last executing test programs: 5m13.328037939s ago: executing program 32 (id=238): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 4m24.138749147s ago: executing program 33 (id=1174): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3m51.407622656s ago: executing program 34 (id=1986): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x20002, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x1, 0x1, 0x2, 0xfffffffffffffff2}) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4fc, &(0x7f0000000540)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r6, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x2000006}], 0x1, 0x2002, 0x0) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) unshare(0x62040200) readv(r6, &(0x7f0000000580)=[{&(0x7f0000000200)=""/148, 0x94}, {0x0}], 0x2) recvmmsg(r0, &(0x7f0000001c00), 0x0, 0x100, 0x0) 3m50.098844171s ago: executing program 35 (id=2003): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) unshare(0x20000400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 3m39.977213444s ago: executing program 36 (id=2201): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) iopl(0x3) 3m38.391225478s ago: executing program 37 (id=2227): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49224a7e, @void, @value}, 0x94) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x20, 0x19, 0x1e5, &(0x7f0000000b00)="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"}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000340)={&(0x7f0000000500)=""/123, 0x7b, 0x0, &(0x7f0000000640)=""/113, 0x71}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x160) utimes(&(0x7f0000000180)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x1) fcntl$setlease(r7, 0x400, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, 0xffffffff, 0xffffffff, 'bond0\x00', 'syzkaller0\x00', {}, {}, 0x5c, 0x2}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xa}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0xffff}}}}, {{@ip={@loopback, @multicast1, 0xffffff00, 0x0, 'tunl0\x00', 'team0\x00', {0xff}, {0xff}, 0x8, 0x3, 0xa}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8000, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'netdevsim0\x00', {0x1}, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x41, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800090300000000000000000a000000000000040000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x1000c840) socket(0x2b, 0x1, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) r9 = socket$inet(0x2, 0x3, 0x9) sendmmsg$sock(r9, &(0x7f0000001280)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0xffffffff, 0x1, {0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, 0x5a5}}}, 0x80, 0x0}}], 0x1, 0x20000081) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 3m32.467847146s ago: executing program 38 (id=2344): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0) 3m25.264285699s ago: executing program 39 (id=2461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c810}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setreuid(0xee00, 0x0) 3m24.244002625s ago: executing program 40 (id=2479): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7934, 0x0, &(0x7f00000000c0), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f0, 0x20a, 0x278, 0x2f0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [], 'veth1_to_hsr\x00', 'wg0\x00', {}, {}, 0x1d, 0x0, 0x0, 0x1a}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3b1, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@dellinkprop={0x0, 0x6d, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_EVENT={0x0, 0x2c, 0x8}, @IFLA_GSO_MAX_SIZE={0x0, 0x29, 0xc21d}, @IFLA_GROUP={0x0, 0x1b, 0xfffffffe}, @IFLA_ALT_IFNAME={0x0, 0x35, 'veth1_vlan\x00'}, @IFLA_GSO_MAX_SEGS={0x0, 0x28, 0x48a}, @IFLA_PORT_SELF={0x0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x0, 0x2, 'wg0\x00'}, @IFLA_PORT_VF={0x0, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "61da1d4cbcf83925df4422540a80999f"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'syz0\x0088\xe4\x9a^\xb1\xb1\x8d\x1eyV\xdc\x9enE\x91\xb6\x06\xb2\xb2\x8fB\x99\a\x16\xc2\xb4\x99\xbcZ#AP\xc4\xc7\x04rr\xcc\x05\xe4g^<\x9e\xc4\xaaV~\f\xf78\xb2nw<\x8a\xdcG\xdeN\x88y;\xba\xa9\x91_\x10\x81hy\\\x88C\x98\xd7~\xdb\xc7\xca\xc5\xe0-\"i\b7*\xa4\xc2\x9f-\x9dG\xcc\r\xb8)\x10q\xb6\x96\xcb\"\x11\xad\x16 +\xc0\xb2\xe6F\x12\x9ed\x17h-@{u\x91'}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "0eb609e0aba981428ed2bb8d9f1b565c"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'tcpmss\x00\xfb\xea\xda\x94\x81\xf2EA\xa9\x1d\xc2\xce\x8f\x89\xa1l\x15\f\x17\xa7\x15\xbb\xe37\xd2+\xc0\xefE\xaf@\xe4wUb\xf1\xe1\x10<\\\x8e\x9fS\xbd=\x80f\xa25\xe0F\xc4\xd2\x1ap$\x8e\xbe4\xbb\xc4\xe9\x01\x19\xb9HT %=e\x96\x02~\x93]\x1b%\xb4\xd5h\xdc\xeb\x8c\xd8\xcb\xd3\x1b\x92\t\xe5\x91#\xd6\x83b\xa2\xb5=\xea@\x92\xf0\x807\xb4\x81\xa1/\xce\x1d\xb2\xaf\bu\x9au\xcc\xfb>u\"\x8b\xf0\x04r\xe6\xa9\xdf\x89 7s\xcd\x80\xa3\x81\xadpG\xebI\b\xd9\xd0\xa1\xf0O\xf7\x03\xdfV\xff\xe6\x85T\x04,l\xa3\xd7\xf2\x86x\xedH\xa5k\x10\x91~\x93\xaam\x97\x8f#\xab.=~\xd3/\xa3\xdb\xf1\xb8\xc20\xdbM\xd4\xaf\x02y\'\xf9\xb3\x94\t>\xa4\rPk\xbb\xf7\'BD\xaf\xe7\x11\x13\xfcS\xe7\xaf'}]}, @IFLA_LINK_NETNSID={0x0, 0x25, 0x3}]}, 0x4}}, 0x80) syz_usbip_server_init(0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 3m17.326492609s ago: executing program 41 (id=2589): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x60}}, 0x0) (fail_nth: 5) 3m12.846608183s ago: executing program 42 (id=2639): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005400d95d0eb124ba7c97000007000000513444c83347ec6ca2a1151a9a23de3e1b4bc5cb56c8a2582999a8d4a54c0c6f7e96f082f87910cd5b29f227bbae00000000c8d2ee7516aac720747ab2e1bdff7b1942a443c0c2118da39ca5f179752860fc553998a4c48506a9c84c2acc55ecdd790966045f0f144b46868edd00"/142, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000140021010000e0ffffff000023000000", @ANYRES32=0x0, @ANYBLOB="140002"], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)) 3m9.534637291s ago: executing program 2 (id=2708): syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40f9, 0x48bf14886e1c572a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3m9.511522881s ago: executing program 2 (id=2711): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0xa0}, 0x4004881) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3m9.481315711s ago: executing program 2 (id=2712): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') pread64(r1, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) 3m9.46373329s ago: executing program 2 (id=2713): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) set_mempolicy_home_node(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0) 3m9.4026852s ago: executing program 2 (id=2714): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='kyber_throttled\x00', r0, 0x0, 0x4}, 0x18) unshare(0x66000080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x77359400}}, &(0x7f0000000580)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @remote, 0x2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='fsi_master_gpio_cmd_abs_addr\x00', r6, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r11, 0x0, 0x0) fsetxattr(r8, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0x1a, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"a2e3ad214fc752f9502547f70e06d038e7ff7fc6e5539b3471078b089b3b083848090890e0878f0e1ac6e7049b3372959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31360d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8a92fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18834dd73583df292892448039ef799cfaf0bbecdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b8dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00fd104d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff752613d135273ea8e75f22f216c69c990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443eab40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f22b625d64931cd4ffe6738dd7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a23dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c848a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333aed0418c0b44412d041259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b45030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475af3d3060eac38dcaea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3m8.990097649s ago: executing program 2 (id=2720): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000780)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fallocate(r0, 0x3, 0x0, 0x10000) 3m7.557213474s ago: executing program 43 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, 0x0, 0x0) 3m3.747834929s ago: executing program 9 (id=2799): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x69cea65c11ee4194, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x9328, 0xfffffffe, 0x3, 0x1, 0x4, 0x1088f109, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0xb, 0x11, 0xffffffffffffffff, 0x2aab9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x800000000000000, 0xc002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0x2, @time={0x1, 0x200}, {0x0, 0x1}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @time}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x40, 0xfffffff9}, {}, {}, @raw32={[0x0, 0x0, 0x200000]}}, {0x0, 0x0, 0x0, 0x0, @time={0xf, 0xa}, {}, {0x0, 0xba}, @ext={0x0, 0x0}}], 0x38) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) chdir(&(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 3m3.618613699s ago: executing program 9 (id=2801): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000e3ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='kyber_throttled\x00', r0, 0x0, 0x4}, 0x18) unshare(0x66000080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x77359400}}, &(0x7f0000000580)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @remote, 0x2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='fsi_master_gpio_cmd_abs_addr\x00', r6, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0x1a, 0x0) 3m2.760222976s ago: executing program 6 (id=2812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') pread64(r2, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) 3m2.712186666s ago: executing program 9 (id=2814): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000e3ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15u\"\x8b\xf0\x04r\xe6\xa9\xdf\x89 7s\xcd\x80\xa3\x81\xadpG\xebI\b\xd9\xd0\xa1\xf0O\xf7\x03\xdfV\xff\xe6\x85T\x04,l\xa3\xd7\xf2\x86x\xedH\xa5k\x10\x91~\x93\xaam\x97\x8f#\xab.=~\xd3/\xa3\xdb\xf1\xb8\xc20\xdbM\xd4\xaf\x02y\'\xf9\xb3\x94\t>\xa4\rPk\xbb\xf7\'BD\xaf\xe7\x11\x13\xfcS\xe7\xaf'}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x200}}, 0x80) syz_usbip_server_init(0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x202, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00002abd7000fbdbdf25204001db"], 0x14}, 0x1, 0x0, 0x0, 0x140}, 0x20000004) 3m2.041865143s ago: executing program 5 (id=2820): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0xa0}, 0x4004881) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3m2.003309783s ago: executing program 5 (id=2821): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xffffffffffffffc8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) getpriority(0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = gettid() kcmp(r7, r6, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0xfffffe03, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 3m1.791189882s ago: executing program 5 (id=2822): syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40f9, 0x48bf14886e1c572a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000000000}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3m1.726819632s ago: executing program 6 (id=2823): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 3m1.726321322s ago: executing program 5 (id=2824): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x69cea65c11ee4194, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x9328, 0xfffffffe, 0x3, 0x1, 0x4, 0x1088f109, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0xb, 0x11, 0xffffffffffffffff, 0x2aab9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x800000000000000, 0xc002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0x2, @time={0x1, 0x200}, {0x0, 0x1}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @time}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x40, 0xfffffff9}, {}, {}, @raw32={[0x0, 0x0, 0x200000]}}, {0x0, 0x0, 0x0, 0x0, @time={0xf, 0xa}, {}, {0x0, 0xba}, @ext={0x0, 0x0}}], 0x38) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000df0000000000000000fba6f7919dcc582a1df1fa18e074b729e500af495b0a936b0c8735ad450dde7ef1d8e8463f514a3def44497be703bb98f8655ea0daae6db533f9dfa45924517403f808af8cf7456b3075d55f239908279b87b729c329231d9707bacee437c709a81fb81180bf41ee2972bccb99bd0e2821da783bb1813232b8999b20789318a44703ea0a9f5c1fb4f06d99f181c38c055e1765b2799a95022971ed13cad5825284295bed0af818179955a13ce4a5c1ba60772b066a1ce1db259398e82c1891f31333bae4d7826660be927ed3ba190cfff9b50be724721b14652aff99393f9d77829e9a6f12c3844495e42ff577985d2b1b03"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) chdir(&(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 3m1.654970382s ago: executing program 5 (id=2825): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='kyber_throttled\x00', r0, 0x0, 0x4}, 0x18) unshare(0x66000080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x77359400}}, &(0x7f0000000580)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @remote, 0x2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='fsi_master_gpio_cmd_abs_addr\x00', r6, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0x1a, 0x0) 3m1.561940141s ago: executing program 6 (id=2827): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3b, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) set_mempolicy(0x3, 0x0, 0x6) 3m1.368943711s ago: executing program 6 (id=2830): pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='kyber_throttled\x00', r0, 0x0, 0x4}, 0x18) unshare(0x66000080) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'bond_slave_0\x00', {0x2, 0x0, @multicast2}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000540)={{}, {0x77359400}}, &(0x7f0000000580)) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000340)={{0xa, 0x0, 0x0, @remote, 0x2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x0, 0x0, 0x7}, {0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x10000}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000440)='fsi_master_gpio_cmd_abs_addr\x00', r6, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r10, 0x0, 0x0) fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0x1a, 0x0) 3m1.073740889s ago: executing program 5 (id=2831): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0xa0}, 0x4004881) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 3m0.677814188s ago: executing program 6 (id=2833): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0xcb3, 0x1000}, &(0x7f00000000c0), 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f0, 0x20a, 0x278, 0x2f0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [], 'veth1_to_hsr\x00', 'wg0\x00', {}, {}, 0x1d, 0x0, 0x0, 0x1a}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3b1, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014200000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@dellinkprop={0x200, 0x6d, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_EVENT={0x8, 0x2c, 0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xc21d}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffe}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x48a}, @IFLA_PORT_SELF={0x1a4, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "61da1d4cbcf83925df4422540a80999f"}, @IFLA_PORT_PROFILE={0x85, 0x2, 'syz0\x0088\xe4\x9a^\xb1\xb1\x8d\x1eyV\xdc\x9enE\x91\xb6\x06\xb2\xb2\x8fB\x99\a\x16\xc2\xb4\x99\xbcZ#AP\xc4\xc7\x04rr\xcc\x05\xe4g^<\x9e\xc4\xaaV~\f\xf78\xb2nw<\x8a\xdcG\xdeN\x88y;\xba\xa9\x91_\x10\x81hy\\\x88C\x98\xd7~\xdb\xc7\xca\xc5\xe0-\"i\b7*\xa4\xc2\x9f-\x9dG\xcc\r\xb8)\x10q\xb6\x96\xcb\"\x11\xad\x16 +\xc0\xb2\xe6F\x12\x9ed\x17h-@{u\x91'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0eb609e0aba981428ed2bb8d9f1b565c"}, @IFLA_PORT_PROFILE={0xe5, 0x2, 'tcpmss\x00\xfb\xea\xda\x94\x81\xf2EA\xa9\x1d\xc2\xce\x8f\x89\xa1l\x15\f\x17\xa7\x15\xbb\xe37\xd2+\xc0\xefE\xaf@\xe4wUb\xf1\xe1\x10<\\\x8e\x9fS\xbd=\x80f\xa25\xe0F\xc4\xd2\x1ap$\x8e\xbe4\xbb\xc4\xe9\x01\x19\xb9HT %=e\x96\x02~\x93]\x1b%\xb4\xd5h\xdc\xeb\x8c\xd8\xcb\xd3\x1b\x92\t\xe5\x91#\xd6\x83b\xa2\xb5=\xea@\x92\xf0\x807\xb4\x81\xa1/\xce\x1d\xb2\xaf\bu\x9au\xcc\xfb>u\"\x8b\xf0\x04r\xe6\xa9\xdf\x89 7s\xcd\x80\xa3\x81\xadpG\xebI\b\xd9\xd0\xa1\xf0O\xf7\x03\xdfV\xff\xe6\x85T\x04,l\xa3\xd7\xf2\x86x\xedH\xa5k\x10\x91~\x93\xaam\x97\x8f#\xab.=~\xd3/\xa3\xdb\xf1\xb8\xc20\xdbM\xd4\xaf\x02y\'\xf9\xb3\x94\t>\xa4\rPk\xbb\xf7\'BD\xaf\xe7\x11\x13\xfcS\xe7\xaf'}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x200}}, 0x80) syz_usbip_server_init(0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x202, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00002abd7000fbdbdf25204001db"], 0x14}, 0x1, 0x0, 0x0, 0x140}, 0x20000004) 2m53.600401102s ago: executing program 44 (id=2720): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000080), 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r0 = open(&(0x7f0000000780)='./file1\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fallocate(r0, 0x3, 0x0, 0x10000) 2m46.950356377s ago: executing program 45 (id=2814): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000e3ffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb, @void, @value}, 0x94) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15u\"\x8b\xf0\x04r\xe6\xa9\xdf\x89 7s\xcd\x80\xa3\x81\xadpG\xebI\b\xd9\xd0\xa1\xf0O\xf7\x03\xdfV\xff\xe6\x85T\x04,l\xa3\xd7\xf2\x86x\xedH\xa5k\x10\x91~\x93\xaam\x97\x8f#\xab.=~\xd3/\xa3\xdb\xf1\xb8\xc20\xdbM\xd4\xaf\x02y\'\xf9\xb3\x94\t>\xa4\rPk\xbb\xf7\'BD\xaf\xe7\x11\x13\xfcS\xe7\xaf'}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x200}}, 0x80) syz_usbip_server_init(0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)='%pK \x00'}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x202, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x44}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4000800) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="00002abd7000fbdbdf25204001db"], 0x14}, 0x1, 0x0, 0x0, 0x140}, 0x20000004) 2m4.32008251s ago: executing program 3 (id=3333): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x125000, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) unshare(0x2c020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00'}, 0x10) setpriority(0x1, 0x0, 0x6) 2m4.27449409s ago: executing program 3 (id=3336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x6, &(0x7f0000000dc0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, &(0x7f0000000e00)="323cbf935f0533daef6f4f59d64562467cd878239f20d799aa9c5eee07", 0x1d, 0x2, 0x0, 0x1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000300)="4ede348498250713b2d2cffaf7fc7749d3459538fc3ef8e2870868740d9153c00ddc742bc9c92f4ea2bafde3d524ee6df78adaae868a5f62b1a2f0b2ca02e69f3b860ec06879361c93ea371548ad6ba7898b862fb0ce0720da8e8c65dd73ca3d4df812ad17d281eb6b6ace2f52e0d6d9853c953ac8b6b976c75f8d911ab7c6751545fe602f53551426ce18832105098a3ce4eaa5a802ffaa1928c675ffa046329e0c4319b029c80796d97bdb1007820daa6b2c42d2233c899ac021bc12ff0cc40c7c2d92a1f037e0704a7cdc57b2", 0xce, 0x9, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000480)="3f5753b9bda7e7590026d4e457f993e44eb5f5e82116721131ecf2fe36255da28012ee74a499a2fe6905d6f277408219ebd2b36be6e32bbf780db95210c3e07b00b4d31ca0b79aa8227a113662ecc50c994cc0a15fa201412d951041999542d18c226666153ad073d81e0f330b12ff53ee517c7d6282b1769dc6fac02e5a4ec3df5d744ee0c8055a008f45ff7dffdb645ff3a45fc3132dcac4bf86cc647fe895ace602843d23e4eb797174a1cb9d2cdb723beab506f86fa8d7bd869e931b92d315a6806d44e77991b2cd05af29c1d14e4a6647430326ff4267cb7fdaaa78", 0xde, 0x6, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000b80)="c8a589aa789ed5583ca2aa53065c048c34a4ad5369c3eb43b91c36af65b948b6196a7af770e8b10963f21dda9d3f79d08023a0302b21c94894a4d95df13c81e78132ed9dfcf98bf354e8e5c9afe230b77055b00af84af34ae9e474c1656f61c5771c4d44da65b18e80097c22e48fcd9a8b1bdb1b9aa1fc47e4c13fec694cb57656819986886a28a6e98b039a29e8090b3cfdcc77c8c74e35dc50453ae7191d15fd6dada71881696b45", 0xa9, 0x8cbb, 0x0, 0x2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)="f3f55defbf903553927d65899e3e35bb9a8aa620b4778685d4cb7e2f783058aac925774ec610d16b6fa99ea3173412ddb95c345fe36b78c2375f0ff6435312fd6e4f8c87850b8f3b6995c18be9e9523594546a0b900603d9f753c2687fc0ef82b7e200f1202ace337c12e8b0e3bd1f6fe93d543b995cb140e1815baa48ddf8f0bc73cb60acfd65d8eb21b1d873e9c3985f7884d2081b6d86083307ac85c8d18a41382e7f0c57bbc59ef0319cd4f995dd36ff6444fa02dfcb780eda51bfff9fc7f6b0b49102efb3df5b588cfec9ec4191bb3e6e810d13c9844ab71f878ba8ca36902362db9eb4c537787ee4090447750492f430a62838dec6ff70", 0xfa, 0x8, 0x0, 0x2}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0xf, 0xffffffffffffffff, &(0x7f0000000d40)="c356d71517e758e88a9d0d767f2d0a394abb24326c139182121ee4e92e57b172582a82ca759d2aee8cf43235bed27b75d8ac6f73a09f0c5bb321bd", 0x3b, 0x1d, 0x0, 0x1}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000160a030200000000000000000200fffb0900020073797a30000000000900010073797a300000000040000380080001400000000008000240004000002c0003801400010074756e6c3000000000000000000000001400010074756e6c30"], 0x94}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) 2m4.143906439s ago: executing program 3 (id=3339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) 2m4.071316209s ago: executing program 3 (id=3340): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0xe1a40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x500, 0x1, 0xfffffffffffffed1, 