last executing test programs: 8m59.412344346s ago: executing program 1 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$inet(0x2, 0x6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000500)=0x3, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) io_setup(0x0, &(0x7f0000000740)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0x8800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 8m59.391523276s ago: executing program 1 (id=253): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x4}, {r2, 0x531}], 0x2, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r3, &(0x7f0000000800)=[{&(0x7f0000000c00)}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000", @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4, 0x0, 0x9}, 0x18) syz_emit_ethernet(0xf1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_cow_block\x00'}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000180)=""/20, &(0x7f0000000240)=0x14) socket$can_j1939(0x1d, 0x2, 0x7) socket$kcm(0x23, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x7fffffff]}, 0x8) 8m59.209698019s ago: executing program 1 (id=259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) 8m57.864952718s ago: executing program 1 (id=266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x84, &(0x7f0000000280)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x20}}, {@dioread_lock}, {@minixdf}, {@quota}, {@dioread_nolock}, {@debug}, {@dioread_lock}, {@prjquota}, {@noquota}, {@grpjquota}, {@nodioread_nolock}]}, 0x3, 0x48f, &(0x7f0000000900)="$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") pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000060000000410000010"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0xfffffff9, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x33}, @in=@broadcast, {0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff, 0x3}, {0xfffffffffffffffe, 0x2, 0x0, 0x1}, {0x0, 0x4, 0x4}, 0x0, 0x0, 0x2, 0x0, 0xfe}, 0x805, 0x5}}, 0xf8}}, 0x0) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x0, @remote, 0x3}, 0x1c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000002c0)={@private2, 0x0}, &(0x7f0000000300)=0x14) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000080) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_io_uring_setup(0x4b1c, &(0x7f0000000780)={0x0, 0x276, 0x1000, 0x1, 0x1b1, 0x0, r0}, &(0x7f0000000800), &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000f40)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, r0, 0x0, &(0x7f0000000980)={&(0x7f00000008c0)=@nfc={0x27, r10, 0x1, 0x6}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000a40)="8d30c77c7019b697b7ce161ddfa76559b08a2062f9511be88e13bf273dc9bdc5f8ca560eaac1da3c72b8aaa8dce6f856c06852cbb3b45db772fc0e10e1706c812f7dc308c2b744810dd2f59b8943170431fb3f3b1c70019f655eb708391f3307b2e00a2d03cf569917b7bb6f90a0f9010427a8b2397ecb145013d503cb1b82c58273df6b39346be9e3578cc1e0ed33932de9435ac1ec976cc90aa7db85c37979cbf319924866b1a09738b4c600119f575d4e52fe1cec7f1c7a976da2320bd1d638de593bcbe72181effea1ba0a89868a2e2a058a4cb74af4efdbe056f765a5f08586449bd0a6f1ac", 0xe8}], 0x1, &(0x7f0000000b40)=[{0x38, 0x1b0, 0x9, "b71f1f24cc4eb21d0a62c3448a08c7969ab370ad6c3c66c6c4d120d95a489395ebf842a26251"}, {0xb0, 0x119, 0x0, "73cee50c6c27cd63f1345e68b75aa55b7d5e2e8348dbbeaa48118cbfe9f1abc2580e8fc45b18e3dd29d523172dbe736b1f9598e87d6ce044c6095d768351fc07c88f95fb3edb0273d16cd4a20eed731b9c97ba3ac90c2ce7fcd66b3cc383af2ac6804fd45e95b4242e5373cb5a521a716e9463e7de1bcf0d5bc03fcd1fc9fde34b21a60ba8dbeeb11e60b6c938a390160e90b5567505eaa706525c7a"}, {0x100, 0x115, 0x742b, "719757cb34304ad873aea7818ae79e54b7f0b8b7b2ce7b793257ef803c9e9d9c2e6ee5874e7a6ee4e37cdbd60e660de55246961f7d535bb62dcba3ec394a2945f8cb1c0d24dd04e55170b5987e60500b3cc4d141162e2af2da3e8f01c14666e4df942fe5b09dc86655ea9d5838ff21bc1e2c567fc5f40a67eb5e4bc54bd861dfc95ad607d05328b2bf1ae5bd1234f9116436d654fb3d28e48e623e8c17a11e027b15202b2ee2ff1f50fe4d098eb7d189ded1b11ecfe4881dc638fed2cfe32b7de33e325f0df242cab14a139ab12426ceb8d183638c39a4764643f20b1e9f64f5d8f7888e5a9ddc4d25ce"}, {0xc8, 0x188, 0x8, "7b3f3350f7a9c4a367c839caf1983febefa47eb8c46ed2d780a9ed9d291db916c5dc88b95a4c441dc1d617a1f6888ed551e7502a06dae6e458d02e39f0941e34d3ac73048982f46ad7b450692452fda70d2c3282c5d6dfb8234359bf3301ef2626422aebc55bbacb12c2f989a11f1ae472520e9fe519d7b59e7b56270e1dece890f171ba410194ef25e0a98e320e535af7ccc14d3ee08b359b6fe8d60fe6a306cb46c5c7a1b0e42bbc261b6d7fec2ff1962b57"}, {0x28, 0x109, 0x8, "f5b83dcd2fdd226601d18e0d63f677dbfa49e5e590f7ce"}, {0xc0, 0x29, 0xfffffff7, "6b5c488495222d724863a9b6cee6d951d6c0b712580a43530edc3662c93bf57f2cf837b5103b6d2b6277068d115debc9fe0ece59a4bf8c0dac8282974626b2d80c0bb9a16203e515de805c989ebc8ad3824f696d9fc7eb019a93c6c1bea848e409fae4e6f825f2617b77c57cedffda06b68c9fe0a34f61f6a311593f3807790aed60c4de01fd3e0837a7a380f85ccf305e0cae90a459aa3e37a7e8d05f968772617b92d062fa9c47a2"}, {0x10, 0x29, 0x10001}], 0x3a8}, 0x0, 0x200000c4, 0x1}) write$binfmt_misc(r5, &(0x7f0000000100), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)={0x40001, 0x0, 0x11}, 0x18) 8m57.500085403s ago: executing program 1 (id=271): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x23]}, 0x8, 0x80800) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r8, 0xd}, &(0x7f0000000180)=0x8) r9 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x8002, 0x1, @tid=r9}, &(0x7f0000000040)) bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r5, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) accept$unix(r10, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r10, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) 8m57.115450479s ago: executing program 1 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) getrandom(0x0, 0x0, 0x2) 8m57.115119119s ago: executing program 32 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x9) getrandom(0x0, 0x0, 0x2) 7m33.557299141s ago: executing program 0 (id=1654): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) setpriority(0xbdb65ed6aaf9cf83, 0x0, 0xd1) 7m33.501474731s ago: executing program 0 (id=1656): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000100)=0x401) 7m33.413892533s ago: executing program 0 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16], 0x86, 0x2af, &(0x7f0000000ec0)="$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") r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002", 0x29}], 0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x80) pwrite64(r3, &(0x7f00000000c0)='a', 0x1, 0xb5f) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x0, 0x4}, {0x39, 0x0, 0x5}, {0xfffe}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xf0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7m32.959084509s ago: executing program 0 (id=1666): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x843, 0xa8e3082fb0880eb) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x48, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x1, 0x0, 0x7, 0x1, 0x10, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000340)={0x2, 'ip6erspan0\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x106, 0x40001, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x0, 0x10000}, 0x1ba1, 0xfffffffd, 0x3, 0x7, 0x4, 0x1088f105, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) fallocate(r8, 0x10, 0xbfff, 0x8000) 7m32.555736354s ago: executing program 0 (id=1675): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x15084, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) migrate_pages(0x0, 0x0, 0x0, &(0x7f0000000100)=0x401) 7m32.259050029s ago: executing program 0 (id=1678): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000004000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00407087000000", @ANYBLOB], 0xb8}}, 0x8004) 7m32.258760939s ago: executing program 33 (id=1678): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000004000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00407087000000", @ANYBLOB], 0xb8}}, 0x8004) 2.775788703s ago: executing program 2 (id=11222): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xe, 0x7fffffff}]}) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) 2.674754464s ago: executing program 2 (id=11224): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2.610534715s ago: executing program 2 (id=11226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r4, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xa25e}}}}}, 0x28}}, 0x0) 2.451319217s ago: executing program 2 (id=11232): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2a, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) read$hiddev(r1, &(0x7f00000002c0)=""/180, 0xb4) r2 = socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000219078ac1e0001ac1414aa030490781200183f25000000000000000a0100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='jbd2_lock_buffer_stall\x00', r6}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='\x00\x00\x00}\x00\xff\xff\x00\x00\x00\x00\x00\x00\x93\x04\x8a\xf5\x9bS\x13K\x1ceZ_\x8e\xf7\xa7\xf1\xc4\x94c\xca,iS0\xc1\xdfv\x8d\xa4\xbf\x9e\xe1\xe3N\x7f<\xab\xbcA0\x97\xda\xd5Z=\x0e*YU\xf2\xba\xb1\x8d\xf0\xcd\xdd\xb9g\x96.\x16\xe8w\xa7S\xd2\x18\xbd\xc30\x84\x00o\x14\xbd\xcaz\x1bG~\xc5\x1d\x99\xe7\x03z') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe24, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="59bb00e8ffffff0000000100000008002b01ffffffff0c0099d664c7f6c0c895c000"], 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 2.148599831s ago: executing program 5 (id=11239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x0, 0x0, 0x2, 0x3, 0x12802, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @value=r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000009329d210a3ad1a0000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r7, 0x0, 0x0, 0x20048000, &(0x7f0000001240)={0x2, 0x6e23, @empty}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000001000), 0xe09) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6f}, &(0x7f0000000080)=0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd6a1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x9, 0x0, 0x1, 0xc, 0xfffffffffffffffc}, @ldst={0x4, 0x1, 0x3, 0x6, 0x9, 0x0, 0x1}, @generic={0x3, 0xa, 0x0, 0x0, 0xf68}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x10000, 0x3b, &(0x7f0000000580)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f00000004c0)={r9, 0xad, "0233b66460e44d95f8b6011211d055e5267179af7e7a694de2b9e85da3a28b9a304def70e5e4634bae74c21528a7378f763763bd637e5e2b77cc297122f7c1c0aac75dd5258a451bb725a873e9fc52516c7a8cb76b24cfbccd225f7544bc9c117e827757ac71dda9c158305b7fa445b63e638559084f6f043a654410fdc1ee6dd4dab980ec9db023a96edfa9ac10e6205b2eb54d0d63ad373110ceb0af92b6ae48f53f12579c7ff2ebb23ff443"}, &(0x7f0000000180)=0xb5) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r8, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 1.981353564s ago: executing program 5 (id=11243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r3, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xa25e}}}}}, 0x28}}, 0x0) 1.950731274s ago: executing program 2 (id=11244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbff, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000c1, 0x0) 1.852367835s ago: executing program 5 (id=11247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) inotify_init1(0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket(0x1d, 0x2, 0x6) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0a120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538af8ffffffffffffff56a20ff27fff", 0x89}], 0x1}, 0x4000084) 1.762007456s ago: executing program 2 (id=11249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.590712089s ago: executing program 3 (id=11250): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) 1.52449066s ago: executing program 3 (id=11252): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001000a900"/20, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB="08000400ff"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 1.137586505s ago: executing program 3 (id=11257): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 983.991167ms ago: executing program 5 (id=11260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)="248edc1c1b", 0x5}], 0x2, &(0x7f0000000680)=[{0x10, 0x117, 0x9}, {0x10, 0x0, 0xff}], 0x20}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x404c840) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c02000019000100", @ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x4004000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = accept4(r3, &(0x7f0000000180)=@phonet, &(0x7f0000000240)=0x80, 0x80800) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000001cc0)=ANY=[@ANYRES64=r4, @ANYBLOB="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", @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40080d0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0xfe72, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 