71.468226][ T5268] should_fail_ex+0x24a/0x260 May 18 03:33:26 [ 71.468261][ T5268] should_failslab+0x8f/0xb0 May 18 03:33:26 [ 71.468296][ T5268] kmem_cache_alloc_node_noprof+0x59/0x320 May 18 03:33:26 [ 71.468323][ T5268] ? __alloc_skb+0x10b/0x310 [ 71.468382][ T5268] __alloc_skb+0x10b/0x310 May 18 03:33:26 [ 71.468399][ T5268] ? audit_log_start+0x34c/0x6b0 May 18 03:33:26 [ 71.468434][ T5268] audit_log_start+0x368/0x6b0 May 18 03:33:26 [ 71.468549][ T5268] audit_seccomp+0x4b/0x130 May 18 03:33:26 [ 71.468585][ T5268] __seccomp_filter+0x6fa/0x1180 [ 71.468609][ T5268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.468655][ T5268] ? vfs_write+0x644/0x920 May 18 03:33:26 [ 71.468752][ T5268] __secure_computing+0x9f/0x1c0 May 18 03:33:26 [ 71.468776][ T5268] syscall_trace_enter+0xd1/0x1f0 [ 71.468799][ T5268] ? fpregs_assert_state_consistent+0x83/0xa0 May 18 03:33:26 [ 71.468847][ T5268] do_syscall_64+0xaa/0x1c0 [ 71.468893][ T5268] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:26 [ 71.468971][ T5268] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:26 [ 71.469066][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:26 [ 71.469099][ T5268] RIP: 0033:0x7f6ad9c7d169 May 18 03:33:26 [ 71.469116][ T5268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 syzkaller kern.w[ 71.469138][ T5268] RSP: 002b:00007f6ad82e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee May 18 03:33:26 [ 71.469161][ T5268] RAX: ffffffffffffffda RBX: 00007f6ad9e95fa0 RCX: 00007f6ad9c7d169 May 18 03:33:26 [ 71.469215][ T5268] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 May 18 03:33:26 [ 71.469226][ T5268] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:26 [ 71.469238][ T5268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 May 18 03:33:26 [ 71.469252][ T5268] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 May 18 03:33:26 [ 71.469286][ T5268] May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 71.709202][ T5273] FAULT_INJECTION: forcing a failure. [ 71.709202][ T5273] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:26 [ 71.709228][ T5273] CPU: 1 UID: 0 PID: 5273 Comm: syz.2.602 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 71.709251][ T5273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:26 May 18 03:33:26 [ 71.709264][ T5273] Call Trace: May 18 03:33:26 [ 71.709351][ T5273] May 18 03:33:26 [ 71.709358][ T5273] dump_stack_lvl+0xf2/0x150 [ 71.709385][ T5273] dump_stack+0x15/0x1a May 18 03:33:26 [ 71.709405][ T5273] should_fail_ex+0x24a/0x260 May 18 03:33:26 [ 71.709436][ T5273] should_fail+0xb/0x10 May 18 03:33:26 [ 71.709461][ T5273] should_fail_usercopy+0x1a/0x20 May 18 03:33:26 [ 71.709527][ T5273] _copy_from_user+0x1c/0xa0 May 18 03:33:26 [ 71.709565][ T5273] kstrtouint_from_user+0x76/0xe0 May 18 03:33:26 [ 71.709600][ T5273] ? 0xffffffff81000000 May 18 03:33:26 [ 71.709615][ T5273] ? selinux_file_permission+0x22a/0x360 May 18 03:33:26 [ 71.709745][ T5273] proc_fail_nth_write+0x4f/0x150 May 18 03:33:26 [ 71.709778][ T5273] ? __pfx_proc_fail_nth_write+0x10/0x10 May 18 03:33:26 [ 71.709811][ T5273] vfs_write+0x27d/0x920 May 18 03:33:26 [ 71.709836][ T5273] ? __pfx_proc_fail_nth_read+0x10/0x10 May 18 03:33:26 [ 71.709863][ T5273] ? __fget_files+0x17c/0x1c0 May 18 03:33:26 [ 71.709931][ T5273] ksys_write+0xe8/0x1b0 May 18 03:33:26 [ 71.709962][ T5273] __x64_sys_write+0x42/0x50 May 18 03:33:26 [ 71.710013][ T5273] x64_sys_call+0x287e/0x2dc0 May 18 03:33:26 [ 71.710045][ T5273] do_syscall_64+0xc9/0x1c0 May 18 03:33:26 [ 71.710078][ T5273] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:26 [ 71.710125][ T5273] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:26 [ 71.710173][ T5273] entry_SYSCALL_64_after_hwframe+0x77/0x7f syzkaller daemon[ 71.710204][ T5273] RIP: 0033:0x7f196e85bc1f .err dhcpcd[3037[ 71.710217][ T5273] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 May 18 03:33:26 [ 71.710235][ T5273] RSP: 002b:00007f196cec1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 May 18 03:33:26 [ 71.710267][ T5273] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f196e85bc1f May 18 03:33:26 [ 71.710281][ T5273] RDX: 0000000000000001 RSI: 00007f196cec10a0 RDI: 0000000000000003 May 18 03:33:26 [ 71.710295][ T5273] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 syzkaller daemon[ 71.710309][ T5273] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 May 18 03:33:26 [ 71.710322][ T5273] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 May 18 03:33:26 [ 71.710337][ T5273] May 18 03:33:26 [ 71.804537][ T5279] IPVS: sh: UDP 224.0.0.2:0 - no destination available May 18 03:33:26 syzkaller daemonMay 18 03:33:26 syzkaller daemonMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 72.012833][ T5288] FAULT_INJECTION: forcing a failure. [ 72.012833][ T5288] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:26 syzkaller daemon[ 72.026737][ T5288] CPU: 0 UID: 0 PID: 5288 Comm: syz.0.607 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 .err dhcpcd[3037[ 72.026793][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ]: libudev: rece[ 72.026809][ T5288] Call Trace: [ 72.026817][ T5288] May 18 03:33:26 [ 72.026824][ T5288] dump_stack_lvl+0xf2/0x150 May 18 03:33:26 [ 72.026852][ T5288] dump_stack+0x15/0x1a [ 72.026876][ T5288] should_fail_ex+0x24a/0x260 May 18 03:33:26 [ 72.026912][ T5288] should_fail+0xb/0x10 May 18 03:33:26 [ 72.026959][ T5288] should_fail_usercopy+0x1a/0x20 [ 72.027159][ T5288] _copy_to_user+0x20/0xa0 [ 72.027257][ T5288] simple_read_from_buffer+0xa0/0x110 May 18 03:33:26 [ 72.027368][ T5288] proc_fail_nth_read+0xf9/0x140 May 18 03:33:26 [ 72.027404][ T5288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.027478][ T5288] vfs_read+0x19b/0x6f0 May 18 03:33:26 [ 72.027507][ T5288] ? __rcu_read_unlock+0x4e/0x70 May 18 03:33:26 [ 72.027535][ T5288] ? __fget_files+0x17c/0x1c0 [ 72.027578][ T5288] ksys_read+0xe8/0x1b0 May 18 03:33:26 [ 72.027613][ T5288] __x64_sys_read+0x42/0x50 [ 72.027681][ T5288] x64_sys_call+0x2874/0x2dc0 May 18 03:33:26 [ 72.027707][ T5288] do_syscall_64+0xc9/0x1c0 May 18 03:33:26 [ 72.027773][ T5288] ? clear_bhb_loop+0x55/0xb0 [ 72.027805][ T5288] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:26 [ 72.027899][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:26 [ 72.027930][ T5288] RIP: 0033:0x7f731e52bb7c May 18 03:33:26 [ 72.027947][ T5288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 May 18 03:33:26 [ 72.027969][ T5288] RSP: 002b:00007f731cb97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 May 18 03:33:26 [ 72.027988][ T5288] RAX: ffffffffffffffda RBX: 00007f731e745fa0 RCX: 00007f731e52bb7c May 18 03:33:26 [ 72.027999][ T5288] RDX: 000000000000000f RSI: 00007f731cb970a0 RDI: 0000000000000003 May 18 03:33:26 [ 72.028091][ T5288] RBP: 00007f731cb97090 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:26 [ 72.028136][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 May 18 03:33:26 [ 72.028195][ T5288] R13: 0000000000000000 R14: 00007f731e745fa0 R15: 00007ffc3aa0b318 May 18 03:33:26 [ 72.028216][ T5288] May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemonMay 18 03:33:26 [ 72.253513][ T29] kauditd_printk_skb: 8807 callbacks suppressed May 18 03:33:26 syzkaller daemon.err dhcpcd[3037May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:2[ 72.253527][ T29] audit: type=1400 audit(2000000007.230:81317): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 6 syzkaller daem[ 72.253552][ T29] audit: type=1400 audit(2000000007.230:81318): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 on.err dhcpcd[30[ 72.253675][ T29] audit: type=1400 audit(2000000007.230:81319): avc: denied { read write } for pid=3782 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 37]: libudev: re[ 72.269931][ T29] audit: type=1400 audit(2000000007.430:81320): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 ceived NULL devi[ 72.270536][ T29] audit: type=1400 audit(2000000007.430:81321): avc: denied { map_create } for pid=5287 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 ce May 18 03:33[ 72.270657][ T29] audit: type=1400 audit(2000000007.430:81322): avc: denied { prog_load } for pid=5287 comm="syz.4.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 :26 syzkaller da[ 72.289793][ T29] audit: type=1400 audit(2000000007.440:81323): avc: denied { read } for pid=5290 comm="syz.0.610" dev="nsfs" ino=4026532765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 emon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev[ 72.448148][ T29] audit: type=1400 audit(2000000007.540:81324): avc: denied { prog_load } for pid=5290 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 : received NULL [ 72.468322][ T29] audit: type=1400 audit(2000000007.540:81325): avc: denied { prog_load } for pid=5290 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 device May 18 0[ 72.488840][ T29] audit: type=1400 audit(2000000007.540:81326): avc: denied { create } for pid=5290 comm="syz.0.610" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 May 18 03:33:26 May 18 03:33:26 syzkaller daemonMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: receMay 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 72.626340][ T5306] FAULT_INJECTION: forcing a failure. [ 72.626340][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:26 [ 72.640518][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: syz.4.613 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:26 [ 72.640557][ T5306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037[ 72.640572][ T5306] Call Trace: ]: libudev: received NULL device May 18 03:33:26 syzkaller daem[ 72.640578][ T5306] on.err dhcpcd[30[ 72.640586][ T5306] dump_stack_lvl+0xf2/0x150 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 72.640618][ T5306] dump_stack+0x15/0x1a May 18 03:33:26 [ 72.640644][ T5306] should_fail_ex+0x24a/0x260 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 May 18 03:33:26 [ 72.640772][ T5306] should_fail+0xb/0x10 May 18 03:33:26 May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: rece[ 72.640801][ T5306] should_fail_usercopy+0x1a/0x20 ived NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller da[ 72.640859][ T5306] _copy_from_user+0x1c/0xa0 emon.err dhcpcd[[ 72.640892][ T5306] user_termios_to_kernel_termios_1+0x22/0x30 3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 0[ 72.640914][ T5306] set_termios+0x126/0x4e0 3:33:26 syzkalle[ 72.641002][ T5306] tty_mode_ioctl+0x391/0x5d0 r daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received[ 72.641030][ T5306] n_tty_ioctl_helper+0x8d/0x240 NULL device Ma[ 72.641057][ T5306] n_tty_ioctl+0xfd/0x200 y 18 03:33:26 sy[ 72.641094][ T5306] ? __pfx_n_tty_ioctl+0x10/0x10 zkaller daemon.e[ 72.641183][ T5306] tty_ioctl+0x87a/0xbe0 rr dhcpcd[3037]:[ 72.641267][ T5306] ? __pfx_tty_ioctl+0x10/0x10 libudev: receiv[ 72.641297][ T5306] __se_sys_ioctl+0xc9/0x140 ed NULL device May 18 03:33:26 [ 72.641327][ T5306] __x64_sys_ioctl+0x43/0x50 syzkaller daemon[ 72.641354][ T5306] x64_sys_call+0x1690/0x2dc0 .err dhcpcd[3037[ 72.641394][ T5306] do_syscall_64+0xc9/0x1c0 ]: libudev: rece[ 72.641468][ T5306] ? clear_bhb_loop+0x55/0xb0 ived NULL device[ 72.641501][ T5306] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:2[ 72.641539][ T5306] entry_SYSCALL_64_after_hwframe+0x77/0x7f 6 syzkaller daem[ 72.641573][ T5306] RIP: 0033:0x7fdb6931d169 on.err dhcpcd[30[ 72.641591][ T5306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 37]: libudev: received NULL device May 18 03:33:26 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller [ 72.641673][ T5306] RSP: 002b:00007fdb67960038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 daemon.err dhcpc[ 72.641696][ T5306] RAX: ffffffffffffffda RBX: 00007fdb69536080 RCX: 00007fdb6931d169 d[3037]: libudev[ 72.641712][ T5306] RDX: 0000400000000080 RSI: 0000000000005404 RDI: 0000000000000004 : received NULL device May 18 0[ 72.641728][ T5306] RBP: 00007fdb67960090 R08: 0000000000000000 R09: 0000000000000000 3:33:26 syzkalle[ 72.641744][ T5306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 r daemon.err dhc[ 72.641759][ T5306] R13: 0000000000000001 R14: 00007fdb69536080 R15: 00007ffdcfbbf7f8 pcd[3037]: libudev: received NULL device May 18 03:33:26 syzkaller kern.notice kernel: [ 71.454312][ T5268] FAULT_INJECTION: forcing a failure. May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[5280]: ps_bpf_start_bpf: bpf_open: Invalid argument May 18 03:33:27 syzkaller daemon.err dhcpcd[5280]: ps_root_recvmsg: Invalid argument May[ 72.641829][ T5306] 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller kern.notice kernel: [ 71.454312][ T5268] name failslab, interval 1, probability 0, space 0, times 0 May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller kern.warn kernel: [ 71.468037][ T5268] CPU: 0 UID: 0 PID: 5268 Comm: syz.5.600 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:27 syzkaller daemon.err dhcpcd[5300]: ps_bpf_start_bpf: bpf_open: Invalid argument May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller kern.warn kernel: [ 71.468127][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:27 syzkaller daemon.err dhcpcd[5300]: ps_root_recvmsg: Invalid argument May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller kern.wa[ 73.094273][ T5318] FAULT_INJECTION: forcing a failure. [ 73.094273][ T5318] name fail_usercopy, interval 1, probability 0, space 0, times 0 rn kernel: [ 7[ 73.108357][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.4.619 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 1.468142][ T5268[ 73.108389][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 ] Call Trace: M[ 73.108468][ T5318] Call Trace: ay 18 03:33:27 s[ 73.108475][ T5318] yzkaller daemon.