0xffffffffffffffff}, './file0\x00'}) pipe(0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00'}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000075000000950000000000000080f1827110010e6a9d7fed0b3bef9dfadc95363afe9523c4a6f5492faedf8b00000000000200000000000000000000bc43bb7e3190d9b875f7e40285e5915f78a3cb2fa76c912ebbe878b87dd962e7ece3e25368d4701044bb74494dca14924bd11b311ed000dcb33a71399b798cac7bc05449be14cf50ff50b1b76e09ee4149e86be9cc276098a1c5bac73b752740d45d46bc34ac63455d0c32d59cb95ed590290aae2cd8d6a1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES16=r2, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006a1c033a23f5bf9036a78d619daf291db4543c074e61d7c066e02e750811ab6420c0f858e9b611fc8dce63d8fcad4fdc94d646ea3482b799b62983cbd3e324770b41cbdbd9ff9ff4ddd111a6aa08cf452dbb08eb1b0653482879063624fb721a4bae0d5efdc6ce6773029e7a412a9a7489faf772"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x4, 0x0, 0x0) fallocate(r7, 0x30, 0x7fff, 0xc) 2m3.834868518s ago: executing program 3 (id=3342): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) 2m3.549491337s ago: executing program 3 (id=3344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) nanosleep(0x0, 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x7) 2m3.529180336s ago: executing program 48 (id=3344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, 0x0, 0x1) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) nanosleep(0x0, 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x7) 4.493892086s ago: executing program 8 (id=5093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab268500000023000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) 3.752094304s ago: executing program 1 (id=5099): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x69cea65c11ee4194, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x9328, 0xfffffffe, 0x3, 0x1, 0x4, 0x1088f109, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0xb, 0x11, 0xffffffffffffffff, 0x2aab9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x800000000000000, 0xc002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0x2, @time={0x1, 0x200}, {0x0, 0x1}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @time}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x40, 0xfffffff9}, {}, {}, @raw32={[0x0, 0x0, 0x200000]}}, {0x0, 0x0, 0x0, 0x0, @time={0xf, 0xa}, {}, {0x0, 0xba}, @ext={0x0, 0x0}}], 0x38) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) chdir(&(0x7f0000000140)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x44084) 3.720068753s ago: executing program 0 (id=5101): syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x180088, &(0x7f0000000740)={[{@commit={'commit', 0x3d, 0x8000}}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x8f}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 3.523221463s ago: executing program 8 (id=5103): syz_mount_image$ext4(&(0x7f0000000540)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x180088, &(0x7f0000000740)={[{@commit={'commit', 0x3d, 0x8000}}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x8f}}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x64000600) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) 3.412854662s ago: executing program 7 (id=5105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x588b8844536680f7, r0, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capget(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580), &(0x7f00000005c0)='system_u:object_r:apt_lock_t:s0\x00', 0x20, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x10) ioprio_set$pid(0x1, 0x0, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 2.81865985s ago: executing program 4 (id=5109): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.548375609s ago: executing program 1 (id=5110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1000002, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffd, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, r2}}, 0x38) 2.530120219s ago: executing program 7 (id=5111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000e0ebffc500001200f6db6995ec2f00000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080002700800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x3d6f, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x20000, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r1, 0x0, &(0x7f0000000580)="40aa", 0x2, 0x2, 0x1}) io_uring_enter(r2, 0x567, 0x1e, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, 0x0, 0x804) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000040)=""/76, 0x114, 0x4c, 0x0, 0xff, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="ca8327f39951d597a4cf9bd3b1e6db115000c1198cccf5ff9710796e61236e554be77c16b7c7859fe09ea0a934541be4"], &(0x7f00000001c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x80}], 0x1, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000011000b000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r8}, 0x10) 2.427994819s ago: executing program 1 (id=5112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32"], 0x54}}, 0x0) 2.338457298s ago: executing program 0 (id=5113): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000040)={[{@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0x1a5}}, {@uni_xlate}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@tz_utc}, {@shortname_win95}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@rodir}, {@fat=@dos1xfloppy}, {@uni_xlate}, {}]}, 0x6, 0x2ed, &(0x7f0000000840)="$eJzs3T9rJGUcB/Dfbja7EwU3hZUIPqCF1XG51mYPuQMxlccWnoUGbw+ObFASCPgHx6tsbSwsfAWC4Aux8R0ItoKdJx6MzOyMM+7FvezhRrx8PkXy5Nnnu89v/pBMivzy3otHh3dS3L3/6U+RZb3oT2ISD3qxG/1ofB5/M/kyAID/swdFEb8WC+vkehGRba4sAGCDzvfzf9AOv7+QsgCADbr19u03r+/v33grpSxuHn1xOi1/sy8/7zRL7sU8ZnE1xvEwonpQ2I7qaaEc3iyKIh+k0m68cpSfTk+nEUfv/lCHr/8SUeX3Yhy71VTWPG1U+Tf2b+xV8fThc20+L+t4pszfjXuTMn8txvF8vf9S/lpKaRQpdfbPYzqMV19e5Kv9r8Q4fnw/Poh53Iky2+Y/20vp9eKr3z55pyyvzPfy0+moWtcqti70wgAAAAAAAAAAAAAAAAAAAAAA8FS7sui9k0ZR9e8pp+r+O1sPyy+2IzW6/X3y8mPUfYAr3f5ARVHkRXzT9Ne5mlIq6oVtfhAvDLqNBQEAAAAAAAAAAAAAAAAAAODyOvno48OD+Xx2/K8Mmm4Ag4j4/VbEk77PpDPzUqxePKr3PJjP+/VwPisLadYMqpk6FVvNml7EyjLKg3jSszGItY59p1thd/Dtd0szf9TtFf7xDbPHb7pd7tVbr8I1B83ddXjQO/scjv66OlldxtfDiHbNMM6513B5phgv3qc49wHuzI5Phme+NH5MPHtkZvhsNchXpKK3qrDXfl6cuXrmkcs07NzYS/HtetCJL90b57qfI1vE60vYb79X9HTrAAAAAAAAAAAAAAAAAACAjWr/+veMF++vjPaL0cbKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAL1f7//zUGeR2eHZ8MmpduR8QZi4dxfPIfHyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACXwJ8BAAD//+hDVsk=") bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3587, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000440), &(0x7f0000000480)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x84, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000080)=0xb0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0xfffffffffffffffe}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x170bd2a, 0x8000000, {0x0, 0x0, 0x0, r10, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 2.241875418s ago: executing program 8 (id=5114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, 0x0, 0x0) 1.886437897s ago: executing program 4 (id=5115): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eef890ef000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000740), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) dup(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 1.792274717s ago: executing program 4 (id=5116): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5e) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) 1.138624634s ago: executing program 7 (id=5117): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}}, 0x0) 1.127141504s ago: executing program 1 (id=5118): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x168, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r2}, 0x38) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0xfc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x480, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0xfff, 0xdd, 0x7fff, 0x3, 0x15, "3953fdfa0078604b"}) 1.102452824s ago: executing program 7 (id=5119): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x69cea65c11ee4194, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x9328, 0xfffffffe, 0x3, 0x1, 0x4, 0x1088f109, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0xb, 0x11, 0xffffffffffffffff, 0x2aab9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x800000000000000, 0xc002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0x2, @time={0x1, 0x200}, {0x0, 0x1}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @time}], 0x38) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) chdir(&(0x7f0000000140)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 781.703142ms ago: executing program 4 (id=5120): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x18}]}}}}}}}, 0x0) 749.898403ms ago: executing program 4 (id=5121): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008"], 0x64}}, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x69cea65c11ee4194, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x10040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x9328, 0xfffffffe, 0x3, 0x1, 0x4, 0x1088f109, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x44040200) mmap(&(0x7f0000a70000/0x1000)=nil, 0x1000, 0xb, 0x11, 0xffffffffffffffff, 0x2aab9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x800000000000000, 0xc002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0x2, @time={0x1, 0x200}, {0x0, 0x1}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @time}], 0x38) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x40, 0xfffffff9}, {}, {}, @raw32={[0x0, 0x0, 0x200000]}}, {0x0, 0x0, 0x0, 0x0, @time={0xf, 0xa}, {}, {0x0, 0xba}, @ext={0x0, 0x0}}], 0x38) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)) chdir(&(0x7f0000000140)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x44084) 713.193323ms ago: executing program 0 (id=5122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 586.741662ms ago: executing program 8 (id=5123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 577.625022ms ago: executing program 1 (id=5124): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 546.377142ms ago: executing program 8 (id=5125): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x42000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe4, 0x6}, 0x100000, 0x0, 0x0, 0x6, 0x6, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e22, 0xffffffff, @remote, 0x8}, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x0, {[0x3, 0x3, 0x765, 0x8, 0xffffffff, 0x3, 0x48e6, 0x2c400000]}}, 0x5c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x633, 0x70bd25, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x4000, 0x0, 0x8000}, {@in6=@empty, 0x0, 0x32}, @in=@private=0xa010101, {0x327, 0x4, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0x2, 0x4, 0x9, 0x19}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 513.331232ms ago: executing program 0 (id=5126): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 334.591501ms ago: executing program 0 (id=5127): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './bus\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x588b8844536680f7, r0, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capget(0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) lsetxattr$security_selinux(&(0x7f0000000240)='./bus\x00', &(0x7f0000000580), &(0x7f00000005c0)='system_u:object_r:apt_lock_t:s0\x00', 0x20, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r6}, 0x10) ioprio_set$pid(0x1, 0x0, 0x4000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) socket(0x840000000002, 0x3, 0xff) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) 173.19862ms ago: executing program 8 (id=5128): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000400000000000000000f90000000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYRES8=r1, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$tipc(0x1e, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) write$UHID_CREATE2(r4, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRESDEC=r5, @ANYRESHEX=r8], 0x118) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) syz_usb_disconnect(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$selinux_access(r12, &(0x7f0000000500)=ANY=[@ANYBLOB="73f81674656d5f753a6f626a6563745f723a6175646974645f6574635f743a7330202f7362696e2f6478636c69656e7420303030303030303030303030303030303030303100e70d5952293c6a62cd0b01f87fb4e60e89157244783afc78aaa3452e346cd4393d9a23c03ae8550da51200f8474724402cd0331ec56079214cc5989997f543134267d4e6dbec3c5a14501b8c1c935e4c05ea95053d2c935bc03676e4c7cbdc9b12642199b0404bf5319d271f3e43"], 0x46) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000640), 0x3}, 0x1206c, 0x80, 0x7, 0x8, 0xe, 0x1, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) 171.42346ms ago: executing program 1 (id=5129): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="6fe4e3dd59216f76e42f80896e0a000000010100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="852aec2eafcd90db630a0000000016004500d7bb6ca253f173bc1787d00cf9a68f84d4f42c553a0924cee5efc1f29cbc5eb5687f72874f4932507ffb39885e3965efebd2d2363540ae87d3ba3ef7592551a431ddcda0e7c67ac53271a2ba183b57a5936880a2e285a4438674b828182cd78d92fd9b9a081e28efe78ff3a0c295bf23f1bbe768de7725fbb8b65a50f0e93827e978043c0c79873a9f1a8a5ef9920a329a4fcfea60766f6d7e54b8608c62bbea53b24c6f749c6cd752f22810588d29f917"], &(0x7f0000000140)='GPL\x00', 0x5, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r3, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xbe8}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 124.6912ms ago: executing program 7 (id=5130): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x5, 0x0, 0x0}) 43.00231ms ago: executing program 7 (id=5131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000402) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 42.18096ms ago: executing program 0 (id=5132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001880)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880), 0x2, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000ec0), 0x80, 0x80000) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, 0xc, &(0x7f0000000380)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="ac0000002a0000032bbd7000ffdbdf257bb9199d5f46bdcf402e4053871332018e2673e384bf74335906341e424bef1bf4577cc676d229eace18cbd5a8de435aecc35ac46eabb993b971e46053efeafc74523cc2c0b26853453e2e8414ed222aad0e247b786b596e5c6916de7ae809c271cc6ac33760492281ee831cad59d3a4bc441d89533f4233194591d1043929ef82c5947be6b39a0703e0f3014a51cdb5ebda0800dd80040025800000f21754f8f9c8934bb5f6ec53c166015df850fddf7d1b404b8de1aa544280145e59"], 0xac}, {0x0}, {&(0x7f0000000cc0)=ANY=[@ANYBLOB="44010000270000012bbd7000ffdbdf253101fe8008001800000000004c0868663fdc9e7d055ea54631adc9d9ab631424bac89b41a7ddcd2eae0ff6eb8d8e3ce9af99cd01e717494cb6e5359643aa1cf36600b522f12c84049daed73c22fc5e13c79ea038a585a81813353e40e8d4ea95d1a1e5582b0b4cc542ecaef14c4f63631e04000a800400478051772b7040854cb96e3d70d90d22cb7d4d24159a51ad8da12d"], 0x144}], 0x3, &(0x7f0000002a00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28f100000000000001000000010000009ac7740ce693", @ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="1c0000daf72334d75a619297f3468000ca7ce7e362f6f5be6bdf94b49c4dad2cc65840d4884c1a5e275e7772db469a", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x4000000}, 0x95) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private1, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r8, 0xf423f}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 0s ago: executing program 4 (id=5133): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000010009081000000000", 0x53}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000060000000000000a40800000060a0b0400000000000000000200000014020000000000000000010071756575650000000900010073797a300000000089008b9bed7d5b0200f27814b3c7c684e9ff6c17641073797a32000000001400"], 0x68}}, 0x80) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f00000001c0)={0x0, 0xe, 0xcf, 0xa09, 0xe0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004096850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): scuous mode [ 289.058912][T16240] syzkaller1: entered allmulticast mode [ 289.206867][T16250] syz2: rxe_newlink: already configured on veth0_to_bond [ 289.243156][T16248] 9pnet_fd: Insufficient options for proto=fd [ 289.269346][T16252] usb usb6: usbfs: process 16252 (syz.4.4242) did not claim interface 0 before use [ 289.380496][T16264] netlink: 'syz.8.4248': attribute type 1 has an invalid length. [ 289.395327][T16267] random: crng reseeded on system resumption [ 289.410712][T16264] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4248' sets config #1 [ 289.434722][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 289.434738][ T29] audit: type=1326 audit(1740736322.772:27189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 289.464631][ T29] audit: type=1326 audit(1740736322.772:27190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 289.488206][ T29] audit: type=1326 audit(1740736322.772:27191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 289.511814][ T29] audit: type=1326 audit(1740736322.772:27192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 289.535496][ T29] audit: type=1326 audit(1740736322.772:27193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 289.583601][T16269] syzkaller1: entered promiscuous mode [ 289.589135][T16269] syzkaller1: entered allmulticast mode [ 289.611117][ T29] audit: type=1326 audit(1740736322.931:27194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 289.634855][ T29] audit: type=1326 audit(1740736322.931:27195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 289.658518][ T29] audit: type=1326 audit(1740736322.931:27196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 289.682304][ T29] audit: type=1326 audit(1740736322.931:27197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 289.705989][ T29] audit: type=1326 audit(1740736322.931:27198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16258 comm="syz.4.4246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 289.757390][T16276] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 289.848183][T16283] usb usb6: usbfs: process 16283 (syz.8.4256) did not claim interface 0 before use [ 289.944387][T16291] netlink: 'syz.8.4261': attribute type 1 has an invalid length. [ 289.983644][T16291] hub 1-0:1.0: USB hub found [ 290.002542][T16294] netlink: 'syz.1.4262': attribute type 1 has an invalid length. [ 290.004396][T16291] hub 1-0:1.0: 8 ports detected [ 290.045033][T16294] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4262' sets config #1 [ 290.088199][T16298] syzkaller1: entered promiscuous mode [ 290.093947][T16298] syzkaller1: entered allmulticast mode [ 290.148744][T16304] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 290.191415][T16310] veth0_vlan: entered allmulticast mode [ 290.261263][T16318] usb usb6: usbfs: process 16318 (syz.7.4272) did not claim interface 0 before use [ 290.359856][T16312] lo speed is unknown, defaulting to 1000 [ 290.383459][T16327] FAULT_INJECTION: forcing a failure. [ 290.383459][T16327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.396678][T16327] CPU: 0 UID: 0 PID: 16327 Comm: syz.7.4276 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 290.396711][T16327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.396727][T16327] Call Trace: [ 290.396736][T16327] [ 290.396745][T16327] dump_stack_lvl+0xf2/0x150 [ 290.396790][T16327] dump_stack+0x15/0x1a [ 290.396811][T16327] should_fail_ex+0x24a/0x260 [ 290.396852][T16327] should_fail+0xb/0x10 [ 290.396954][T16327] should_fail_usercopy+0x1a/0x20 [ 290.396988][T16327] _copy_from_user+0x1c/0xa0 [ 290.397022][T16327] copy_msghdr_from_user+0x54/0x2a0 [ 290.397075][T16327] ? __fget_files+0x17c/0x1c0 [ 290.397111][T16327] __sys_sendmsg+0x13e/0x230 [ 290.397161][T16327] __x64_sys_sendmsg+0x46/0x50 [ 290.397192][T16327] x64_sys_call+0x2734/0x2dc0 [ 290.397245][T16327] do_syscall_64+0xc9/0x1c0 [ 290.397276][T16327] ? clear_bhb_loop+0x55/0xb0 [ 290.397308][T16327] ? clear_bhb_loop+0x55/0xb0 [ 290.397342][T16327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.397392][T16327] RIP: 0033:0x7fb932bad169 [ 290.397409][T16327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.397480][T16327] RSP: 002b:00007fb931211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.397503][T16327] RAX: ffffffffffffffda RBX: 00007fb932dc5fa0 RCX: 00007fb932bad169 [ 290.397519][T16327] RDX: 0000000000000000 RSI: 0000400000000f40 RDI: 0000000000000006 [ 290.397531][T16327] RBP: 00007fb931211090 R08: 0000000000000000 R09: 0000000000000000 [ 290.397623][T16327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.397682][T16327] R13: 0000000000000000 R14: 00007fb932dc5fa0 R15: 00007fff83914058 [ 290.397730][T16327] [ 290.638146][T16333] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 290.711150][T16339] Invalid ELF header magic: != ELF [ 290.758880][T16344] netlink: 'syz.7.4283': attribute type 1 has an invalid length. [ 290.917638][T16344] hub 1-0:1.0: USB hub found [ 290.925438][T16344] hub 1-0:1.0: 8 ports detected [ 291.234006][T16360] lo speed is unknown, defaulting to 1000 [ 291.641315][T16374] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 291.868475][T16389] hub 1-0:1.0: USB hub found [ 291.873262][T16389] hub 1-0:1.0: 8 ports detected [ 292.086074][T16407] netlink: 'syz.4.4308': attribute type 1 has an invalid length. [ 292.164696][T16407] hub 1-0:1.0: USB hub found [ 292.172960][T16407] hub 1-0:1.0: 8 ports detected [ 292.296365][T16424] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4315' sets config #1 [ 292.726912][T16439] lo speed is unknown, defaulting to 1000 [ 292.836214][T16438] lo speed is unknown, defaulting to 1000 [ 292.842510][T16448] netlink: 'syz.7.4324': attribute type 1 has an invalid length. [ 292.874514][T16448] hub 1-0:1.0: USB hub found [ 292.879301][T16448] hub 1-0:1.0: 8 ports detected [ 292.902100][T16440] siw: device registration error -23 [ 292.912460][T16454] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4327' sets config #1 [ 293.082495][T16473] syz_tun: entered allmulticast mode [ 293.090273][T16472] syz_tun: left allmulticast mode [ 293.188143][T16480] hub 1-0:1.0: USB hub found [ 