868.130738ms ago: executing program 3 (id=11265): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x9}, 0x18) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001780)={0x1bc, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86bba1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7761af17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19dd9edf}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x273d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe040}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ffb17eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2cc}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f772e63}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x649cc5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa77530e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ae38cfd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ba20b83}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ee13d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b8c7a84}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d65}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e52c297}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43144f3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17d7a437}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21196a6d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fda}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66903200}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1fae6ad7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x675b950e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd486}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35cad5bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ae49466}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18f17203}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17b501b2}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2745784b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x222b47b8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3de8c2b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x578e3739}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x240080d0}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), 0x0}, 0x20) fcntl$setstatus(0xffffffffffffffff, 0x403, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000000100000002000000000000000000000000000000000000008ca8a8201fc574614bb4af588a7268cd91c3da39a7edfb2de83bae56276c7c8533ae232ab6bd2f47452be8fad3f0018157001e5597796e985e74e5623cfa6cb5d52ba4cf4ec0649108e5e196a3328150241a822c3606232baa3ad0fedc07f61192162c314528104df21f70fabaab447d4c0ef08012df7a86cbfd72eb098b7dc3c5d84b05e6b31049a28c114e4533a588edefee65225ab4b3a4de89"], 0x50) lchown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 533.160702ms ago: executing program 6 (id=11270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="150a00000023a6920200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_config_ext={0x100000000, 0xfffffffffffffffc}, 0x2, 0xffffffff, 0x7, 0x9, 0x8, 0x1, 0xfff9, 0x0, 0xa6, 0x0, 0x5}, 0x0, 0x804, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount$nfs4(&(0x7f00000001c0)='\x00', &(0x7f0000000240)='.\x00', &(0x7f00000003c0), 0x200000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000480)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20ff01}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 473.732583ms ago: executing program 4 (id=11271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) inotify_init1(0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x1, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0a120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538af8ffffffffffffff56a20ff27fff", 0x89}], 0x1}, 0x4000084) 412.999614ms ago: executing program 4 (id=11272): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="4101d6850f48d6a400"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000faffffffb703000008400000b70600000000feff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 394.691784ms ago: executing program 6 (id=11273): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) write$tun(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c"], 0xd2) r8 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x0, 0xe1, 0x2, @local, @private2, 0x1, 0x700}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2}) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xe2928ab, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000001000100000000000500000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000185a000010000000000000000000000085100000feffffffcd780000f0ffffff0213010103000000850000003e00000085100000ffffffff181b0000", @ANYRES32=r5, @ANYBLOB="0000000000000000230340001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800008c00db716c07968dd3a9e554246023d1243a1927e1260425fcea6c4600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000093d9adf44c231374c47bee0a557db6baf5cc9712c0bdfcd8766c538378beb59d4ce887b0351b27a9baea4736e11ed80b97a47e85fbe156d962b2c422bd29fef578f2f4d6db37de0ff1920c9f6570192d9f276c91108697f30577e0"], &(0x7f0000000000)='GPL\x00', 0x1, 0x4d, &(0x7f0000000380)=""/77, 0x40f00, 0x1a, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x40, 0x200}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r5, r7, r10, r5, r7, r11], &(0x7f00000007c0)=[{0x4, 0x2, 0x1, 0x7}, {0x1, 0x5, 0x14, 0x1}], 0x10, 0x3bb, @void, @value}, 0x94) setpriority(0xbdb65ed6aaf9cf83, 0x0, 0xd1) 393.658354ms ago: executing program 4 (id=11274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(0xffffffffffffffff, &(0x7f0000000100)="9124f9e607c45882f84650f8055369ea18e5b4fee12d810243156fe8ce6677f859e8aa46329a20f64891f8e289cd8f11ad6b751f7a48402b7c58c7cffd16c97a6b8ea3b6bc279af13f8bff80ed1ff55979fc44e1ac544898f41890c6a7aa424f20daf15a", 0x64) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee00, 0xee01) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "0661ed19202cdcdf1e5aad184083b6a26cab1832edb1387f94296888d5064779363f40da237b89978c3e262b0aebe002b29de34cd5752d01ec42adc96277bd1552"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x4c, 0x63, 0x6, 0x3, 0x7, "00da900eaf7919c635d4a15ac41e3100", 0x20001005, 0x7fe}) r3 = dup(r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r5, r5, 0x0, 0x7) write$UHID_INPUT(r3, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) ppoll(&(0x7f0000000180)=[{r3, 0x9202}, {r2, 0x4}, {r0, 0x200}], 0x3, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)={[0x9]}, 0x8) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r6 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xece7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1007, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r6, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000001340)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0)}}, 0x18) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r6, 0xa) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc82c11ca3a1a747e}, 0xc, &(0x7f0000000080)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x9c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xb}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x32, 0x8, "5713c380e48a91bc076eac3aed703f4ba262b3d44ea19bd6337edae5a842b77db2c2e6615721b2074cc869a662ef"}, @NFTA_OBJ_USERDATA={0x11, 0x8, "2e67c54ab31b2cde4232ff90be"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_USERDATA={0x45, 0x7, 0x1, 0x0, "f76ee220f9ebd6ae3fe02fdbe512cd9016afb66c819a2819bbfb1d6b73cbbe06ab8cfe5212a75a9e6e7d311fb96dee9132207f4168275bb246ef79af0f51da17b3"}]}], {0x14}}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008085) 336.839875ms ago: executing program 3 (id=11275): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 253.751807ms ago: executing program 4 (id=11276): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 246.861376ms ago: executing program 3 (id=11277): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000003c0)={[{@delalloc}, {@grpquota}]}, 0x4, 0x4f8, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0xfffffffffffffffd, 0x3f}) r0 = socket(0x26, 0x3, 0x5) getpeername$packet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf4c34443d00000007010000f8ffffffb702008de9978d6aa32d067bfc16000000800000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) accept4$packet(r9, 0x0, &(0x7f0000000080), 0x80000) poll(&(0x7f0000000200)=[{r4, 0x220}, {r4, 0x40}], 0x2, 0x7fffffff) write$cgroup_int(r9, &(0x7f0000000000)=0x700, 0x12) 234.065737ms ago: executing program 4 (id=11278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r2, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xa25e}}}}}, 0x28}}, 0x0) 187.976997ms ago: executing program 6 (id=11279): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000140)="aa", &(0x7f0000000000)=@tcp6=r5}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000600), &(0x7f00000003c0)=@udp6=r7, 0x1}, 0x20) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r3) r8 = timerfd_create(0x8, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfd, {0x80, 0x20, 0x14, 0x0, 0x0, 0x2, 0x0, 0x5}}, 0x1c}}, 0x20008000) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000180)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x8) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") 187.102427ms ago: executing program 6 (id=11280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x28, r3, 0xacf5e67dd0b583a1, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xa25e}}}}}, 0x28}}, 0x0) 168.111768ms ago: executing program 6 (id=11281): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000280)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004340)=ANY=[@ANYBLOB="0600e800", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf251500000008002c00030000000c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): 565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.672460][T32565] RIP: 0033:0x7f231d70e969 [ 536.672478][T32565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.672497][T32565] RSP: 002b:00007f231bd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.672585][T32565] RAX: ffffffffffffffda RBX: 00007f231d935fa0 RCX: 00007f231d70e969 [ 536.672600][T32565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 536.672612][T32565] RBP: 00007f231bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 536.672640][T32565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.672660][T32565] R13: 0000000000000000 R14: 00007f231d935fa0 R15: 00007ffcc8a69828 [ 536.672675][T32565] [ 536.884663][T32555] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.948572][T32588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 536.955273][T32588] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 536.963100][T32588] vhci_hcd vhci_hcd.0: Device attached [ 536.971155][T32589] vhci_hcd: connection closed [ 536.971549][T24210] vhci_hcd: stop threads [ 536.980814][T24210] vhci_hcd: release socket [ 536.985442][T24210] vhci_hcd: disconnect device [ 536.992588][T32555] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.087041][T32555] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.108376][T32555] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.135993][T32555] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.150523][T32555] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.470832][T32679] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.509756][T32679] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.523511][T32684] __nla_validate_parse: 26 callbacks suppressed [ 537.523565][T32684] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10493'. [ 537.553729][T32688] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10494'. [ 537.565216][T32688] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.573577][T32688] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.582080][T32688] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.590377][T32688] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.600320][T32688] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.609030][T32688] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.617580][T32688] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.626207][T32688] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.638860][T32679] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.728404][T32679] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.439366][T32705] FAULT_INJECTION: forcing a failure. [ 538.439366][T32705] name failslab, interval 1, probability 0, space 0, times 0 [ 538.452353][T32705] CPU: 0 UID: 0 PID: 32705 Comm: syz.2.10502 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 538.452384][T32705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 538.452397][T32705] Call Trace: [ 538.452404][T32705] [ 538.452412][T32705] __dump_stack+0x1d/0x30 [ 538.452455][T32705] dump_stack_lvl+0xe8/0x140 [ 538.452475][T32705] dump_stack+0x15/0x1b [ 538.452492][T32705] should_fail_ex+0x265/0x280 [ 538.452527][T32705] should_failslab+0x8c/0xb0 [ 538.452636][T32705] kmem_cache_alloc_node_noprof+0x57/0x320 [ 538.452659][T32705] ? __alloc_skb+0x101/0x320 [ 538.452688][T32705] __alloc_skb+0x101/0x320 [ 538.452772][T32705] netlink_alloc_large_skb+0xba/0xf0 [ 538.452804][T32705] netlink_sendmsg+0x3cf/0x6b0 [ 538.452827][T32705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.452848][T32705] __sock_sendmsg+0x142/0x180 [ 538.452876][T32705] ____sys_sendmsg+0x31e/0x4e0 [ 538.452979][T32705] ___sys_sendmsg+0x17b/0x1d0 [ 538.453009][T32705] __x64_sys_sendmsg+0xd4/0x160 [ 538.453035][T32705] x64_sys_call+0x2999/0x2fb0 [ 538.453134][T32705] do_syscall_64+0xd0/0x1a0 [ 538.453159][T32705] ? clear_bhb_loop+0x40/0x90 [ 538.453182][T32705] ? clear_bhb_loop+0x40/0x90 [ 538.453205][T32705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.453254][T32705] RIP: 0033:0x7fbfbcece969 [ 538.453273][T32705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.453294][T32705] RSP: 002b:00007fbfbb537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.453316][T32705] RAX: ffffffffffffffda RBX: 00007fbfbd0f5fa0 RCX: 00007fbfbcece969 [ 538.453330][T32705] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 538.453343][T32705] RBP: 00007fbfbb537090 R08: 0000000000000000 R09: 0000000000000000 [ 538.453354][T32705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.453376][T32705] R13: 0000000000000000 R14: 00007fbfbd0f5fa0 R15: 00007ffdf6da1d38 [ 538.453395][T32705] [ 538.691379][T32708] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 538.697971][T32708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 538.705762][T32708] vhci_hcd vhci_hcd.0: Device attached [ 538.727546][T32709] vhci_hcd: connection closed [ 538.727891][T24213] vhci_hcd: stop threads [ 538.737292][T24213] vhci_hcd: release socket [ 538.741833][T24213] vhci_hcd: disconnect device [ 538.880907][T32715] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10505'. [ 539.173750][T32738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10511'. [ 539.256231][T32757] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10514'. [ 539.685228][T32703] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10501'. [ 540.233765][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 540.233783][ T29] audit: type=1326 audit(1747124099.648:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.322308][ T29] audit: type=1326 audit(1747124099.648:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.346371][ T29] audit: type=1326 audit(1747124099.648:19691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.371202][ T29] audit: type=1326 audit(1747124099.648:19692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.395351][ T29] audit: type=1400 audit(1747124099.708:19693): avc: denied { read write } for pid=385 comm="syz.5.10519" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 540.420465][ T29] audit: type=1400 audit(1747124099.708:19694): avc: denied { open } for pid=385 comm="syz.5.10519" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 540.445943][ T29] audit: type=1326 audit(1747124099.708:19695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.470394][ T29] audit: type=1326 audit(1747124099.708:19696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.494356][ T29] audit: type=1326 audit(1747124099.738:19697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.519249][ T29] audit: type=1326 audit(1747124099.738:19698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.5.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f54c6e969 code=0x7ffc0000 [ 540.673835][ T406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10523'. [ 540.775463][ T419] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 540.782763][ T419] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 540.791049][ T419] vhci_hcd vhci_hcd.0: Device attached [ 540.815041][ T422] vhci_hcd: connection closed [ 540.815254][ T2082] vhci_hcd: stop threads [ 540.827011][ T2082] vhci_hcd: release socket [ 540.832586][ T2082] vhci_hcd: disconnect device [ 540.962694][ T436] FAULT_INJECTION: forcing a failure. [ 540.962694][ T436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.977115][ T436] CPU: 0 UID: 0 PID: 436 Comm: syz.4.10529 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 540.977148][ T436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 540.977186][ T436] Call Trace: [ 540.977195][ T436] [ 540.977204][ T436] __dump_stack+0x1d/0x30 [ 540.977230][ T436] dump_stack_lvl+0xe8/0x140 [ 540.977252][ T436] dump_stack+0x15/0x1b [ 540.977287][ T436] should_fail_ex+0x265/0x280 [ 540.977315][ T436] should_fail+0xb/0x20 [ 540.977344][ T436] should_fail_usercopy+0x1a/0x20 [ 540.977367][ T436] _copy_from_user+0x1c/0xb0 [ 540.977392][ T436] ___sys_recvmsg+0xaa/0x370 [ 540.977448][ T436] do_recvmmsg+0x1ef/0x540 [ 540.977478][ T436] ? fput+0x8f/0xc0 [ 540.977501][ T436] __x64_sys_recvmmsg+0xe5/0x170 [ 540.977609][ T436] x64_sys_call+0x1c6a/0x2fb0 [ 540.977696][ T436] do_syscall_64+0xd0/0x1a0 [ 540.977779][ T436] ? clear_bhb_loop+0x40/0x90 [ 540.977803][ T436] ? clear_bhb_loop+0x40/0x90 [ 540.977885][ T436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.977910][ T436] RIP: 0033:0x7f5967f3e969 [ 540.977929][ T436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.977949][ T436] RSP: 002b:00007f5966586038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 540.977995][ T436] RAX: ffffffffffffffda RBX: 00007f5968166080 RCX: 00007f5967f3e969 [ 540.978007][ T436] RDX: 03fffffffffffcb5 RSI: 00002000000000c0 RDI: 0000000000000003 [ 540.978021][ T436] RBP: 00007f5966586090 R08: 0000000000000000 R09: 0000000000000000 [ 540.978035][ T436] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 540.978049][ T436] R13: 0000000000000001 R14: 00007f5968166080 R15: 00007ffd80744618 [ 540.978122][ T436] [ 541.086957][ T434] xt_hashlimit: max too large, truncated to 1048576 [ 541.415508][ T446] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10533'. [ 541.463766][ T448] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10534'. [ 541.599052][T32679] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.614510][T32679] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.632693][T32679] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.650063][T32679] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.790487][ T496] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 541.797393][ T496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 541.805492][ T496] vhci_hcd vhci_hcd.0: Device attached [ 541.819408][ T499] vhci_hcd: connection closed [ 541.820001][T24216] vhci_hcd: stop threads [ 541.830587][T24216] vhci_hcd: release socket [ 541.835811][T24216] vhci_hcd: disconnect device [ 541.920926][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10544'. [ 541.937033][ T521] wireguard0: entered promiscuous mode [ 541.943366][ T521] wireguard0: entered allmulticast mode [ 541.949265][ T524] loop6: detected capacity change from 0 to 1024 [ 541.949557][ T524] EXT4-fs: Ignoring removed nobh option [ 541.949629][ T524] EXT4-fs: Ignoring removed bh option [ 541.973242][ T524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.998906][ T524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.209795][ T578] ipvlan2: entered promiscuous mode [ 542.298622][ T595] geneve0: entered allmulticast mode [ 542.499298][ T640] 9pnet_fd: Insufficient options for proto=fd [ 542.571238][ T653] __nla_validate_parse: 4 callbacks suppressed [ 542.571256][ T653] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10567'. [ 542.598507][ T655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10568'. [ 542.633121][ T659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10570'. [ 542.646038][ T659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10570'. [ 542.661381][ T659] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.671186][ T659] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.681989][ T659] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.691512][ T659] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.734129][ T667] 9pnet: p9_errstr2errno: server reported unknown error [ 542.774534][ T672] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 542.782579][ T672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 542.791783][ T672] vhci_hcd vhci_hcd.0: Device attached [ 542.799346][ T673] vhci_hcd: connection closed [ 542.799805][T24213] vhci_hcd: stop threads [ 542.810360][T24213] vhci_hcd: release socket [ 542.815185][T24213] vhci_hcd: disconnect device [ 542.822243][ T676] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 542.829949][ T676] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 542.838946][ T676] vhci_hcd vhci_hcd.0: Device attached [ 542.846281][ T677] vhci_hcd: connection closed [ 542.846758][T24213] vhci_hcd: stop threads [ 542.856436][T24213] vhci_hcd: release socket [ 542.861565][T24213] vhci_hcd: disconnect device [ 543.207667][ T698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10584'. [ 543.217251][ T698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10584'. [ 543.316647][ T704] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10587'. [ 543.331841][ T706] xt_TCPMSS: Only works on TCP SYN packets [ 543.515898][ T744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10598'. [ 543.525466][ T744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10598'. [ 543.529011][ T746] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10599'. [ 543.782049][ T798] loop6: detected capacity change from 0 to 256 [ 543.796112][ T803] SELinux: failed to load policy [ 543.814008][ T803] FAULT_INJECTION: forcing a failure. [ 543.814008][ T803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.827654][ T803] CPU: 0 UID: 0 PID: 803 Comm: syz.3.10611 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 543.827686][ T803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 543.827703][ T803] Call Trace: [ 543.827709][ T803] [ 543.827717][ T803] __dump_stack+0x1d/0x30 [ 543.827782][ T803] dump_stack_lvl+0xe8/0x140 [ 543.827803][ T803] dump_stack+0x15/0x1b [ 543.827820][ T803] should_fail_ex+0x265/0x280 [ 543.827850][ T803] should_fail+0xb/0x20 [ 543.827936][ T803] should_fail_usercopy+0x1a/0x20 [ 543.827954][ T803] _copy_to_user+0x20/0xa0 [ 543.828022][ T803] simple_read_from_buffer+0xb5/0x130 [ 543.828045][ T803] proc_fail_nth_read+0x100/0x140 [ 543.828069][ T803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 543.828096][ T803] vfs_read+0x1a0/0x6f0 [ 543.828125][ T803] ? __rcu_read_unlock+0x4f/0x70 [ 543.828148][ T803] ? __fget_files+0x184/0x1c0 [ 543.828177][ T803] ksys_read+0xda/0x1a0 [ 543.828208][ T803] __x64_sys_read+0x40/0x50 [ 543.828230][ T803] x64_sys_call+0x2d77/0x2fb0 [ 543.828250][ T803] do_syscall_64+0xd0/0x1a0 [ 543.828338][ T803] ? clear_bhb_loop+0x40/0x90 [ 543.828358][ T803] ? clear_bhb_loop+0x40/0x90 [ 543.828432][ T803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.828455][ T803] RIP: 0033:0x7f231d70d37c [ 543.828471][ T803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 543.828490][ T803] RSP: 002b:00007f231bd77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 543.828512][ T803] RAX: ffffffffffffffda RBX: 00007f231d935fa0 RCX: 00007f231d70d37c [ 543.828526][ T803] RDX: 000000000000000f RSI: 00007f231bd770a0 RDI: 0000000000000004 [ 543.828540][ T803] RBP: 00007f231bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 543.828627][ T803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.828638][ T803] R13: 0000000000000000 R14: 00007f231d935fa0 R15: 00007ffcc8a69828 [ 543.828654][ T803] [ 544.155836][ T854] ip6tnl1: entered promiscuous mode [ 544.399448][ T905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 544.406782][ T905] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 544.414926][ T905] vhci_hcd vhci_hcd.0: Device attached [ 544.463604][ T912] atomic_op ffff888115e46d28 conn xmit_atomic 0000000000000000 [ 544.580110][ T906] vhci_hcd: connection closed [ 544.580293][ T2082] vhci_hcd: stop threads [ 544.589455][ T2082] vhci_hcd: release socket [ 544.593876][ T2082] vhci_hcd: disconnect device [ 544.606877][ T1039] vhci_hcd: vhci_device speed not set [ 544.794794][ T935] FAULT_INJECTION: forcing a failure. [ 544.794794][ T935] name failslab, interval 1, probability 0, space 0, times 0 [ 544.807975][ T935] CPU: 0 UID: 0 PID: 935 Comm: syz.6.10633 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 544.808001][ T935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 544.808012][ T935] Call Trace: [ 544.808020][ T935] [ 544.808029][ T935] __dump_stack+0x1d/0x30 [ 544.808055][ T935] dump_stack_lvl+0xe8/0x140 [ 544.808122][ T935] dump_stack+0x15/0x1b [ 544.808137][ T935] should_fail_ex+0x265/0x280 [ 544.808164][ T935] should_failslab+0x8c/0xb0 [ 544.808191][ T935] __kvmalloc_node_noprof+0x126/0x4d0 [ 544.808241][ T935] ? io_alloc_cache_init+0x31/0xa0 [ 544.808265][ T935] io_alloc_cache_init+0x31/0xa0 [ 544.808292][ T935] io_ring_ctx_alloc+0x2f6/0x650 [ 544.808405][ T935] io_uring_create+0x10f/0x610 [ 544.808433][ T935] __se_sys_io_uring_setup+0x1f7/0x210 [ 544.808474][ T935] __x64_sys_io_uring_setup+0x31/0x40 [ 544.808544][ T935] x64_sys_call+0x184b/0x2fb0 [ 544.808584][ T935] do_syscall_64+0xd0/0x1a0 [ 544.808608][ T935] ? clear_bhb_loop+0x40/0x90 [ 544.808633][ T935] ? clear_bhb_loop+0x40/0x90 [ 544.808656][ T935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.808730][ T935] RIP: 0033:0x7f187325e969 [ 544.808746][ T935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.808797][ T935] RSP: 002b:00007f18718c6fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 544.808836][ T935] RAX: ffffffffffffffda RBX: 00007f1873485fa0 RCX: 00007f187325e969 [ 544.808848][ T935] RDX: 0000200000000580 RSI: 0000200000000680 RDI: 00000000000005c2 [ 544.808906][ T935] RBP: 0000200000000680 R08: 0000000000000000 R09: 0000200000000580 [ 544.808919][ T935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.808931][ T935] R13: 0000200000000200 R14: 00000000000005c2 R15: 0000200000000580 [ 544.808950][ T935] [ 545.143787][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.155753][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.473631][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 545.473657][ T29] audit: type=1326 audit(1747124104.888:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.513264][ T29] audit: type=1326 audit(1747124104.888:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.537223][ T29] audit: type=1326 audit(1747124104.888:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.561095][ T29] audit: type=1326 audit(1747124104.888:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.585276][ T29] audit: type=1326 audit(1747124104.888:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.609052][ T29] audit: type=1326 audit(1747124104.888:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.633211][ T29] audit: type=1326 audit(1747124104.888:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.658108][ T29] audit: type=1326 audit(1747124104.888:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.683060][ T29] audit: type=1326 audit(1747124104.888:19743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.707394][ T29] audit: type=1326 audit(1747124104.888:19744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=961 comm="syz.4.10645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5967f3e969 code=0x7ffc0000 [ 545.745772][ T971] FAULT_INJECTION: forcing a failure. [ 545.745772][ T971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.759072][ T971] CPU: 1 UID: 0 PID: 971 Comm: syz.6.10647 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 545.759122][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 545.759139][ T971] Call Trace: [ 545.759146][ T971] [ 545.759155][ T971] __dump_stack+0x1d/0x30 [ 545.759178][ T971] dump_stack_lvl+0xe8/0x140 [ 545.759199][ T971] dump_stack+0x15/0x1b [ 545.759270][ T971] should_fail_ex+0x265/0x280 [ 545.759376][ T971] should_fail+0xb/0x20 [ 545.759405][ T971] should_fail_usercopy+0x1a/0x20 [ 545.759426][ T971] _copy_from_user+0x1c/0xb0 [ 545.759449][ T971] __sys_bpf+0x178/0x790 [ 545.759520][ T971] __x64_sys_bpf+0x41/0x50 [ 545.759548][ T971] x64_sys_call+0x2478/0x2fb0 [ 545.759572][ T971] do_syscall_64+0xd0/0x1a0 [ 545.759599][ T971] ? clear_bhb_loop+0x40/0x90 [ 545.759624][ T971] ? clear_bhb_loop+0x40/0x90 [ 545.759691][ T971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.759727][ T971] RIP: 0033:0x7f187325e969 [ 545.759742][ T971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.759758][ T971] RSP: 002b:00007f18718c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.759780][ T971] RAX: ffffffffffffffda RBX: 00007f1873485fa0 RCX: 00007f187325e969 [ 545.759849][ T971] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 2000000000000000 [ 545.759863][ T971] RBP: 00007f18718c7090 R08: 0000000000000000 R09: 0000000000000000 [ 545.759924][ T971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.759943][ T971] R13: 0000000000000000 R14: 00007f1873485fa0 R15: 00007ffc61042848 [ 545.760033][ T971] [ 546.013305][ T989] FAULT_INJECTION: forcing a failure. [ 546.013305][ T989] name failslab, interval 1, probability 0, space 0, times 0 [ 546.026928][ T989] CPU: 1 UID: 0 PID: 989 Comm: syz.6.10652 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 546.027102][ T989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 546.027197][ T989] Call Trace: [ 546.027205][ T989] [ 546.027214][ T989] __dump_stack+0x1d/0x30 [ 546.027252][ T989] dump_stack_lvl+0xe8/0x140 [ 546.027270][ T989] dump_stack+0x15/0x1b [ 546.027288][ T989] should_fail_ex+0x265/0x280 [ 546.027338][ T989] should_failslab+0x8c/0xb0 [ 546.027417][ T989] kmem_cache_alloc_node_noprof+0x57/0x320 [ 546.027504][ T989] ? perf_event_alloc+0x152/0x15c0 [ 546.027531][ T989] perf_event_alloc+0x152/0x15c0 [ 546.027564][ T989] ? __fget_files+0x184/0x1c0 [ 546.027595][ T989] __se_sys_perf_event_open+0x4e1/0x1170 [ 546.027740][ T989] ? __rcu_read_unlock+0x4f/0x70 [ 546.027768][ T989] __x64_sys_perf_event_open+0x67/0x80 [ 546.027899][ T989] x64_sys_call+0x27ec/0x2fb0 [ 546.027925][ T989] do_syscall_64+0xd0/0x1a0 [ 546.027951][ T989] ? clear_bhb_loop+0x40/0x90 [ 546.028024][ T989] ? clear_bhb_loop+0x40/0x90 [ 546.028048][ T989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.028072][ T989] RIP: 0033:0x7f187325e969 [ 546.028091][ T989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.028152][ T989] RSP: 002b:00007f18718c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 546.028174][ T989] RAX: ffffffffffffffda RBX: 00007f1873485fa0 RCX: 00007f187325e969 [ 546.028186][ T989] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000000 [ 546.028198][ T989] RBP: 00007f18718c7090 R08: 0000000000000002 R09: 0000000000000000 [ 546.028209][ T989] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 546.028302][ T989] R13: 0000000000000000 R14: 00007f1873485fa0 R15: 00007ffc61042848 [ 546.028322][ T989] [ 546.254116][ T1002] FAULT_INJECTION: forcing a failure. [ 546.254116][ T1002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.268132][ T1002] CPU: 1 UID: 0 PID: 1002 Comm: syz.6.10654 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 546.268162][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 546.268183][ T1002] Call Trace: [ 546.268214][ T1002] [ 546.268222][ T1002] __dump_stack+0x1d/0x30 [ 546.268247][ T1002] dump_stack_lvl+0xe8/0x140 [ 546.268284][ T1002] dump_stack+0x15/0x1b [ 546.268357][ T1002] should_fail_ex+0x265/0x280 [ 546.268393][ T1002] should_fail+0xb/0x20 [ 546.268508][ T1002] should_fail_usercopy+0x1a/0x20 [ 546.268533][ T1002] strncpy_from_user+0x25/0x230 [ 546.268633][ T1002] ? __kmalloc_cache_noprof+0x189/0x320 [ 546.268663][ T1002] __se_sys_memfd_create+0x1ff/0x590 [ 546.268696][ T1002] __x64_sys_memfd_create+0x31/0x40 [ 546.268804][ T1002] x64_sys_call+0x122f/0x2fb0 [ 546.268824][ T1002] do_syscall_64+0xd0/0x1a0 [ 546.268845][ T1002] ? clear_bhb_loop+0x40/0x90 [ 546.268908][ T1002] ? clear_bhb_loop+0x40/0x90 [ 546.268929][ T1002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.268953][ T1002] RIP: 0033:0x7f187325e969 [ 546.268970][ T1002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.268989][ T1002] RSP: 002b:00007f18718c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 546.269019][ T1002] RAX: ffffffffffffffda RBX: 00000000000002b2 RCX: 00007f187325e969 [ 546.269069][ T1002] RDX: 00007f18718c6ef0 RSI: 0000000000000000 RDI: 00007f18732e1444 [ 546.269082][ T1002] RBP: 0000200000001600 R08: 00007f18718c6bb7 R09: 00007f18718c6e40 [ 546.269095][ T1002] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000840 [ 546.269108][ T1002] R13: 00007f18718c6ef0 R14: 00007f18718c6eb0 R15: 0000200000000f40 [ 546.269128][ T1002] [ 546.710092][ T1068] vlan2: entered promiscuous mode [ 546.715787][ T1068] vlan2: entered allmulticast mode [ 546.721018][ T1068] hsr_slave_1: entered allmulticast mode [ 546.729407][ T1068] FAULT_INJECTION: forcing a failure. [ 546.729407][ T1068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.743161][ T1068] CPU: 0 UID: 0 PID: 1068 Comm: syz.3.10666 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 546.743194][ T1068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 546.743266][ T1068] Call Trace: [ 546.743275][ T1068] [ 546.743292][ T1068] __dump_stack+0x1d/0x30 [ 546.743316][ T1068] dump_stack_lvl+0xe8/0x140 [ 546.743339][ T1068] dump_stack+0x15/0x1b [ 546.743358][ T1068] should_fail_ex+0x265/0x280 [ 546.743394][ T1068] should_fail+0xb/0x20 [ 546.743439][ T1068] should_fail_usercopy+0x1a/0x20 [ 546.743498][ T1068] _copy_from_user+0x1c/0xb0 [ 546.743519][ T1068] ___sys_sendmsg+0xc1/0x1d0 [ 546.743557][ T1068] __x64_sys_sendmsg+0xd4/0x160 [ 546.743584][ T1068] x64_sys_call+0x2999/0x2fb0 [ 546.743608][ T1068] do_syscall_64+0xd0/0x1a0 [ 546.743713][ T1068] ? clear_bhb_loop+0x40/0x90 [ 546.743736][ T1068] ? clear_bhb_loop+0x40/0x90 [ 546.743778][ T1068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.743801][ T1068] RIP: 0033:0x7f231d70e969 [ 546.743819][ T1068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.743839][ T1068] RSP: 002b:00007f231bd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.743862][ T1068] RAX: ffffffffffffffda RBX: 00007f231d935fa0 RCX: 00007f231d70e969 [ 546.743901][ T1068] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 546.743914][ T1068] RBP: 00007f231bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 546.743927][ T1068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.743938][ T1068] R13: 0000000000000000 R14: 00007f231d935fa0 R15: 00007ffcc8a69828 [ 546.744161][ T1068] [ 546.988562][ T1096] vlan2: entered promiscuous mode [ 546.994010][ T1096] vlan2: entered allmulticast mode [ 546.999351][ T1096] hsr_slave_1: entered allmulticast mode [ 547.866216][ T1157] FAULT_INJECTION: forcing a failure. [ 547.866216][ T1157] name failslab, interval 1, probability 0, space 0, times 0 [ 547.880471][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: syz.6.10678 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 547.880549][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 547.880557][ T1157] Call Trace: [ 547.880560][ T1157] [ 547.880566][ T1157] __dump_stack+0x1d/0x30 [ 547.880581][ T1157] dump_stack_lvl+0xe8/0x140 [ 547.880593][ T1157] dump_stack+0x15/0x1b [ 547.880604][ T1157] should_fail_ex+0x265/0x280 [ 547.880663][ T1157] should_failslab+0x8c/0xb0 [ 547.880687][ T1157] kmem_cache_alloc_node_noprof+0x57/0x320 [ 547.880753][ T1157] ? __alloc_skb+0x101/0x320 [ 547.880772][ T1157] __alloc_skb+0x101/0x320 [ 547.880789][ T1157] netlink_alloc_large_skb+0xba/0xf0 [ 547.880842][ T1157] netlink_sendmsg+0x3cf/0x6b0 [ 547.880855][ T1157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.880884][ T1157] __sock_sendmsg+0x142/0x180 [ 547.880899][ T1157] ____sys_sendmsg+0x31e/0x4e0 [ 547.880914][ T1157] ___sys_sendmsg+0x17b/0x1d0 [ 547.880934][ T1157] __x64_sys_sendmsg+0xd4/0x160 [ 547.880995][ T1157] x64_sys_call+0x2999/0x2fb0 [ 547.881008][ T1157] do_syscall_64+0xd0/0x1a0 [ 547.881024][ T1157] ? clear_bhb_loop+0x40/0x90 [ 547.881037][ T1157] ? clear_bhb_loop+0x40/0x90 [ 547.881062][ T1157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.881076][ T1157] RIP: 0033:0x7f187325e969 [ 547.881087][ T1157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.881099][ T1157] RSP: 002b:00007f18718c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 547.881112][ T1157] RAX: ffffffffffffffda RBX: 00007f1873485fa0 RCX: 00007f187325e969 [ 547.881168][ T1157] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 547.881183][ T1157] RBP: 00007f18718c7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.881267][ T1157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.881275][ T1157] R13: 0000000000000000 R14: 00007f1873485fa0 R15: 00007ffc61042848 [ 547.881287][ T1157] [ 548.094062][ T1157] loop6: detected capacity change from 0 to 4096 [ 548.101387][ T1157] ext4: Bad value for 'sb' [ 548.236142][ T1172] __nla_validate_parse: 15 callbacks suppressed [ 548.236162][ T1172] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10686'. [ 548.319216][ T1186] atomic_op ffff88810255f128 conn xmit_atomic 0000000000000000 [ 548.948511][ T1264] atomic_op ffff8881287cf928 conn xmit_atomic 0000000000000000 [ 549.973242][ T1310] loop6: detected capacity change from 0 to 256 [ 550.742846][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10712'. [ 550.752037][ T1361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10712'. [ 550.859624][ T1367] atomic_op ffff88811960e928 conn xmit_atomic 0000000000000000 [ 550.913682][ T1371] loop6: detected capacity change from 0 to 128 [ 550.935787][ T1371] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 