[ 73.108482][ T5318] dump_stack_lvl+0xf2/0x150 err dhcpcd[3037][ 73.108509][ T5318] dump_stack+0x15/0x1a : libudev: recei[ 73.108530][ T5318] should_fail_ex+0x24a/0x260 ved NULL device[ 73.108606][ T5318] should_fail+0xb/0x10 May 18 03:33:27[ 73.108631][ T5318] should_fail_usercopy+0x1a/0x20 syzkaller kern.[ 73.108662][ T5318] _copy_to_user+0x20/0xa0 warn kernel: [ [ 73.108695][ T5318] simple_read_from_buffer+0xa0/0x110 71.468150][ T52[ 73.108785][ T5318] proc_fail_nth_read+0xf9/0x140 68] May[ 73.108815][ T5318] ? __pfx_proc_fail_nth_read+0x10/0x10 18 03:33:27 syz[ 73.108844][ T5318] vfs_read+0x19b/0x6f0 kaller daemon.er[ 73.108868][ T5318] ? __rcu_read_unlock+0x4e/0x70 r dhcpcd[3037]: [ 73.108932][ T5318] ? __fget_files+0x17c/0x1c0 libudev: receive[ 73.108965][ T5318] ksys_read+0xe8/0x1b0 d NULL device M[ 73.108990][ T5318] __x64_sys_read+0x42/0x50 ay 18 03:33:27 s[ 73.109071][ T5318] x64_sys_call+0x2874/0x2dc0 yzkaller kern.wa[ 73.109097][ T5318] do_syscall_64+0xc9/0x1c0 May 18 03:33:27 [ 73.109127][ T5318] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:27 [ 73.109153][ T5318] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:27 [ 73.109179][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f syzkaller kern.w[ 73.109260][ T5318] RIP: 0033:0x7fdb6931bb7c May 18 03:33:27 [ 73.109274][ T5318] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 May 18 03:33:27 [ 73.109293][ T5318] RSP: 002b:00007fdb67981030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 syzkaller daemon[ 73.109311][ T5318] RAX: ffffffffffffffda RBX: 00007fdb69535fa0 RCX: 00007fdb6931bb7c .err dhcpcd[3037[ 73.109323][ T5318] RDX: 000000000000000f RSI: 00007fdb679810a0 RDI: 0000000000000003 May 18 03:33:27 [ 73.109335][ T5318] RBP: 00007fdb67981090 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:27 [ 73.109382][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 May 18 03:33:27 [ 73.109394][ T5318] R13: 0000000000000000 R14: 00007fdb69535fa0 R15: 00007ffdcfbbf7f8 May 18 03:33:27 [ 73.109410][ T5318] May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:27 syzkaller kern.notice kernel: [ 72.626340][ T5306] FAULT_INJECTION: forcing a failure. May 18 03:33:28 syzkaller kern.notice kernel: [ 72.626340][ T5306] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:28 syzkaller kern.warn kernel: [ 72.640518][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: syz.4.613 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:27 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NUL[ 73.573041][ T5328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5146 sclass=netlink_route_socket pid=5328 comm=syz.0.623 L device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: receivMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller kern.wMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 May 18 03:33:28 syzkaller kern.wMay 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]:May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[30May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daem[ 73.739418][ T5334] FAULT_INJECTION: forcing a failure. [ 73.739418][ T5334] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:28 [ 73.753493][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.2.626 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 73.753526][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon[ 73.753549][ T5334] Call Trace: May 18 03:33:28 [ 73.753557][ T5334] May 18 03:33:28 [ 73.753566][ T5334] dump_stack_lvl+0xf2/0x150 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 73.753674][ T5334] dump_stack+0x15/0x1a syzkaller daemon[ 73.753701][ T5334] should_fail_ex+0x24a/0x260 .err dhcpcd[3037[ 73.753738][ T5334] should_fail+0xb/0x10 May 18 03:33:28 [ 73.753771][ T5334] should_fail_usercopy+0x1a/0x20 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 syzkaller daemon[ 73.753849][ T5334] _copy_to_user+0x20/0xa0 May 18 03:33:28 [ 73.753892][ T5334] simple_read_from_buffer+0xa0/0x110 May 18 03:33:28 [ 73.753950][ T5334] proc_fail_nth_read+0xf9/0x140 May 18 03:33:28 [ 73.753987][ T5334] ? __pfx_proc_fail_nth_read+0x10/0x10 May 18 03:33:28 [ 73.754023][ T5334] vfs_read+0x19b/0x6f0 syzkaller daemon[ 73.754090][ T5334] ? __rcu_read_unlock+0x4e/0x70 .err dhcpcd[3037[ 73.754119][ T5334] ? __fget_files+0x17c/0x1c0 [ 73.754161][ T5334] ksys_read+0xe8/0x1b0 May 18 03:33:28 [ 73.754193][ T5334] __x64_sys_read+0x42/0x50 syzkaller daemon[ 73.754226][ T5334] x64_sys_call+0x2874/0x2dc0 .err dhcpcd[3037[ 73.754309][ T5334] do_syscall_64+0xc9/0x1c0 ]: libudev: receMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: receMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 73.754346][ T5334] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:28 [ 73.754390][ T5334] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:28 [ 73.754438][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:28 [ 73.754472][ T5334] RIP: 0033:0x7f196e85bb7c May 18 03:33:28 [ 73.754490][ T5334] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 May 18 03:33:28 [ 73.754512][ T5334] RSP: 002b:00007f196cec1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 syzkaller daemon[ 73.754541][ T5334] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85bb7c .err dhcpcd[3037]: libudev: received NULL device May 18 03:33:2[ 73.754571][ T5334] RDX: 000000000000000f RSI: 00007f196cec10a0 RDI: 0000000000000003 8 syzkaller daemon.err dhcpcd[30[ 73.754585][ T5334] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 73.754677][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 37]: libudev: re[ 73.754691][ T5334] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 ceived NULL devi[ 73.754711][ T5334] ce May 18 03:33[ 74.000694][ T5346] FAULT_INJECTION: forcing a failure. [ 74.000694][ T5346] name fail_usercopy, interval 1, probability 0, space 0, times 0 :28 syzkaller da[ 74.043602][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.3.631 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 emon.err dhcpcd[[ 74.043632][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:28 [ 74.043647][ T5346] Call Trace: May 18 03:33:28 [ 74.043655][ T5346] syzkaller daemon[ 74.043663][ T5346] dump_stack_lvl+0xf2/0x150 .err dhcpcd[3037[ 74.043717][ T5346] dump_stack+0x15/0x1a ]: libudev: rece[ 74.043738][ T5346] should_fail_ex+0x24a/0x260 ived NULL device[ 74.043773][ T5346] should_fail+0xb/0x10 May 18 03:33:28 syzkaller daemMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.043803][ T5346] should_fail_usercopy+0x1a/0x20 May 18 03:33:28 [ 74.043882][ T5346] _copy_from_user+0x1c/0xa0 May 18 03:33:28 [ 74.043961][ T5346] memdup_user+0x64/0xc0 May 18 03:33:28 [ 74.044043][ T5346] strndup_user+0x68/0xa0 May 18 03:33:28 [ 74.044078][ T5346] __se_sys_mount+0x4e/0x2d0 May 18 03:33:28 [ 74.044179][ T5346] ? fput+0x1c4/0x200 May 18 03:33:28 [ 74.044204][ T5346] ? ksys_write+0x176/0x1b0 May 18 03:33:28 [ 74.044237][ T5346] __x64_sys_mount+0x67/0x80 May 18 03:33:28 syzkaller daemon[ 74.044274][ T5346] x64_sys_call+0x2c84/0x2dc0 May 18 03:33:28 [ 74.044306][ T5346] do_syscall_64+0xc9/0x1c0 May 18 03:33:28 [ 74.044357][ T5346] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:28 [ 74.044391][ T5346] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:28 [ 74.044464][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:28 [ 74.044523][ T5346] RIP: 0033:0x7f6f616ad169 May 18 03:33:28 [ 74.044541][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 May 18 03:33:28 [ 74.044565][ T5346] RSP: 002b:00007f6f5fd11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 May 18 03:33:28 [ 74.044588][ T5346] RAX: ffffffffffffffda RBX: 00007f6f618c5fa0 RCX: 00007f6f616ad169 May 18 03:33:28 [ 74.044605][ T5346] RDX: 0000400000000080 RSI: 0000400000000200 RDI: 0000000000000000 May 18 03:33:28 [ 74.044620][ T5346] RBP: 00007f6f5fd11090 R08: 0000400000000380 R09: 0000000000000000 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.044635][ T5346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 [ 74.044650][ T5346] R13: 0000000000000000 R14: 00007f6f618c5fa0 R15: 00007ffdebd28318 syzkaller daemon[ 74.044691][ T5346] .err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.312382][ T5361] xt_connbytes: Forcing CT accounting to be enabled May 18 03:33:28 [ 74.320371][ T5361] Cannot find set identified by id 0 to match May 18 03:33:28 [ 74.328775][ T5363] FAULT_INJECTION: forcing a failure. [ 74.328775][ T5363] name fail_usercopy, interval 1, probability 0, space 0, times 0 syzkaller daemon[ 74.342038][ T5363] CPU: 0 UID: 0 PID: 5363 Comm: syz.2.638 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.342074][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL deviceMay 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: rece[ 74.342091][ T5363] Call Trace: ived NULL device May 18 03:33:28 syzkaller daem[ 74.342099][ T5363] on.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: rece[ 74.342107][ T5363] dump_stack_lvl+0xf2/0x150 ived NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: reMay 18 03:33:28 May 18 03:33:28 [ 74.342136][ T5363] dump_stack+0x15/0x1a syzkaller daemon.err dhcpcd[3037]: libudev: received NULL deviceMay 18 03:33:28 May 18 03:33:28 [ 74.342219][ T5363] should_fail_ex+0x24a/0x260 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:2[ 74.342256][ T5363] should_fail+0xb/0x10 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.342287][ T5363] should_fail_usercopy+0x1a/0x20 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon[ 74.342370][ T5363] _copy_from_user+0x1c/0xa0 .err dhcpcd[3037]: libudev: received NULL device May 18 03:33:2May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon[ 74.342412][ T5363] kstrtouint_from_user+0x76/0xe0 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.342446][ T5363] ? 