293.193577][T16480] hub 1-0:1.0: 8 ports detected [ 293.252235][T16490] FAULT_INJECTION: forcing a failure. [ 293.252235][T16490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.265500][T16490] CPU: 0 UID: 0 PID: 16490 Comm: syz.0.4343 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 293.265591][T16490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 293.265604][T16490] Call Trace: [ 293.265611][T16490] [ 293.265621][T16490] dump_stack_lvl+0xf2/0x150 [ 293.265657][T16490] dump_stack+0x15/0x1a [ 293.265684][T16490] should_fail_ex+0x24a/0x260 [ 293.265749][T16490] should_fail+0xb/0x10 [ 293.265775][T16490] should_fail_usercopy+0x1a/0x20 [ 293.265811][T16490] _copy_to_user+0x20/0xa0 [ 293.265841][T16490] simple_read_from_buffer+0xa0/0x110 [ 293.265870][T16490] proc_fail_nth_read+0xf9/0x140 [ 293.265967][T16490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.266003][T16490] vfs_read+0x19b/0x6f0 [ 293.266033][T16490] ? __rcu_read_unlock+0x4e/0x70 [ 293.266057][T16490] ? __fget_files+0x17c/0x1c0 [ 293.266167][T16490] ksys_read+0xe8/0x1b0 [ 293.266215][T16490] __x64_sys_read+0x42/0x50 [ 293.266246][T16490] x64_sys_call+0x2874/0x2dc0 [ 293.266279][T16490] do_syscall_64+0xc9/0x1c0 [ 293.266311][T16490] ? clear_bhb_loop+0x55/0xb0 [ 293.266412][T16490] ? clear_bhb_loop+0x55/0xb0 [ 293.266440][T16490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.266536][T16490] RIP: 0033:0x7f9e8462bb7c [ 293.266555][T16490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.266576][T16490] RSP: 002b:00007f9e82c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.266655][T16490] RAX: ffffffffffffffda RBX: 00007f9e84845fa0 RCX: 00007f9e8462bb7c [ 293.266676][T16490] RDX: 000000000000000f RSI: 00007f9e82c970a0 RDI: 0000000000000004 [ 293.266691][T16490] RBP: 00007f9e82c97090 R08: 0000000000000000 R09: 0000000000000000 [ 293.266768][T16490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.266781][T16490] R13: 0000000000000000 R14: 00007f9e84845fa0 R15: 00007fff18e13028 [ 293.266886][T16490] [ 293.536222][T16497] netlink: 'syz.8.4346': attribute type 1 has an invalid length. [ 293.571372][T16497] hub 1-0:1.0: USB hub found [ 293.576095][T16497] hub 1-0:1.0: 8 ports detected [ 293.749637][T16516] syz2: rxe_newlink: already configured on veth0_to_bond [ 293.842779][T16524] netlink: 'syz.0.4357': attribute type 1 has an invalid length. [ 293.902176][T16524] hub 1-0:1.0: USB hub found [ 293.921407][T16524] hub 1-0:1.0: 8 ports detected [ 294.212564][T16538] FAULT_INJECTION: forcing a failure. [ 294.212564][T16538] name failslab, interval 1, probability 0, space 0, times 0 [ 294.225339][T16538] CPU: 0 UID: 0 PID: 16538 Comm: syz.7.4364 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 294.225370][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.225385][T16538] Call Trace: [ 294.225394][T16538] [ 294.225422][T16538] dump_stack_lvl+0xf2/0x150 [ 294.225450][T16538] dump_stack+0x15/0x1a [ 294.225470][T16538] should_fail_ex+0x24a/0x260 [ 294.225567][T16538] should_failslab+0x8f/0xb0 [ 294.225602][T16538] __kmalloc_node_noprof+0xad/0x410 [ 294.225627][T16538] ? vmemdup_user+0x42/0x1b0 [ 294.225737][T16538] vmemdup_user+0x42/0x1b0 [ 294.225763][T16538] path_setxattrat+0x1c9/0x310 [ 294.225855][T16538] __x64_sys_fsetxattr+0x6d/0x80 [ 294.225968][T16538] x64_sys_call+0x29d2/0x2dc0 [ 294.226056][T16538] do_syscall_64+0xc9/0x1c0 [ 294.226117][T16538] ? clear_bhb_loop+0x55/0xb0 [ 294.226150][T16538] ? clear_bhb_loop+0x55/0xb0 [ 294.226183][T16538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.226210][T16538] RIP: 0033:0x7fb932bad169 [ 294.226226][T16538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.226315][T16538] RSP: 002b:00007fb931211038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 294.226335][T16538] RAX: ffffffffffffffda RBX: 00007fb932dc5fa0 RCX: 00007fb932bad169 [ 294.226349][T16538] RDX: 0000400000000040 RSI: 00004000000000c0 RDI: 0000000000000004 [ 294.226365][T16538] RBP: 00007fb931211090 R08: 0000000000000000 R09: 0000000000000000 [ 294.226398][T16538] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 294.226412][T16538] R13: 0000000000000000 R14: 00007fb932dc5fa0 R15: 00007fff83914058 [ 294.226430][T16538] [ 294.440991][T16546] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 294.567683][T16562] random: crng reseeded on system resumption [ 294.620415][T16572] netlink: 'syz.8.4374': attribute type 1 has an invalid length. [ 294.649017][T16570] FAULT_INJECTION: forcing a failure. [ 294.649017][T16570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.662356][T16570] CPU: 1 UID: 0 PID: 16570 Comm: syz.1.4373 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 294.662395][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 294.662450][T16570] Call Trace: [ 294.662481][T16570] [ 294.662490][T16570] dump_stack_lvl+0xf2/0x150 [ 294.662561][T16570] dump_stack+0x15/0x1a [ 294.662622][T16570] should_fail_ex+0x24a/0x260 [ 294.662661][T16570] should_fail_alloc_page+0xfd/0x110 [ 294.662700][T16570] __alloc_frozen_pages_noprof+0x109/0x340 [ 294.662743][T16570] alloc_pages_mpol+0xb4/0x260 [ 294.662814][T16570] vma_alloc_folio_noprof+0x1a0/0x310 [ 294.662841][T16570] handle_mm_fault+0xdd7/0x2ac0 [ 294.662885][T16570] exc_page_fault+0x3b9/0x650 [ 294.662914][T16570] asm_exc_page_fault+0x26/0x30 [ 294.662969][T16570] RIP: 0033:0x7fd9128ba78b [ 294.662986][T16570] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 294.663031][T16570] RSP: 002b:00007fd910f74e10 EFLAGS: 00010246 [ 294.663047][T16570] RAX: 00007fd910f76f30 RBX: 00007fd912afc620 RCX: 0000000000000000 [ 294.663060][T16570] RDX: 00007fd910f76f78 RSI: 00007fd91296cbd8 RDI: 00007fd910f74e30 [ 294.663072][T16570] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 294.663084][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.663153][T16570] R13: 0000000000000000 R14: 00007fd912b25fa0 R15: 00007fffd7457b48 [ 294.663172][T16570] [ 294.663253][T16570] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 294.665424][T16572] hub 1-0:1.0: USB hub found [ 294.790504][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 294.790598][ T29] audit: type=1326 audit(1740736327.786:27592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e84624127 code=0x7ffc0000 [ 294.794927][T16572] hub 1-0:1.0: 8 ports detected [ 294.804540][ T29] audit: type=1326 audit(1740736327.795:27593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e845c9359 code=0x7ffc0000 [ 294.889100][ T29] audit: type=1326 audit(1740736327.804:27594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e84624127 code=0x7ffc0000 [ 294.912720][ T29] audit: type=1326 audit(1740736327.804:27595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e845c9359 code=0x7ffc0000 [ 294.936298][ T29] audit: type=1326 audit(1740736327.804:27596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 294.959998][ T29] audit: type=1326 audit(1740736327.814:27597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e84624127 code=0x7ffc0000 [ 294.983599][ T29] audit: type=1326 audit(1740736327.814:27598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e845c9359 code=0x7ffc0000 [ 295.007226][ T29] audit: type=1326 audit(1740736327.814:27599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 295.030853][ T29] audit: type=1326 audit(1740736327.823:27600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e84624127 code=0x7ffc0000 [ 295.054433][ T29] audit: type=1326 audit(1740736327.823:27601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16550 comm="syz.0.4370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e845c9359 code=0x7ffc0000 [ 295.257666][T16602] lo speed is unknown, defaulting to 1000 [ 295.306721][T16605] siw: device registration error -23 [ 295.340525][T16603] lo speed is unknown, defaulting to 1000 [ 295.787207][T16620] Invalid ELF header magic: != ELF [ 295.979793][T16629] FAULT_INJECTION: forcing a failure. [ 295.979793][T16629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.992933][T16629] CPU: 0 UID: 0 PID: 16629 Comm: syz.0.4391 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 295.992961][T16629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.992976][T16629] Call Trace: [ 295.992984][T16629] [ 295.992993][T16629] dump_stack_lvl+0xf2/0x150 [ 295.993033][T16629] dump_stack+0x15/0x1a [ 295.993056][T16629] should_fail_ex+0x24a/0x260 [ 295.993140][T16629] should_fail+0xb/0x10 [ 295.993217][T16629] should_fail_usercopy+0x1a/0x20 [ 295.993249][T16629] _copy_from_user+0x1c/0xa0 [ 295.993428][T16629] kstrtouint_from_user+0x76/0xe0 [ 295.993458][T16629] ? 0xffffffff81000000 [ 295.993472][T16629] ? selinux_file_permission+0x22a/0x360 [ 295.993549][T16629] proc_fail_nth_write+0x4f/0x150 [ 295.993587][T16629] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 295.993619][T16629] vfs_write+0x27d/0x920 [ 295.993704][T16629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.993743][T16629] ? __fget_files+0x17c/0x1c0 [ 295.993787][T16629] ksys_write+0xe8/0x1b0 [ 295.993845][T16629] __x64_sys_write+0x42/0x50 [ 295.993878][T16629] x64_sys_call+0x287e/0x2dc0 [ 295.993911][T16629] do_syscall_64+0xc9/0x1c0 [ 295.993947][T16629] ? clear_bhb_loop+0x55/0xb0 [ 295.994002][T16629] ? clear_bhb_loop+0x55/0xb0 [ 295.994088][T16629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.994115][T16629] RIP: 0033:0x7f9e8462bc1f [ 295.994130][T16629] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 295.994153][T16629] RSP: 002b:00007f9e82c76030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 295.994178][T16629] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9e8462bc1f [ 295.994193][T16629] RDX: 0000000000000001 RSI: 00007f9e82c760a0 RDI: 0000000000000006 [ 295.994226][T16629] RBP: 00007f9e82c76090 R08: 0000000000000000 R09: 0000000000000000 [ 295.994242][T16629] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 295.994268][T16629] R13: 0000000000000001 R14: 00007f9e84846080 R15: 00007fff18e13028 [ 295.994286][T16629] [ 296.178956][T16630] lo speed is unknown, defaulting to 1000 [ 296.266754][T16632] netlink: 'syz.8.4392': attribute type 1 has an invalid length. [ 296.351873][T16632] hub 1-0:1.0: USB hub found [ 296.356643][T16632] hub 1-0:1.0: 8 ports detected [ 296.486264][T16642] lo speed is unknown, defaulting to 1000 [ 296.537822][T16653] veth0_to_bond: entered promiscuous mode [ 296.544625][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4402'. [ 296.559878][T16653] veth0_to_bond (unregistering): left promiscuous mode [ 296.568214][T16653] bond0: (slave bond_slave_0): Releasing backup interface [ 296.663143][T16659] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 296.944576][T16663] lo speed is unknown, defaulting to 1000 [ 297.246427][T16673] netlink: 'syz.4.4408': attribute type 1 has an invalid length. [ 297.331495][T16673] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4408' sets config #1 [ 297.331654][T16679] FAULT_INJECTION: forcing a failure. [ 297.331654][T16679] name failslab, interval 1, probability 0, space 0, times 0 [ 297.353418][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.7.4412 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 297.353497][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 297.353513][T16679] Call Trace: [ 297.353520][T16679] [ 297.353529][T16679] dump_stack_lvl+0xf2/0x150 [ 297.353558][T16679] dump_stack+0x15/0x1a [ 297.353579][T16679] should_fail_ex+0x24a/0x260 [ 297.353657][T16679] should_failslab+0x8f/0xb0 [ 297.353694][T16679] __kmalloc_noprof+0xab/0x3f0 [ 297.353720][T16679] ? alloc_pipe_info+0x1cb/0x360 [ 297.353759][T16679] alloc_pipe_info+0x1cb/0x360 [ 297.353847][T16679] splice_direct_to_actor+0x60f/0x670 [ 297.353880][T16679] ? __pfx_direct_splice_actor+0x10/0x10 [ 297.353911][T16679] ? 0xffffffff81000000 [ 297.353927][T16679] ? selinux_file_permission+0x22a/0x360 [ 297.353959][T16679] ? __rcu_read_unlock+0x4e/0x70 [ 297.354050][T16679] ? avc_policy_seqno+0x15/0x20 [ 297.354067][T16679] ? selinux_file_permission+0x22a/0x360 [ 297.354134][T16679] do_splice_direct+0xd7/0x150 [ 297.354163][T16679] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 297.354194][T16679] do_sendfile+0x398/0x660 [ 297.354281][T16679] __x64_sys_sendfile64+0x110/0x150 [ 297.354323][T16679] x64_sys_call+0xfbd/0x2dc0 [ 297.354355][T16679] do_syscall_64+0xc9/0x1c0 [ 297.354386][T16679] ? clear_bhb_loop+0x55/0xb0 [ 297.354446][T16679] ? clear_bhb_loop+0x55/0xb0 [ 297.354479][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.354511][T16679] RIP: 0033:0x7fb932bad169 [ 297.354529][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.354550][T16679] RSP: 002b:00007fb931211038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 297.354569][T16679] RAX: ffffffffffffffda RBX: 00007fb932dc5fa0 RCX: 00007fb932bad169 [ 297.354609][T16679] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 297.354623][T16679] RBP: 00007fb931211090 R08: 0000000000000000 R09: 0000000000000000 [ 297.354679][T16679] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 297.354694][T16679] R13: 0000000000000000 R14: 00007fb932dc5fa0 R15: 00007fff83914058 [ 297.354734][T16679] [ 297.787208][T16686] lo speed is unknown, defaulting to 1000 [ 298.747974][T16721] hub 1-0:1.0: USB hub found [ 298.762173][T16721] hub 1-0:1.0: 8 ports detected [ 298.792479][T16717] lo speed is unknown, defaulting to 1000 [ 298.807117][T16720] netlink: 'syz.7.4428': attribute type 1 has an invalid length. [ 298.940736][T16733] No source specified [ 298.946541][T16733] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4433'. [ 298.963361][T16733] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4433'. [ 299.012636][T16734] lo speed is unknown, defaulting to 1000 [ 299.054298][T16736] siw: device registration error -23 [ 299.269302][T16756] netlink: 'syz.8.4443': attribute type 1 has an invalid length. [ 299.302507][T16756] hub 1-0:1.0: USB hub found [ 299.307478][T16756] hub 1-0:1.0: 8 ports detected [ 299.467885][T16748] lo speed is unknown, defaulting to 1000 [ 300.035572][T16774] lo speed is unknown, defaulting to 1000 [ 300.075588][T16782] lo speed is unknown, defaulting to 1000 [ 300.307365][T16789] syzkaller1: entered promiscuous mode [ 300.313000][T16789] syzkaller1: entered allmulticast mode [ 300.534212][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 300.534310][ T29] audit: type=1400 audit(1740736333.146:28184): avc: denied { read write } for pid=16800 comm="syz.1.4461" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.606158][T16805] netlink: 'syz.1.4463': attribute type 1 has an invalid length. [ 300.625372][T16805] hub 1-0:1.0: USB hub found [ 300.635717][T16805] hub 1-0:1.0: 8 ports detected [ 300.848272][T16815] IPv6: Can't replace route, no match found [ 300.878536][ T29] audit: type=1400 audit(1740736333.473:28185): avc: denied { connect } for pid=16814 comm="syz.0.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.898481][ T29] audit: type=1400 audit(1740736333.473:28186): avc: denied { ioctl } for pid=16814 comm="syz.0.4467" path="socket:[60679]" dev="sockfs" ino=60679 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.923395][ T29] audit: type=1400 audit(1740736333.473:28187): avc: denied { write } for pid=16814 comm="syz.0.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 301.111478][T16823] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 301.210113][T16827] syzkaller1: entered promiscuous mode [ 301.215644][T16827] syzkaller1: entered allmulticast mode [ 301.239210][ T29] audit: type=1326 audit(1740736333.810:28188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.262994][ T29] audit: type=1326 audit(1740736333.810:28189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.286683][ T29] audit: type=1326 audit(1740736333.810:28190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.310355][ T29] audit: type=1326 audit(1740736333.810:28191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.334131][ T29] audit: type=1326 audit(1740736333.810:28192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.357834][ T29] audit: type=1326 audit(1740736333.810:28193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16828 comm="syz.7.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 301.533302][T16818] lo speed is unknown, defaulting to 1000 [ 301.552379][T16838] random: crng reseeded on system resumption [ 302.086451][T16853] siw: device registration error -23 [ 302.104937][T16850] SELinux: syz.4.4479 (16850) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 302.163440][T16856] FAULT_INJECTION: forcing a failure. [ 302.163440][T16856] name failslab, interval 1, probability 0, space 0, times 0 [ 302.176187][T16856] CPU: 1 UID: 0 PID: 16856 Comm: syz.0.4482 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 302.176216][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 302.176230][T16856] Call Trace: [ 302.176238][T16856] [ 302.176247][T16856] dump_stack_lvl+0xf2/0x150 [ 302.176293][T16856] dump_stack+0x15/0x1a [ 302.176320][T16856] should_fail_ex+0x24a/0x260 [ 302.176353][T16856] should_failslab+0x8f/0xb0 [ 302.176465][T16856] kmem_cache_alloc_node_noprof+0x59/0x320 [ 302.176515][T16856] ? __alloc_skb+0x10b/0x310 [ 302.176538][T16856] __alloc_skb+0x10b/0x310 [ 302.176563][T16856] netlink_alloc_large_skb+0xad/0xe0 [ 302.176594][T16856] netlink_sendmsg+0x3b4/0x6e0 [ 302.176662][T16856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.176701][T16856] __sock_sendmsg+0x140/0x180 [ 302.176779][T16856] ____sys_sendmsg+0x326/0x4b0 [ 302.176808][T16856] __sys_sendmsg+0x19d/0x230 [ 302.176849][T16856] __x64_sys_sendmsg+0x46/0x50 [ 302.176899][T16856] x64_sys_call+0x2734/0x2dc0 [ 302.176925][T16856] do_syscall_64+0xc9/0x1c0 [ 302.176963][T16856] ? clear_bhb_loop+0x55/0xb0 [ 302.177052][T16856] ? clear_bhb_loop+0x55/0xb0 [ 302.177082][T16856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.177108][T16856] RIP: 0033:0x7f9e8462d169 [ 302.177123][T16856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.177141][T16856] RSP: 002b:00007f9e82c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.177180][T16856] RAX: ffffffffffffffda RBX: 00007f9e84845fa0 RCX: 00007f9e8462d169 [ 302.177196][T16856] RDX: 0000000024014040 RSI: 0000400000000540 RDI: 0000000000000006 [ 302.177211][T16856] RBP: 00007f9e82c97090 R08: 0000000000000000 R09: 0000000000000000 [ 302.177226][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.177318][T16856] R13: 0000000000000000 R14: 00007f9e84845fa0 R15: 00007fff18e13028 [ 302.177337][T16856] [ 302.482435][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 302.923735][T16876] syzkaller1: entered promiscuous mode [ 302.929260][T16876] syzkaller1: entered allmulticast mode [ 303.091922][T16881] netlink: 'syz.7.4489': attribute type 1 has an invalid length. [ 303.182696][T16881] hub 1-0:1.0: USB hub found [ 303.209218][T16881] hub 1-0:1.0: 8 ports detected [ 303.882889][T16901] FAULT_INJECTION: forcing a failure. [ 303.882889][T16901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.896303][T16901] CPU: 1 UID: 0 PID: 16901 Comm: syz.4.4495 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 303.896354][T16901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.896377][T16901] Call Trace: [ 303.896386][T16901] [ 303.896396][T16901] dump_stack_lvl+0xf2/0x150 [ 303.896504][T16901] dump_stack+0x15/0x1a [ 303.896626][T16901] should_fail_ex+0x24a/0x260 [ 303.896733][T16901] should_fail+0xb/0x10 [ 303.896765][T16901] should_fail_usercopy+0x1a/0x20 [ 303.896801][T16901] _copy_to_user+0x20/0xa0 [ 303.896826][T16901] simple_read_from_buffer+0xa0/0x110 [ 303.896913][T16901] proc_fail_nth_read+0xf9/0x140 [ 303.896947][T16901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.897032][T16901] vfs_read+0x19b/0x6f0 [ 303.897057][T16901] ? bpf_trace_run2+0x123/0x1d0 [ 303.897086][T16901] ? __rcu_read_unlock+0x4e/0x70 [ 303.897145][T16901] ? __fget_files+0x17c/0x1c0 [ 303.897185][T16901] ksys_read+0xe8/0x1b0 [ 303.897219][T16901] __x64_sys_read+0x42/0x50 [ 303.897247][T16901] x64_sys_call+0x2874/0x2dc0 [ 303.897339][T16901] do_syscall_64+0xc9/0x1c0 [ 303.897378][T16901] ? clear_bhb_loop+0x55/0xb0 [ 303.897409][T16901] ? clear_bhb_loop+0x55/0xb0 [ 303.897442][T16901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.897523][T16901] RIP: 0033:0x7fda13b9bb7c [ 303.897542][T16901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 303.897631][T16901] RSP: 002b:00007fda12207030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.897655][T16901] RAX: ffffffffffffffda RBX: 00007fda13db5fa0 RCX: 00007fda13b9bb7c [ 303.897669][T16901] RDX: 000000000000000f RSI: 00007fda122070a0 RDI: 0000000000000006 [ 303.897683][T16901] RBP: 00007fda12207090 R08: 0000000000000000 R09: 0000000000000000 [ 303.897698][T16901] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 303.897732][T16901] R13: 0000000000000000 R14: 00007fda13db5fa0 R15: 00007ffc301d9f68 [ 303.897757][T16901] [ 304.201558][T16908] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 304.293361][T16910] FAULT_INJECTION: forcing a failure. [ 304.293361][T16910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.306608][T16910] CPU: 1 UID: 0 PID: 16910 Comm: syz.8.4503 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 304.306640][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.306656][T16910] Call Trace: [ 304.306663][T16910] [ 304.306673][T16910] dump_stack_lvl+0xf2/0x150 [ 304.306719][T16910] dump_stack+0x15/0x1a [ 304.306825][T16910] should_fail_ex+0x24a/0x260 [ 304.306856][T16910] should_fail+0xb/0x10 [ 304.306974][T16910] should_fail_usercopy+0x1a/0x20 [ 304.307082][T16910] _copy_from_iter+0xd5/0xd00 [ 304.307117][T16910] ? kmalloc_reserve+0x16e/0x190 [ 304.307149][T16910] ? __build_skb_around+0x196/0x1f0 [ 304.307174][T16910] ? __alloc_skb+0x21f/0x310 [ 304.307195][T16910] ? __virt_addr_valid+0x1ed/0x250 [ 304.307221][T16910] ? __check_object_size+0x364/0x520 [ 304.307269][T16910] netlink_sendmsg+0x460/0x6e0 [ 304.307351][T16910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.307410][T16910] __sock_sendmsg+0x140/0x180 [ 304.307455][T16910] ____sys_sendmsg+0x326/0x4b0 [ 304.307538][T16910] __sys_sendmsg+0x19d/0x230 [ 304.307584][T16910] __x64_sys_sendmsg+0x46/0x50 [ 304.307613][T16910] x64_sys_call+0x2734/0x2dc0 [ 304.307707][T16910] do_syscall_64+0xc9/0x1c0 [ 304.307804][T16910] ? clear_bhb_loop+0x55/0xb0 [ 304.307839][T16910] ? clear_bhb_loop+0x55/0xb0 [ 304.307899][T16910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.307953][T16910] RIP: 0033:0x7f0eb4b4d169 [ 304.307968][T16910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.308044][T16910] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.308068][T16910] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 304.308083][T16910] RDX: 0000000004004100 RSI: 0000400000000180 RDI: 0000000000000003 [ 304.308099][T16910] RBP: 00007f0eb31b7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.308114][T16910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.308129][T16910] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 304.308150][T16910] [ 304.526076][T16920] FAULT_INJECTION: forcing a failure. [ 304.526076][T16920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.539286][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.7.4501 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 304.539319][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.539334][T16920] Call Trace: [ 304.539342][T16920] [ 304.539350][T16920] dump_stack_lvl+0xf2/0x150 [ 304.539383][T16920] dump_stack+0x15/0x1a [ 304.539410][T16920] should_fail_ex+0x24a/0x260 [ 304.539521][T16920] should_fail+0xb/0x10 [ 304.539555][T16920] should_fail_usercopy+0x1a/0x20 [ 304.539591][T16920] strncpy_from_user+0x25/0x210 [ 304.539617][T16920] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 304.539650][T16920] ? getname_flags+0x81/0x3b0 [ 304.539690][T16920] getname_flags+0xb0/0x3b0 [ 304.539736][T16920] user_path_at+0x26/0x120 [ 304.539768][T16920] __se_sys_pivot_root+0xca/0x1090 [ 304.539805][T16920] ? __rcu_read_unlock+0x4e/0x70 [ 304.539834][T16920] ? bpf_trace_run2+0x123/0x1d0 [ 304.539904][T16920] ? __bpf_trace_sys_enter+0x10/0x30 [ 304.539973][T16920] __x64_sys_pivot_root+0x31/0x40 [ 304.540013][T16920] x64_sys_call+0x1abf/0x2dc0 [ 304.540047][T16920] do_syscall_64+0xc9/0x1c0 [ 304.540097][T16920] ? clear_bhb_loop+0x55/0xb0 [ 304.540132][T16920] ? clear_bhb_loop+0x55/0xb0 [ 304.540166][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.540195][T16920] RIP: 0033:0x7fb932bad169 [ 304.540242][T16920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.540264][T16920] RSP: 002b:00007fb931211038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 304.540284][T16920] RAX: ffffffffffffffda RBX: 00007fb932dc5fa0 RCX: 00007fb932bad169 [ 304.540300][T16920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.540359][T16920] RBP: 00007fb931211090 R08: 0000000000000000 R09: 0000000000000000 [ 304.540400][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.540413][T16920] R13: 0000000000000000 R14: 00007fb932dc5fa0 R15: 00007fff83914058 [ 304.540435][T16920] [ 304.757745][T16913] syzkaller1: entered promiscuous mode [ 304.763313][T16913] syzkaller1: entered allmulticast mode [ 304.842789][T16924] FAULT_INJECTION: forcing a failure. [ 304.842789][T16924] name failslab, interval 1, probability 0, space 0, times 0 [ 304.855681][T16924] CPU: 1 UID: 0 PID: 16924 Comm: syz.7.4507 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 304.855776][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.855792][T16924] Call Trace: [ 304.855800][T16924] [ 304.855840][T16924] dump_stack_lvl+0xf2/0x150 [ 304.855905][T16924] dump_stack+0x15/0x1a [ 304.856006][T16924] should_fail_ex+0x24a/0x260 [ 304.856044][T16924] should_failslab+0x8f/0xb0 [ 304.856156][T16924] __kmalloc_noprof+0xab/0x3f0 [ 304.856276][T16924] ? bpf_test_init+0xa9/0x140 [ 304.856315][T16924] bpf_test_init+0xa9/0x140 [ 304.856348][T16924] bpf_prog_test_run_flow_dissector+0x126/0x350 [ 304.856431][T16924] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 304.856525][T16924] bpf_prog_test_run+0x20f/0x3a0 [ 304.856569][T16924] __sys_bpf+0x400/0x7a0 [ 304.856609][T16924] __x64_sys_bpf+0x43/0x50 [ 304.856642][T16924] x64_sys_call+0x2914/0x2dc0 [ 304.856731][T16924] do_syscall_64+0xc9/0x1c0 [ 304.856814][T16924] ? clear_bhb_loop+0x55/0xb0 [ 304.856966][T16924] ? clear_bhb_loop+0x55/0xb0 [ 304.857001][T16924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.857088][T16924] RIP: 0033:0x7fb932bad169 [ 304.857108][T16924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.857128][T16924] RSP: 002b:00007fb931211038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.857156][T16924] RAX: ffffffffffffffda RBX: 00007fb932dc5fa0 RCX: 00007fb932bad169 [ 304.857172][T16924] RDX: 0000000000000040 RSI: 0000400000000340 RDI: 000000000000000a [ 304.857188][T16924] RBP: 00007fb931211090 R08: 0000000000000000 R09: 0000000000000000 [ 304.857203][T16924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.857217][T16924] R13: 0000000000000000 R14: 00007fb932dc5fa0 R15: 00007fff83914058 [ 304.857237][T16924] [ 305.383347][T16937] random: crng reseeded on system resumption [ 305.600353][T16936] lo speed is unknown, defaulting to 1000 [ 305.898215][T16963] syzkaller1: entered promiscuous mode [ 305.905298][T16963] syzkaller1: entered allmulticast mode [ 305.936659][T16967] FAULT_INJECTION: forcing a failure. [ 305.936659][T16967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.949903][T16967] CPU: 1 UID: 0 PID: 16967 Comm: syz.8.4524 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 305.949934][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.949951][T16967] Call Trace: [ 305.949958][T16967] [ 305.949968][T16967] dump_stack_lvl+0xf2/0x150 [ 305.950002][T16967] dump_stack+0x15/0x1a [ 305.950028][T16967] should_fail_ex+0x24a/0x260 [ 305.950127][T16967] should_fail+0xb/0x10 [ 305.950187][T16967] should_fail_usercopy+0x1a/0x20 [ 305.950227][T16967] _copy_from_iter+0xd5/0xd00 [ 305.950261][T16967] ? kmalloc_reserve+0x16e/0x190 [ 305.950281][T16967] ? __build_skb_around+0x196/0x1f0 [ 305.950333][T16967] ? __alloc_skb+0x21f/0x310 [ 305.950355][T16967] ? __virt_addr_valid+0x1ed/0x250 [ 305.950390][T16967] ? __check_object_size+0x364/0x520 [ 305.950496][T16967] netlink_sendmsg+0x460/0x6e0 [ 305.950570][T16967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.950609][T16967] __sock_sendmsg+0x140/0x180 [ 305.950648][T16967] ____sys_sendmsg+0x326/0x4b0 [ 305.950683][T16967] __sys_sendmsg+0x19d/0x230 [ 305.950750][T16967] __x64_sys_sendmsg+0x46/0x50 [ 305.950781][T16967] x64_sys_call+0x2734/0x2dc0 [ 305.950809][T16967] do_syscall_64+0xc9/0x1c0 [ 305.950888][T16967] ? clear_bhb_loop+0x55/0xb0 [ 305.950919][T16967] ? clear_bhb_loop+0x55/0xb0 [ 305.950968][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.951074][T16967] RIP: 0033:0x7f0eb4b4d169 [ 305.951093][T16967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.951116][T16967] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.951136][T16967] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 305.951151][T16967] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000006 [ 305.951166][T16967] RBP: 00007f0eb31b7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.951181][T16967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.951196][T16967] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 305.951216][T16967] [ 306.360559][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 306.360586][ T29] audit: type=1326 audit(1740736338.599:28453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.425239][ T29] audit: type=1326 audit(1740736338.627:28454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.449131][ T29] audit: type=1326 audit(1740736338.627:28455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.472906][ T29] audit: type=1326 audit(1740736338.627:28456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.496561][ T29] audit: type=1326 audit(1740736338.636:28457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.520261][ T29] audit: type=1326 audit(1740736338.636:28458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.544052][ T29] audit: type=1326 audit(1740736338.636:28459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.567681][ T29] audit: type=1326 audit(1740736338.636:28460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.591713][ T29] audit: type=1326 audit(1740736338.636:28461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.615342][ T29] audit: type=1326 audit(1740736338.636:28462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16978 comm="syz.4.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 306.959328][T16992] netlink: 'syz.8.4535': attribute type 1 has an invalid length. [ 307.354035][T16996] hub 1-0:1.0: USB hub found [ 307.424906][T16996] hub 1-0:1.0: 8 ports detected [ 307.614223][T17000] lo speed is unknown, defaulting to 1000 [ 307.881332][T17010] FAULT_INJECTION: forcing a failure. [ 307.881332][T17010] name failslab, interval 1, probability 0, space 0, times 0 [ 307.894756][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.8.4540 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 307.894787][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.894849][T17010] Call Trace: [ 307.894858][T17010] [ 307.894867][T17010] dump_stack_lvl+0xf2/0x150 [ 307.894960][T17010] dump_stack+0x15/0x1a [ 307.894986][T17010] should_fail_ex+0x24a/0x260 [ 307.895021][T17010] should_failslab+0x8f/0xb0 [ 307.895099][T17010] __kmalloc_node_noprof+0xad/0x410 [ 307.895126][T17010] ? __vmalloc_node_range_noprof+0x3dc/0xe70 [ 307.895162][T17010] __vmalloc_node_range_noprof+0x3dc/0xe70 [ 307.895213][T17010] ? mod_objcg_state+0x2ea/0x4f0 [ 307.895238][T17010] ? mod_objcg_state+0x2ea/0x4f0 [ 307.895264][T17010] ? should_fail_ex+0x31/0x260 [ 307.895310][T17010] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 307.895364][T17010] __vmalloc_noprof+0x5e/0x70 [ 307.895396][T17010] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 307.895430][T17010] bpf_prog_alloc_no_stats+0x49/0x380 [ 307.895464][T17010] ? bpf_prog_alloc+0x28/0x150 [ 307.895514][T17010] bpf_prog_alloc+0x3a/0x150 [ 307.895546][T17010] bpf_prog_create_from_user+0x73/0x240 [ 307.895569][T17010] ? __pfx_seccomp_check_filter+0x10/0x10 [ 307.895598][T17010] do_seccomp+0x648/0xa60 [ 307.895620][T17010] ? cap_task_prctl+0x237/0x600 [ 307.895685][T17010] prctl_set_seccomp+0x4d/0x70 [ 307.895723][T17010] __se_sys_prctl+0x1e2/0x24c0 [ 307.895747][T17010] ? _parse_integer+0x27/0x30 [ 307.895773][T17010] ? kstrtoull+0x110/0x140 [ 307.895858][T17010] ? kstrtouint+0x77/0xc0 [ 307.895884][T17010] ? kstrtouint_from_user+0xb0/0xe0 [ 307.895987][T17010] ? 0xffffffff81000000 [ 307.896001][T17010] ? selinux_file_permission+0x22a/0x360 [ 307.896032][T17010] ? __rcu_read_unlock+0x4e/0x70 [ 307.896055][T17010] ? get_pid_task+0x8e/0xc0 [ 307.896140][T17010] ? proc_fail_nth_write+0x12a/0x150 [ 307.896170][T17010] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.896200][T17010] ? vfs_write+0x644/0x920 [ 307.896227][T17010] ? __fget_files+0x17c/0x1c0 [ 307.896332][T17010] ? fput+0x1c4/0x200 [ 307.896352][T17010] ? ksys_write+0x176/0x1b0 [ 307.896379][T17010] __x64_sys_prctl+0x67/0x80 [ 307.896399][T17010] x64_sys_call+0xff7/0x2dc0 [ 307.896427][T17010] do_syscall_64+0xc9/0x1c0 [ 307.896462][T17010] ? clear_bhb_loop+0x55/0xb0 [ 307.896490][T17010] ? clear_bhb_loop+0x55/0xb0 [ 307.896584][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.896614][T17010] RIP: 0033:0x7f0eb4b4d169 [ 307.896631][T17010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.896653][T17010] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 307.896673][T17010] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 307.896687][T17010] RDX: 0000400000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 307.896716][T17010] RBP: 00007f0eb31b7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.896728][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.896740][T17010] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 307.896758][T17010] [ 307.896829][T17010] warn_alloc: 1 callbacks suppressed [ 307.896839][T17010] syz.8.4540: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 308.252229][T17010] CPU: 0 UID: 0 PID: 17010 Comm: syz.8.4540 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 308.252378][T17010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.252389][T17010] Call Trace: [ 308.252396][T17010] [ 308.252403][T17010] dump_stack_lvl+0xf2/0x150 [ 308.252429][T17010] dump_stack+0x15/0x1a [ 308.252448][T17010] warn_alloc+0x145/0x1b0 [ 308.252530][T17010] ? should_failslab+0x8f/0xb0 [ 308.252559][T17010] __vmalloc_node_range_noprof+0x473/0xe70 [ 308.252622][T17010] ? should_fail_ex+0x31/0x260 [ 308.252651][T17010] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 308.252741][T17010] __vmalloc_noprof+0x5e/0x70 [ 308.252765][T17010] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 308.252791][T17010] bpf_prog_alloc_no_stats+0x49/0x380 [ 308.252844][T17010] ? bpf_prog_alloc+0x28/0x150 [ 308.252869][T17010] bpf_prog_alloc+0x3a/0x150 [ 308.252893][T17010] bpf_prog_create_from_user+0x73/0x240 [ 308.252912][T17010] ? __pfx_seccomp_check_filter+0x10/0x10 [ 308.253011][T17010] do_seccomp+0x648/0xa60 [ 308.253030][T17010] ? cap_task_prctl+0x237/0x600 [ 308.253058][T17010] prctl_set_seccomp+0x4d/0x70 [ 308.253087][T17010] __se_sys_prctl+0x1e2/0x24c0 [ 308.253108][T17010] ? _parse_integer+0x27/0x30 [ 308.253129][T17010] ? kstrtoull+0x110/0x140 [ 308.253189][T17010] ? kstrtouint+0x77/0xc0 [ 308.253215][T17010] ? kstrtouint_from_user+0xb0/0xe0 [ 308.253240][T17010] ? 0xffffffff81000000 [ 308.253288][T17010] ? selinux_file_permission+0x22a/0x360 [ 308.253314][T17010] ? __rcu_read_unlock+0x4e/0x70 [ 308.253335][T17010] ? get_pid_task+0x8e/0xc0 [ 308.253359][T17010] ? proc_fail_nth_write+0x12a/0x150 [ 308.253404][T17010] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 308.253458][T17010] ? vfs_write+0x644/0x920 [ 308.253541][T17010] ? __fget_files+0x17c/0x1c0 [ 308.253680][T17010] ? fput+0x1c4/0x200 [ 308.253696][T17010] ? ksys_write+0x176/0x1b0 [ 308.253765][T17010] __x64_sys_prctl+0x67/0x80 [ 308.253781][T17010] x64_sys_call+0xff7/0x2dc0 [ 308.253808][T17010] do_syscall_64+0xc9/0x1c0 [ 308.253852][T17010] ? clear_bhb_loop+0x55/0xb0 [ 308.253876][T17010] ? clear_bhb_loop+0x55/0xb0 [ 308.253917][T17010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.253940][T17010] RIP: 0033:0x7f0eb4b4d169 [ 308.253953][T17010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.254016][T17010] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 308.254032][T17010] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 308.254043][T17010] RDX: 0000400000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 308.254053][T17010] RBP: 00007f0eb31b7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.254109][T17010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.254119][T17010] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 308.254135][T17010] [ 308.254140][T17010] Mem-Info: [ 308.562674][T17010] active_anon:6320 inactive_anon:31 isolated_anon:0 [ 308.562674][T17010] active_file:9208 inactive_file:12559 isolated_file:0 [ 308.562674][T17010] unevictable:0 dirty:705 writeback:0 [ 308.562674][T17010] slab_reclaimable:3228 slab_unreclaimable:59267 [ 308.562674][T17010] mapped:32199 shmem:3425 pagetables:911 [ 308.562674][T17010] sec_pagetables:0 bounce:0 [ 308.562674][T17010] kernel_misc_reclaimable:0 [ 308.562674][T17010] free:1822651 free_pcp:7605 free_cma:0 [ 308.608319][T17010] Node 0 active_anon:25280kB inactive_anon:124kB active_file:36832kB inactive_file:50236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128796kB dirty:2820kB writeback:0kB shmem:13700kB writeback_tmp:0kB kernel_stack:3824kB pagetables:3644kB sec_pagetables:0kB all_unreclaimable? no [ 308.637044][T17010] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.664504][T17010] lowmem_reserve[]: 0 2885 7863 0 [ 308.669558][T17010] Node 0 DMA32 free:2950748kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 308.698860][T17010] lowmem_reserve[]: 0 0 4978 0 [ 308.704397][T17010] Node 0 Normal free:4324496kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:25280kB inactive_anon:124kB active_file:36832kB inactive_file:50236kB unevictable:0kB writepending:2820kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:26760kB local_pcp:12504kB free_cma:0kB [ 308.735505][T17010] lowmem_reserve[]: 0 0 0 0 [ 308.740659][T17010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.754104][T17010] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950748kB [ 308.770854][T17010] Node 0 Normal: 814*4kB (UME) 1322*8kB (UME) 1020*16kB (UME) 769*32kB (UME) 202*64kB (UME) 172*128kB (UME) 96*256kB (UME) 71*512kB (UM) 40*1024kB (UM) 40*2048kB (UME) 989*4096kB (UM) = 4324456kB [ 308.791033][T17010] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 308.801053][T17010] 25193 total pagecache pages [ 308.805746][T17010] 30 pages in swap cache [ 308.810012][T17010] Free swap = 124652kB [ 308.814974][T17010] Total swap = 124996kB [ 308.819144][T17010] 2097051 pages RAM [ 308.823529][T17010] 0 pages HighMem/MovableOnly [ 308.828198][T17010] 80064 pages reserved [ 309.245872][T17039] lo speed is unknown, defaulting to 1000 [ 309.641127][T17032] syzkaller1: entered promiscuous mode [ 309.646822][T17032] syzkaller1: entered allmulticast mode [ 309.715354][T17043] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 309.849655][T17043] hub 1-0:1.0: USB hub found [ 309.859860][T17043] hub 1-0:1.0: 8 ports detected [ 309.917830][T17061] program syz.1.4559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.387404][T17067] lo speed is unknown, defaulting to 1000 [ 310.445358][T17070] lo speed is unknown, defaulting to 1000 [ 310.596900][T17075] lo speed is unknown, defaulting to 1000 [ 310.745867][T17077] siw: device registration error -23 [ 310.780175][T17083] lo speed is unknown, defaulting to 1000 [ 310.927658][T17092] 9p: Unknown uid 00000000004294967295 [ 311.100637][T17090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4568'. [ 311.329340][T17109] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 311.419321][T17114] random: crng reseeded on system resumption [ 311.569057][T17116] netlink: 'syz.0.4577': attribute type 10 has an invalid length. [ 311.758658][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 311.758677][ T29] audit: type=1326 audit(1740736343.641:28532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.788682][ T29] audit: type=1326 audit(1740736343.641:28533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.812291][ T29] audit: type=1326 audit(1740736343.641:28534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.836210][ T29] audit: type=1326 audit(1740736343.650:28535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.860050][ T29] audit: type=1326 audit(1740736343.650:28536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.883668][ T29] audit: type=1326 audit(1740736343.650:28537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.907473][ T29] audit: type=1326 audit(1740736343.650:28538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.931112][ T29] audit: type=1326 audit(1740736343.650:28539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.954737][ T29] audit: type=1326 audit(1740736343.650:28540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 311.978546][ T29] audit: type=1326 audit(1740736343.650:28541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17123 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 312.248648][T17134] SELinux: syz.8.4579 (17134) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 312.301761][T17133] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4584'. [ 312.343762][T17133] geneve2: entered promiscuous mode [ 312.349038][T17133] geneve2: entered allmulticast mode [ 312.713773][T17149] FAULT_INJECTION: forcing a failure. [ 312.713773][T17149] name failslab, interval 1, probability 0, space 0, times 0 [ 312.726603][T17149] CPU: 1 UID: 0 PID: 17149 Comm: syz.8.4590 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 312.726690][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 312.726707][T17149] Call Trace: [ 312.726715][T17149] [ 312.726753][T17149] dump_stack_lvl+0xf2/0x150 [ 312.726787][T17149] dump_stack+0x15/0x1a [ 312.726814][T17149] should_fail_ex+0x24a/0x260 [ 312.726858][T17149] ? syslog_print+0x6f/0x540 [ 312.726899][T17149] should_failslab+0x8f/0xb0 [ 312.726934][T17149] __kmalloc_cache_noprof+0x4e/0x320 [ 312.727018][T17149] syslog_print+0x6f/0x540 [ 312.727061][T17149] ? avc_has_perm+0xd4/0x160 [ 312.727090][T17149] do_syslog+0x3a1/0x7f0 [ 312.727163][T17149] ? __bpf_trace_sys_enter+0x10/0x30 [ 312.727190][T17149] ? trace_sys_enter+0xcd/0x110 [ 312.727274][T17149] __x64_sys_syslog+0x43/0x50 [ 312.727389][T17149] x64_sys_call+0x29be/0x2dc0 [ 312.727420][T17149] do_syscall_64+0xc9/0x1c0 [ 312.727458][T17149] ? clear_bhb_loop+0x55/0xb0 [ 312.727558][T17149] ? clear_bhb_loop+0x55/0xb0 [ 312.727628][T17149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.727658][T17149] RIP: 0033:0x7f0eb4b4d169 [ 312.727722][T17149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.727793][T17149] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 312.727816][T17149] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 312.727830][T17149] RDX: 0000000000000057 RSI: 0000400000001940 RDI: 0000000000000002 [ 312.727855][T17149] RBP: 00007f0eb31b7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.727870][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.727884][T17149] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 312.727905][T17149] [ 312.921621][T17157] siw: device registration error -23 [ 313.002053][T17154] lo speed is unknown, defaulting to 1000 [ 313.202049][T17171] cgroup: subsys name conflicts with all [ 313.209918][T17170] cgroup: subsys name conflicts with all [ 313.301158][T17178] tmpfs: Bad value for 'mpol' [ 313.354828][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4598'. [ 313.484153][T17183] FAULT_INJECTION: forcing a failure. [ 