550.949966][ T1371] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.968140][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 550.968157][ T29] audit: type=1400 audit(1747124110.378:19786): avc: denied { create } for pid=1370 comm="syz.6.10714" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 551.052004][ T1380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10715'. [ 551.061246][ T1380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10715'. [ 551.202742][ T29] audit: type=1400 audit(1747124110.618:19787): avc: denied { prog_load } for pid=1370 comm="syz.6.10714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.222639][ T29] audit: type=1400 audit(1747124110.618:19788): avc: denied { bpf } for pid=1370 comm="syz.6.10714" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.244245][ T29] audit: type=1400 audit(1747124110.618:19789): avc: denied { perfmon } for pid=1370 comm="syz.6.10714" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.267515][ T29] audit: type=1400 audit(1747124110.618:19790): avc: denied { prog_run } for pid=1370 comm="syz.6.10714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.286879][ T1371] bridge_slave_0: left allmulticast mode [ 551.287971][ T29] audit: type=1400 audit(1747124110.688:19791): avc: denied { getopt } for pid=1387 comm="syz.2.10717" lport=47046 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 551.294115][ T1371] bridge_slave_0: left promiscuous mode [ 551.323013][ T1371] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.332077][ T1371] bridge_slave_1: left allmulticast mode [ 551.338127][ T1371] bridge_slave_1: left promiscuous mode [ 551.344032][ T1371] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.353043][ T1371] bond0: (slave bond_slave_0): Releasing backup interface [ 551.362420][ T1371] bond0: (slave bond_slave_1): Releasing backup interface [ 551.374805][ T1371] team0: Port device team_slave_0 removed [ 551.383408][ T1371] team0: Port device team_slave_1 removed [ 551.390293][ T1371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.398427][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.407969][ T1371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.415610][ T1371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.430686][ T29] audit: type=1400 audit(1747124110.848:19792): avc: denied { create } for pid=1393 comm="syz.5.10718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.450985][ T29] audit: type=1400 audit(1747124110.848:19793): avc: denied { write } for pid=1393 comm="syz.5.10718" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.485653][ T1396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10719'. [ 551.519024][ T29] audit: type=1400 audit(1747124110.938:19794): avc: denied { map_create } for pid=1397 comm="syz.5.10720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.538822][ T29] audit: type=1400 audit(1747124110.938:19795): avc: denied { map_read map_write } for pid=1397 comm="syz.5.10720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.567923][T30096] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 551.662009][ T1405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10723'. [ 551.689204][ T1407] atomic_op ffff888101659128 conn xmit_atomic 0000000000000000 [ 551.821633][ T1414] netlink: 'syz.4.10727': attribute type 21 has an invalid length. [ 551.829854][ T1414] netlink: 100 bytes leftover after parsing attributes in process `syz.4.10727'. [ 551.911558][ T1421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10729'. [ 551.921092][ T1421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10729'. [ 553.307174][ T1576] __nla_validate_parse: 1 callbacks suppressed [ 553.307192][ T1576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10746'. [ 553.394357][ T1591] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10747'. [ 553.963579][ T1608] netlink: 388 bytes leftover after parsing attributes in process `syz.5.10753'. [ 553.982813][ T1608] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.992735][ T1608] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.028586][ T1608] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.039112][ T1608] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.082400][ T1608] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.092863][ T1608] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.121021][ T1616] syz.4.10756: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 554.137627][ T1616] CPU: 1 UID: 0 PID: 1616 Comm: syz.4.10756 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 554.137746][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 554.137757][ T1616] Call Trace: [ 554.137764][ T1616] [ 554.137772][ T1616] __dump_stack+0x1d/0x30 [ 554.137841][ T1616] dump_stack_lvl+0xe8/0x140 [ 554.137862][ T1616] dump_stack+0x15/0x1b [ 554.137879][ T1616] warn_alloc+0x12b/0x1a0 [ 554.137968][ T1616] ? ctx_sched_in+0x34d/0x370 [ 554.138057][ T1616] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 554.138085][ T1616] ? __perf_event_task_sched_in+0xa37/0xaa0 [ 554.138118][ T1616] ? should_fail_ex+0x30/0x280 [ 554.138172][ T1616] ? xskq_create+0x36/0xe0 [ 554.138198][ T1616] ? should_failslab+0x8c/0xb0 [ 554.138227][ T1616] vmalloc_user_noprof+0x59/0x70 [ 554.138252][ T1616] ? xskq_create+0x80/0xe0 [ 554.138331][ T1616] xskq_create+0x80/0xe0 [ 554.138357][ T1616] xsk_init_queue+0x95/0xf0 [ 554.138420][ T1616] xsk_setsockopt+0x35c/0x510 [ 554.138557][ T1616] ? __pfx_xsk_setsockopt+0x10/0x10 [ 554.138587][ T1616] __sys_setsockopt+0x181/0x200 [ 554.138610][ T1616] __x64_sys_setsockopt+0x64/0x80 [ 554.138709][ T1616] x64_sys_call+0x2bd5/0x2fb0 [ 554.138728][ T1616] do_syscall_64+0xd0/0x1a0 [ 554.138753][ T1616] ? clear_bhb_loop+0x40/0x90 [ 554.138807][ T1616] ? clear_bhb_loop+0x40/0x90 [ 554.138830][ T1616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.138852][ T1616] RIP: 0033:0x7f5967f3e969 [ 554.138869][ T1616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.138946][ T1616] RSP: 002b:00007f59665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 554.138967][ T1616] RAX: ffffffffffffffda RBX: 00007f5968165fa0 RCX: 00007f5967f3e969 [ 554.138980][ T1616] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 554.138993][ T1616] RBP: 00007f5967fc0ab1 R08: 0000000000000004 R09: 0000000000000000 [ 554.139030][ T1616] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.139042][ T1616] R13: 0000000000000000 R14: 00007f5968165fa0 R15: 00007ffd80744618 [ 554.139098][ T1616] [ 554.139168][ T1616] Mem-Info: [ 554.395930][ T1616] active_anon:4376 inactive_anon:86 isolated_anon:0 [ 554.395930][ T1616] active_file:25958 inactive_file:2468 isolated_file:0 [ 554.395930][ T1616] unevictable:0 dirty:215 writeback:0 [ 554.395930][ T1616] slab_reclaimable:3235 slab_unreclaimable:35233 [ 554.395930][ T1616] mapped:29970 shmem:304 pagetables:863 [ 554.395930][ T1616] sec_pagetables:0 bounce:0 [ 554.395930][ T1616] kernel_misc_reclaimable:0 [ 554.395930][ T1616] free:1861241 free_pcp:2252 free_cma:0 [ 554.442592][ T1616] Node 0 active_anon:17504kB inactive_anon:344kB active_file:103832kB inactive_file:9872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119880kB dirty:860kB writeback:0kB shmem:1216kB writeback_tmp:0kB kernel_stack:3392kB pagetables:3452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 554.472911][ T1616] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.502129][ T1616] lowmem_reserve[]: 0 2884 7863 7863 [ 554.510442][ T1616] Node 0 DMA32 free:2950032kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 554.539664][ T1616] lowmem_reserve[]: 0 0 4978 4978 [ 554.545491][ T1616] Node 0 Normal free:4479572kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:17504kB inactive_anon:344kB active_file:103832kB inactive_file:9872kB unevictable:0kB writepending:860kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:5476kB local_pcp:1040kB free_cma:0kB [ 554.581019][ T1616] lowmem_reserve[]: 0 0 0 0 [ 554.586679][ T1616] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 554.602219][ T1616] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950032kB [ 554.632190][ T1616] Node 0 Normal: 867*4kB (UM) 1050*8kB (UME) 482*16kB (UME) 552*32kB (UME) 319*64kB (UME) 86*128kB (UM) 28*256kB (UME) 61*512kB (UME) 80*1024kB (UME) 45*2048kB (UM) 1025*4096kB (UM) = 4479548kB [ 554.654970][ T1616] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 554.666095][ T1616] 28827 total pagecache pages [ 554.672635][ T1616] 110 pages in swap cache [ 554.679211][ T1616] Free swap = 124552kB [ 554.684419][ T1616] Total swap = 124996kB [ 554.689249][ T1616] 2097051 pages RAM [ 554.693760][ T1616] 0 pages HighMem/MovableOnly [ 554.699407][ T1616] 80259 pages reserved [ 554.720475][ T1608] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.720513][ T1608] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.722127][ T1621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10759'. [ 554.734308][ T1623] loop6: detected capacity change from 0 to 512 [ 554.740844][ T1624] sd 0:0:1:0: device reset [ 554.742080][ T1624] vlan0: entered promiscuous mode [ 554.742232][ T1624] vlan0: entered allmulticast mode [ 554.742310][ T1624] veth0_vlan: entered allmulticast mode [ 554.742327][ T1624] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 554.746222][ T1624] bridge0: entered allmulticast mode [ 554.831566][ T1608] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.840637][ T1608] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.847455][ T1608] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.857759][ T1608] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.868498][ T1623] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.868827][ T1623] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.894732][ T1608] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.903111][ T1608] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.924082][ T1608] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.932720][ T1608] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.942650][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.974464][ T1642] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.984942][ T1642] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.030450][ T1642] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.041761][ T1642] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.131802][ T1642] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.133146][ T1655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10771'. [ 555.142254][ T1642] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.151309][ T1655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10771'. [ 555.220184][ T1642] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.230670][ T1642] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.422398][ T1642] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.431531][ T1642] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.487185][ T1642] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.495773][ T1642] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.538538][ T1642] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.547041][ T1642] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.603648][ T1642] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.612605][ T1642] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.876215][ T1670] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10776'. [ 555.905630][ T1670] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.915904][ T1670] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.986199][ T1670] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.996195][ T1670] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.044707][ T1680] atomic_op ffff88810eaa6928 conn xmit_atomic 0000000000000000 [ 556.056357][ T1682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10781'. [ 556.068558][ T1682] ipvlan2: entered promiscuous mode [ 556.083388][ T1670] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.093968][ T1670] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.168288][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 556.168380][ T29] audit: type=1400 audit(1747124115.588:19924): avc: denied { cpu } for pid=1694 comm="syz.6.10787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 556.199396][ T1670] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.209450][ T1670] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.258028][ T1670] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.261478][ T29] audit: type=1400 audit(1747124115.678:19925): avc: denied { write } for pid=1698 comm="syz.6.10789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 556.266501][ T1670] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.276341][ T1670] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.304999][ T1670] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.318767][ T1670] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.327087][ T1670] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.341950][ T1670] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.350259][ T1670] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.360776][ T29] audit: type=1400 audit(1747124115.778:19926): avc: denied { execmem } for pid=1698 comm="syz.6.10789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 556.413528][ T29] audit: type=1400 audit(1747124115.828:19927): avc: denied { setopt } for pid=1701 comm="syz.6.10790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 556.452848][ T29] audit: type=1400 audit(1747124115.828:19928): avc: denied { bind } for pid=1701 comm="syz.6.10790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 556.506202][ T1702] loop6: detected capacity change from 0 to 256 [ 556.530577][ T29] audit: type=1400 audit(1747124115.938:19929): avc: denied { mount } for pid=1701 comm="syz.6.10790" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 556.553978][ T29] audit: type=1400 audit(1747124115.938:19930): avc: denied { write } for pid=1701 comm="syz.6.10790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 556.574078][ T29] audit: type=1400 audit(1747124115.938:19931): avc: denied { read } for pid=1701 comm="syz.6.10790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 556.950581][ T1706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10792'. [ 556.960999][ T1706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10792'. [ 557.135399][ T29] audit: type=1400 audit(1747124116.548:19932): avc: denied { create } for pid=1718 comm="syz.3.