0xffffffff81000000 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 syzkaller daemonMay 18 03:33:28 [ 74.342462][ T5363] ? selinux_file_permission+0x22a/0x360 May 18 03:33:28 syzkaller daemonMay 18 03:33:28 May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 syzkaller daemon.err dhcpcd[3037May 18 03:33:28 May 18 03:33:28 May 18 03:33:28 [ 74.342529][ T5363] proc_fail_nth_write+0x4f/0x150 syzkaller daemon[ 74.342564][ T5363] ? __pfx_proc_fail_nth_write+0x10/0x10 May 18 03:33:28 [ 74.342608][ T5363] vfs_write+0x27d/0x920 [ 74.342636][ T5363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.342673][ T5363] ? __fget_files+0x17c/0x1c0 May 18 03:33:28 [ 74.342742][ T5363] ksys_write+0xe8/0x1b0 [ 74.342773][ T5363] __x64_sys_write+0x42/0x50 May 18 03:33:28 [ 74.342814][ T5363] x64_sys_call+0x287e/0x2dc0 [ 74.342848][ T5363] do_syscall_64+0xc9/0x1c0 May 18 03:33:28 [ 74.342962][ T5363] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:28 [ 74.343000][ T5363] ? clear_bhb_loop+0x55/0xb0 [ 74.343045][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.343136][ T5363] RIP: 0033:0x7f196e85bc1f May 18 03:33:28 [ 74.343153][ T5363] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 May 18 03:33:28 [ 74.343176][ T5363] RSP: 002b:00007f196cec1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 May 18 03:33:28 [ 74.343200][ T5363] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f196e85bc1f May 18 03:33:28 [ 74.343216][ T5363] RDX: 0000000000000001 RSI: 00007f196cec10a0 RDI: 0000000000000003 [ 74.343231][ T5363] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:28 [ 74.343325][ T5363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 May 18 03:33:28 [ 74.343340][ T5363] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 May 18 03:33:28 [ 74.343366][ T5363] [ 74.547749][ T5378] FAULT_INJECTION: forcing a failure. [ 74.547749][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:28 [ 74.547807][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.2.643 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 syzkaller daemon[ 74.547840][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 .err dhcpcd[3037[ 74.547853][ T5378] Call Trace: ]: libudev: rece[ 74.547858][ T5378] ived NULL device[ 74.547896][ T5378] dump_stack_lvl+0xf2/0x150 [ 74.547960][ T5378] dump_stack+0x15/0x1a May 18 03:33:2[ 74.547983][ T5378] should_fail_ex+0x24a/0x260 8 syzkaller daem[ 74.548018][ T5378] should_fail+0xb/0x10 on.err dhcpcd[30[ 74.548106][ T5378] should_fail_usercopy+0x1a/0x20 37]: libudev: re[ 74.548188][ T5378] _copy_from_user+0x1c/0xa0 ceived NULL devi[ 74.548222][ T5378] kstrtouint_from_user+0x76/0xe0 ce May 18 03:33[ 74.548313][ T5378] ? 0xffffffff81000000 :28 syzkaller da[ 74.548329][ T5378] ? selinux_file_permission+0x22a/0x360 emon.err dhcpcd[[ 74.548365][ T5378] proc_fail_nth_write+0x4f/0x150 [ 74.548396][ T5378] ? __pfx_proc_fail_nth_write+0x10/0x10 3037]: libudev: [ 74.548432][ T5378] vfs_write+0x27d/0x920 [ 74.548523][ T5378] ? __pfx_proc_fail_nth_read+0x10/0x10 received NULL de[ 74.548560][ T5378] ? __fget_files+0x17c/0x1c0 vice May 18 03:[ 74.548601][ T5378] ksys_write+0xe8/0x1b0 33:28 syzkaller [ 74.548631][ T5378] __x64_sys_write+0x42/0x50 daemon.err dhcpc[ 74.548665][ T5378] x64_sys_call+0x287e/0x2dc0 d[3037]: libudev[ 74.548695][ T5378] do_syscall_64+0xc9/0x1c0 : received NULL [ 74.548804][ T5378] ? clear_bhb_loop+0x55/0xb0 device May 18 0[ 74.548835][ T5378] ? clear_bhb_loop+0x55/0xb0 [ 74.548866][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f 3:33:28 syzkalle[ 74.548895][ T5378] RIP: 0033:0x7f196e85bc1f r daemon.err dhc[ 74.548909][ T5378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 pcd[3037]: libud[ 74.548946][ T5378] RSP: 002b:00007f196cec1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 ev: received NUL[ 74.548965][ T5378] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f196e85bc1f L device May 18[ 74.548977][ T5378] RDX: 0000000000000001 RSI: 00007f196cec10a0 RDI: 0000000000000003 03:33:28 syzkal[ 74.548992][ T5378] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 ler daemon.err d[ 74.549006][ T5378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.549020][ T5378] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 hcpcd[3037]: lib[ 74.549040][ T5378] udev: received N[ 74.575902][ T5380] FAULT_INJECTION: forcing a failure. [ 74.575902][ T5380] name failslab, interval 1, probability 0, space 0, times 0 ULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:28 syzkaller kern.notice [ 74.994843][ T5380] CPU: 0 UID: 0 PID: 5380 Comm: syz.2.644 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 kernel: [ 73.739418][ T5334] FAULT_INJECTION: [ 74.994878][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 forcing a failure. May 18 03:33:29 syzkaller kern.notice kernel: [ 73.739418][ T5334] name fail_usercopy, interval 1, probability 0, space 0, times 0 May 18 03:33:29 syzkaller kern.warn kernel: [ 73.753493][ T5334] CPU: 0 UID: 0 PID: 5334 Comm: syz.2.626 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:29 syzkaller kern.warn kernel: [ 73[ 74.994894][ T5380] Call Trace: .753526][ T5334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:29 syzkaller kern.warn kernel: [ 73.753549][ T5334] Call Trace: May [ 74.994903][ T5380] 18 03:33:29 syzkaller kern.warn kernel: [ 73.753557][ T5334] May 18 03:33:29 syzkaller kern.warn kernel: [ 73.753566][ T5334] dump_stack_lvl+0xf2/0x150 May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudeMay 18 03:33:29 May 18 03:33:29 May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: rece[ 74.994912][ T5380] dump_stack_lvl+0xf2/0x150 ived NULL device [ 74.994974][ T5380] dump_stack+0x15/0x1a [ 74.995037][ T5380] should_fail_ex+0x24a/0x260 [ 74.995144][ T5380] should_failslab+0x8f/0xb0 [ 74.995180][ T5380] kmem_cache_alloc_node_noprof+0x59/0x320 [ 74.995207][ T5380] ? __alloc_skb+0x10b/0x310 [ 74.995227][ T5380] __alloc_skb+0x10b/0x310 [ 74.995244][ T5380] ? audit_log_start+0x34c/0x6b0 [ 74.995281][ T5380] audit_log_start+0x368/0x6b0 [ 74.995328][ T5380] audit_seccomp+0x4b/0x130 [ 74.995358][ T5380] __seccomp_filter+0x6fa/0x1180 [ 74.995386][ T5380] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.995445][ T5380] ? vfs_write+0x644/0x920 [ 74.995475][ T5380] ? __schedule+0x75b/0x990 [ 74.995502][ T5380] __secure_computing+0x9f/0x1c0 [ 74.995525][ T5380] syscall_trace_enter+0xd1/0x1f0 [ 74.995614][ T5380] do_syscall_64+0xaa/0x1c0 [ 74.995649][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 74.995684][ T5380] ? clear_bhb_loop+0x55/0xb0 [ 74.995718][ T5380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.995815][ T5380] RIP: 0033:0x7f196e85d169 [ 74.995832][ T5380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.995851][ T5380] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 74.995869][ T5380] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 74.995881][ T5380] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000000 [ 74.995896][ T5380] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 74.995910][ T5380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.995923][ T5380] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 74.995945][ T5380] [ 75.215138][ T5389] IPVS: sh: UDP 224.0.0.2:0 - no destination available May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller kern.warn kernel: [ 73.753701][ T5334] should_fail_ex+0x24a/0x260 May 18 03:33:29 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:29 syzkaller kern.warn kernel: [ 73.753738][ T5334] should_fail+0xb/0x10 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.753771][ T5334] should_fail_usercopy+0x1a/0x20 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.753849][ T5334] _copy_to_user+0x20/0xa0 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.753892][ T5334] simple_read_from_buffer+0xa0/0x110 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.753950][ T5334] proc_[ 75.781453][ T5410] FAULT_INJECTION: forcing a failure. [ 75.781453][ T5410] name fail_usercopy, interval 1, probability 0, space 0, times 0 fail_nth_read+0xf9/0x140 May 18 03:33:30 syzkal[ 75.795322][ T5410] CPU: 0 UID: 0 PID: 5410 Comm: syz.5.654 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 ler kern.warn kernel: [ 73.753987][ T5334] ? __pfx_proc_fail_nth_read+0x10/0x10 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754023][ T5334] vfs_read[ 75.795348][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 +0x19b/0x6f0 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754090][ T5334] ? __rcu_read_unlock+0x4e/0x70 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754119][ T5334] ? __fget_files+0x17c/0x1c0 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754161][ T5334] ksys_read+0xe8/0x1b0 May 1[ 75.795443][ T5410] Call Trace: 8 03:33:30 syzkaller kern.warn kernel: [ 73.754193][ T5334] __x64_sys_read+0x42/0x50 May 18 03:33:30 syzkaller kern.warn ker[ 75.795450][ T5410] nel: [ 73.754226][ T5334] x64_sys_call+0x2874/0x2dc0 May 18 03:33:30 syzkaller kern.warn ker[ 75.795458][ T5410] dump_stack_lvl+0xf2/0x150 nel: [ 73.754309][ T5334] do_syscall_64+0xc9/0x1c0 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754346][ T5334] ? clear_bhb_loop+0x55[ 75.795490][ T5410] dump_stack+0x15/0x1a /0xb0 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754390][ T5334] ? clear_bhb_loop+0x55/0xb0 May 18 03[ 75.795512][ T5410] should_fail_ex+0x24a/0x260 :33:30 syzkaller kern.warn kernel: [ 73.754438][ T5334] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754472][[ 75.795610][ T5410] should_fail+0xb/0x10 T5334] RIP: 0033:0x7f196e85bb7c May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754490][ T5334] Code: ec 28[ 75.795640][ T5410] should_fail_usercopy+0x1a/0x20 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0[ 75.795739][ T5410] _copy_to_user+0x20/0xa0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 Ma[ 75.795799][ T5410] simple_read_from_buffer+0xa0/0x110 y 18 03:33:30 syzkaller kern.warn kernel: [ 73.754512][ T5334] RSP: 002b:00007f196cec1030 EFLAGS: 00000246 ORI[ 75.795897][ T5410] proc_fail_nth_read+0xf9/0x140 G_RAX: 0000000000000000 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754541][ T5334] RAX: ffffffffffffffda RBX: 00007f196[ 75.795961][ T5410] ? __pfx_proc_fail_nth_read+0x10/0x10 ea75fa0 RCX: 00007f196e85bb7c May 18 03:33:30 syzkaller kern.wa[ 75.795989][ T5410] vfs_read+0x19b/0x6f0 rn kernel: [ 73.754571][ T5334] RDX: 000000000000000f RSI: 000[ 75.796011][ T5410] ? __rcu_read_unlock+0x4e/0x70 07f196cec10a0 RD[ 75.796033][ T5410] ? __fget_files+0x17c/0x1c0 I: 0000000000000003 May 18 03:3[ 75.796074][ T5410] ksys_read+0xe8/0x1b0 3:30 syzkaller k[ 75.796118][ T5410] __x64_sys_read+0x42/0x50 ern.warn kernel: [ 73.754585][[ 75.796145][ T5410] x64_sys_call+0x2874/0x2dc0 T5334] RBP: 000[ 75.796190][ T5410] do_syscall_64+0xc9/0x1c0 07f196cec1090 R0[ 75.796309][ T5410] ? clear_bhb_loop+0x55/0xb0 8: 0000000000000000 R09: 0000000[ 75.796339][ T5410] ? clear_bhb_loop+0x55/0xb0 000000000 May 1[ 75.796439][ T5410] entry_SYSCALL_64_after_hwframe+0x77/0x7f 8 03:33:30 syzka[ 75.796473][ T5410] RIP: 0033:0x7f6ad9c7bb7c ller kern.warn k[ 75.796544][ T5410] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 ernel: [ 73.754677][ T5334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 May 18 03:33:30 syzkaller kern.[ 75.796567][ T5410] RSP: 002b:00007f6ad82e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 warn kernel: [ 73.754691][ T5334] R13: 0000000000000000 R14: 0[ 75.796589][ T5410] RAX: ffffffffffffffda RBX: 00007f6ad9e95fa0 RCX: 00007f6ad9c7bb7c 0007f196ea75fa0 R15: 00007ffd4305d8d8 May 18 03:33:30 syzkaller kern.warn kernel: [ 73.754711][ T5334] May 18 03:33:30 syzkaller kern.notice kernel: [ 74.000694][ T5346] FAULT_INJECTION: forcing a failure. May 18 03:33:30 syzkaller kern.notice kernel: [ [ 75.796607][ T5410] RDX: 000000000000000f RSI: 00007f6ad82e70a0 RDI: 0000000000000003 74.000694][ T5346] name fail_usercopy, interval 1, probability 0[ 75.796622][ T5410] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 , space 0, times 0 May 18 03:33:30 syzkaller kern.warn kernel: [ 74.043602][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.3.631 Not tainted 6.14.