313.484153][T17183] name failslab, interval 1, probability 0, space 0, times 0 [ 313.496852][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.0.4602 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 313.496937][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.496995][T17183] Call Trace: [ 313.497004][T17183] [ 313.497013][T17183] dump_stack_lvl+0xf2/0x150 [ 313.497044][T17183] dump_stack+0x15/0x1a [ 313.497065][T17183] should_fail_ex+0x24a/0x260 [ 313.497131][T17183] should_failslab+0x8f/0xb0 [ 313.497233][T17183] __kmalloc_noprof+0xab/0x3f0 [ 313.497254][T17183] ? genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 313.497290][T17183] genl_family_rcv_msg_attrs_parse+0x75/0x1a0 [ 313.497396][T17183] ? ns_capable+0x7d/0xb0 [ 313.497426][T17183] genl_rcv_msg+0x475/0x6d0 [ 313.497452][T17183] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 313.497536][T17183] ? __dev_queue_xmit+0xb6e/0x2090 [ 313.497561][T17183] ? queue_stack_map_push_elem+0x285/0x300 [ 313.497588][T17183] ? __rcu_read_unlock+0x4e/0x70 [ 313.497656][T17183] ? ref_tracker_free+0x3a5/0x410 [ 313.497694][T17183] netlink_rcv_skb+0x12c/0x230 [ 313.497791][T17183] ? __pfx_genl_rcv_msg+0x10/0x10 [ 313.497827][T17183] genl_rcv+0x28/0x40 [ 313.497852][T17183] netlink_unicast+0x599/0x670 [ 313.497941][T17183] netlink_sendmsg+0x5cc/0x6e0 [ 313.497977][T17183] ? __pfx_netlink_sendmsg+0x10/0x10 [ 313.498018][T17183] __sock_sendmsg+0x140/0x180 [ 313.498164][T17183] ____sys_sendmsg+0x326/0x4b0 [ 313.498200][T17183] __sys_sendmsg+0x19d/0x230 [ 313.498238][T17183] __x64_sys_sendmsg+0x46/0x50 [ 313.498262][T17183] x64_sys_call+0x2734/0x2dc0 [ 313.498298][T17183] do_syscall_64+0xc9/0x1c0 [ 313.498378][T17183] ? clear_bhb_loop+0x55/0xb0 [ 313.498411][T17183] ? clear_bhb_loop+0x55/0xb0 [ 313.498445][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.498479][T17183] RIP: 0033:0x7f9e8462d169 [ 313.498515][T17183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.498533][T17183] RSP: 002b:00007f9e82c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.498551][T17183] RAX: ffffffffffffffda RBX: 00007f9e84845fa0 RCX: 00007f9e8462d169 [ 313.498564][T17183] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 313.498576][T17183] RBP: 00007f9e82c97090 R08: 0000000000000000 R09: 0000000000000000 [ 313.498591][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.498679][T17183] R13: 0000000000000000 R14: 00007f9e84845fa0 R15: 00007fff18e13028 [ 313.498772][T17183] [ 314.162368][T17205] random: crng reseeded on system resumption [ 314.481683][T17224] syzkaller1: entered promiscuous mode [ 314.487274][T17224] syzkaller1: entered allmulticast mode [ 314.495581][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4615'. [ 314.518283][T17222] dummy0: entered promiscuous mode [ 314.525661][T17222] macvtap1: entered promiscuous mode [ 314.531108][T17222] macvtap1: entered allmulticast mode [ 314.536553][T17222] dummy0: entered allmulticast mode [ 314.563998][T17228] FAULT_INJECTION: forcing a failure. [ 314.563998][T17228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.577214][T17228] CPU: 1 UID: 0 PID: 17228 Comm: syz.8.4617 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 314.577242][T17228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.577335][T17228] Call Trace: [ 314.577344][T17228] [ 314.577354][T17228] dump_stack_lvl+0xf2/0x150 [ 314.577386][T17228] dump_stack+0x15/0x1a [ 314.577412][T17228] should_fail_ex+0x24a/0x260 [ 314.577463][T17228] should_fail+0xb/0x10 [ 314.577494][T17228] should_fail_usercopy+0x1a/0x20 [ 314.577575][T17228] _copy_from_user+0x1c/0xa0 [ 314.577618][T17228] __se_sys_mount+0x115/0x2d0 [ 314.577656][T17228] ? __bpf_trace_sys_enter+0x10/0x30 [ 314.577746][T17228] __x64_sys_mount+0x67/0x80 [ 314.577783][T17228] x64_sys_call+0x2c84/0x2dc0 [ 314.577817][T17228] do_syscall_64+0xc9/0x1c0 [ 314.577882][T17228] ? clear_bhb_loop+0x55/0xb0 [ 314.577933][T17228] ? clear_bhb_loop+0x55/0xb0 [ 314.578017][T17228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.578048][T17228] RIP: 0033:0x7f0eb4b4d169 [ 314.578066][T17228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.578089][T17228] RSP: 002b:00007f0eb31b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.578113][T17228] RAX: ffffffffffffffda RBX: 00007f0eb4d65fa0 RCX: 00007f0eb4b4d169 [ 314.578127][T17228] RDX: 0000400000000400 RSI: 00004000000003c0 RDI: 0000000000000000 [ 314.578142][T17228] RBP: 00007f0eb31b7090 R08: 00004000000009c0 R09: 0000000000000000 [ 314.578205][T17228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.578216][T17228] R13: 0000000000000000 R14: 00007f0eb4d65fa0 R15: 00007ffd62690198 [ 314.578317][T17228] [ 314.579303][T17228] tmpfs: Bad value for 'mpol' [ 314.888876][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4619'. [ 314.908824][T17222] dummy0: left allmulticast mode [ 314.913995][T17222] dummy0: left promiscuous mode [ 315.142615][T17241] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 315.302614][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 315.319639][T17249] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 315.326190][T17249] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.333829][T17249] vhci_hcd vhci_hcd.0: Device attached [ 315.345036][T17240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.376850][T17252] FAULT_INJECTION: forcing a failure. [ 315.376850][T17252] name failslab, interval 1, probability 0, space 0, times 0 [ 315.389533][T17252] CPU: 1 UID: 0 PID: 17252 Comm: syz.4.4626 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 315.389570][T17252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 315.389586][T17252] Call Trace: [ 315.389594][T17252] [ 315.389604][T17252] dump_stack_lvl+0xf2/0x150 [ 315.389633][T17252] dump_stack+0x15/0x1a [ 315.389676][T17252] should_fail_ex+0x24a/0x260 [ 315.389713][T17252] should_failslab+0x8f/0xb0 [ 315.389752][T17252] kmem_cache_alloc_node_noprof+0x59/0x320 [ 315.389778][T17252] ? __alloc_skb+0x10b/0x310 [ 315.389832][T17252] __alloc_skb+0x10b/0x310 [ 315.389854][T17252] netlink_alloc_large_skb+0xad/0xe0 [ 315.389890][T17252] netlink_sendmsg+0x3b4/0x6e0 [ 315.389988][T17252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.390054][T17252] __sock_sendmsg+0x140/0x180 [ 315.390094][T17252] ____sys_sendmsg+0x326/0x4b0 [ 315.390126][T17252] __sys_sendmsg+0x19d/0x230 [ 315.390297][T17252] __x64_sys_sendmsg+0x46/0x50 [ 315.390366][T17252] x64_sys_call+0x2734/0x2dc0 [ 315.390396][T17252] do_syscall_64+0xc9/0x1c0 [ 315.390429][T17252] ? clear_bhb_loop+0x55/0xb0 [ 315.390500][T17252] ? clear_bhb_loop+0x55/0xb0 [ 315.390534][T17252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.390638][T17252] RIP: 0033:0x7fda13b9d169 [ 315.390655][T17252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.390678][T17252] RSP: 002b:00007fda121e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.390699][T17252] RAX: ffffffffffffffda RBX: 00007fda13db6080 RCX: 00007fda13b9d169 [ 315.390712][T17252] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000b [ 315.390723][T17252] RBP: 00007fda121e6090 R08: 0000000000000000 R09: 0000000000000000 [ 315.390738][T17252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.390785][T17252] R13: 0000000000000001 R14: 00007fda13db6080 R15: 00007ffc301d9f68 [ 315.390808][T17252] [ 315.395698][T17240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.719780][ T3372] vhci_hcd: vhci_device speed not set [ 315.730886][T17248] dummy0: entered promiscuous mode [ 315.736070][T17248] macvtap1: entered promiscuous mode [ 315.742093][T17248] macvtap1: entered allmulticast mode [ 315.747519][T17248] dummy0: entered allmulticast mode [ 315.788599][ T3372] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 316.004764][T17250] vhci_hcd: connection reset by peer [ 316.011779][ T7867] vhci_hcd: stop threads [ 316.016190][ T7867] vhci_hcd: release socket [ 316.020726][ T7867] vhci_hcd: disconnect device [ 316.026085][T17259] usb usb6: usbfs: process 17259 (syz.0.4629) did not claim interface 0 before use [ 316.095786][T17265] netlink: 'syz.1.4631': attribute type 1 has an invalid length. [ 316.134456][T17265] hub 1-0:1.0: USB hub found [ 316.141219][T17265] hub 1-0:1.0: 8 ports detected [ 316.458539][T17269] lo speed is unknown, defaulting to 1000 [ 316.529180][T17276] random: crng reseeded on system resumption [ 316.538582][T17273] siw: device registration error -23 [ 316.616265][T17278] syzkaller1: entered promiscuous mode [ 316.621889][T17278] syzkaller1: entered allmulticast mode [ 316.714874][T17286] hub 1-0:1.0: USB hub found [ 316.719971][T17286] hub 1-0:1.0: 8 ports detected [ 316.795789][T17289] syz2: rxe_newlink: already configured on veth0_to_bond [ 316.928253][T17297] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4642' sets config #1 [ 316.958387][T17298] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4643' sets config #1 [ 316.995283][T17292] netlink: 'syz.7.4642': attribute type 1 has an invalid length. [ 317.012681][T17294] netlink: 'syz.4.4643': attribute type 1 has an invalid length. [ 317.020728][T17301] netlink: 'syz.0.4645': attribute type 1 has an invalid length. [ 317.112479][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 317.112495][ T29] audit: type=1326 audit(1740736348.664:29121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb4b44127 code=0x7ffc0000 [ 317.167380][ T29] audit: type=1326 audit(1740736348.692:29122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eb4ae9359 code=0x7ffc0000 [ 317.191042][ T29] audit: type=1326 audit(1740736348.692:29123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb4b44127 code=0x7ffc0000 [ 317.214605][ T29] audit: type=1326 audit(1740736348.692:29124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eb4ae9359 code=0x7ffc0000 [ 317.238248][ T29] audit: type=1326 audit(1740736348.692:29125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0eb4b4d169 code=0x7ffc0000 [ 317.261866][ T29] audit: type=1326 audit(1740736348.692:29126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb4b44127 code=0x7ffc0000 [ 317.285752][ T29] audit: type=1326 audit(1740736348.692:29127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eb4ae9359 code=0x7ffc0000 [ 317.309335][ T29] audit: type=1326 audit(1740736348.692:29128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f0eb4b4d169 code=0x7ffc0000 [ 317.332967][ T29] audit: type=1326 audit(1740736348.711:29129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0eb4b44127 code=0x7ffc0000 [ 317.356466][ T29] audit: type=1326 audit(1740736348.711:29130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17271 comm="syz.8.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0eb4ae9359 code=0x7ffc0000 [ 317.450550][T17301] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4645' sets config #1 [ 317.976120][T17320] Cannot find set identified by id 0 to match [ 318.083031][T17324] hub 1-0:1.0: USB hub found [ 318.087810][T17324] hub 1-0:1.0: 8 ports detected [ 318.184880][T17322] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 318.193835][T17322] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 318.202680][T17322] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 318.211495][T17322] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 318.338965][T17317] lo speed is unknown, defaulting to 1000 [ 318.347935][T17329] syzkaller1: entered promiscuous mode [ 318.353535][T17329] syzkaller1: entered allmulticast mode [ 318.597391][T17341] netlink: 'syz.1.4658': attribute type 1 has an invalid length. [ 318.616182][T17335] lo speed is unknown, defaulting to 1000 [ 318.718947][T17339] siw: device registration error -23 [ 318.758469][T17344] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4658' sets config #1 [ 318.847873][T17348] FAULT_INJECTION: forcing a failure. [ 318.847873][T17348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.861067][T17348] CPU: 1 UID: 0 PID: 17348 Comm: syz.0.4661 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 318.861099][T17348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.861115][T17348] Call Trace: [ 318.861123][T17348] [ 318.861132][T17348] dump_stack_lvl+0xf2/0x150 [ 318.861165][T17348] dump_stack+0x15/0x1a [ 318.861271][T17348] should_fail_ex+0x24a/0x260 [ 318.861327][T17348] should_fail+0xb/0x10 [ 318.861359][T17348] should_fail_usercopy+0x1a/0x20 [ 318.861426][T17348] _copy_from_user+0x1c/0xa0 [ 318.861572][T17348] do_ip6t_set_ctl+0x42c/0x8c0 [ 318.861598][T17348] ? __rcu_read_unlock+0x4e/0x70 [ 318.861633][T17348] nf_setsockopt+0x195/0x1b0 [ 318.861707][T17348] ipv6_setsockopt+0x10f/0x130 [ 318.861748][T17348] rawv6_setsockopt+0x21e/0x410 [ 318.861828][T17348] sock_common_setsockopt+0x64/0x80 [ 318.861868][T17348] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 318.862058][T17348] __sys_setsockopt+0x187/0x200 [ 318.862087][T17348] __x64_sys_setsockopt+0x66/0x80 [ 318.862115][T17348] x64_sys_call+0x282e/0x2dc0 [ 318.862147][T17348] do_syscall_64+0xc9/0x1c0 [ 318.862186][T17348] ? clear_bhb_loop+0x55/0xb0 [ 318.862269][T17348] ? clear_bhb_loop+0x55/0xb0 [ 318.862303][T17348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.862453][T17348] RIP: 0033:0x7f9e8462d169 [ 318.862471][T17348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.862493][T17348] RSP: 002b:00007f9e82c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.862516][T17348] RAX: ffffffffffffffda RBX: 00007f9e84845fa0 RCX: 00007f9e8462d169 [ 318.862532][T17348] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 318.862554][T17348] RBP: 00007f9e82c97090 R08: 0000000000000520 R09: 0000000000000000 [ 318.862572][T17348] R10: 0000400000000600 R11: 0000000000000246 R12: 0000000000000001 [ 318.862587][T17348] R13: 0000000000000000 R14: 00007f9e84845fa0 R15: 00007fff18e13028 [ 318.862618][T17348] [ 319.376545][T17360] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 319.498653][T17362] Cannot find set identified by id 0 to match [ 319.695265][T17370] syzkaller1: entered promiscuous mode [ 319.700845][T17370] syzkaller1: entered allmulticast mode [ 319.974888][T17374] siw: device registration error -23 [ 320.228963][T17373] lo speed is unknown, defaulting to 1000 [ 320.391030][T17375] lo speed is unknown, defaulting to 1000 [ 320.513068][T17382] lo speed is unknown, defaulting to 1000 [ 320.603262][T17391] usb usb6: usbfs: process 17391 (syz.4.4677) did not claim interface 0 before use [ 320.786559][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'. [ 320.837224][T17393] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4675' sets config #1 [ 320.857533][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 320.866550][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'. [ 321.040569][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4680'. [ 321.058796][T17402] siw: device registration error -23 [ 321.191947][T17410] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4681' sets config #1 [ 321.221528][T17408] netlink: 'syz.7.4681': attribute type 1 has an invalid length. [ 321.268879][ T3372] usb 15-1: enqueue for inactive port 0 [ 321.274490][ T3372] usb 15-1: enqueue for inactive port 0 [ 321.405815][ T3372] vhci_hcd: vhci_device speed not set [ 321.460722][T17397] lo speed is unknown, defaulting to 1000 [ 321.602797][T17426] usb usb6: usbfs: process 17426 (syz.8.4688) did not claim interface 0 before use [ 321.731597][T17428] hub 1-0:1.0: USB hub found [ 321.746701][T17428] hub 1-0:1.0: 8 ports detected [ 322.002930][T17439] syz2: rxe_newlink: already configured on veth0_to_bond [ 322.159384][T17448] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4697' sets config #0 [ 322.218458][T17450] program syz.4.4699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 322.378344][T17459] random: crng reseeded on system resumption [ 322.468465][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 322.468482][ T29] audit: type=1326 audit(1740736353.668:29313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 322.499117][ T29] audit: type=1326 audit(1740736353.696:29314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 322.522749][ T29] audit: type=1326 audit(1740736353.696:29315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 322.546471][ T29] audit: type=1326 audit(1740736353.696:29316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 322.570042][ T29] audit: type=1326 audit(1740736353.696:29317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 322.596317][ T29] audit: type=1326 audit(1740736353.790:29318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 322.620013][ T29] audit: type=1326 audit(1740736353.790:29319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 322.643735][ T29] audit: type=1326 audit(1740736353.790:29320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 322.689036][ T29] audit: type=1326 audit(1740736353.855:29321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 322.712755][ T29] audit: type=1326 audit(1740736353.855:29322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17456 comm="syz.4.4702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 322.809486][T17462] syzkaller1: entered promiscuous mode [ 322.815337][T17462] syzkaller1: entered allmulticast mode [ 323.249166][T17469] lo speed is unknown, defaulting to 1000 [ 323.317487][T17480] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4710' sets config #0 [ 323.435787][T17474] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 323.578487][T17490] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.718416][T17508] syzkaller1: entered promiscuous mode [ 324.724088][T17508] syzkaller1: entered allmulticast mode [ 325.043571][T17525] 9pnet_fd: Insufficient options for proto=fd [ 325.636112][T17557] syz!: rxe_newlink: already configured on team_slave_0 [ 325.932910][T17562] syzkaller1: entered promiscuous mode [ 325.938496][T17562] syzkaller1: entered allmulticast mode [ 326.066926][T17564] lo speed is unknown, defaulting to 1000 [ 326.191736][T17565] siw: device registration error -23 [ 326.254662][T17581] FAULT_INJECTION: forcing a failure. [ 326.254662][T17581] name failslab, interval 1, probability 0, space 0, times 0 [ 326.267470][T17581] CPU: 1 UID: 0 PID: 17581 Comm: syz.1.4743 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 326.267501][T17581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.267516][T17581] Call Trace: [ 326.267524][T17581] [ 326.267533][T17581] dump_stack_lvl+0xf2/0x150 [ 326.267566][T17581] dump_stack+0x15/0x1a [ 326.267591][T17581] should_fail_ex+0x24a/0x260 [ 326.267731][T17581] should_failslab+0x8f/0xb0 [ 326.267768][T17581] __kmalloc_node_noprof+0xad/0x410 [ 326.267793][T17581] ? crypto_create_tfm_node+0x57/0x230 [ 326.267834][T17581] crypto_create_tfm_node+0x57/0x230 [ 326.267872][T17581] crypto_ahash_init_tfm+0xda/0x200 [ 326.267975][T17581] crypto_create_tfm_node+0xe7/0x230 [ 326.268013][T17581] crypto_spawn_tfm2+0x43/0x70 [ 326.268047][T17581] crypto_gcm_init_tfm+0x32/0x100 [ 326.268152][T17581] ? __pfx_crypto_gcm_init_tfm+0x10/0x10 [ 326.268192][T17581] crypto_aead_init_tfm+0x9a/0xb0 [ 326.268217][T17581] crypto_create_tfm_node+0xe7/0x230 [ 326.268280][T17581] crypto_alloc_tfm_node+0xd1/0x250 [ 326.268397][T17581] crypto_alloc_aead+0x2f/0x40 [ 326.268422][T17581] macsec_validate_attr+0x109/0x600 [ 326.268457][T17581] rtnl_newlink+0x7c4/0x1250 [ 326.268487][T17581] ? strncpy_from_kernel_nofault+0x101/0x140 [ 326.268520][T17581] ? __rcu_read_unlock+0x34/0x70 [ 326.268551][T17581] ? bpf_trace_run3+0x12b/0x1d0 [ 326.268641][T17581] ? __kfree_skb+0x102/0x150 [ 326.268667][T17581] ? __rcu_read_unlock+0x4e/0x70 [ 326.268694][T17581] ? avc_has_perm_noaudit+0x1cc/0x210 [ 326.268768][T17581] ? selinux_capable+0x1f2/0x260 [ 326.268799][T17581] ? security_capable+0x81/0x90 [ 326.268846][T17581] ? ns_capable+0x7d/0xb0 [ 326.268873][T17581] ? __pfx_rtnl_newlink+0x10/0x10 [ 326.268988][T17581] rtnetlink_rcv_msg+0x651/0x710 [ 326.269068][T17581] ? ref_tracker_free+0x3a5/0x410 [ 326.269104][T17581] netlink_rcv_skb+0x12c/0x230 [ 326.269142][T17581] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.269205][T17581] rtnetlink_rcv+0x1c/0x30 [ 326.269233][T17581] netlink_unicast+0x599/0x670 [ 326.269344][T17581] netlink_sendmsg+0x5cc/0x6e0 [ 326.269441][T17581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.269481][T17581] __sock_sendmsg+0x140/0x180 [ 326.269519][T17581] ____sys_sendmsg+0x326/0x4b0 [ 326.269619][T17581] __sys_sendmsg+0x19d/0x230 [ 326.269662][T17581] __x64_sys_sendmsg+0x46/0x50 [ 326.269689][T17581] x64_sys_call+0x2734/0x2dc0 [ 326.269724][T17581] do_syscall_64+0xc9/0x1c0 [ 326.269762][T17581] ? clear_bhb_loop+0x55/0xb0 [ 326.269796][T17581] ? clear_bhb_loop+0x55/0xb0 [ 326.269837][T17581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.269940][T17581] RIP: 0033:0x7fd91290d169 [ 326.269957][T17581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.269979][T17581] RSP: 002b:00007fd910f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.270000][T17581] RAX: ffffffffffffffda RBX: 00007fd912b25fa0 RCX: 00007fd91290d169 [ 326.270015][T17581] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000006 [ 326.270060][T17581] RBP: 00007fd910f77090 R08: 0000000000000000 R09: 0000000000000000 [ 326.270075][T17581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.270090][T17581] R13: 0000000000000000 R14: 00007fd912b25fa0 R15: 00007fffd7457b48 [ 326.270112][T17581] [ 326.833058][T17586] lo speed is unknown, defaulting to 1000 [ 326.892783][T17588] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4746' sets config #1 [ 326.961977][T17591] serio: Serial port ptm0 [ 327.126694][T17585] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4745'. [ 327.157602][T17599] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4749'. [ 327.358172][T17610] ref_ctr going negative. vaddr: 0x400000ffc002, curr val: -29824, delta: 1 [ 327.367093][T17610] ref_ctr increment failed for inode: 0x921 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888108accd00 [ 327.501531][T17614] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4753' sets config #1 [ 