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 557.172207][ T29] audit: type=1400 audit(1747124116.588:19933): avc: denied { write } for pid=1718 comm="syz.3.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 557.193519][ T1714] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 557.200148][ T1714] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 557.207810][ T1714] vhci_hcd vhci_hcd.0: Device attached [ 557.243277][ T1734] atomic_op ffff88810223cd28 conn xmit_atomic 0000000000000000 [ 557.376121][ T1726] vhci_hcd: connection closed [ 557.376389][T24208] vhci_hcd: stop threads [ 557.385926][T24208] vhci_hcd: release socket [ 557.390528][T24208] vhci_hcd: disconnect device [ 557.396829][ T3396] vhci_hcd: vhci_device speed not set [ 558.182786][ T1769] atomic_op ffff88810223ed28 conn xmit_atomic 0000000000000000 [ 558.252251][ T1771] netlink: zone id is out of range [ 558.252261][ T1771] netlink: zone id is out of range [ 558.252268][ T1771] netlink: zone id is out of range [ 558.252274][ T1771] netlink: zone id is out of range [ 558.252280][ T1771] netlink: zone id is out of range [ 558.252330][ T1771] netlink: zone id is out of range [ 558.285603][ T1771] netlink: zone id is out of range [ 558.285613][ T1771] netlink: zone id is out of range [ 558.285620][ T1771] netlink: zone id is out of range [ 558.339990][ T1795] __nla_validate_parse: 4 callbacks suppressed [ 558.340006][ T1795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10819'. [ 558.355819][ T1795] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10819'. [ 558.475673][ T1810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10822'. [ 558.692908][ T1846] atomic_op ffff88810223cd28 conn xmit_atomic 0000000000000000 [ 558.755121][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10828'. [ 558.769448][ T1857] ipvlan2: entered promiscuous mode [ 559.305818][ T1913] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10831'. [ 559.315447][ T1913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10831'. [ 559.483702][ T1923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10833'. [ 559.535927][ T1935] loop6: detected capacity change from 0 to 512 [ 559.594895][ T1935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.765567][ T1935] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.272675][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.298780][ T1958] net_ratelimit: 294 callbacks suppressed [ 561.298796][ T1958] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 561.936336][ T1972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10844'. [ 561.945543][ T1972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10844'. [ 562.392673][ T1994] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10847'. [ 562.559524][ T2007] loop6: detected capacity change from 0 to 256 [ 563.377567][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 563.377586][ T29] audit: type=1400 audit(1747124122.798:19951): avc: denied { write } for pid=2115 comm="syz.3.10855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 563.443775][ T2123] loop6: detected capacity change from 0 to 512 [ 563.502168][ T2123] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 563.532423][ T2123] EXT4-fs (loop6): 1 truncate cleaned up [ 563.539356][ T2123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.587246][ T2123] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 563.611059][ T29] audit: type=1400 audit(1747124123.028:19952): avc: denied { create } for pid=2122 comm="syz.6.10857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 563.652355][ T29] audit: type=1400 audit(1747124123.048:19953): avc: denied { write } for pid=2122 comm="syz.6.10857" path="socket:[115041]" dev="sockfs" ino=115041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 563.683866][ T29] audit: type=1400 audit(1747124123.098:19954): avc: denied { read write } for pid=2122 comm="syz.6.10857" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 563.694149][ T3396] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 563.733692][ T29] audit: type=1400 audit(1747124123.108:19955): avc: denied { open } for pid=2122 comm="syz.6.10857" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 563.801430][ T2133] __nla_validate_parse: 1 callbacks suppressed [ 563.801449][ T2133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10859'. [ 563.830495][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.408116][ T29] audit: type=1400 audit(1747124123.828:19956): avc: denied { bind } for pid=2154 comm="syz.2.10864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 564.521028][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10865'. [ 564.938230][ T2160] ipvlan2: entered promiscuous mode [ 565.844536][ T2289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10876'. [ 565.858420][ T2289] ipvlan2: entered promiscuous mode [ 566.185676][ T2327] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10884'. [ 566.199686][ T2327] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.209679][ T2327] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.239765][ T2331] geneve0: entered allmulticast mode [ 566.248613][ T2327] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.259248][ T2327] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.318041][ T2327] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.328039][ T2327] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.408320][ T2327] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.418296][ T2327] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.477964][ T2339] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 566.501907][ T2327] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.510241][ T2327] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.522509][ T2327] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.531268][ T2327] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.542923][ T2327] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.551379][ T2327] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.564764][ T2327] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.573327][ T2327] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.701184][ T2358] loop6: detected capacity change from 0 to 1024 [ 566.708388][ T2358] EXT4-fs: Ignoring removed nobh option [ 566.714248][ T2358] EXT4-fs: Ignoring removed bh option [ 566.722529][ T2360] netlink: 388 bytes leftover after parsing attributes in process `syz.2.10896'. [ 566.731788][ T29] audit: type=1400 audit(1747124126.128:19957): avc: denied { mounton } for pid=2357 comm="syz.6.10895" path="/152/file1" dev="tmpfs" ino=806 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 566.763654][ T2360] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.774810][ T2358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.788419][ T2358] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.835236][ T2360] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.869443][ T29] audit: type=1400 audit(1747124126.288:19958): avc: denied { block_suspend } for pid=2368 comm="syz.6.10898" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 567.025837][ T2360] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.037188][ T2381] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10901'. [ 567.117192][ T2360] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.195008][ T2360] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.225667][ T2360] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.244598][ T2386] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 567.269339][ T2360] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.282714][ T2360] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.343684][ T29] audit: type=1400 audit(1747124126.758:19959): avc: denied { write } for pid=2395 comm="syz.5.10908" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 567.360984][ T2400] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10910'. [ 567.376506][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10910'. [ 567.425198][ T2407] atomic_op ffff888118ef6528 conn xmit_atomic 0000000000000000 [ 567.921107][ T2422] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10918'. [ 567.973231][ T2424] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10921'. [ 568.011542][ T2422] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.021681][ T2422] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.079710][ T2422] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.089766][ T2422] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.162598][ T2433] atomic_op ffff8881035c7528 conn xmit_atomic 0000000000000000 [ 568.204714][ T2422] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.214743][ T2422] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.278671][ T2422] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.288965][ T2422] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.600206][ T2475] ipvlan2: entered promiscuous mode [ 568.684832][ T2491] atomic_op ffff88810255f128 conn xmit_atomic 0000000000000000 [ 568.997998][ T2547] FAULT_INJECTION: forcing a failure. [ 568.997998][ T2547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.011847][ T2547] CPU: 1 UID: 0 PID: 2547 Comm: syz.2.10945 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 569.011876][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 569.011888][ T2547] Call Trace: [ 569.011894][ T2547] [ 569.011902][ T2547] __dump_stack+0x1d/0x30 [ 569.011924][ T2547] dump_stack_lvl+0xe8/0x140 [ 569.012022][ T2547] dump_stack+0x15/0x1b [ 569.012114][ T2547] should_fail_ex+0x265/0x280 [ 569.012163][ T2547] should_fail+0xb/0x20 [ 569.012194][ T2547] should_fail_usercopy+0x1a/0x20 [ 569.012240][ T2547] _copy_from_user+0x1c/0xb0 [ 569.012265][ T2547] ___sys_sendmsg+0xc1/0x1d0 [ 569.012382][ T2547] __x64_sys_sendmsg+0xd4/0x160 [ 569.012489][ T2547] x64_sys_call+0x2999/0x2fb0 [ 569.012512][ T2547] do_syscall_64+0xd0/0x1a0 [ 569.012536][ T2547] ? clear_bhb_loop+0x40/0x90 [ 569.012566][ T2547] ? clear_bhb_loop+0x40/0x90 [ 569.012654][ T2547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.012694][ T2547] RIP: 0033:0x7fbfbcece969 [ 569.012710][ T2547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.012728][ T2547] RSP: 002b:00007fbfbb537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.012748][ T2547] RAX: ffffffffffffffda RBX: 00007fbfbd0f5fa0 RCX: 00007fbfbcece969 [ 569.012762][ T2547] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 569.012776][ T2547] RBP: 00007fbfbb537090 R08: 0000000000000000 R09: 0000000000000000 [ 569.012789][ T2547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.012818][ T2547] R13: 0000000000000000 R14: 00007fbfbd0f5fa0 R15: 00007ffdf6da1d38 [ 569.012837][ T2547] [ 569.225944][ T2553] atomic_op ffff88811c3be528 conn xmit_atomic 0000000000000000 [ 569.249068][ T2551] loop6: detected capacity change from 0 to 1024 [ 569.256293][ T2551] EXT4-fs: Ignoring removed nobh option [ 569.262137][ T2551] EXT4-fs: Ignoring removed bh option [ 569.293255][ T2551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.313246][ T2551] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.364835][ T29] audit: type=1400 audit(1747124128.778:19960): avc: denied { create } for pid=2575 comm="syz.6.10949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 569.413058][ T29] audit: type=1326 audit(1747124128.808:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.437257][ T29] audit: type=1326 audit(1747124128.808:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.463027][ T29] audit: type=1326 audit(1747124128.808:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.487469][ T29] audit: type=1326 audit(1747124128.808:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.511963][ T29] audit: type=1326 audit(1747124128.808:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.536146][ T29] audit: type=1326 audit(1747124128.808:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.560037][ T29] audit: type=1326 audit(1747124128.808:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.584336][ T29] audit: type=1326 audit(1747124128.808:19968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 569.584647][ T2591] __nla_validate_parse: 5 callbacks suppressed [ 569.584661][ T2591] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10951'. [ 569.609258][ T29] audit: type=1326 audit(1747124128.808:19969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2575 comm="syz.6.10949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f187325e969 code=0x7ffc0000 [ 570.325476][ T2628] netlink: 388 bytes leftover after parsing attributes in process `syz.4.10956'. [ 570.482170][ T2633] FAULT_INJECTION: forcing a failure. [ 570.482170][ T2633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.496116][ T2633] CPU: 0 UID: 0 PID: 2633 Comm: syz.5.10957 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 570.496183][ T2633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 570.496241][ T2633] Call Trace: [ 570.496249][ T2633] [ 570.496257][ T2633] __dump_stack+0x1d/0x30 [ 570.496284][ T2633] dump_stack_lvl+0xe8/0x140 [ 570.496307][ T2633] dump_stack+0x15/0x1b [ 570.496354][ T2633] should_fail_ex+0x265/0x280 [ 570.496389][ T2633] should_fail+0xb/0x20 [ 570.496418][ T2633] should_fail_usercopy+0x1a/0x20 [ 570.496436][ T2633] strncpy_from_user+0x25/0x230 [ 570.496458][ T2633] ? __kmalloc_cache_noprof+0x189/0x320 [ 570.496526][ T2633] __se_sys_memfd_create+0x1ff/0x590 [ 570.496638][ T2633] __x64_sys_memfd_create+0x31/0x40 [ 570.496710][ T2633] x64_sys_call+0x122f/0x2fb0 [ 570.496728][ T2633] do_syscall_64+0xd0/0x1a0 [ 570.496782][ T2633] ? clear_bhb_loop+0x40/0x90 [ 570.496879][ T2633] ? clear_bhb_loop+0x40/0x90 [ 570.496896][ T2633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.496915][ T2633] RIP: 0033:0x7f3f54c6e969 [ 570.496929][ T2633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.496945][ T2633] RSP: 002b:00007f3f53294d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 570.497032][ T2633] RAX: ffffffffffffffda RBX: 000000000000104f RCX: 00007f3f54c6e969 [ 570.497050][ T2633] RDX: 00007f3f53294dec RSI: 0000000000000000 RDI: 00007f3f54cf1444 [ 570.497061][ T2633] RBP: 0000200000001200 R08: 00007f3f53294b07 R09: 0000000000000000 [ 570.497072][ T2633] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 570.497142][ T2633] R13: 00007f3f53294dec R14: 00007f3f53294df0 R15: 00007fffb4d6c208 [ 570.497158][ T2633] [ 570.742616][ T2637] atomic_op ffff88811867b528 conn xmit_atomic 0000000000000000 [ 571.849564][ T2646] FAULT_INJECTION: forcing a failure. [ 571.849564][ T2646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.863661][ T2646] CPU: 0 UID: 0 PID: 2646 Comm: syz.4.10961 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 571.863689][ T2646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 571.863702][ T2646] Call Trace: [ 571.863710][ T2646] [ 571.863720][ T2646] __dump_stack+0x1d/0x30 [ 571.863744][ T2646] dump_stack_lvl+0xe8/0x140 [ 571.863822][ T2646] dump_stack+0x15/0x1b [ 571.863842][ T2646] should_fail_ex+0x265/0x280 [ 571.863891][ T2646] should_fail+0xb/0x20 [ 571.863923][ T2646] should_fail_usercopy+0x1a/0x20 [ 571.863945][ T2646] _copy_from_user+0x1c/0xb0 [ 571.863968][ T2646] ___sys_sendmsg+0xc1/0x1d0 [ 571.864011][ T2646] __sys_sendmmsg+0x178/0x300 [ 571.864115][ T2646] __x64_sys_sendmmsg+0x57/0x70 [ 571.864134][ T2646] x64_sys_call+0x2f2f/0x2fb0 [ 571.864156][ T2646] do_syscall_64+0xd0/0x1a0 [ 571.864244][ T2646] ? clear_bhb_loop+0x40/0x90 [ 571.864269][ T2646] ? clear_bhb_loop+0x40/0x90 [ 571.864292][ T2646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.864316][ T2646] RIP: 0033:0x7f5967f3e969 [ 571.864334][ T2646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.864376][ T2646] RSP: 002b:00007f59665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 571.864395][ T2646] RAX: ffffffffffffffda RBX: 00007f5968165fa0 RCX: 00007f5967f3e969 [ 571.864408][ T2646] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000005 [ 571.864422][ T2646] RBP: 00007f59665a7090 R08: 0000000000000000 R09: 0000000000000000 [ 571.864435][ T2646] R10: 000000002600c054 R11: 0000000000000246 R12: 0000000000000001 [ 571.864447][ T2646] R13: 0000000000000000 R14: 00007f5968165fa0 R15: 00007ffd80744618 [ 571.864464][ T2646] [ 572.374008][ T2648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10962'. [ 572.414439][ T2650] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10963'. [ 572.665310][ T2652] loop6: detected capacity change from 0 to 512 [ 572.703792][ T2652] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.713160][ T2652] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 572.728988][ T2652] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 572.741062][ T2659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10967'. [ 572.765607][ T2652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 572.775509][ T2659] ipvlan2: entered promiscuous mode [ 572.783209][ T2652] System zones: 0-2, 18-18, 34-34 [ 572.789228][ T2652] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 572.806627][ T2652] EXT4-fs (loop6): 1 truncate cleaned up [ 572.813570][ T2652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.840849][ T2422] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.849485][ T2422] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.862918][ T2422] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.871475][ T2422] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.888814][ T2422] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.897478][ T2422] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.910296][ T2422] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.919000][ T2422] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.044006][ T2677] FAULT_INJECTION: forcing a failure. [ 573.044006][ T2677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.057510][ T2677] CPU: 0 UID: 0 PID: 2677 Comm: syz.3.10969 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 573.057544][ T2677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 573.057564][ T2677] Call Trace: [ 573.057572][ T2677] [ 573.057583][ T2677] __dump_stack+0x1d/0x30 [ 573.057681][ T2677] dump_stack_lvl+0xe8/0x140 [ 573.057703][ T2677] dump_stack+0x15/0x1b [ 573.057772][ T2677] should_fail_ex+0x265/0x280 [ 573.057804][ T2677] should_fail+0xb/0x20 [ 573.057898][ T2677] should_fail_usercopy+0x1a/0x20 [ 573.057920][ T2677] _copy_from_user+0x1c/0xb0 [ 573.057947][ T2677] __se_sys_add_key+0x209/0x350 [ 573.058008][ T2677] __x64_sys_add_key+0x67/0x80 [ 573.058033][ T2677] x64_sys_call+0x1d0d/0x2fb0 [ 573.058052][ T2677] do_syscall_64+0xd0/0x1a0 [ 573.058074][ T2677] ? clear_bhb_loop+0x40/0x90 [ 573.058177][ T2677] ? clear_bhb_loop+0x40/0x90 [ 573.058218][ T2677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.058237][ T2677] RIP: 0033:0x7f231d70e969 [ 573.058252][ T2677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.058268][ T2677] RSP: 002b:00007f231bd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 573.058291][ T2677] RAX: ffffffffffffffda RBX: 00007f231d935fa0 RCX: 00007f231d70e969 [ 573.058306][ T2677] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 573.058322][ T2677] RBP: 00007f231bd77090 R08: fffffffffffffffd R09: 0000000000000000 [ 573.058411][ T2677] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 573.058423][ T2677] R13: 0000000000000000 R14: 00007f231d935fa0 R15: 00007ffcc8a69828 [ 573.058439][ T2677] [ 573.255124][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.666325][ T2715] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 573.672984][ T2715] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 573.680887][ T2715] vhci_hcd vhci_hcd.0: Device attached [ 573.769311][ T2732] atomic_op ffff88811867a928 conn xmit_atomic 0000000000000000 [ 573.908715][ T2716] vhci_hcd: connection closed [ 573.908866][T24216] vhci_hcd: stop threads [ 573.918017][T24216] vhci_hcd: release socket [ 573.922555][T24216] vhci_hcd: disconnect device [ 573.937112][T21117] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 573.945140][T21117] usb 13-1: enqueue for inactive port 0 [ 573.951451][T21117] usb 13-1: enqueue for inactive port 0 [ 573.957990][T21117] usb 13-1: enqueue for inactive port 0 [ 574.027195][T21117] vhci_hcd: vhci_device speed not set [ 574.224959][ T2794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10981'. [ 574.244209][ T2794] ipvlan2: entered promiscuous mode [ 574.323926][ T2809] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10985'. [ 574.373154][ T2816] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10988'. [ 574.403581][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 574.403600][ T29] audit: type=1400 audit(1747124133.818:19996): avc: denied { write } for pid=2815 comm="syz.6.10988" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 574.548556][ T29] audit: type=1400 audit(1747124133.968:19997): avc: denied { mount } for pid=2823 comm="+}[@" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 574.550009][ T29] audit: type=1400 audit(1747124133.968:19998): avc: denied { unmount } for pid=2823 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 574.552170][ T29] audit: type=1400 audit(1747124133.968:19999): avc: denied { create } for pid=2823 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 574.552717][ T29] audit: type=1400 audit(1747124133.968:20000): avc: denied { ioctl } for pid=2823 comm="+}[@" path="socket:[116825]" dev="sockfs" ino=116825 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 574.652235][ T2839] loop6: detected capacity change from 0 to 2048 [ 574.719438][ T2839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.722941][ T29] audit: type=1400 audit(1747124134.138:20001): avc: denied { setopt } for pid=2834 comm="syz.6.10990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.723403][ T2835] tipc: Started in network mode [ 574.723417][ T2835] tipc: Node identity 4, cluster identity 4711 [ 574.723430][ T2835] tipc: Node number set to 4 [ 574.724100][ T2835] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.10990: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 574.734280][ T29] audit: type=1326 audit(1747124134.138:20002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbcece969 code=0x7ffc0000 [ 574.737326][ T2835] EXT4-fs (loop6): Remounting filesystem read-only [ 574.868697][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.869408][ T29] audit: type=1326 audit(1747124134.218:20003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbcece969 code=0x7ffc0000 [ 574.903780][ T29] audit: type=1326 audit(1747124134.218:20004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfbcece969 code=0x7ffc0000 [ 574.928926][ T29] audit: type=1326 audit(1747124134.218:20005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2846 comm="syz.2.10991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfbcece969 code=0x7ffc0000 [ 574.966604][ T2851] FAULT_INJECTION: forcing a failure. [ 574.966604][ T2851] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.980418][ T2851] CPU: 0 UID: 0 PID: 2851 Comm: syz.3.10993 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 574.980453][ T2851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 574.980504][ T2851] Call Trace: [ 574.980511][ T2851] [ 574.980519][ T2851] __dump_stack+0x1d/0x30 [ 574.980539][ T2851] dump_stack_lvl+0xe8/0x140 [ 574.980572][ T2851] dump_stack+0x15/0x1b [ 574.980589][ T2851] should_fail_ex+0x265/0x280 [ 574.980620][ T2851] should_fail_alloc_page+0xf2/0x100 [ 574.980656][ T2851] __alloc_frozen_pages_noprof+0xff/0x360 [ 574.980749][ T2851] alloc_pages_mpol+0xb3/0x250 [ 574.980771][ T2851] vma_alloc_folio_noprof+0x1aa/0x300 [ 574.980795][ T2851] handle_mm_fault+0x1056/0x2ae0 [ 574.980821][ T2851] ? mas_walk+0xf2/0x120 [ 574.980918][ T2851] do_user_addr_fault+0x636/0x1090 [ 574.980954][ T2851] exc_page_fault+0x54/0xc0 [ 574.980975][ T2851] asm_exc_page_fault+0x26/0x30 [ 574.980998][ T2851] RIP: 0033:0x7f231d5da35b [ 574.981017][ T2851] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 574.981081][ T2851] RSP: 002b:00007f231bd75fb0 