[ 75.796639][ T5410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 0-rc3-syzkaller-[ 75.796653][ T5410] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 00213-g8a61cb6e150e #0 May 18 03:33:30 syzkaller kern.warn kernel: [ 74.043632][ T5346] Hardware name: Google[ 75.796695][ T5410] Google Compute Engine/Google Compute Engine, BIOS Google 12/27/[ 75.884794][ T5412] FAULT_INJECTION: forcing a failure. [ 75.884794][ T5412] name fail_usercopy, interval 1, probability 0, space 0, times 0 2024 May 18 03:33:30 syzkaller kern.warn kernel: [ 74.043647]May 18 03:33:30 syzkaller kern.warn kernel: [ [ 75.884824][ T5412] CPU: 0 UID: 0 PID: 5412 Comm: syz.5.655 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:30 [ 75.884847][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:30 May 18 03:33:30 syzkaller kern.wMay 18 03:33:30 [ 75.884944][ T5412] Call Trace: May 18 03:33:30 [ 75.884951][ T5412] May 18 03:33:30 [ 75.884960][ T5412] dump_stack_lvl+0xf2/0x150 May 18 03:33:30 [ 75.884989][ T5412] dump_stack+0x15/0x1a syzkaller kern.w[ 75.885012][ T5412] should_fail_ex+0x24a/0x260 May 18 03:33:30 [ 75.885041][ T5412] should_fail+0xb/0x10 May 18 03:33:30 [ 75.885119][ T5412] should_fail_usercopy+0x1a/0x20 May 18 03:33:30 [ 75.885148][ T5412] _copy_from_user+0x1c/0xa0 May 18 03:33:30 [ 75.885204][ T5412] kstrtouint_from_user+0x76/0xe0 syzkaller daemon[ 75.885315][ T5412] ? 0xffffffff81000000 May 18 03:33:30 [ 75.885330][ T5412] ? selinux_file_permission+0x22a/0x360 May 18 03:33:30 [ 75.885365][ T5412] proc_fail_nth_write+0x4f/0x150 May 18 03:33:30 [ 75.885418][ T5412] ? __pfx_proc_fail_nth_write+0x10/0x10 May 18 03:33:30 [ 75.885448][ T5412] vfs_write+0x27d/0x920 May 18 03:33:30 [ 75.885527][ T5412] ? __pfx_proc_fail_nth_read+0x10/0x10 May 18 03:33:30 [ 75.885560][ T5412] ? __fget_files+0x17c/0x1c0 May 18 03:33:30 [ 75.885603][ T5412] ksys_write+0xe8/0x1b0 May 18 03:33:30 [ 75.885639][ T5412] __x64_sys_write+0x42/0x50 May 18 03:33:30 [ 75.885705][ T5412] x64_sys_call+0x287e/0x2dc0 May 18 03:33:30 [ 75.885811][ T5412] do_syscall_64+0xc9/0x1c0 syzkaller kern.w[ 75.885846][ T5412] ? clear_bhb_loop+0x55/0xb0 arn kernel: [ [ 75.885875][ T5412] ? clear_bhb_loop+0x55/0xb0 May 18 03:33:30 [ 75.885909][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:30 [ 75.885969][ T5412] RIP: 0033:0x7f6ad9c7bc1f May 18 03:33:30 [ 75.885983][ T5412] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 May 18 03:33:30 [ 75.886022][ T5412] RSP: 002b:00007f6ad82e7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 May 18 03:33:30 [ 75.886040][ T5412] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ad9c7bc1f syzkaller kern.w[ 75.886055][ T5412] RDX: 0000000000000001 RSI: 00007f6ad82e70a0 RDI: 0000000000000003 arn kernel: [ [ 75.886068][ T5412] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 74.342814][ T536[ 75.886080][ T5412] R10: 00000000000000d1 R11: 0000000000000293 R12: 0000000000000001 3] x64_sys_call[ 75.886091][ T5412] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 May 18 03:33:30 [ 75.886107][ T5412] May 18 03:33:30 [ 76.305128][ T5424] FAULT_INJECTION: forcing a failure. [ 76.305128][ T5424] name failslab, interval 1, probability 0, space 0, times 0 May 18 03:33:30 [ 76.531425][ T5424] CPU: 1 UID: 0 PID: 5424 Comm: syz.2.660 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 syzkaller kern.warn kernel: [ May 18 03:33:30 May 18 03:33:30 May 18 03:33:30 May 18 03:33:30 syzkaller kern.wMay 18 03:33:30 [ 76.531454][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:30 May 18 03:33:30 May 18 03:33:30 May 18 03:33:30 [ 76.531469][ T5424] Call Trace: May 18 03:33:30 [ 76.531477][ T5424] syzkaller daemon[ 76.531486][ T5424] dump_stack_lvl+0xf2/0x150 May 18 03:33:30 [ 76.531521][ T5424] dump_stack+0x15/0x1a May 18 03:33:30 [ 76.531576][ T5424] should_fail_ex+0x24a/0x260 May 18 03:33:30 [ 76.531613][ T5424] should_failslab+0x8f/0xb0 May 18 03:33:30 [ 76.531651][ T5424] __kmalloc_node_noprof+0xad/0x410 syzkaller kern.wMay 18 03:33:30 May 18 03:33:30 syzkaller daemonMay 18 03:33:30 [ 76.531680][ T5424] ? __kvmalloc_node_noprof+0x72/0x170 May 18 03:33:30 [ 76.531768][ T5424] __kvmalloc_node_noprof+0x72/0x170 May 18 03:33:30 [ 76.531804][ T5424] __se_sys_add_key+0x1c9/0x320 May 18 03:33:30 [ 76.531843][ T5424] ? fput+0x1c4/0x200 May 18 03:33:30 May 18 03:33:30 [ 76.531880][ T5424] __x64_sys_add_key+0x67/0x80 May 18 03:33:30 [ 76.531998][ T5424] x64_sys_call+0x2964/0x2dc0 May 18 03:33:30 [ 76.532032][ T5424] do_syscall_64+0xc9/0x1c0 May 18 03:33:30 syzkaller kern.w[ 76.532115][ T5424] ? clear_bhb_loop+0x55/0xb0 arn kernel: [ [ 76.532149][ T5424] ? clear_bhb_loop+0x55/0xb0 74.548866][ T537[ 76.532183][ T5424] entry_SYSCALL_64_after_hwframe+0x77/0x7f 8] entry_SYSCAL[ 76.532246][ T5424] RIP: 0033:0x7f196e85d169 L_64_after_hwfra[ 76.532271][ T5424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 me+0x77/0x7f [ 76.532304][ T5424] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 76.532328][ T5424] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 76.532344][ T5424] RDX: 0000400000000400 RSI: 0000000000000000 RDI: 00004000000003c0 [ 76.532366][ T5424] RBP: 00007f196cec1090 R08: 000000000412d8c5 R09: 0000000000000000 [ 76.532382][ T5424] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 76.532466][ T5424] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 76.532493][ T5424] May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548895][ T5378] RIP: 0033:0x7f196e85bc1f May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548909][ T5378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548946][ T5378] RSP: 002b:00007f196cec1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548965][ T5378] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f196e85bc1f May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548977][ T5378] RDX: 0000000000000001 RSI: 00007f196cec10a0 RDI: 0000000000000003 May 18 03:33:30 syzkaller kern.warn kernel: [ 74.548992][ T5378] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 May 18 03:33:30 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:[ 76.897531][ T5444] serio: Serial port ptm0 33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: [ 77.015254][ T5450] IPVS: sh: UDP 224.0.0.2:0 - no destination available received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller kern.warn kernel: [ 74.549006][ T5378] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 May 18 03:33:31 syzkaller kern.warn kernel: [ [ 77.054136][ T5453] loop0: detected capacity change from 0 to 512 74.549020][ T5378] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.549040][ T5378] May 18 03:33:31 syzkaller kern.notice kernel: [ 74.575902][ T5380] FAULT_INJECTION: forcing a failure. May 18 03:33:31 syz[ 77.085008][ T5453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. kaller kern.notice kernel: [ 74.575902][ T5380[ 77.101214][ T5453] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) ] name failslab, interval 1, probability 0, space 0, times 0 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994843][ T5380] CPU: 0 UID: 0 PID: 5380 Comm: syz.2.644 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994878][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994894][ T5380] Call Trace: May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994903][ T5380] May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994912][ T5380] dump_stack_lvl+0xf2/0x150 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.994974][ T5380] dMay 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 syzkaller kern.warn kernel: [ 74.995832][ T538May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:31 syzkaller kern.warn kernel: [ 75.796439][ T5410] entry_SYSCALL_64_after_hwframe+0x77/0x7f May 18 03:33:31 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL deviceMay 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:31 syzkaller daemonMay 18 03:33:31 May 18 03:33:31 May 18 03:33:31 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:31 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:32 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:32 syzkaller daemon.err dhcpcd[May 18 03:33:32 syzkaller daemon.err dhcpcd[3037May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemonMay 18 03:33:32 May 18 03:33:32 syzkaller daemonMay 18 03:33:32 syzkaller daemonMay 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemonMay 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33:32 syzkaller daemon.err dhcpcd[3037]: libudev: received NULL device May 18 03:33May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemonMay 18 03:33:32 syzkaller daemon.err dhcpcd[3037May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 May 18 03:33:32 syzkaller daemon.err dhcpcd[3037May 18 03:33:32 May 18 03:33:32 syzkaller daemonMay 18 03:33:32 [ 77.468556][ T29] kauditd_printk_skb: 4353 callbacks suppressed [ 77.468574][ T29] audit: type=1400 audit(2000000012.600:85207): avc: denied { read } for pid=5460 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.494172][ T29] audit: type=1400 audit(2000000012.600:85208): avc: denied { create } for pid=5460 comm="syz.3.672" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.515494][ T29] audit: type=1400 audit(2000000012.600:85209): avc: denied { map } for pid=5460 comm="syz.3.672" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.539720][ T29] audit: type=1400 audit(2000000012.600:85210): avc: denied { read write } for pid=5460 comm="syz.3.672" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.564986][ T29] audit: type=1400 audit(2000000012.600:85211): avc: denied { override_creds } for pid=5460 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.585093][ T29] audit: type=1400 audit(2000000012.600:85212): avc: denied { cpu } for pid=5460 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.658244][ T29] audit: type=1326 audit(2000000012.810:85213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f616ad169 code=0x7ffc0000 [ 77.690353][ T29] audit: type=1326 audit(2000000012.820:85214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f6f616ad169 code=0x7ffc0000 [ 77.713874][ T29] audit: type=1326 audit(2000000012.820:85215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f616ad169 code=0x7ffc0000 [ 77.737353][ T29] audit: type=1326 audit(2000000012.820:85216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5460 comm="syz.3.