327.628244][T17620] netlink: 'syz.0.4755': attribute type 1 has an invalid length. [ 327.644772][T17623] random: crng reseeded on system resumption [ 327.753785][T17608] lo speed is unknown, defaulting to 1000 [ 327.935739][T17620] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4755' sets config #1 [ 328.008120][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 328.008138][ T29] audit: type=1326 audit(1740736358.850:29526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 328.146142][T17638] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 328.174091][ T29] audit: type=1326 audit(1740736358.906:29527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 328.197752][ T29] audit: type=1326 audit(1740736358.906:29528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 328.221330][ T29] audit: type=1326 audit(1740736358.906:29529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 328.244884][ T29] audit: type=1326 audit(1740736358.906:29530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 328.268534][ T29] audit: type=1326 audit(1740736358.916:29531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 328.292118][ T29] audit: type=1326 audit(1740736358.916:29532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 328.315798][ T29] audit: type=1326 audit(1740736358.916:29533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 328.339442][ T29] audit: type=1326 audit(1740736358.944:29534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fda13b94127 code=0x7ffc0000 [ 328.362999][ T29] audit: type=1326 audit(1740736358.944:29535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17616 comm="syz.4.4754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda13b39359 code=0x7ffc0000 [ 328.844205][T17654] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4763'. [ 329.160019][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4767'. [ 329.382398][T17666] lo speed is unknown, defaulting to 1000 [ 329.552066][T17667] siw: device registration error -23 [ 329.864978][T17680] netlink: 'syz.0.4773': attribute type 1 has an invalid length. [ 330.098953][T17680] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4773' sets config #1 [ 330.169339][T17692] 9pnet_fd: Insufficient options for proto=fd [ 330.378246][T17702] FAULT_INJECTION: forcing a failure. [ 330.378246][T17702] name failslab, interval 1, probability 0, space 0, times 0 [ 330.390923][T17702] CPU: 1 UID: 0 PID: 17702 Comm: syz.1.4778 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 330.390989][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.391005][T17702] Call Trace: [ 330.391014][T17702] [ 330.391023][T17702] dump_stack_lvl+0xf2/0x150 [ 330.391056][T17702] dump_stack+0x15/0x1a [ 330.391129][T17702] should_fail_ex+0x24a/0x260 [ 330.391207][T17702] ? __rdma_create_id+0x49/0x330 [ 330.391236][T17702] should_failslab+0x8f/0xb0 [ 330.391274][T17702] __kmalloc_cache_noprof+0x4e/0x320 [ 330.391410][T17702] ? __pfx_ucma_event_handler+0x10/0x10 [ 330.391450][T17702] __rdma_create_id+0x49/0x330 [ 330.391477][T17702] ? __pfx_ucma_event_handler+0x10/0x10 [ 330.391507][T17702] rdma_create_user_id+0x5a/0xa0 [ 330.391557][T17702] ucma_create_id+0x16e/0x250 [ 330.391585][T17702] ucma_write+0x1a4/0x240 [ 330.391611][T17702] vfs_writev+0x3fa/0x880 [ 330.391702][T17702] ? __pfx_ucma_write+0x10/0x10 [ 330.391734][T17702] do_writev+0xf4/0x220 [ 330.391753][T17702] __x64_sys_writev+0x45/0x50 [ 330.391780][T17702] x64_sys_call+0x1fab/0x2dc0 [ 330.391835][T17702] do_syscall_64+0xc9/0x1c0 [ 330.391872][T17702] ? clear_bhb_loop+0x55/0xb0 [ 330.391906][T17702] ? clear_bhb_loop+0x55/0xb0 [ 330.391940][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.391973][T17702] RIP: 0033:0x7fd91290d169 [ 330.392074][T17702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.392096][T17702] RSP: 002b:00007fd910f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 330.392119][T17702] RAX: ffffffffffffffda RBX: 00007fd912b25fa0 RCX: 00007fd91290d169 [ 330.392135][T17702] RDX: 0000000000000003 RSI: 0000400000000000 RDI: 0000000000000003 [ 330.392150][T17702] RBP: 00007fd910f77090 R08: 0000000000000000 R09: 0000000000000000 [ 330.392178][T17702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.392190][T17702] R13: 0000000000000000 R14: 00007fd912b25fa0 R15: 00007fffd7457b48 [ 330.392268][T17702] [ 331.246335][T17723] syzkaller1: entered promiscuous mode [ 331.251976][T17723] syzkaller1: entered allmulticast mode [ 331.612924][T17727] lo speed is unknown, defaulting to 1000 [ 331.770089][T17728] siw: device registration error -23 [ 332.118920][T17733] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4790' sets config #1 [ 332.342564][T17739] netlink: 'syz.0.4793': attribute type 1 has an invalid length. [ 332.386310][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'. [ 332.446787][T17739] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4793' sets config #1 [ 332.582039][T17742] lo speed is unknown, defaulting to 1000 [ 332.737060][T17747] siw: device registration error -23 [ 332.892576][T17761] lo speed is unknown, defaulting to 1000 [ 332.978370][T17767] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4803' sets config #1 [ 333.051704][T17763] siw: device registration error -23 [ 333.429967][T17777] FAULT_INJECTION: forcing a failure. [ 333.429967][T17777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.443173][T17777] CPU: 1 UID: 0 PID: 17777 Comm: syz.4.4806 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 333.443205][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.443221][T17777] Call Trace: [ 333.443230][T17777] [ 333.443308][T17777] dump_stack_lvl+0xf2/0x150 [ 333.443344][T17777] dump_stack+0x15/0x1a [ 333.443371][T17777] should_fail_ex+0x24a/0x260 [ 333.443439][T17777] should_fail+0xb/0x10 [ 333.443472][T17777] should_fail_usercopy+0x1a/0x20 [ 333.443621][T17777] _copy_from_user+0x1c/0xa0 [ 333.443671][T17777] kstrtouint_from_user+0x76/0xe0 [ 333.443732][T17777] ? 0xffffffff81000000 [ 333.443750][T17777] ? selinux_file_permission+0x22a/0x360 [ 333.443786][T17777] proc_fail_nth_write+0x4f/0x150 [ 333.443922][T17777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 333.443965][T17777] vfs_write+0x27d/0x920 [ 333.443991][T17777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.444116][T17777] ? __fget_files+0x17c/0x1c0 [ 333.444164][T17777] ksys_write+0xe8/0x1b0 [ 333.444196][T17777] __x64_sys_write+0x42/0x50 [ 333.444228][T17777] x64_sys_call+0x287e/0x2dc0 [ 333.444293][T17777] do_syscall_64+0xc9/0x1c0 [ 333.444377][T17777] ? clear_bhb_loop+0x55/0xb0 [ 333.444439][T17777] ? clear_bhb_loop+0x55/0xb0 [ 333.444498][T17777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.444603][T17777] RIP: 0033:0x7fda13b9bc1f [ 333.444621][T17777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 333.444652][T17777] RSP: 002b:00007fda121c5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 333.444675][T17777] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda13b9bc1f [ 333.444693][T17777] RDX: 0000000000000001 RSI: 00007fda121c50a0 RDI: 000000000000000d [ 333.444708][T17777] RBP: 00007fda121c5090 R08: 0000000000000000 R09: 0000000000000000 [ 333.444723][T17777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 333.444738][T17777] R13: 0000000000000000 R14: 00007fda13db6160 R15: 00007ffc301d9f68 [ 333.444887][T17777] [ 333.444913][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 333.444926][ T29] audit: type=1400 audit(1740736363.920:29586): avc: denied { write } for pid=17772 comm="syz.4.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 333.675607][ T29] audit: type=1400 audit(1740736363.920:29587): avc: denied { create } for pid=17772 comm="syz.4.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.695328][ T29] audit: type=1400 audit(1740736363.920:29588): avc: denied { ioctl } for pid=17772 comm="syz.4.4806" path="socket:[64901]" dev="sockfs" ino=64901 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 333.819547][T17783] netlink: 'syz.0.4808': attribute type 1 has an invalid length. [ 333.854154][ T29] audit: type=1400 audit(1740736364.276:29589): avc: denied { create } for pid=17774 comm="syz.1.4807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 333.910075][T17785] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4808' sets config #1 [ 334.302912][T17793] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4810'. [ 334.721351][T17812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4820'. [ 334.730456][T17812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4820'. [ 334.739547][T17812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4820'. [ 334.858544][T17812] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4820'. [ 334.954002][T17811] lo speed is unknown, defaulting to 1000 [ 335.293309][T17816] lo speed is unknown, defaulting to 1000 [ 335.444860][T17817] siw: device registration error -23 [ 335.465048][T17822] netlink: 'syz.0.4822': attribute type 1 has an invalid length. [ 335.554894][T17820] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4823' sets config #1 [ 335.598830][T17824] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4822' sets config #1 [ 335.795202][T17830] syzkaller1: entered promiscuous mode [ 335.800725][T17830] syzkaller1: entered allmulticast mode [ 335.868161][T17832] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4827'. [ 336.295355][ T29] audit: type=1326 audit(1740736366.586:29590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.319233][ T29] audit: type=1326 audit(1740736366.595:29591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.342995][ T29] audit: type=1326 audit(1740736366.595:29592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.367131][ T29] audit: type=1326 audit(1740736366.595:29593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.390743][ T29] audit: type=1326 audit(1740736366.595:29594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.414507][ T29] audit: type=1326 audit(1740736366.595:29595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.4.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda13b9d169 code=0x7ffc0000 [ 336.764602][T17851] lo speed is unknown, defaulting to 1000 [ 336.806126][T17854] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4836' sets config #1 [ 336.941902][T17865] syzkaller1: entered promiscuous mode [ 336.947440][T17865] syzkaller1: entered allmulticast mode [ 337.293057][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 337.309530][T17876] vlan1: entered allmulticast mode [ 337.332053][T17877] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4845'. [ 337.373381][T17879] netlink: 332 bytes leftover after parsing attributes in process `syz.7.4848'. [ 337.389062][T17879] netlink: 'syz.7.4848': attribute type 9 has an invalid length. [ 337.396856][T17879] netlink: 108 bytes leftover after parsing attributes in process `syz.7.4848'. [ 337.731186][T17889] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4852' sets config #1 [ 338.048316][T17896] lo speed is unknown, defaulting to 1000 [ 338.151312][T17901] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4856' sets config #1 [ 338.168837][T17903] lo speed is unknown, defaulting to 1000 [ 338.219975][T17902] siw: device registration error -23 [ 338.348277][T17907] lo speed is unknown, defaulting to 1000 [ 338.437451][T17913] syzkaller1: entered promiscuous mode [ 338.443074][T17913] syzkaller1: entered allmulticast mode [ 338.482427][T17905] siw: device registration error -23 [ 338.930097][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 338.930112][ T29] audit: type=1400 audit(1740736369.074:29635): avc: denied { create } for pid=17928 comm="syz.4.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 338.974527][ T29] audit: type=1400 audit(1740736369.112:29636): avc: denied { connect } for pid=17928 comm="syz.4.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.010367][ T29] audit: type=1400 audit(1740736369.121:29637): avc: denied { connect } for pid=17928 comm="syz.4.4867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.063365][T17927] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4865' sets config #1 [ 339.087893][ T29] audit: type=1400 audit(1740736369.168:29638): avc: denied { write } for pid=17916 comm="syz.8.4863" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 339.127098][ T29] audit: type=1400 audit(1740736369.252:29639): avc: denied { write } for pid=17928 comm="syz.4.4867" path="socket:[60870]" dev="sockfs" ino=60870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.588410][T17949] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4873' sets config #1 [ 339.673195][T17951] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4872' sets config #1 [ 339.836720][T17961] __nla_validate_parse: 3 callbacks suppressed [ 339.836738][T17961] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4878'. [ 340.136393][T17973] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4882' sets config #1 [ 340.201043][T17965] lo speed is unknown, defaulting to 1000 [ 340.297555][T17981] syzkaller1: entered promiscuous mode [ 340.303148][T17981] syzkaller1: entered allmulticast mode [ 340.365965][T17971] lo speed is unknown, defaulting to 1000 [ 340.447460][T17974] siw: device registration error -23 [ 340.551705][T17976] lo speed is unknown, defaulting to 1000 [ 340.624124][T17978] siw: device registration error -23 [ 340.799126][ T29] audit: type=1400 audit(1740736370.823:29640): avc: denied { create } for pid=17982 comm="syz.0.4885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 340.834063][T17983] pim6reg1: entered promiscuous mode [ 340.839444][T17983] pim6reg1: entered allmulticast mode [ 340.858709][ T29] audit: type=1400 audit(1740736370.852:29641): avc: denied { write } for pid=17982 comm="syz.0.4885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 340.981453][ T29] audit: type=1326 audit(1740736370.992:29642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 341.005206][ T29] audit: type=1326 audit(1740736370.992:29643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 341.028999][ T29] audit: type=1326 audit(1740736370.992:29644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="syz.1.4890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91290d169 code=0x7ffc0000 [ 341.193062][T18003] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4894' sets config #1 [ 341.247186][T18013] netlink: 'syz.4.4897': attribute type 1 has an invalid length. [ 341.267899][T18008] syzkaller1: entered promiscuous mode [ 341.275848][T18014] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4896' sets config #1 [ 341.275853][T18008] syzkaller1: entered allmulticast mode [ 341.371076][T18013] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4897' sets config #1 [ 341.693255][T18021] lo speed is unknown, defaulting to 1000 [ 341.799926][T18022] lo speed is unknown, defaulting to 1000 [ 341.898629][T18023] siw: device registration error -23 [ 341.974794][T18036] usb usb6: usbfs: process 18036 (syz.0.4905) did not claim interface 0 before use [ 341.996493][T18038] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4906'. [ 342.052499][T18042] random: crng reseeded on system resumption [ 342.311958][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4911'. [ 342.425545][T18056] hub 1-0:1.0: USB hub found [ 342.430310][T18056] hub 1-0:1.0: 8 ports detected [ 342.475927][T18058] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4915' sets config #1 [ 342.554876][T18061] netlink: 'syz.1.4916': attribute type 1 has an invalid length. [ 342.644884][T18061] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4916' sets config #1 [ 342.656645][T18067] siw: device registration error -23 [ 342.751025][T18065] lo speed is unknown, defaulting to 1000 [ 343.242819][T18086] usb usb6: usbfs: process 18086 (syz.7.4920) did not claim interface 0 before use [ 343.411954][T18085] SELinux: syz.1.4925 (18085) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 343.453935][T18087] lo speed is unknown, defaulting to 1000 [ 343.563463][T18089] lo speed is unknown, defaulting to 1000 [ 343.641608][T18093] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 343.901943][T18097] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 343.908938][T18096] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4939'. [ 343.978448][T18101] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4930' sets config #1 [ 344.069666][T18108] siw: device registration error -23 [ 344.136680][T18104] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4931' sets config #1 [ 344.173124][T18111] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4945' sets config #1 [ 344.240594][T18116] usb usb6: usbfs: process 18116 (syz.1.4935) did not claim interface 0 before use [ 344.287133][T18103] lo speed is unknown, defaulting to 1000 [ 344.357978][T18122] usb usb6: usbfs: process 18122 (syz.8.4938) did not claim interface 0 before use [ 344.435134][T18120] lo speed is unknown, defaulting to 1000 [ 344.527721][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 344.527739][ T29] audit: type=1400 audit(1740736374.303:29785): avc: denied { execute } for pid=18128 comm="syz.8.4942" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 344.581767][T18124] siw: device registration error -23 [ 344.811501][T18129] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 344.950048][T18143] lo speed is unknown, defaulting to 1000 [ 344.968928][T18140] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4947'. [ 345.175082][T18144] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4949' sets config #1 [ 345.300710][T18154] usb usb6: usbfs: process 18154 (syz.1.4952) did not claim interface 0 before use [ 345.402944][T18159] syzkaller1: entered promiscuous mode [ 345.408703][T18159] syzkaller1: entered allmulticast mode [ 345.430330][T18164] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4956' sets config #1 [ 345.470206][T18165] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4955' sets config #1 [ 345.767395][T18174] siw: device registration error -23 [ 345.971226][T18172] IPv6: Can't replace route, no match found [ 346.118614][T18171] lo speed is unknown, defaulting to 1000 [ 346.264699][ T29] audit: type=1400 audit(1740736375.931:29786): avc: denied { ioctl } for pid=18181 comm="syz.0.4973" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.303141][T18183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.442733][T18192] usb usb6: usbfs: process 18192 (syz.8.4966) did not claim interface 0 before use [ 346.533199][T18183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.543322][ T29] audit: type=1326 audit(1740736376.193:29787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 346.568241][ T29] audit: type=1326 audit(1740736376.211:29788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 346.591949][ T29] audit: type=1326 audit(1740736376.211:29789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 346.615640][ T29] audit: type=1326 audit(1740736376.211:29790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18181 comm="syz.0.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8462d169 code=0x7ffc0000 [ 346.784792][T18196] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4968'. [ 347.362533][T18207] lo speed is unknown, defaulting to 1000 [ 347.452113][T18212] veth0_to_bond: entered promiscuous mode [ 347.490730][T18214] syzkaller1: entered promiscuous mode [ 347.496326][T18214] syzkaller1: entered allmulticast mode [ 347.525100][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4975'. [ 347.569498][T18212] veth0_to_bond (unregistering): left promiscuous mode [ 347.588093][T18212] bond0: (slave bond_slave_0): Releasing backup interface [ 347.616945][T18217] veth0_to_bond: entered promiscuous mode [ 347.701657][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'. [ 347.724295][T18217] veth0_to_bond (unregistering): left promiscuous mode [ 347.757261][T18222] lo speed is unknown, defaulting to 1000 [ 347.776054][T18225] usb usb6: usbfs: process 18225 (syz.7.4980) did not claim interface 0 before use [ 347.886940][T18224] siw: device registration error -23 [ 347.892456][ T7860] smc: removing ib device syz2 [ 348.119512][T18236] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 348.359026][ T29] audit: type=1400 audit(1740736377.886:29791): avc: denied { map_create } for pid=18241 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.425555][ T29] audit: type=1400 audit(1740736377.895:29792): avc: denied { map_read map_write } for pid=18241 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.445772][ T29] audit: type=1400 audit(1740736377.942:29793): avc: denied { create } for pid=18241 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.466253][ T29] audit: type=1400 audit(1740736377.951:29794): avc: denied { prog_load } for pid=18241 comm="syz.1.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 348.768530][T18253] syzkaller1: entered promiscuous mode [ 348.774127][T18253] syzkaller1: entered allmulticast mode [ 348.926707][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4993'. [ 348.937863][T18261] SELinux: syz.7.4995 (18261) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 349.161329][T18272] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4997'. [ 349.192143][T18269] usb usb6: usbfs: process 18269 (syz.4.4992) did not claim interface 0 before use [ 349.314988][T18277] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 349.431821][T18276] lo speed is unknown, defaulting to 1000 [ 349.899074][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 349.899093][ T29] audit: type=1400 audit(1740736379.326:29830): avc: denied { read write } for pid=18290 comm="syz.8.5003" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.022030][ T29] audit: type=1400 audit(1740736379.326:29831): avc: denied { open } for pid=18290 comm="syz.8.5003" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 350.137606][ T29] audit: type=1400 audit(1740736379.485:29832): avc: denied { create } for pid=18292 comm="syz.7.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.157279][ T29] audit: type=1400 audit(1740736379.485:29833): avc: denied { connect } for pid=18292 comm="syz.7.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.177169][ T29] audit: type=1400 audit(1740736379.485:29834): avc: denied { ioctl } for pid=18292 comm="syz.7.5004" path="socket:[67131]" dev="sockfs" ino=67131 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.202106][ T29] audit: type=1400 audit(1740736379.485:29835): avc: denied { write } for pid=18292 comm="syz.7.5004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.221712][ T29] audit: type=1400 audit(1740736379.551:29836): avc: denied { open } for pid=18296 comm="syz.0.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 350.241311][ T29] audit: type=1400 audit(1740736379.551:29837): avc: denied { kernel } for pid=18296 comm="syz.0.5008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 350.261037][ T29] audit: type=1400 audit(1740736379.551:29838): avc: denied { read } for pid=18296 comm="syz.0.5008" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 350.282395][ T29] audit: type=1400 audit(1740736379.551:29839): avc: denied { open } for pid=18296 comm="syz.0.5008" path="net:[4026532392]" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 350.413839][T18299] lo speed is unknown, defaulting to 1000 [ 350.468188][T18308] siw: device registration error -23 [ 351.075578][T18330] lo speed is unknown, defaulting to 1000 [ 351.114006][T18331] hub 1-0:1.0: USB hub found [ 351.118785][T18331] hub 1-0:1.0: 8 ports detected [ 351.759090][T18339] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5019' sets config #1 [ 352.023812][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5021'. [ 352.133699][T18358] siw: device registration error -23 [ 352.164754][T18355] IPv6: Can't replace route, no match found [ 352.279300][T18353] lo speed is unknown, defaulting to 1000 [ 352.408193][T18369] SELinux: syz.4.5029 (18369) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 352.539697][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5029'. [ 352.681336][T18371] lo speed is unknown, defaulting to 1000 [ 352.699267][T18374] siw: device registration error -23 [ 353.190339][T18393] infiniband syz2: set down [ 353.194921][T18393] infiniband syz2: added veth0_to_bond [ 353.235722][T18393] RDS/IB: syz2: added [ 353.249136][T18393] smc: adding ib device syz2 with port count 1 [ 353.272958][T18393] smc: ib device syz2 port 1 has pnetid [ 353.829312][T18404] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5038' sets config #1 [ 353.905284][T18402] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5040' sets config #1 [ 353.988601][T18411] IPv6: Can't replace route, no match found [ 354.286776][T18413] veth0_to_bond: entered promiscuous mode [ 354.292682][T18408] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5043'. [ 354.309260][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5044'. [ 354.381192][T18413] veth0_to_bond (unregistering): left promiscuous mode [ 354.491938][ T7846] smc: removing ib device syz2 [ 355.358183][T18445] IPv6: Can't replace route, no match found [ 355.374695][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 355.374712][ T29] audit: type=1400 audit(1740736384.452:29908): avc: denied { read } for pid=18446 comm="syz.8.5058" dev="nsfs" ino=4026533375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 355.454523][ T29] audit: type=1400 audit(1740736384.480:29909): avc: denied { open } for pid=18446 comm="syz.8.5058" path="net:[4026533375]" dev="nsfs" ino=4026533375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 355.478019][ T29] audit: type=1400 audit(1740736384.480:29910): avc: denied { create } for pid=18446 comm="syz.8.5058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.536471][T18440] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5054' sets config #1 [ 355.567080][T18447] lo speed is unknown, defaulting to 1000 [ 355.612838][ T29] audit: type=1400 audit(1740736384.574:29911): avc: denied { create } for pid=18446 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 355.632891][ T29] audit: type=1400 audit(1740736384.583:29912): avc: denied { write } for pid=18446 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 355.694176][ T29] audit: type=1400 audit(1740736384.695:29913): avc: denied { ioctl } for pid=18441 comm="syz.1.5055" path="socket:[61107]" dev="sockfs" ino=61107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 355.869352][ T29] audit: type=1400 audit(1740736384.836:29914): avc: denied { ioctl } for pid=18459 comm="syz.1.5063" path="socket:[67851]" dev="sockfs" ino=67851 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.894520][ T29] audit: type=1400 audit(1740736384.836:29915): avc: denied { module_request } for pid=18459 comm="syz.1.5063" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 355.917269][ T29] audit: type=1400 audit(1740736384.901:29916): avc: denied { sys_module } for pid=18459 comm="syz.1.5063" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 356.095541][T18466] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5065'. [ 356.192125][T18470] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.5067' sets config #1 [ 356.261116][ T29] audit: type=1326 audit(1740736385.275:29917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18473 comm="syz.7.5069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 356.395612][T18476] lo speed is unknown, defaulting to 1000 [ 356.405580][T18478] siw: device registration error -23 [ 356.497915][T18480] random: crng reseeded on system resumption [ 356.625967][T18482] IPv6: Can't replace route, no match found [ 356.974136][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5068'. [ 357.317526][T18501] lo speed is unknown, defaulting to 1000 [ 357.356677][T18509] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5080'. [ 357.412661][T18510] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5081' sets config #1 [ 357.542854][T18514] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.5083' sets config #1 [ 357.616479][T18519] lo speed is unknown, defaulting to 1000 [ 357.634280][T18522] siw: device registration error -23 [ 357.714469][T18521] infiniband syz2: set active [ 357.719223][T18521] infiniband syz2: added veth0_to_bond [ 357.754073][T18521] RDS/IB: syz2: added [ 357.778223][T18521] smc: adding ib device syz2 with port count 1 [ 357.843452][T18521] smc: ib device syz2 port 1 has pnetid [ 357.893632][T18528] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.5088' sets config #1 [ 358.045518][T18533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5091'. [ 358.158032][T18530] random: crng reseeded on system resumption [ 358.524026][T18549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5096'. [ 358.545036][T18551] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.5097' sets config #1 [ 358.781961][T18557] siw: device registration error -23 [ 359.126098][T18555] lo speed is unknown, defaulting to 1000 [ 359.198433][T18564] lo speed is unknown, defaulting to 1000 [ 359.222184][T18572] veth0_to_bond: entered promiscuous mode [ 359.243613][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5105'. [ 359.296039][T18572] veth0_to_bond (unregistering): left promiscuous mode [ 359.319402][ T1682] smc: removing ib device syz2 [ 359.327779][T18572] bond0: (slave bond_slave_0): Releasing backup interface [ 359.339920][T18570] siw: device registration error -23 [ 359.743582][T18563] lo speed is unknown, defaulting to 1000 [ 359.984906][T18578] lo speed is unknown, defaulting to 1000 [ 360.244652][T18595] random: crng reseeded on system resumption [ 360.394282][T18596] SELinux: syz.0.5113 (18596) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 360.421293][T18600] syzkaller1: entered promiscuous mode [ 360.427086][T18600] syzkaller1: entered allmulticast mode [ 360.674917][T18605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5113'. [ 360.730165][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 360.730182][ T29] audit: type=1326 audit(1740736389.457:30392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb932ba4127 code=0x7ffc0000 [ 360.795514][T18605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.803106][T18605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.914351][ T29] audit: type=1326 audit(1740736389.616:30393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb932b49359 code=0x7ffc0000 [ 360.943427][ T29] audit: type=1326 audit(1740736389.662:30394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb932ba4127 code=0x7ffc0000 [ 360.967085][ T29] audit: type=1326 audit(1740736389.662:30395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb932b49359 code=0x7ffc0000 [ 360.990695][ T29] audit: type=1326 audit(1740736389.662:30396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 361.016181][ T29] audit: type=1326 audit(1740736389.728:30397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb932ba4127 code=0x7ffc0000 [ 361.039836][ T29] audit: type=1326 audit(1740736389.728:30398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb932b49359 code=0x7ffc0000 [ 361.063831][ T29] audit: type=1326 audit(1740736389.728:30399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18589 comm="syz.7.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb932bad169 code=0x7ffc0000 [ 361.417336][T18605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.424800][T18605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.543453][T18620] siw: device registration error -23 [ 361.882987][T18616] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5118'. [ 362.014437][T18618] lo speed is unknown, defaulting to 1000 [ 362.042309][T18626] siw: device registration error -23 [ 362.349221][T18640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5127'. [ 362.438386][T18625] lo speed is unknown, defaulting to 1000 [ 362.586224][ T29] audit: type=1400 audit(1740736391.187:30400): avc: denied { read } for pid=18644 comm="syz.1.5129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 362.606830][ T29] audit: type=1400 audit(1740736391.196:30401): avc: denied { name_bind } for pid=18643 comm="syz.8.5128" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 362.639913][T18655] IPv6: Can't replace route, no match found [ 362.672647][ C1] ================================================================== [ 362.680774][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 362.688007][ C1] [ 362.690332][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 0: [ 362.698402][ C1] can_rcv_filter+0xd1/0x4c0 [ 362.703147][ C1] can_receive+0x182/0x1f0 [ 362.707613][ C1] canfd_rcv+0xe7/0x180 [ 362.711776][ C1] __netif_receive_skb+0x123/0x280 [ 362.716902][ C1] process_backlog+0x22e/0x440 [ 362.721685][ C1] __napi_poll+0x63/0x3c0 [ 362.726028][ C1] net_rx_action+0x3a1/0x7f0 [ 362.730747][ C1] handle_softirqs+0xbf/0x280 [ 362.735446][ C1] do_softirq+0x5e/0x90 [ 362.739621][ C1] __local_bh_enable_ip+0x6e/0x70 [ 362.744659][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 362.749697][ C1] lock_sock_nested+0x10f/0x140 [ 362.754561][ C1] bcm_release+0x156/0x5d0 [ 362.758985][ C1] sock_close+0x68/0x150 [ 362.763244][ C1] __fput+0x2ac/0x640 [ 362.767233][ C1] ____fput+0x1c/0x30 [ 362.771224][ C1] task_work_run+0x13a/0x1a0 [ 362.775826][ C1] syscall_exit_to_user_mode+0xa8/0x120 [ 362.781384][ C1] do_syscall_64+0xd6/0x1c0 [ 362.785903][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.791807][ C1] [ 362.794128][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 1: [ 362.802197][ C1] can_rcv_filter+0xd1/0x4c0 [ 362.806796][ C1] can_receive+0x182/0x1f0 [ 362.811221][ C1] canfd_rcv+0xe7/0x180 [ 362.815402][ C1] __netif_receive_skb+0x123/0x280 [ 362.820529][ C1] process_backlog+0x22e/0x440 [ 362.825308][ C1] __napi_poll+0x63/0x3c0 [ 362.829734][ C1] net_rx_action+0x3a1/0x7f0 [ 362.834336][ C1] handle_softirqs+0xbf/0x280 [ 362.839055][ C1] run_ksoftirqd+0x1c/0x30 [ 362.843485][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 362.848431][ C1] kthread+0x4ae/0x520 [ 362.852512][ C1] ret_from_fork+0x4b/0x60 [ 362.856959][ C1] ret_from_fork_asm+0x1a/0x30 [ 362.861734][ C1] [ 362.864057][ C1] value changed: 0x000000000036fe6c -> 0x000000000036fe6d [ 362.871253][ C1] [ 362.873590][ C1] Reported by Kernel Concurrency Sanitizer on: [ 362.879745][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 362.890335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 362.900439][ C1] ================================================================== [ 362.922091][ C1] ================================================================== [ 362.930220][ C1] BUG: KCSAN: data-race in can_send / can_send [ 362.936403][ C1] [ 362.938744][ C1] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 0: [ 362.946834][ C1] can_send+0x5b6/0x6d0 [ 362.951025][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 362.955750][ C1] can_rcv_filter+0xbf/0x4c0 [ 362.960376][ C1] can_receive+0x182/0x1f0 [ 362.964833][ C1] canfd_rcv+0xe7/0x180 [ 362.969034][ C1] __netif_receive_skb+0x123/0x280 [ 362.974181][ C1] process_backlog+0x22e/0x440 [ 362.978979][ C1] __napi_poll+0x63/0x3c0 [ 362.983344][ C1] net_rx_action+0x3a1/0x7f0 [ 362.987983][ C1] handle_softirqs+0xbf/0x280 [ 362.992689][ C1] do_softirq+0x5e/0x90 [ 362.996875][ C1] __local_bh_enable_ip+0x6e/0x70 [ 363.001929][ C1] fpu_clone+0x244/0x560 [ 363.006205][ C1] copy_thread+0x17d/0x390 [ 363.010655][ C1] copy_process+0xd9f/0x1f50 [ 363.015271][ C1] kernel_clone+0x167/0x5e0 [ 363.019806][ C1] __se_sys_clone3+0x1c1/0x200 [ 363.024610][ C1] __x64_sys_clone3+0x31/0x40 [ 363.029318][ C1] x64_sys_call+0x2d56/0x2dc0 [ 363.034023][ C1] do_syscall_64+0xc9/0x1c0 [ 363.038554][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.044474][ C1] [ 363.046808][ C1] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 1: [ 363.054887][ C1] can_send+0x5b6/0x6d0 [ 363.059060][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 363.063767][ C1] can_rcv_filter+0xbf/0x4c0 [ 363.068386][ C1] can_receive+0x182/0x1f0 [ 363.072818][ C1] canfd_rcv+0xe7/0x180 [ 363.076993][ C1] __netif_receive_skb+0x123/0x280 [ 363.082144][ C1] process_backlog+0x22e/0x440 [ 363.086938][ C1] __napi_poll+0x63/0x3c0 [ 363.091291][ C1] net_rx_action+0x3a1/0x7f0 [ 363.095908][ C1] handle_softirqs+0xbf/0x280 [ 363.100691][ C1] do_softirq+0x5e/0x90 [ 363.104874][ C1] __local_bh_enable_ip+0x6e/0x70 [ 363.109926][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 363.114895][ C1] lock_sock_nested+0x10f/0x140 [ 363.119823][ C1] tcp_sock_set_nodelay+0x1c/0xa0 [ 363.124871][ C1] rds_tcp_tune+0x3b/0x2d0 [ 363.129304][ C1] rds_tcp_conn_path_connect+0x1a5/0x440 [ 363.134977][ C1] rds_connect_worker+0x12c/0x1b0 [ 363.140019][ C1] process_scheduled_works+0x4db/0xa20 [ 363.145591][ C1] worker_thread+0x51d/0x6f0 [ 363.150217][ C1] kthread+0x4ae/0x520 [ 363.154316][ C1] ret_from_fork+0x4b/0x60 [ 363.158881][ C1] ret_from_fork_asm+0x1a/0x30 [ 363.163672][ C1] [ 363.166007][ C1] value changed: 0x0000000000006c7b -> 0x0000000000006c7c [ 363.173209][ C1] [ 363.175541][ C1] Reported by Kernel Concurrency Sanitizer on: [ 363.181709][ C1] CPU: 1 UID: 0 PID: 7868 Comm: kworker/u8:60 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 363.192670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.202749][ C1] Workqueue: krdsd rds_connect_worker [ 363.208219][ C1] ================================================================== [ 363.245993][ C0] ================================================================== [ 363.254119][ C0] BUG: KCSAN: data-race in can_send / can_send [ 363.260299][ C0] [ 363.262639][ C0] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 1: [ 363.270719][ C0] can_send+0x5a2/0x6d0 [ 363.274898][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 363.279623][ C0] can_rcv_filter+0xbf/0x4c0 [ 363.284232][ C0] can_receive+0x182/0x1f0 [ 363.288669][ C0] canfd_rcv+0xe7/0x180 [ 363.293096][ C0] __netif_receive_skb+0x123/0x280 [ 363.298233][ C0] process_backlog+0x22e/0x440 [ 363.303021][ C0] __napi_poll+0x63/0x3c0 [ 363.307364][ C0] net_rx_action+0x3a1/0x7f0 [ 363.312009][ C0] handle_softirqs+0xbf/0x280 [ 363.316704][ C0] do_softirq+0x5e/0x90 [ 363.320867][ C0] __local_bh_enable_ip+0x6e/0x70 [ 363.325901][ C0] wg_timers_any_authenticated_packet_traversal+0xe5/0x110 [ 363.333116][ C0] wg_packet_tx_worker+0xe9/0x360 [ 363.338163][ C0] process_scheduled_works+0x4db/0xa20 [ 363.343636][ C0] worker_thread+0x51d/0x6f0 [ 363.348241][ C0] kthread+0x4ae/0x520 [ 363.352319][ C0] ret_from_fork+0x4b/0x60 [ 363.356748][ C0] ret_from_fork_asm+0x1a/0x30 [ 363.361524][ C0] [ 363.363844][ C0] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 0: [ 363.371906][ C0] can_send+0x5a2/0x6d0 [ 363.376073][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 363.380796][ C0] can_rcv_filter+0xbf/0x4c0 [ 363.385499][ C0] can_receive+0x182/0x1f0 [ 363.389925][ C0] canfd_rcv+0xe7/0x180 [ 363.394084][ C0] __netif_receive_skb+0x123/0x280 [ 363.399208][ C0] process_backlog+0x22e/0x440 [ 363.403984][ C0] __napi_poll+0x63/0x3c0 [ 363.408329][ C0] net_rx_action+0x3a1/0x7f0 [ 363.412932][ C0] handle_softirqs+0xbf/0x280 [ 363.417614][ C0] do_softirq+0x5e/0x90 [ 363.421778][ C0] __local_bh_enable_ip+0x6e/0x70 [ 363.426817][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 363.431761][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 363.437399][ C0] process_scheduled_works+0x4db/0xa20 [ 363.442864][ C0] worker_thread+0x51d/0x6f0 [ 363.447458][ C0] kthread+0x4ae/0x520 [ 363.451537][ C0] ret_from_fork+0x4b/0x60 [ 363.455964][ C0] ret_from_fork_asm+0x1a/0x30 [ 363.460741][ C0] [ 363.463073][ C0] value changed: 0x000000000037567f -> 0x0000000000375680 [ 363.470180][ C0] [ 363.472504][ C0] Reported by Kernel Concurrency Sanitizer on: [ 363.478649][ C0] CPU: 0 UID: 0 PID: 7846 Comm: kworker/u8:40 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 363.489588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.499650][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 363.506428][ C0] ================================================================== [ 363.530223][ C0] ================================================================== [ 363.538361][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 363.545608][ C0] [ 363.547939][ C0] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 1: [ 363.556012][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 363.560719][ C0] can_rcv_filter+0xbf/0x4c0 [ 363.565353][ C0] can_receive+0x182/0x1f0 [ 363.569787][ C0] canfd_rcv+0xe7/0x180 [ 363.573991][ C0] __netif_receive_skb+0x123/0x280 [ 363.579133][ C0] process_backlog+0x22e/0x440 [ 363.583918][ C0] __napi_poll+0x63/0x3c0 [ 363.588276][ C0] net_rx_action+0x3a1/0x7f0 [ 363.592900][ C0] handle_softirqs+0xbf/0x280 [ 363.597612][ C0] run_ksoftirqd+0x1c/0x30 [ 363.602140][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 363.607099][ C0] kthread+0x4ae/0x520 [ 363.611193][ C0] ret_from_fork+0x4b/0x60 [ 363.615632][ C0] ret_from_fork_asm+0x1a/0x30 [ 363.620423][ C0] [ 363.622754][ C0] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 0: [ 363.630846][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 363.635555][ C0] can_rcv_filter+0xbf/0x4c0 [ 363.640209][ C0] can_receive+0x182/0x1f0 [ 363.644657][ C0] canfd_rcv+0xe7/0x180 [ 363.648832][ C0] __netif_receive_skb+0x123/0x280 [ 363.653969][ C0] process_backlog+0x22e/0x440 [ 363.658766][ C0] __napi_poll+0x63/0x3c0 [ 363.663117][ C0] net_rx_action+0x3a1/0x7f0 [ 363.667736][ C0] handle_softirqs+0xbf/0x280 [ 363.672432][ C0] do_softirq+0x5e/0x90 [ 363.676607][ C0] __local_bh_enable_ip+0x6e/0x70 [ 363.681750][ C0] _raw_write_unlock_bh+0x1f/0x30 [ 363.686802][ C0] neigh_parms_alloc+0x280/0x320 [ 363.691764][ C0] ipv6_add_dev+0x211/0xab0 [ 363.696305][ C0] addrconf_notify+0x407/0x950 [ 363.701104][ C0] raw_notifier_call_chain+0x6f/0x1d0 [ 363.706501][ C0] call_netdevice_notifiers_info+0xae/0x100 [ 363.712428][ C0] register_netdevice+0xcf4/0xeb0 [ 363.717470][ C0] tun_set_iff+0x609/0x8c0 [ 363.721909][ C0] __tun_chr_ioctl+0x66d/0x1800 [ 363.726766][ C0] tun_chr_ioctl+0x27/0x30 [ 363.731188][ C0] __se_sys_ioctl+0xc9/0x140 [ 363.735794][ C0] __x64_sys_ioctl+0x43/0x50 [ 363.740424][ C0] x64_sys_call+0x1690/0x2dc0 [ 363.745112][ C0] do_syscall_64+0xc9/0x1c0 [ 363.749633][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.755548][ C0] [ 363.757870][ C0] value changed: 0x00376ea3 -> 0x00376ea5 [ 363.763618][ C0] [ 363.766026][ C0] Reported by Kernel Concurrency Sanitizer on: [ 363.772261][ C0] CPU: 0 UID: 0 PID: 18658 Comm: syz.1.5129 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 363.783034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 363.793098][ C0] ================================================================== [ 365.904748][ C1] ================================================================== [ 365.912968][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 365.920292][ C1] [ 365.922627][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 0: [ 365.930708][ C1] can_rcv_filter+0xd1/0x4c0 [ 365.935335][ C1] can_receive+0x182/0x1f0 [ 365.939820][ C1] canfd_rcv+0xe7/0x180 [ 365.944020][ C1] __netif_receive_skb+0x123/0x280 [ 365.949155][ C1] process_backlog+0x22e/0x440 [ 365.953948][ C1] __napi_poll+0x63/0x3c0 [ 365.958296][ C1] net_rx_action+0x3a1/0x7f0 [ 365.962921][ C1] handle_softirqs+0xbf/0x280 [ 365.967631][ C1] do_softirq+0x5e/0x90 [ 365.971821][ C1] __local_bh_enable_ip+0x6e/0x70 [ 365.976888][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 365.981846][ C1] wg_packet_encrypt_worker+0x180/0xb80 [ 365.987432][ C1] process_scheduled_works+0x4db/0xa20 [ 365.992913][ C1] worker_thread+0x51d/0x6f0 [ 365.997522][ C1] kthread+0x4ae/0x520 [ 366.001616][ C1] ret_from_fork+0x4b/0x60 [ 366.006060][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.010861][ C1] [ 366.013196][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 1: [ 366.021276][ C1] can_rcv_filter+0xd1/0x4c0 [ 366.025890][ C1] can_receive+0x182/0x1f0 [ 366.030340][ C1] canfd_rcv+0xe7/0x180 [ 366.034555][ C1] __netif_receive_skb+0x123/0x280 [ 366.039695][ C1] process_backlog+0x22e/0x440 [ 366.044491][ C1] __napi_poll+0x63/0x3c0 [ 366.048849][ C1] net_rx_action+0x3a1/0x7f0 [ 366.053470][ C1] handle_softirqs+0xbf/0x280 [ 366.058179][ C1] do_softirq+0x5e/0x90 [ 366.062355][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.067403][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 366.072394][ C1] wg_packet_encrypt_worker+0x180/0xb80 [ 366.077979][ C1] process_scheduled_works+0x4db/0xa20 [ 366.083543][ C1] worker_thread+0x51d/0x6f0 [ 366.088156][ C1] kthread+0x4ae/0x520 [ 366.092253][ C1] ret_from_fork+0x4b/0x60 [ 366.096715][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.101524][ C1] [ 366.103859][ C1] value changed: 0x00000000003aeec7 -> 0x00000000003aeec8 [ 366.110982][ C1] [ 366.113315][ C1] Reported by Kernel Concurrency Sanitizer on: [ 366.119475][ C1] CPU: 1 UID: 0 PID: 2963 Comm: kworker/1:2 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 366.130259][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.140337][ C1] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 366.146880][ C1] ================================================================== [ 366.200289][ C1] ================================================================== [ 366.208520][ C1] BUG: KCSAN: data-race in can_send / can_send [ 366.214707][ C1] [ 366.217043][ C1] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 0: [ 366.225135][ C1] can_send+0x5b6/0x6d0 [ 366.229323][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 366.234038][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.238753][ C1] can_receive+0x182/0x1f0 [ 366.243245][ C1] canfd_rcv+0xe7/0x180 [ 366.247428][ C1] __netif_receive_skb+0x123/0x280 [ 366.252655][ C1] process_backlog+0x22e/0x440 [ 366.257457][ C1] __napi_poll+0x63/0x3c0 [ 366.261811][ C1] net_rx_action+0x3a1/0x7f0 [ 366.266451][ C1] handle_softirqs+0xbf/0x280 [ 366.271155][ C1] do_softirq+0x5e/0x90 [ 366.275334][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.280378][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 366.285332][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 366.290993][ C1] process_scheduled_works+0x4db/0xa20 [ 366.296475][ C1] worker_thread+0x51d/0x6f0 [ 366.301080][ C1] kthread+0x4ae/0x520 [ 366.305174][ C1] ret_from_fork+0x4b/0x60 [ 366.309613][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.314399][ C1] [ 366.316728][ C1] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 1: [ 366.324899][ C1] can_send+0x5b6/0x6d0 [ 366.329073][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 366.333783][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.338396][ C1] can_receive+0x182/0x1f0 [ 366.342831][ C1] canfd_rcv+0xe7/0x180 [ 366.347025][ C1] __netif_receive_skb+0x123/0x280 [ 366.352183][ C1] process_backlog+0x22e/0x440 [ 366.357100][ C1] __napi_poll+0x63/0x3c0 [ 366.361472][ C1] net_rx_action+0x3a1/0x7f0 [ 366.366111][ C1] handle_softirqs+0xbf/0x280 [ 366.370823][ C1] do_softirq+0x5e/0x90 [ 366.375008][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.380057][ C1] _raw_write_unlock_bh+0x1f/0x30 [ 366.385284][ C1] neigh_periodic_work+0x605/0x6b0 [ 366.390428][ C1] process_scheduled_works+0x4db/0xa20 [ 366.395919][ C1] worker_thread+0x51d/0x6f0 [ 366.400517][ C1] kthread+0x4ae/0x520 [ 366.404610][ C1] ret_from_fork+0x4b/0x60 [ 366.409036][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.413812][ C1] [ 366.416134][ C1] value changed: 0x000000000000fb8c -> 0x000000000000fb8d [ 366.423250][ C1] [ 366.425588][ C1] Reported by Kernel Concurrency Sanitizer on: [ 366.431737][ C1] CPU: 1 UID: 0 PID: 3372 Comm: kworker/1:3 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 366.442514][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.452578][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 366.459533][ C1] ================================================================== [ 366.490082][ C1] ================================================================== [ 366.498198][ C1] BUG: KCSAN: data-race in can_send / can_send [ 366.504376][ C1] [ 366.506722][ C1] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 0: [ 366.514792][ C1] can_send+0x5a2/0x6d0 [ 366.518965][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 366.523675][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.528285][ C1] can_receive+0x182/0x1f0 [ 366.532723][ C1] canfd_rcv+0xe7/0x180 [ 366.536900][ C1] __netif_receive_skb+0x123/0x280 [ 366.542038][ C1] process_backlog+0x22e/0x440 [ 366.546828][ C1] __napi_poll+0x63/0x3c0 [ 366.551188][ C1] net_rx_action+0x3a1/0x7f0 [ 366.555802][ C1] handle_softirqs+0xbf/0x280 [ 366.560509][ C1] do_softirq+0x5e/0x90 [ 366.564691][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.569736][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 366.574697][ C1] wg_packet_decrypt_worker+0x173/0x6f0 [ 366.580271][ C1] process_scheduled_works+0x4db/0xa20 [ 366.585841][ C1] worker_thread+0x51d/0x6f0 [ 366.590463][ C1] kthread+0x4ae/0x520 [ 366.594565][ C1] ret_from_fork+0x4b/0x60 [ 366.599034][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.603915][ C1] [ 366.606333][ C1] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 1: [ 366.614411][ C1] can_send+0x5a2/0x6d0 [ 366.618595][ C1] can_can_gw_rcv+0x77d/0x7e0 [ 366.623304][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.627932][ C1] can_receive+0x182/0x1f0 [ 366.632369][ C1] canfd_rcv+0xe7/0x180 [ 366.636541][ C1] __netif_receive_skb+0x123/0x280 [ 366.641686][ C1] process_backlog+0x22e/0x440 [ 366.646475][ C1] __napi_poll+0x63/0x3c0 [ 366.651005][ C1] net_rx_action+0x3a1/0x7f0 [ 366.655626][ C1] handle_softirqs+0xbf/0x280 [ 366.660327][ C1] run_ksoftirqd+0x1c/0x30 [ 366.664772][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 366.669730][ C1] kthread+0x4ae/0x520 [ 366.673827][ C1] ret_from_fork+0x4b/0x60 [ 366.678276][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.683112][ C1] [ 366.685446][ C1] value changed: 0x00000000003b692d -> 0x00000000003b692e [ 366.692562][ C1] [ 366.694893][ C1] Reported by Kernel Concurrency Sanitizer on: [ 366.701051][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 366.711658][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 366.721732][ C1] ================================================================== [ 366.762478][ C1] ================================================================== [ 366.770613][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 366.777981][ C1] [ 366.780314][ C1] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 0: [ 366.788389][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 366.793100][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.797720][ C1] can_receive+0x182/0x1f0 [ 366.802149][ C1] canfd_rcv+0xe7/0x180 [ 366.806320][ C1] __netif_receive_skb+0x123/0x280 [ 366.811458][ C1] process_backlog+0x22e/0x440 [ 366.816254][ C1] __napi_poll+0x63/0x3c0 [ 366.820605][ C1] net_rx_action+0x3a1/0x7f0 [ 366.825219][ C1] handle_softirqs+0xbf/0x280 [ 366.829925][ C1] do_softirq+0x5e/0x90 [ 366.834100][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.839147][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 366.844101][ C1] inet_unhash+0x312/0x3e0 [ 366.848544][ C1] tcp_set_state+0x1b1/0x280 [ 366.853153][ C1] __tcp_close+0x943/0x10e0 [ 366.857680][ C1] tcp_close+0x26/0xd0 [ 366.861775][ C1] inet_release+0xce/0xf0 [ 366.866136][ C1] sock_close+0x68/0x150 [ 366.870408][ C1] __fput+0x2ac/0x640 [ 366.874405][ C1] ____fput+0x1c/0x30 [ 366.878397][ C1] task_work_run+0x13a/0x1a0 [ 366.883027][ C1] get_signal+0xe78/0x1000 [ 366.887456][ C1] arch_do_signal_or_restart+0x95/0x4b0 [ 366.893026][ C1] syscall_exit_to_user_mode+0x62/0x120 [ 366.898601][ C1] do_syscall_64+0xd6/0x1c0 [ 366.903137][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.909071][ C1] [ 366.911406][ C1] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 1: [ 366.919485][ C1] can_can_gw_rcv+0x7cb/0x7e0 [ 366.924191][ C1] can_rcv_filter+0xbf/0x4c0 [ 366.928806][ C1] can_receive+0x182/0x1f0 [ 366.933256][ C1] canfd_rcv+0xe7/0x180 [ 366.937435][ C1] __netif_receive_skb+0x123/0x280 [ 366.942580][ C1] process_backlog+0x22e/0x440 [ 366.947371][ C1] __napi_poll+0x63/0x3c0 [ 366.951724][ C1] net_rx_action+0x3a1/0x7f0 [ 366.956340][ C1] handle_softirqs+0xbf/0x280 [ 366.961043][ C1] do_softirq+0x5e/0x90 [ 366.965221][ C1] __local_bh_enable_ip+0x6e/0x70 [ 366.970265][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 366.975221][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 366.980876][ C1] process_scheduled_works+0x4db/0xa20 [ 366.986354][ C1] worker_thread+0x51d/0x6f0 [ 366.990967][ C1] kthread+0x4ae/0x520 [ 366.995060][ C1] ret_from_fork+0x4b/0x60 [ 366.999507][ C1] ret_from_fork_asm+0x1a/0x30 [ 367.004298][ C1] [ 367.006630][ C1] value changed: 0x003b93f8 -> 0x003b93f9 [ 367.012357][ C1] [ 367.014690][ C1] Reported by Kernel Concurrency Sanitizer on: [ 367.020847][ C1] CPU: 1 UID: 0 PID: 7868 Comm: kworker/u8:60 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 367.031802][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.041874][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 367.048665][ C1] ================================================================== [ 369.142703][ C0] ================================================================== [ 369.150848][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 369.158071][ C0] [ 369.160400][ C0] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 1: [ 369.168485][ C0] can_rcv_filter+0xd1/0x4c0 [ 369.173117][ C0] can_receive+0x182/0x1f0 [ 369.177560][ C0] canfd_rcv+0xe7/0x180 [ 369.181781][ C0] __netif_receive_skb+0x123/0x280 [ 369.186915][ C0] process_backlog+0x22e/0x440 [ 369.191706][ C0] __napi_poll+0x63/0x3c0 [ 369.196060][ C0] net_rx_action+0x3a1/0x7f0 [ 369.200676][ C0] handle_softirqs+0xbf/0x280 [ 369.205370][ C0] do_softirq+0x5e/0x90 [ 369.209547][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.214591][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.219554][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 369.224861][ C0] batadv_tt_purge+0x2b/0x630 [ 369.229557][ C0] process_scheduled_works+0x4db/0xa20 [ 369.235032][ C0] worker_thread+0x51d/0x6f0 [ 369.239644][ C0] kthread+0x4ae/0x520 [ 369.243736][ C0] ret_from_fork+0x4b/0x60 [ 369.248183][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.252976][ C0] [ 369.255308][ C0] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 0: [ 369.263382][ C0] can_rcv_filter+0xd1/0x4c0 [ 369.267992][ C0] can_receive+0x182/0x1f0 [ 369.272424][ C0] canfd_rcv+0xe7/0x180 [ 369.276600][ C0] __netif_receive_skb+0x123/0x280 [ 369.281739][ C0] process_backlog+0x22e/0x440 [ 369.286537][ C0] __napi_poll+0x63/0x3c0 [ 369.290887][ C0] net_rx_action+0x3a1/0x7f0 [ 369.295505][ C0] handle_softirqs+0xbf/0x280 [ 369.300204][ C0] do_softirq+0x5e/0x90 [ 369.304380][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.309429][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.314395][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 369.320050][ C0] process_scheduled_works+0x4db/0xa20 [ 369.325531][ C0] worker_thread+0x51d/0x6f0 [ 369.330135][ C0] kthread+0x4ae/0x520 [ 369.334226][ C0] ret_from_fork+0x4b/0x60 [ 369.338662][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.343462][ C0] [ 369.345800][ C0] value changed: 0x00000000003ed0fb -> 0x00000000003ed0fc [ 369.353008][ C0] [ 369.355346][ C0] Reported by Kernel Concurrency Sanitizer on: [ 369.361525][ C0] CPU: 0 UID: 0 PID: 7842 Comm: kworker/u8:37 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 369.372557][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.382633][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 369.389424][ C0] ================================================================== [ 369.426118][ C0] ================================================================== [ 369.434230][ C0] BUG: KCSAN: data-race in can_send / can_send [ 369.440405][ C0] [ 369.442737][ C0] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 1: [ 369.450853][ C0] can_send+0x5b6/0x6d0 [ 369.455039][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 369.459774][ C0] can_rcv_filter+0xbf/0x4c0 [ 369.464397][ C0] can_receive+0x182/0x1f0 [ 369.468838][ C0] canfd_rcv+0xe7/0x180 [ 369.473021][ C0] __netif_receive_skb+0x123/0x280 [ 369.478167][ C0] process_backlog+0x22e/0x440 [ 369.482962][ C0] __napi_poll+0x63/0x3c0 [ 369.487312][ C0] net_rx_action+0x3a1/0x7f0 [ 369.491932][ C0] handle_softirqs+0xbf/0x280 [ 369.496628][ C0] do_softirq+0x5e/0x90 [ 369.500797][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.505871][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.510828][ C0] batadv_tt_purge+0x2e7/0x630 [ 369.515611][ C0] process_scheduled_works+0x4db/0xa20 [ 369.521093][ C0] worker_thread+0x51d/0x6f0 [ 369.525706][ C0] kthread+0x4ae/0x520 [ 369.529805][ C0] ret_from_fork+0x4b/0x60 [ 369.534245][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.539037][ C0] [ 369.541371][ C0] read-write to 0xffff888119239970 of 8 bytes by interrupt on cpu 0: [ 369.549449][ C0] can_send+0x5b6/0x6d0 [ 369.553629][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 369.558336][ C0] can_rcv_filter+0xbf/0x4c0 [ 369.562944][ C0] can_receive+0x182/0x1f0 [ 369.567376][ C0] canfd_rcv+0xe7/0x180 [ 369.571570][ C0] __netif_receive_skb+0x123/0x280 [ 369.576719][ C0] process_backlog+0x22e/0x440 [ 369.581516][ C0] __napi_poll+0x63/0x3c0 [ 369.585873][ C0] net_rx_action+0x3a1/0x7f0 [ 369.590499][ C0] handle_softirqs+0xbf/0x280 [ 369.595197][ C0] do_softirq+0x5e/0x90 [ 369.599461][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.604685][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.609653][ C0] lock_sock_nested+0x10f/0x140 [ 369.614536][ C0] sockopt_lock_sock+0x42/0x50 [ 369.619317][ C0] do_ip_getsockopt+0xbf3/0x1270 [ 369.624291][ C0] ip_getsockopt+0x5c/0x170 [ 369.628815][ C0] tcp_getsockopt+0xaa/0xe0 [ 369.633345][ C0] sock_common_getsockopt+0x5b/0x70 [ 369.638587][ C0] do_sock_getsockopt+0x1ca/0x260 [ 369.643651][ C0] __x64_sys_getsockopt+0x18c/0x200 [ 369.648872][ C0] x64_sys_call+0x1288/0x2dc0 [ 369.653662][ C0] do_syscall_64+0xc9/0x1c0 [ 369.658209][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.664131][ C0] [ 369.666463][ C0] value changed: 0x0000000000011863 -> 0x0000000000011864 [ 369.673587][ C0] [ 369.675919][ C0] Reported by Kernel Concurrency Sanitizer on: [ 369.682074][ C0] CPU: 0 UID: 0 PID: 12425 Comm: syz-executor Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 369.693026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.703100][ C0] ================================================================== [ 369.718449][ C0] ================================================================== [ 369.726548][ C0] BUG: KCSAN: data-race in can_send / can_send [ 369.732723][ C0] [ 369.735057][ C0] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 1: [ 369.743133][ C0] can_send+0x5a2/0x6d0 [ 369.747329][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 369.752035][ C0] can_rcv_filter+0xbf/0x4c0 [ 369.756650][ C0] can_receive+0x182/0x1f0 [ 369.761171][ C0] canfd_rcv+0xe7/0x180 [ 369.765348][ C0] __netif_receive_skb+0x123/0x280 [ 369.770487][ C0] process_backlog+0x22e/0x440 [ 369.775275][ C0] __napi_poll+0x63/0x3c0 [ 369.779622][ C0] net_rx_action+0x3a1/0x7f0 [ 369.784327][ C0] handle_softirqs+0xbf/0x280 [ 369.789021][ C0] do_softirq+0x5e/0x90 [ 369.793197][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.798240][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.803193][ C0] batadv_tt_purge+0x2e7/0x630 [ 369.807985][ C0] process_scheduled_works+0x4db/0xa20 [ 369.813461][ C0] worker_thread+0x51d/0x6f0 [ 369.818075][ C0] kthread+0x4ae/0x520 [ 369.822167][ C0] ret_from_fork+0x4b/0x60 [ 369.826608][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.831394][ C0] [ 369.833727][ C0] read-write to 0xffff888119239910 of 8 bytes by interrupt on cpu 0: [ 369.841799][ C0] can_send+0x5a2/0x6d0 [ 369.845977][ C0] can_can_gw_rcv+0x77d/0x7e0 [ 369.850686][ C0] can_rcv_filter+0xbf/0x4c0 [ 369.855296][ C0] can_receive+0x182/0x1f0 [ 369.859733][ C0] canfd_rcv+0xe7/0x180 [ 369.863902][ C0] __netif_receive_skb+0x123/0x280 [ 369.869043][ C0] process_backlog+0x22e/0x440 [ 369.873833][ C0] __napi_poll+0x63/0x3c0 [ 369.878186][ C0] net_rx_action+0x3a1/0x7f0 [ 369.882825][ C0] handle_softirqs+0xbf/0x280 [ 369.887523][ C0] do_softirq+0x5e/0x90 [ 369.891697][ C0] __local_bh_enable_ip+0x6e/0x70 [ 369.896760][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 369.901717][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 369.907456][ C0] process_scheduled_works+0x4db/0xa20 [ 369.912935][ C0] worker_thread+0x51d/0x6f0 [ 369.917542][ C0] kthread+0x4ae/0x520 [ 369.921633][ C0] ret_from_fork+0x4b/0x60 [ 369.926073][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.930866][ C0] [ 369.933209][ C0] value changed: 0x00000000003f597b -> 0x00000000003f597c [ 369.940323][ C0] [ 369.942654][ C0] Reported by Kernel Concurrency Sanitizer on: [ 369.949070][ C0] CPU: 0 UID: 0 PID: 1682 Comm: kworker/u8:6 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 369.959947][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.970150][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 369.976946][ C0] ================================================================== [ 369.994220][ C0] ================================================================== [ 370.002345][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 370.009595][ C0] [ 370.011929][ C0] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 1: [ 370.020016][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 370.024915][ C0] can_rcv_filter+0xbf/0x4c0 [ 370.029569][ C0] can_receive+0x182/0x1f0 [ 370.034004][ C0] canfd_rcv+0xe7/0x180 [ 370.038178][ C0] __netif_receive_skb+0x123/0x280 [ 370.043314][ C0] process_backlog+0x22e/0x440 [ 370.048193][ C0] __napi_poll+0x63/0x3c0 [ 370.052548][ C0] net_rx_action+0x3a1/0x7f0 [ 370.057260][ C0] handle_softirqs+0xbf/0x280 [ 370.061961][ C0] do_softirq+0x5e/0x90 [ 370.066140][ C0] __local_bh_enable_ip+0x6e/0x70 [ 370.071202][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 370.076175][ C0] batadv_tt_purge+0x2e7/0x630 [ 370.080977][ C0] process_scheduled_works+0x4db/0xa20 [ 370.086471][ C0] worker_thread+0x51d/0x6f0 [ 370.091101][ C0] kthread+0x4ae/0x520 [ 370.095219][ C0] ret_from_fork+0x4b/0x60 [ 370.099658][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.104457][ C0] [ 370.106789][ C0] read-write to 0xffff888116cc0020 of 4 bytes by interrupt on cpu 0: [ 370.114953][ C0] can_can_gw_rcv+0x7cb/0x7e0 [ 370.119658][ C0] can_rcv_filter+0xbf/0x4c0 [ 370.124287][ C0] can_receive+0x182/0x1f0 [ 370.128742][ C0] canfd_rcv+0xe7/0x180 [ 370.132921][ C0] __netif_receive_skb+0x123/0x280 [ 370.138063][ C0] process_backlog+0x22e/0x440 [ 370.142859][ C0] __napi_poll+0x63/0x3c0 [ 370.147304][ C0] net_rx_action+0x3a1/0x7f0 [ 370.151923][ C0] handle_softirqs+0xbf/0x280 [ 370.156626][ C0] do_softirq+0x5e/0x90 [ 370.160798][ C0] __local_bh_enable_ip+0x6e/0x70 [ 370.165844][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 370.170807][ C0] nsim_dev_trap_report_work+0x522/0x620 [ 370.176489][ C0] process_scheduled_works+0x4db/0xa20 [ 370.181974][ C0] worker_thread+0x51d/0x6f0 [ 370.186586][ C0] kthread+0x4ae/0x520 [ 370.190752][ C0] ret_from_fork+0x4b/0x60 [ 370.195186][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.199977][ C0] [ 370.202304][ C0] value changed: 0x003f7202 -> 0x003f7203 [ 370.208036][ C0] [ 370.210368][ C0] Reported by Kernel Concurrency Sanitizer on: [ 370.216525][ C0] CPU: 0 UID: 0 PID: 7819 Comm: kworker/u8:23 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 370.227481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.237556][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 370.244484][ C0] ================================================================== [ 372.362778][ C1] ================================================================== [ 372.370905][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 372.378130][ C1] [ 372.380465][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 0: [ 372.388546][ C1] can_rcv_filter+0xd1/0x4c0 [ 372.393165][ C1] can_receive+0x182/0x1f0 [ 372.397613][ C1] canfd_rcv+0xe7/0x180 [ 372.401792][ C1] __netif_receive_skb+0x123/0x280 [ 372.406932][ C1] process_backlog+0x22e/0x440 [ 372.411721][ C1] __napi_poll+0x63/0x3c0 [ 372.416077][ C1] net_rx_action+0x3a1/0x7f0 [ 372.420695][ C1] handle_softirqs+0xbf/0x280 [ 372.425399][ C1] do_softirq+0x5e/0x90 [ 372.429583][ C1] __local_bh_enable_ip+0x6e/0x70 [ 372.434626][ C1] _raw_spin_unlock_bh+0x36/0x40 [ 372.439581][ C1] nsim_dev_trap_report_work+0x522/0x620 [ 372.445330][ C1] process_scheduled_works+0x4db/0xa20 [ 372.450809][ C1] worker_thread+0x51d/0x6f0 [ 372.455506][ C1] kthread+0x4ae/0x520 [ 372.459602][ C1] ret_from_fork+0x4b/0x60 [ 372.464040][ C1] ret_from_fork_asm+0x1a/0x30 [ 372.468831][ C1] [ 372.471163][ C1] read-write to 0xffff888101ddc4c8 of 8 bytes by interrupt on cpu 1: [ 372.479240][ C1] can_rcv_filter+0xd1/0x4c0 [ 372.483848][ C1] can_receive+0x182/0x1f0 [ 372.488282][ C1] canfd_rcv+0xe7/0x180 [ 372.492465][ C1] __netif_receive_skb+0x123/0x280 [ 372.497600][ C1] process_backlog+0x22e/0x440 [ 372.502390][ C1] __napi_poll+0x63/0x3c0 [ 372.506739][ C1] net_rx_action+0x3a1/0x7f0 [ 372.511361][ C1] handle_softirqs+0xbf/0x280 [ 372.516052][ C1] run_ksoftirqd+0x1c/0x30 [ 372.520511][ C1] smpboot_thread_fn+0x31c/0x4c0 [ 372.525472][ C1] kthread+0x4ae/0x520 [ 372.529562][ C1] ret_from_fork+0x4b/0x60 [ 372.534001][ C1] ret_from_fork_asm+0x1a/0x30 [ 372.538796][ C1] [ 372.541122][ C1] value changed: 0x000000000043359e -> 0x000000000043359f [ 372.548237][ C1] [ 372.550567][ C1] Reported by Kernel Concurrency Sanitizer on: [ 372.556727][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.14.0-rc4-syzkaller-00169-g1e15510b71c9 #0 [ 372.567334][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.577404][ C1] ==================================================================