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f616ad169 code=0x7ffc0000 [ 77.816414][ T5465] loop4: detected capacity change from 0 to 2048 [ 77.844729][ T5465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.924119][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.001786][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.021243][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.034623][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.051097][ T5475] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.068194][ T5475] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 78.098530][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.114940][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.134110][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.154636][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.161023][ T5475] wg1 speed is unknown, defaulting to 1000 [ 78.181411][ T5479] siw: device registration error -23 [ 78.440276][ T5501] loop3: detected capacity change from 0 to 128 [ 78.452168][ T5501] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 78.493118][ T137] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 78.527487][ T5504] syz.3.686 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.567922][ T5506] loop3: detected capacity change from 0 to 512 [ 78.591317][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.605495][ T5506] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.009022][ T5476] syz.4.673 (5476) used greatest stack depth: 9448 bytes left [ 79.213912][ T5530] netlink: 192 bytes leftover after parsing attributes in process `syz.0.696'. [ 79.275808][ T5465] syz.4.673 (5465) used greatest stack depth: 7096 bytes left [ 79.283954][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.304675][ T5534] loop5: detected capacity change from 0 to 512 [ 79.354943][ T5534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.368521][ T5534] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.428483][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.786245][ T5558] 9pnet: Could not find request transport: f [ 79.920957][ T5562] FAULT_INJECTION: forcing a failure. [ 79.920957][ T5562] name failslab, interval 1, probability 0, space 0, times 0 [ 79.933630][ T5562] CPU: 1 UID: 0 PID: 5562 Comm: syz.3.708 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 79.933660][ T5562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.933673][ T5562] Call Trace: [ 79.933681][ T5562] [ 79.933689][ T5562] dump_stack_lvl+0xf2/0x150 [ 79.933785][ T5562] dump_stack+0x15/0x1a [ 79.933810][ T5562] should_fail_ex+0x24a/0x260 [ 79.933840][ T5562] should_failslab+0x8f/0xb0 [ 79.933906][ T5562] kmem_cache_alloc_noprof+0x52/0x320 [ 79.933926][ T5562] ? getname_flags+0x81/0x3b0 [ 79.934006][ T5562] getname_flags+0x81/0x3b0 [ 79.934041][ T5562] __x64_sys_symlink+0x33/0x60 [ 79.934135][ T5562] x64_sys_call+0x28b0/0x2dc0 [ 79.934162][ T5562] do_syscall_64+0xc9/0x1c0 [ 79.934198][ T5562] ? clear_bhb_loop+0x55/0xb0 [ 79.934285][ T5562] ? clear_bhb_loop+0x55/0xb0 [ 79.934317][ T5562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.934349][ T5562] RIP: 0033:0x7f6f616ad169 [ 79.934367][ T5562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.934417][ T5562] RSP: 002b:00007f6f5fd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 79.934434][ T5562] RAX: ffffffffffffffda RBX: 00007f6f618c5fa0 RCX: 00007f6f616ad169 [ 79.934445][ T5562] RDX: 0000000000000000 RSI: 00004000000017c0 RDI: 0000000000000000 [ 79.934524][ T5562] RBP: 00007f6f5fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 79.934535][ T5562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.934546][ T5562] R13: 0000000000000000 R14: 00007f6f618c5fa0 R15: 00007ffdebd28318 [ 79.934563][ T5562] [ 80.245009][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.282289][ T5573] loop0: detected capacity change from 0 to 512 [ 80.300987][ T5575] loop5: detected capacity change from 0 to 2048 [ 80.310702][ T5573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.323453][ T5573] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.326746][ T5578] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 80.343805][ T5575] loop5: p2 p3 p7 [ 80.458671][ T5582] loop4: detected capacity change from 0 to 512 [ 80.480120][ T5582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.493144][ T5582] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.160322][ T5593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'. [ 81.242123][ T5595] 9pnet: Could not find request transport: f [ 81.259923][ T5601] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 81.271408][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.464834][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.518434][ T5628] loop4: detected capacity change from 0 to 2048 [ 81.522333][ T3374] hid (null): global environment stack underflow [ 81.531321][ T3374] hid (null): unknown global tag 0xc [ 81.536766][ T3374] hid (null): unknown global tag 0xd [ 81.556962][ T3374] hid-generic 0008:03FF:0005.0001: unknown main item tag 0x2 [ 81.564567][ T3374] hid-generic 0008:03FF:0005.0001: unknown main item tag 0xd [ 81.565015][ T5628] loop4: p2 p3 p7 [ 81.572003][ T3374] hid-generic 0008:03FF:0005.0001: global environment stack underflow [ 81.583974][ T3374] hid-generic 0008:03FF:0005.0001: item 0 2 1 11 parsing failed [ 81.593805][ T3374] hid-generic 0008:03FF:0005.0001: probe with driver hid-generic failed with error -22 [ 81.601806][ T5632] wg1 speed is unknown, defaulting to 1000 [ 81.635107][ T2999] loop4: p2 p3 p7 [ 82.119763][ T5662] tipc: Enabling of bearer rejected, failed to enable media [ 82.361485][ T5679] loop2: detected capacity change from 0 to 4096 [ 82.479610][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 82.479644][ T29] audit: type=1400 audit(2000000017.640:85577): avc: denied { create } for pid=5681 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.550834][ T5679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.654663][ T5684] bond0: (slave bond_slave_0): Releasing backup interface [ 82.741575][ T5684] bond0: (slave bond_slave_1): Releasing backup interface [ 82.780328][ T5684] team0: Port device team_slave_0 removed [ 82.784191][ T29] audit: type=1400 audit(2000000017.941:85578): avc: denied { create } for pid=5689 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.810019][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.823810][ T5684] team0: Port device team_slave_1 removed [ 82.830887][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.838402][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.846773][ T29] audit: type=1400 audit(2000000017.971:85579): avc: denied { bind } for pid=5689 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.852076][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.874306][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.875124][ T29] audit: type=1400 audit(2000000018.041:85580): avc: denied { map } for pid=5689 comm="syz.3.748" path="socket:[11103]" dev="sockfs" ino=11103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.904962][ T29] audit: type=1400 audit(2000000018.041:85581): avc: denied { read accept } for pid=5689 comm="syz.3.748" path="socket:[11103]" dev="sockfs" ino=11103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 82.906610][ T5693] loop3: detected capacity change from 0 to 1024 [ 82.987645][ T5693] loop3: detected capacity change from 0 to 512 [ 82.988414][ T5698] FAULT_INJECTION: forcing a failure. [ 82.988414][ T5698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.007117][ T5698] CPU: 0 UID: 0 PID: 5698 Comm: syz.2.749 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 83.007151][ T5698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.007246][ T5698] Call Trace: [ 83.007254][ T5698] [ 83.007263][ T5698] dump_stack_lvl+0xf2/0x150 [ 83.007295][ T5698] dump_stack+0x15/0x1a [ 83.007315][ T5698] should_fail_ex+0x24a/0x260 [ 83.007349][ T5698] should_fail+0xb/0x10 [ 83.007373][ T5698] should_fail_usercopy+0x1a/0x20 [ 83.007465][ T5698] _copy_from_user+0x1c/0xa0 [ 83.007644][ T5698] ucma_write+0xd4/0x240 [ 83.007678][ T5698] ? __pfx_ucma_write+0x10/0x10 [ 83.007708][ T5698] vfs_write+0x27d/0x920 [ 83.007734][ T5698] ? __fget_files+0x17c/0x1c0 [ 83.007809][ T5698] ksys_write+0xe8/0x1b0 [ 83.007842][ T5698] __x64_sys_write+0x42/0x50 [ 83.007901][ T5698] x64_sys_call+0x287e/0x2dc0 [ 83.007944][ T5698] do_syscall_64+0xc9/0x1c0 [ 83.007975][ T5698] ? clear_bhb_loop+0x55/0xb0 [ 83.008007][ T5698] ? clear_bhb_loop+0x55/0xb0 [ 83.008123][ T5698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.008162][ T5698] RIP: 0033:0x7f196e85d169 [ 83.008177][ T5698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.008194][ T5698] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 83.008230][ T5698] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 83.008242][ T5698] RDX: 0000000000000010 RSI: 0000400000000380 RDI: 0000000000000007 [ 83.008253][ T5698] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.008266][ T5698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.008281][ T5698] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 83.008302][ T5698] [ 83.191599][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 83.199423][ T29] audit: type=1400 audit(2000000018.121:85582): avc: denied { write } for pid=5691 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.200639][ T5690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.748'. [ 83.304105][ T5693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.319328][ T5693] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.334778][ T29] audit: type=1400 audit(2000000018.491:85583): avc: denied { create } for pid=5703 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.369183][ T5690] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.393688][ T5711] vlan2: entered allmulticast mode [ 83.400117][ T29] audit: type=1400 audit(2000000018.501:85584): avc: denied { connect } for pid=5703 comm="syz.4.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.420102][ T29] audit: type=1400 audit(2000000018.501:85585): avc: denied { read } for pid=5703 comm="syz.4.752" path="socket:[11921]" dev="sockfs" ino=11921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 83.443675][ T29] audit: type=1400 audit(2000000018.531:85586): avc: denied { ioctl } for pid=5689 comm="syz.3.748" path="/147/bus/cgroup.controllers" dev="loop3" ino=18 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.486526][ T5718] loop4: detected capacity change from 0 to 512 [ 83.516176][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.556182][ T5718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.578656][ T5718] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.621199][ T5726] netlink: 96 bytes leftover after parsing attributes in process `syz.3.758'. [ 83.645672][ T5728] FAULT_INJECTION: forcing a failure. [ 83.645672][ T5728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.658904][ T5728] CPU: 0 UID: 0 PID: 5728 Comm: syz.2.759 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 83.658936][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.658951][ T5728] Call Trace: [ 83.658959][ T5728] [ 83.658967][ T5728] dump_stack_lvl+0xf2/0x150 [ 83.659008][ T5728] dump_stack+0x15/0x1a [ 83.659034][ T5728] should_fail_ex+0x24a/0x260 [ 83.659140][ T5728] should_fail+0xb/0x10 [ 83.659173][ T5728] should_fail_usercopy+0x1a/0x20 [ 83.659224][ T5728] _copy_from_user+0x1c/0xa0 [ 83.659309][ T5728] __x64_sys_clock_adjtime+0x67/0x1d0 [ 83.659355][ T5728] x64_sys_call+0x21eb/0x2dc0 [ 83.659407][ T5728] do_syscall_64+0xc9/0x1c0 [ 83.659486][ T5728] ? clear_bhb_loop+0x55/0xb0 [ 83.659583][ T5728] ? clear_bhb_loop+0x55/0xb0 [ 83.659611][ T5728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.659644][ T5728] RIP: 0033:0x7f196e85d169 [ 83.659658][ T5728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.659676][ T5728] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 83.659751][ T5728] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 83.659766][ T5728] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.659781][ T5728] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 83.659823][ T5728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.659837][ T5728] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 83.659860][ T5728] [ 83.885611][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.947213][ T5739] wg1 speed is unknown, defaulting to 1000 [ 84.015120][ T5741] loop2: detected capacity change from 0 to 512 [ 84.044363][ T5744] FAULT_INJECTION: forcing a failure. [ 84.044363][ T5744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.057552][ T5744] CPU: 0 UID: 0 PID: 5744 Comm: syz.3.766 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 84.057644][ T5744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.057671][ T5744] Call Trace: [ 84.057678][ T5744] [ 84.057685][ T5744] dump_stack_lvl+0xf2/0x150 [ 84.057748][ T5744] dump_stack+0x15/0x1a [ 84.057774][ T5744] should_fail_ex+0x24a/0x260 [ 84.057809][ T5744] should_fail+0xb/0x10 [ 84.057841][ T5744] should_fail_usercopy+0x1a/0x20 [ 84.057932][ T5744] _copy_from_user+0x1c/0xa0 [ 84.057973][ T5744] memdup_user+0x64/0xc0 [ 84.057999][ T5744] strndup_user+0x68/0xa0 [ 84.058024][ T5744] __se_sys_mount+0x4e/0x2d0 [ 84.058125][ T5744] ? fput+0x1c4/0x200 [ 84.058148][ T5744] ? ksys_write+0x176/0x1b0 [ 84.058177][ T5744] __x64_sys_mount+0x67/0x80 [ 84.058211][ T5744] x64_sys_call+0x2c84/0x2dc0 [ 84.058276][ T5744] do_syscall_64+0xc9/0x1c0 [ 84.058311][ T5744] ? clear_bhb_loop+0x55/0xb0 [ 84.058401][ T5744] ? clear_bhb_loop+0x55/0xb0 [ 84.058431][ T5744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.058457][ T5744] RIP: 0033:0x7f6f616ad169 [ 84.058474][ T5744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.058496][ T5744] RSP: 002b:00007f6f5fd11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.058542][ T5744] RAX: ffffffffffffffda RBX: 00007f6f618c5fa0 RCX: 00007f6f616ad169 [ 84.058556][ T5744] RDX: 0000400000001440 RSI: 0000400000001400 RDI: 00004000000013c0 [ 84.058570][ T5744] RBP: 00007f6f5fd11090 R08: 0000400000000080 R09: 0000000000000000 [ 84.058586][ T5744] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 84.058599][ T5744] R13: 0000000000000000 R14: 00007f6f618c5fa0 R15: 00007ffdebd28318 [ 84.058619][ T5744] [ 84.303152][ T5739] loop4: detected capacity change from 0 to 128 [ 84.310114][ T5746] loop3: detected capacity change from 0 to 128 [ 84.312950][ T5741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.340541][ T5741] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.363878][ T5739] netlink: 'syz.4.762': attribute type 39 has an invalid length. [ 84.476895][ T5759] loop3: detected capacity change from 0 to 2048 [ 84.500206][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.524662][ T5762] FAULT_INJECTION: forcing a failure. [ 84.524662][ T5762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.537889][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.4.772 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 84.537985][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 84.537998][ T5762] Call Trace: [ 84.538003][ T5762] [ 84.538010][ T5762] dump_stack_lvl+0xf2/0x150 [ 84.538038][ T5762] dump_stack+0x15/0x1a [ 84.538060][ T5762] should_fail_ex+0x24a/0x260 [ 84.538144][ T5762] should_fail+0xb/0x10 [ 84.538240][ T5762] should_fail_usercopy+0x1a/0x20 [ 84.538276][ T5762] _copy_from_user+0x1c/0xa0 [ 84.538320][ T5762] move_addr_to_kernel+0x82/0x120 [ 84.538363][ T5762] __sys_connect+0x67/0x1b0 [ 84.538459][ T5762] __x64_sys_connect+0x41/0x50 [ 84.538479][ T5762] x64_sys_call+0x22a7/0x2dc0 [ 84.538514][ T5762] do_syscall_64+0xc9/0x1c0 [ 84.538544][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 84.538642][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 84.538679][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.538709][ T5762] RIP: 0033:0x7fdb6931d169 [ 84.538723][ T5762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.538741][ T5762] RSP: 002b:00007fdb67981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 84.538763][ T5762] RAX: ffffffffffffffda RBX: 00007fdb69535fa0 RCX: 00007fdb6931d169 [ 84.538844][ T5762] RDX: 000000000000001c RSI: 0000400000000040 RDI: 0000000000000003 [ 84.538859][ T5762] RBP: 00007fdb67981090 R08: 0000000000000000 R09: 0000000000000000 [ 84.538911][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.538999][ T5762] R13: 0000000000000000 R14: 00007fdb69535fa0 R15: 00007ffdcfbbf7f8 [ 84.539016][ T5762] [ 84.722368][ T5759] loop3: p2 p3 p7 [ 84.748682][ T5771] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 84.767928][ T2999] loop3: p2 p3 p7 [ 84.836057][ T5774] 9pnet: Could not find request transport: f [ 84.978018][ T5789] loop2: detected capacity change from 0 to 512 [ 84.985078][ T5789] EXT4-fs: Ignoring removed oldalloc option [ 84.994606][ T5789] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.779: Parent and EA inode have the same ino 15 [ 85.007508][ T5789] EXT4-fs (loop2): Remounting filesystem read-only [ 85.014162][ T5789] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.027295][ T5789] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 85.037863][ T5789] EXT4-fs (loop2): 1 orphan inode deleted [ 85.045642][ T5789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.057959][ T5789] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 85.064914][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.266574][ T5800] loop2: detected capacity change from 0 to 512 [ 85.292820][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.296136][ T5804] SELinux: failed to load policy [ 85.308722][ T5800] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.313014][ T5804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32874 sclass=netlink_route_socket pid=5804 comm=syz.5.783 [ 85.337802][ T5804] loop5: detected capacity change from 0 to 512 [ 85.348124][ T5804] ext4: Bad value for 'debug_want_extra_isize' [ 85.401523][ T5808] netlink: 'syz.3.784': attribute type 3 has an invalid length. [ 85.433720][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.464855][ T5808] hub 6-0:1.0: USB hub found [ 85.476187][ T5808] hub 6-0:1.0: 8 ports detected [ 85.565795][ T5817] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.612749][ T5818] loop3: detected capacity change from 0 to 2048 [ 85.644759][ T5818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.690237][ T5818] netem: incorrect ge model size [ 85.695231][ T5818] netem: change failed [ 85.757823][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.798777][ T5827] FAULT_INJECTION: forcing a failure. [ 85.798777][ T5827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.811939][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz.3.792 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 85.811968][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.811980][ T5827] Call Trace: [ 85.811986][ T5827] [ 85.811992][ T5827] dump_stack_lvl+0xf2/0x150 [ 85.812024][ T5827] dump_stack+0x15/0x1a [ 85.812076][ T5827] should_fail_ex+0x24a/0x260 [ 85.812113][ T5827] should_fail+0xb/0x10 [ 85.812155][ T5827] should_fail_usercopy+0x1a/0x20 [ 85.812250][ T5827] _copy_to_user+0x20/0xa0 [ 85.812298][ T5827] simple_read_from_buffer+0xa0/0x110 [ 85.812333][ T5827] proc_fail_nth_read+0xf9/0x140 [ 85.812369][ T5827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.812404][ T5827] vfs_read+0x19b/0x6f0 [ 85.812486][ T5827] ? __rcu_read_unlock+0x4e/0x70 [ 85.812513][ T5827] ? __fget_files+0x17c/0x1c0 [ 85.812555][ T5827] ksys_read+0xe8/0x1b0 [ 85.812586][ T5827] __x64_sys_read+0x42/0x50 [ 85.812636][ T5827] x64_sys_call+0x2874/0x2dc0 [ 85.812669][ T5827] do_syscall_64+0xc9/0x1c0 [ 85.812705][ T5827] ? clear_bhb_loop+0x55/0xb0 [ 85.812738][ T5827] ? clear_bhb_loop+0x55/0xb0 [ 85.812771][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.812851][ T5827] RIP: 0033:0x7f6f616abb7c [ 85.812876][ T5827] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.812898][ T5827] RSP: 002b:00007f6f5fd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.812921][ T5827] RAX: ffffffffffffffda RBX: 00007f6f618c5fa0 RCX: 00007f6f616abb7c [ 85.812935][ T5827] RDX: 000000000000000f RSI: 00007f6f5fd110a0 RDI: 0000000000000004 [ 85.812997][ T5827] RBP: 00007f6f5fd11090 R08: 0000000000000000 R09: 0000000000000000 [ 85.813056][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.813071][ T5827] R13: 0000000000000000 R14: 00007f6f618c5fa0 R15: 00007ffdebd28318 [ 85.813092][ T5827] [ 86.039743][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 86.058261][ T5833] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.114765][ T5836] loop4: detected capacity change from 0 to 512 [ 86.178753][ T5840] FAULT_INJECTION: forcing a failure. [ 86.178753][ T5840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.182288][ T5838] cgroup: fork rejected by pids controller in [ 86.191850][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.5.798 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 86.191874][ T5838] /syz3 [ 86.191911][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.191929][ T5840] Call Trace: [ 86.191940][ T5840] [ 86.191977][ T5840] dump_stack_lvl+0xf2/0x150 [ 86.192027][ T5840] dump_stack+0x15/0x1a [ 86.192053][ T5840] should_fail_ex+0x24a/0x260 [ 86.192089][ T5840] should_fail+0xb/0x10 [ 86.192121][ T5840] should_fail_usercopy+0x1a/0x20 [ 86.192192][ T5840] _copy_from_user+0x1c/0xa0 [ 86.192233][ T5840] copy_msghdr_from_user+0x54/0x2a0 [ 86.192270][ T5840] ? __fget_files+0x17c/0x1c0 [ 86.192384][ T5840] __sys_sendmsg+0x13e/0x230 [ 86.192428][ T5840] __x64_sys_sendmsg+0x46/0x50 [ 86.192535][ T5840] x64_sys_call+0x2734/0x2dc0 [ 86.192568][ T5840] do_syscall_64+0xc9/0x1c0 [ 86.192641][ T5840] ? clear_bhb_loop+0x55/0xb0 [ 86.192732][ T5840] ? clear_bhb_loop+0x55/0xb0 [ 86.192766][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.192799][ T5840] RIP: 0033:0x7f6ad9c7d169 [ 86.192819][ T5840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.192842][ T5840] RSP: 002b:00007f6ad82e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.192898][ T5840] RAX: ffffffffffffffda RBX: 00007f6ad9e95fa0 RCX: 00007f6ad9c7d169 [ 86.192919][ T5840] RDX: 0000000004004040 RSI: 0000400000000040 RDI: 0000000000000004 [ 86.192934][ T5840] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.192949][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.192964][ T5840] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 [ 86.192987][ T5840] [ 86.374500][ T5838] [ 86.406336][ T5848] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 86.407286][ T5836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.427635][ T5848] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.440067][ T5836] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.558950][ T5851] can: request_module (can-proto-5) failed. [ 86.596132][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.617439][ T5858] SELinux: syz.5.805 (5858) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.642936][ T5856] syzkaller0: entered promiscuous mode [ 86.648511][ T5856] syzkaller0: entered allmulticast mode [ 86.658803][ T5858] loop5: detected capacity change from 0 to 512 [ 86.696089][ T5862] IPVS: set_ctl: invalid protocol: 0 172.20.20.59:20003 [ 86.704306][ T5858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.719527][ T5858] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.802528][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.814535][ T5870] FAULT_INJECTION: forcing a failure. [ 86.814535][ T5870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.827855][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.2.808 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 86.827894][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.827909][ T5870] Call Trace: [ 86.827916][ T5870] [ 86.827925][ T5870] dump_stack_lvl+0xf2/0x150 [ 86.827963][ T5870] dump_stack+0x15/0x1a [ 86.827988][ T5870] should_fail_ex+0x24a/0x260 [ 86.828070][ T5870] should_fail+0xb/0x10 [ 86.828102][ T5870] should_fail_usercopy+0x1a/0x20 [ 86.828138][ T5870] _copy_from_user+0x1c/0xa0 [ 86.828212][ T5870] ucma_write+0xd4/0x240 [ 86.828243][ T5870] ? __pfx_ucma_write+0x10/0x10 [ 86.828360][ T5870] vfs_write+0x27d/0x920 [ 86.828386][ T5870] ? __fget_files+0x17c/0x1c0 [ 86.828422][ T5870] ksys_write+0xe8/0x1b0 [ 86.828454][ T5870] __x64_sys_write+0x42/0x50 [ 86.828548][ T5870] x64_sys_call+0x287e/0x2dc0 [ 86.828575][ T5870] do_syscall_64+0xc9/0x1c0 [ 86.828604][ T5870] ? clear_bhb_loop+0x55/0xb0 [ 86.828636][ T5870] ? clear_bhb_loop+0x55/0xb0 [ 86.828671][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.828712][ T5870] RIP: 0033:0x7f196e85d169 [ 86.828730][ T5870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.828751][ T5870] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.828774][ T5870] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 86.828788][ T5870] RDX: 0000000000000010 RSI: 0000400000000380 RDI: 0000000000000006 [ 86.828865][ T5870] RBP: 00007f196cec1090 R08: 0000000000000000 R09: 0000000000000000 [ 86.828880][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.828894][ T5870] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 86.828914][ T5870] [ 86.857607][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 86.904181][ T5878] loop2: detected capacity change from 0 to 512 [ 86.970322][ T5871] wg1 speed is unknown, defaulting to 1000 [ 86.991691][ T5874] loop4: detected capacity change from 0 to 512 [ 87.052011][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.074448][ T5878] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.075019][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.097350][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.810: corrupted inode contents [ 87.110461][ T5874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.123264][ T5874] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.127018][ T5878] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.810: mark_inode_dirty error [ 87.140936][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.157388][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 87.171353][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.810: corrupted inode contents [ 87.221672][ T5878] netlink: 1836 bytes leftover after parsing attributes in process `syz.2.810'. [ 87.230848][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 87.252156][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.266104][ T5898] netlink: 256 bytes leftover after parsing attributes in process `syz.5.811'. [ 87.281085][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.810: corrupted inode contents [ 87.305253][ T5898] loop5: detected capacity change from 0 to 512 [ 87.313430][ T5878] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.810: mark_inode_dirty error [ 87.329504][ T5898] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.334769][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.810: corrupted inode contents [ 87.351654][ T5878] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.810: mark_inode_dirty error [ 87.363074][ T5898] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 87.371435][ T5898] EXT4-fs (loop5): orphan cleanup on readonly fs [ 87.378106][ T5898] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.811: bg 0: block 361: padding at end of block bitmap is not set [ 87.394088][ T5898] EXT4-fs (loop5): Remounting filesystem read-only [ 87.401304][ T5878] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.810: corrupted inode contents [ 87.402256][ T5898] EXT4-fs (loop5): 1 truncate cleaned up [ 87.419252][ T5898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 87.431475][ T5898] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 87.432777][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.438469][ T5898] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 87.455113][ T5878] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.810: mark_inode_dirty error [ 87.473396][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.480714][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.489224][ T5871] bridge_slave_0: entered allmulticast mode [ 87.495806][ T5871] bridge_slave_0: entered promiscuous mode [ 87.502925][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.510031][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.521758][ T5871] bridge_slave_1: entered allmulticast mode [ 87.530277][ T5871] bridge_slave_1: entered promiscuous mode [ 87.552125][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.582221][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.595624][ T28] bridge_slave_1: left allmulticast mode [ 87.601342][ T28] bridge_slave_1: left promiscuous mode [ 87.607008][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.615423][ T28] bridge_slave_0: left allmulticast mode [ 87.621205][ T28] bridge_slave_0: left promiscuous mode [ 87.626973][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.739922][ T28] team0: Port device geneve1 removed [ 87.747619][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.761975][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.773707][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 87.773723][ T29] audit: type=1400 audit(2000000022.931:85914): avc: denied { ioctl } for pid=5902 comm="syz.5.814" path="socket:[12613]" dev="sockfs" ino=12613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.805327][ T29] audit: type=1400 audit(2000000022.931:85915): avc: denied { bind } for pid=5902 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.824627][ T29] audit: type=1400 audit(2000000022.931:85916): avc: denied { write } for pid=5902 comm="syz.5.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.857739][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.875358][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.888147][ T5909] IPv4: Oversized IP packet from 127.202.26.0 [ 87.896256][ T28] bond0 (unregistering): Released all slaves [ 87.926610][ T5903] netlink: 'syz.5.814': attribute type 29 has an invalid length. [ 87.937344][ T5871] team0: Port device team_slave_0 added [ 87.947298][ T5910] loop2: detected capacity change from 0 to 512 [ 87.953205][ T5871] team0: Port device team_slave_1 added [ 87.985698][ T29] audit: type=1326 audit(2000000023.141:85917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.009924][ T29] audit: type=1326 audit(2000000023.141:85918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.033408][ T29] audit: type=1326 audit(2000000023.141:85919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.056888][ T29] audit: type=1326 audit(2000000023.141:85920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.080274][ T29] audit: type=1326 audit(2000000023.141:85921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.103808][ T29] audit: type=1326 audit(2000000023.141:85922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.108225][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.127332][ T29] audit: type=1326 audit(2000000023.141:85923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb6931d169 code=0x7ffc0000 [ 88.163996][ T5910] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.167956][ T5914] netlink: 'syz.5.814': attribute type 29 has an invalid length. [ 88.185160][ T28] hsr_slave_0: left promiscuous mode [ 88.191438][ T28] hsr_slave_1: left promiscuous mode [ 88.197191][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.204725][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.213158][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.220725][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.231558][ T28] veth1_macvtap: left promiscuous mode [ 88.237081][ T28] veth0_macvtap: left promiscuous mode [ 88.242658][ T28] veth1_vlan: left promiscuous mode [ 88.248380][ T28] veth0_vlan: left promiscuous mode [ 88.260485][ T5932] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 88.322044][ T28] team0 (unregistering): Port device team_slave_1 removed [ 88.331491][ T28] team0 (unregistering): Port device team_slave_0 removed [ 88.362522][ T5931] netlink: 'syz.4.816': attribute type 21 has an invalid length. [ 88.375808][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.382874][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.408815][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.421101][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.428152][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.432468][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.454075][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.494648][ T5934] loop4: detected capacity change from 0 to 512 [ 88.500111][ T5871] hsr_slave_0: entered promiscuous mode [ 88.512087][ T5934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.514780][ T5871] hsr_slave_1: entered promiscuous mode [ 88.532466][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.540495][ T5871] Cannot create hsr debugfs directory [ 88.542641][ T5934] EXT4-fs (loop4): 1 truncate cleaned up [ 88.555140][ T5934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.583728][ T5941] FAULT_INJECTION: forcing a failure. [ 88.583728][ T5941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.597042][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.2.821 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 88.597070][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 88.597085][ T5941] Call Trace: [ 88.597092][ T5941] [ 88.597101][ T5941] dump_stack_lvl+0xf2/0x150 [ 88.597277][ T5941] dump_stack+0x15/0x1a [ 88.597300][ T5941] should_fail_ex+0x24a/0x260 [ 88.597333][ T5941] should_fail+0xb/0x10 [ 88.597363][ T5941] should_fail_usercopy+0x1a/0x20 [ 88.597436][ T5941] _copy_from_user+0x1c/0xa0 [ 88.597478][ T5941] memdup_sockptr_noprof+0x86/0x110 [ 88.597582][ T5941] do_ip_setsockopt+0x1c5f/0x2340 [ 88.597632][ T5941] ip_setsockopt+0x63/0x100 [ 88.597715][ T5941] udp_setsockopt+0x95/0xb0 [ 88.597741][ T5941] sock_common_setsockopt+0x64/0x80 [ 88.597779][ T5941] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 88.597818][ T5941] __sys_setsockopt+0x187/0x200 [ 88.597923][ T5941] __x64_sys_setsockopt+0x66/0x80 [ 88.597953][ T5941] x64_sys_call+0x282e/0x2dc0 [ 88.597987][ T5941] do_syscall_64+0xc9/0x1c0 [ 88.598034][ T5941] ? clear_bhb_loop+0x55/0xb0 [ 88.598189][ T5941] ? clear_bhb_loop+0x55/0xb0 [ 88.598263][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.598288][ T5941] RIP: 0033:0x7f196e85d169 [ 88.598304][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.598326][ T5941] RSP: 002b:00007f196cec1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 88.598347][ T5941] RAX: ffffffffffffffda RBX: 00007f196ea75fa0 RCX: 00007f196e85d169 [ 88.598362][ T5941] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 88.598376][ T5941] RBP: 00007f196cec1090 R08: 0000000000000057 R09: 0000000000000000 [ 88.598451][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.598465][ T5941] R13: 0000000000000000 R14: 00007f196ea75fa0 R15: 00007ffd4305d8d8 [ 88.598486][ T5941] [ 88.859340][ T5949] Zero length message leads to an empty skb [ 88.943456][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.820'. [ 88.954736][ T28] IPVS: stop unused estimator thread 0... [ 88.964845][ T5962] netlink: 332 bytes leftover after parsing attributes in process `syz.0.825'. [ 88.978119][ T5957] loop5: detected capacity change from 0 to 512 [ 88.990289][ T5957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.025610][ T5957] EXT4-fs (loop5): 1 orphan inode deleted [ 89.036279][ T5957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.051174][ T5957] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.055791][ T5969] netlink: 56 bytes leftover after parsing attributes in process `syz.0.826'. [ 89.062832][ T3390] EXT4-fs error (device loop5): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 89.146761][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.237779][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.262941][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.274313][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.5.828'. [ 89.274689][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.358911][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.383069][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.449695][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.484926][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.497618][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.504802][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.539983][ T5871] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.550458][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.563235][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.570374][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.632063][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.673808][ T6045] FAULT_INJECTION: forcing a failure. [ 89.673808][ T6045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.687030][ T6045] CPU: 1 UID: 0 PID: 6045 Comm: syz.5.835 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 89.687157][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.687170][ T6045] Call Trace: [ 89.687218][ T6045] [ 89.687227][ T6045] dump_stack_lvl+0xf2/0x150 [ 89.687260][ T6045] dump_stack+0x15/0x1a [ 89.687286][ T6045] should_fail_ex+0x24a/0x260 [ 89.687320][ T6045] should_fail+0xb/0x10 [ 89.687380][ T6045] should_fail_usercopy+0x1a/0x20 [ 89.687431][ T6045] _copy_to_user+0x20/0xa0 [ 89.687469][ T6045] simple_read_from_buffer+0xa0/0x110 [ 89.687500][ T6045] proc_fail_nth_read+0xf9/0x140 [ 89.687575][ T6045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.687620][ T6045] vfs_read+0x19b/0x6f0 [ 89.687647][ T6045] ? __rcu_read_unlock+0x4e/0x70 [ 89.687670][ T6045] ? __fget_files+0x17c/0x1c0 [ 89.687702][ T6045] ksys_read+0xe8/0x1b0 [ 89.687733][ T6045] __x64_sys_read+0x42/0x50 [ 89.687786][ T6045] x64_sys_call+0x2874/0x2dc0 [ 89.687867][ T6045] do_syscall_64+0xc9/0x1c0 [ 89.687900][ T6045] ? clear_bhb_loop+0x55/0xb0 [ 89.687932][ T6045] ? clear_bhb_loop+0x55/0xb0 [ 89.687964][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.688030][ T6045] RIP: 0033:0x7f6ad9c7bb7c [ 89.688088][ T6045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.688106][ T6045] RSP: 002b:00007f6ad82e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.688128][ T6045] RAX: ffffffffffffffda RBX: 00007f6ad9e95fa0 RCX: 00007f6ad9c7bb7c [ 89.688205][ T6045] RDX: 000000000000000f RSI: 00007f6ad82e70a0 RDI: 0000000000000007 [ 89.688219][ T6045] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.688283][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.688294][ T6045] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 [ 89.688312][ T6045] [ 89.883768][ T5871] veth0_vlan: entered promiscuous mode [ 89.894589][ T5871] veth1_vlan: entered promiscuous mode [ 89.932322][ T5871] veth0_macvtap: entered promiscuous mode [ 89.938937][ T6050] loop2: detected capacity change from 0 to 1024 [ 89.943503][ T6052] FAULT_INJECTION: forcing a failure. [ 89.943503][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 89.958067][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.5.837 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 89.958093][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.958104][ T6052] Call Trace: [ 89.958109][ T6052] [ 89.958117][ T6052] dump_stack_lvl+0xf2/0x150 [ 89.958145][ T6052] dump_stack+0x15/0x1a [ 89.958169][ T6052] should_fail_ex+0x24a/0x260 [ 89.958196][ T6052] ? audit_log_d_path+0x8e/0x150 [ 89.958269][ T6052] should_failslab+0x8f/0xb0 [ 89.958311][ T6052] __kmalloc_cache_noprof+0x4e/0x320 [ 89.958339][ T6052] audit_log_d_path+0x8e/0x150 [ 89.958449][ T6052] audit_log_d_path_exe+0x42/0x70 [ 89.958488][ T6052] audit_log_task+0x1ec/0x250 [ 89.958591][ T6052] audit_seccomp+0x68/0x130 [ 89.958626][ T6052] __seccomp_filter+0x6fa/0x1180 [ 89.958654][ T6052] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.958691][ T6052] ? vfs_write+0x644/0x920 [ 89.958801][ T6052] __secure_computing+0x9f/0x1c0 [ 89.958829][ T6052] syscall_trace_enter+0xd1/0x1f0 [ 89.958857][ T6052] ? fpregs_assert_state_consistent+0x83/0xa0 [ 89.958881][ T6052] do_syscall_64+0xaa/0x1c0 [ 89.958961][ T6052] ? clear_bhb_loop+0x55/0xb0 [ 89.959009][ T6052] ? clear_bhb_loop+0x55/0xb0 [ 89.959042][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.959075][ T6052] RIP: 0033:0x7f6ad9c7d169 [ 89.959157][ T6052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.959175][ T6052] RSP: 002b:00007f6ad82e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 89.959197][ T6052] RAX: ffffffffffffffda RBX: 00007f6ad9e95fa0 RCX: 00007f6ad9c7d169 [ 89.959210][ T6052] RDX: 0000000000000000 RSI: 00004000000002c0 RDI: 0000000000000000 [ 89.959221][ T6052] RBP: 00007f6ad82e7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.959232][ T6052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.959243][ T6052] R13: 0000000000000000 R14: 00007f6ad9e95fa0 R15: 00007ffc29bcf2f8 [ 89.959261][ T6052] [ 89.960798][ T5871] veth1_macvtap: entered promiscuous mode [ 89.991098][ T6050] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 89.999181][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.159224][ T6050] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 90.162160][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.162180][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.169956][ T6050] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.178227][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.233347][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.243801][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.262415][ T6050] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 90.272375][ T6050] EXT4-fs (loop2): Remounting filesystem read-only [ 90.280557][ T6050] EXT4-fs (loop2): 1 orphan inode deleted [ 90.286860][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.300942][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.308463][ T6050] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 90.321328][ T6050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.331406][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.342010][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.351881][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.362351][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.372209][ T5871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.382741][ T5871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.483365][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.497880][ T5871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.506696][ T5871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.515452][ T5871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.524289][ T5871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.823208][ T6114] loop2: detected capacity change from 0 to 2048 [ 90.890650][ T6114] loop2: p2 p3 p7 [ 91.030069][ T6125] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 91.037472][ T8] IPVS: starting estimator thread 0... [ 91.075269][ T6134] loop5: detected capacity change from 0 to 512 [ 91.082968][ T6134] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 91.094001][ T6134] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.855: invalid block [ 91.106136][ T6134] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.855: invalid indirect mapped block 4294967295 (level 1) [ 91.122152][ T6134] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.855: invalid indirect mapped block 4294967295 (level 1) [ 91.128030][ T6130] IPVS: using max 2304 ests per chain, 115200 per kthread [ 91.136869][ T6134] EXT4-fs (loop5): 2 truncates cleaned up [ 91.149792][ T6134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.201109][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.225867][ T6142] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 91.243131][ T6142] loop5: detected capacity change from 0 to 512 [ 91.260701][ T6142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.273526][ T6142] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.331365][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.372271][ T6148] execmem: unable to allocate memory [ 91.374115][ T6149] loop5: detected capacity change from 0 to 512 [ 91.391607][ T6151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6151 comm=syz.4.860 [ 91.404019][ T6151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6151 comm=syz.4.860 [ 91.425137][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.445706][ T6149] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.476386][ T6157] __nla_validate_parse: 4 callbacks suppressed [ 91.476406][ T6157] netlink: 56 bytes leftover after parsing attributes in process `syz.0.862'. [ 91.678664][ T6165] x_tables: duplicate underflow at hook 2 [ 91.678730][ T6166] x_tables: duplicate underflow at hook 2 [ 91.732412][ T6166] Invalid ELF header magic: != ELF [ 91.753316][ T6165] loop2: detected capacity change from 0 to 512 [ 91.768091][ T6165] EXT4-fs: Mount option(s) incompatible with ext2 [ 91.882658][ T6178] lo speed is unknown, defaulting to 1000 [ 91.888528][ T6178] lo speed is unknown, defaulting to 1000 [ 91.894459][ T6178] lo speed is unknown, defaulting to 1000 [ 91.905291][ T6178] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.920828][ T6180] loop3: detected capacity change from 0 to 512 [ 91.922365][ T6178] lo speed is unknown, defaulting to 1000 [ 91.933706][ T6180] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.933772][ T6178] lo speed is unknown, defaulting to 1000 [ 91.933860][ T6180] ================================================================== [ 91.933899][ T6180] BUG: KCSAN: data-race in data_push_tail / string [ 91.933945][ T6180] [ 91.933952][ T6180] write to 0xffffffff88be9542 of 1 bytes by task 6178 on cpu 0: [ 91.933969][ T6180] string+0x17f/0x210 [ 91.933988][ T6180] vsnprintf+0x537/0x890 [ 91.934008][ T6180] vscnprintf+0x42/0x90 [ 91.934033][ T6180] printk_sprint+0x30/0x2d0 [ 91.934056][ T6180] vprintk_store+0x589/0x870 [ 91.934070][ T6178] lo speed is unknown, defaulting to 1000 [ 91.934079][ T6180] vprintk_emit+0x168/0x690 [ 91.934104][ T6180] vprintk_default+0x26/0x30 [ 91.934128][ T6180] vprintk+0x1d/0x30 [ 91.934157][ T6180] _printk+0x7a/0xa0 [ 91.934183][ T6180] ib_get_eth_speed+0x322/0x4a0 [ 91.934207][ T6180] siw_query_port+0x38/0x2c0 [ 91.934233][ T6180] ib_query_port+0x36a/0x3b0 [ 91.934265][ T6180] ib_setup_port_attrs+0x148/0x1340 [ 91.934307][ T6180] add_one_compat_dev+0x2e6/0x3e0 [ 91.934342][ T6180] enable_device_and_get+0x1cb/0x260 [ 91.934366][ T6180] ib_register_device+0xae2/0xc70 [ 91.934388][ T6180] siw_newlink+0x680/0x6d0 [ 91.934438][ T6180] nldev_newlink+0x367/0x3f0 [ 91.934471][ T6180] rdma_nl_rcv+0x46f/0x5a0 [ 91.934491][ T6178] lo speed is unknown, defaulting to 1000 [ 91.934494][ T6180] netlink_unicast+0x599/0x670 [ 91.934530][ T6180] netlink_sendmsg+0x5cc/0x6e0 [ 91.934570][ T6180] __sock_sendmsg+0x140/0x180 [ 91.934608][ T6180] ____sys_sendmsg+0x326/0x4b0 [ 91.934638][ T6180] __sys_sendmsg+0x19d/0x230 [ 91.934667][ T6180] __x64_sys_sendmsg+0x46/0x50 [ 91.934696][ T6180] x64_sys_call+0x2734/0x2dc0 [ 91.934723][ T6180] do_syscall_64+0xc9/0x1c0 [ 91.934748][ T6178] lo speed is unknown, defaulting to 1000 [ 91.934752][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.934788][ T6180] [ 91.934796][ T6180] read to 0xffffffff88be9540 of 8 bytes by task 6180 on cpu 1: [ 91.934812][ T6180] data_push_tail+0x102/0x430 [ 91.934843][ T6180] data_alloc+0xbe/0x2c0 [ 91.934872][ T6180] prb_reserve+0x85e/0xb60 [ 91.934910][ T6180] vprintk_store+0x558/0x870 [ 91.934933][ T6180] vprintk_emit+0x168/0x690 [ 91.934952][ T6180] vprintk_default+0x26/0x30 [ 91.934988][ T6180] vprintk+0x1d/0x30 [ 91.935034][ T6180] _printk+0x7a/0xa0 [ 91.935059][ T6180] __ext4_msg+0x134/0x1a0 [ 91.935091][ T6180] ext4_check_opt_consistency+0xa78/0xa80 [ 91.935131][ T6180] ext4_fill_super+0x1d48/0x3630 [ 91.935172][ T6180] get_tree_bdev_flags+0x29f/0x310 [ 91.935208][ T6180] get_tree_bdev+0x1f/0x30 [ 91.935237][ T6180] ext4_get_tree+0x1c/0x30 [ 91.935265][ T6180] vfs_get_tree+0x56/0x1e0 [ 91.935291][ T6180] do_new_mount+0x227/0x690 [ 91.935322][ T6180] path_mount+0x49b/0xb30 [ 91.935354][ T6180] __se_sys_mount+0x27f/0x2d0 [ 91.935389][ T6180] __x64_sys_mount+0x67/0x80 [ 91.935421][ T6180] x64_sys_call+0x2c84/0x2dc0 [ 91.935515][ T6180] do_syscall_64+0xc9/0x1c0 [ 91.935548][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.935576][ T6180] [ 91.935583][ T6180] value changed: 0x00000000ffffe5a7 -> 0x00000000ffff3401 [ 91.935603][ T6180] [ 91.935609][ T6180] Reported by Kernel Concurrency Sanitizer on: [ 91.935619][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.3.870 Not tainted 6.14.0-rc3-syzkaller-00213-g8a61cb6e150e #0 [ 91.935645][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 91.935660][ T6180] ================================================================== [ 92.282770][ T3782] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.291741][ T6180] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.870: casefold flag without casefold feature [ 92.292236][ T6180] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.870: couldn't read orphan inode 15 (err -117) [ 92.318550][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.769346][ T5871] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.