EFLAGS: 00010202 [ 574.981098][ T2851] RAX: 0000000000000000 RBX: 00007f231d935fa0 RCX: 0000000000000000 [ 574.981113][ T2851] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000380 [ 574.981127][ T2851] RBP: 00007f231bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 574.981141][ T2851] R10: 0000200000000380 R11: 0000000000000000 R12: 0000000000000001 [ 574.981155][ T2851] R13: 0000000000000000 R14: 00007f231d935fa0 R15: 00007ffcc8a69828 [ 574.981174][ T2851] [ 574.981679][ T2851] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 575.222658][ T2861] loop6: detected capacity change from 0 to 512 [ 575.237366][ T2861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.251259][ T2861] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.290692][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10998'. [ 575.303822][ T2867] ipvlan2: entered promiscuous mode [ 575.304639][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.328488][ T2871] loop6: detected capacity change from 0 to 128 [ 575.526112][ T2889] atomic_op ffff888118678528 conn xmit_atomic 0000000000000000 [ 575.701348][ T2908] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 575.793404][ T2922] netlink: 388 bytes leftover after parsing attributes in process `syz.2.11017'. [ 575.815892][ T2923] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11016'. [ 575.861623][ T2934] atomic_op ffff88811867bd28 conn xmit_atomic 0000000000000000 [ 575.973462][ T2951] netlink: 388 bytes leftover after parsing attributes in process `syz.2.11023'. [ 576.186335][ T2986] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 576.193181][ T2986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 576.200913][ T2986] vhci_hcd vhci_hcd.0: Device attached [ 576.387500][ T2991] vhci_hcd: connection closed [ 576.387916][T24209] vhci_hcd: stop threads [ 576.397380][T24209] vhci_hcd: release socket [ 576.401829][T24209] vhci_hcd: disconnect device [ 576.406637][ T3393] vhci_hcd: vhci_device speed not set [ 576.769862][ T3065] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 576.863023][ T3081] netlink: 388 bytes leftover after parsing attributes in process `syz.5.11029'. [ 576.951285][ T3095] ALSA: seq fatal error: cannot create timer (-22) [ 576.999147][ T3100] netlink: 'syz.3.11035': attribute type 27 has an invalid length. [ 577.044962][ T3100] bridge0: port 3(team0) entered disabled state [ 577.052227][ T3100] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.059858][ T3100] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.099728][ T3100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.109581][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 577.110615][ T3100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.118846][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 577.134463][ T3100] hsr0: left promiscuous mode [ 577.135986][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 577.157732][ T3100] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.160849][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 577.166316][ T3100] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.175790][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11035'. [ 577.184016][ T3100] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.184051][ T3100] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.212420][ T3100] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.221174][ T3100] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.230334][ T3100] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.239182][ T3100] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.249096][ T3100] ip6tnl1: left promiscuous mode [ 577.254871][ T3100] vlan2: left promiscuous mode [ 577.259940][ T3100] vlan2: left allmulticast mode [ 577.265110][ T3100] hsr_slave_1: left allmulticast mode [ 577.291519][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.300456][ T3105] bridge0: port 3(team0) entered blocking state [ 577.306854][ T3105] bridge0: port 3(team0) entered forwarding state [ 577.313465][ T3105] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.322837][ T3105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 577.347042][T24210] bridge0: port 3(team0) entered disabled state [ 577.378275][ T3122] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 577.385063][ T3122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 577.392999][ T3122] vhci_hcd vhci_hcd.0: Device attached [ 577.425496][ T3127] xt_hashlimit: size too large, truncated to 1048576 [ 577.432449][ T3127] xt_hashlimit: max too large, truncated to 1048576 [ 577.496399][ T3132] loop6: detected capacity change from 0 to 512 [ 577.497083][ T3132] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 577.514858][ T3132] EXT4-fs (loop6): 1 truncate cleaned up [ 577.515237][ T3132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.564214][ T3123] vhci_hcd: connection closed [ 577.564282][ T179] vhci_hcd: stop threads [ 577.573603][ T179] vhci_hcd: release socket [ 577.578288][ T179] vhci_hcd: disconnect device [ 577.583252][T21117] vhci_hcd: vhci_device speed not set [ 577.602491][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.728826][ T3138] loop6: detected capacity change from 0 to 256 [ 577.762779][ T3140] bond2: entered promiscuous mode [ 577.769749][ T3140] bond2: entered allmulticast mode [ 577.778971][ T3140] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.808400][ T3140] bond2 (unregistering): Released all slaves [ 577.920921][ T3170] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.930800][ T3170] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.009610][ T3170] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.019576][ T3170] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.072982][ T3170] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.082876][ T3170] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.151182][ T3170] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.161555][ T3170] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.325471][ T3170] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.333876][ T3170] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.348186][ T3170] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.356920][ T3170] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.392805][ T3170] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.401514][ T3170] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.409882][ T3170] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.423238][ T3170] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.576128][ T3242] loop6: detected capacity change from 0 to 1024 [ 578.582975][ T3242] EXT4-fs: Ignoring removed bh option [ 578.598877][ T3242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.618211][ T3242] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #19: comm syz.6.11061: missing EA_INODE flag [ 578.630280][ T3242] EXT4-fs (loop6): Remounting filesystem read-only [ 578.636978][ T3242] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #20: comm syz.6.11061: dec ref error=-30 [ 578.680067][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.693529][ T3259] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 578.700450][ T3259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 578.708128][ T3259] vhci_hcd vhci_hcd.0: Device attached [ 578.916363][ T3287] loop6: detected capacity change from 0 to 8192 [ 578.982406][ T23] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 579.028885][ T3287] loop6: p1 p3 p4 [ 579.032828][ T3287] loop6: p1 size 8390912 extends beyond EOD, truncated [ 579.054752][ T3261] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 579.061554][ T3287] loop6: p3 size 589824 extends beyond EOD, truncated [ 579.120679][ T2082] vhci_hcd: stop threads [ 579.125108][ T2082] vhci_hcd: release socket [ 579.129810][ T2082] vhci_hcd: disconnect device [ 579.510572][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 579.510590][ T29] audit: type=1400 audit(1747124138.928:20232): avc: denied { create } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.809888][ T3316] netlink: 'syz.5.11070': attribute type 30 has an invalid length. [ 579.844430][ T29] audit: type=1400 audit(1747124138.968:20233): avc: denied { ioctl } for pid=3311 comm="syz.5.11070" path="socket:[117366]" dev="sockfs" ino=117366 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.870756][ T29] audit: type=1400 audit(1747124139.018:20234): avc: denied { bind } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 579.892340][ T29] audit: type=1400 audit(1747124139.018:20235): avc: denied { create } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 579.913717][ T29] audit: type=1400 audit(1747124139.018:20236): avc: denied { write } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 579.935012][ T29] audit: type=1400 audit(1747124139.018:20237): avc: denied { kexec_image_load } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 579.956554][ T29] audit: type=1400 audit(1747124139.028:20238): avc: denied { create } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 579.978149][ T29] audit: type=1400 audit(1747124139.028:20239): avc: denied { write } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 579.999982][ T29] audit: type=1400 audit(1747124139.228:20240): avc: denied { create } for pid=3311 comm="syz.5.11070" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 580.021854][ T29] audit: type=1400 audit(1747124139.228:20241): avc: denied { write } for pid=3311 comm="syz.5.11070" path="socket:[117378]" dev="sockfs" ino=117378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 580.272351][ T3340] vhci_hcd: invalid port number 96 [ 580.277793][ T3340] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 580.289893][ T3351] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 580.373457][ T3355] FAULT_INJECTION: forcing a failure. [ 580.373457][ T3355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.386671][ T3355] CPU: 1 UID: 0 PID: 3355 Comm: syz.2.11081 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 580.386703][ T3355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 580.386717][ T3355] Call Trace: [ 580.386725][ T3355] [ 580.386734][ T3355] __dump_stack+0x1d/0x30 [ 580.386770][ T3355] dump_stack_lvl+0xe8/0x140 [ 580.386866][ T3355] dump_stack+0x15/0x1b [ 580.386881][ T3355] should_fail_ex+0x265/0x280 [ 580.386959][ T3355] should_fail+0xb/0x20 [ 580.386998][ T3355] should_fail_usercopy+0x1a/0x20 [ 580.387020][ T3355] _copy_from_user+0x1c/0xb0 [ 580.387045][ T3355] ___sys_sendmsg+0xc1/0x1d0 [ 580.387127][ T3355] __x64_sys_sendmsg+0xd4/0x160 [ 580.387190][ T3355] x64_sys_call+0x2999/0x2fb0 [ 580.387269][ T3355] do_syscall_64+0xd0/0x1a0 [ 580.387325][ T3355] ? clear_bhb_loop+0x40/0x90 [ 580.387349][ T3355] ? clear_bhb_loop+0x40/0x90 [ 580.387392][ T3355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.387412][ T3355] RIP: 0033:0x7fbfbcece969 [ 580.387427][ T3355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.387445][ T3355] RSP: 002b:00007fbfbb537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.387479][ T3355] RAX: ffffffffffffffda RBX: 00007fbfbd0f5fa0 RCX: 00007fbfbcece969 [ 580.387494][ T3355] RDX: 0000000000000064 RSI: 00002000000002c0 RDI: 0000000000000009 [ 580.387509][ T3355] RBP: 00007fbfbb537090 R08: 0000000000000000 R09: 0000000000000000 [ 580.387522][ T3355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.387569][ T3355] R13: 0000000000000000 R14: 00007fbfbd0f5fa0 R15: 00007ffdf6da1d38 [ 580.387589][ T3355] [ 580.941369][ T3406] __nla_validate_parse: 11 callbacks suppressed [ 580.941387][ T3406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11091'. [ 580.959825][ T3406] ipvlan2: entered promiscuous mode [ 580.994869][ T3410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11094'. [ 581.023061][ T3413] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 581.029907][ T3413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 581.037881][ T3413] vhci_hcd vhci_hcd.0: Device attached [ 581.038323][ T3416] netlink: 388 bytes leftover after parsing attributes in process `syz.6.11093'. [ 581.064327][ T3416] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.094381][ T3424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11098'. [ 581.128281][ T3416] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.188433][ T3416] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.216356][ T3414] vhci_hcd: connection closed [ 581.216586][T24209] vhci_hcd: stop threads [ 581.226077][T24209] vhci_hcd: release socket [ 581.230627][T24209] vhci_hcd: disconnect device [ 581.248375][ T3416] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.276875][T21117] usb 9-1: new high-speed USB device number 3 using vhci_hcd [ 581.284472][T21117] usb 9-1: enqueue for inactive port 0 [ 581.290651][T21117] usb 9-1: enqueue for inactive port 0 [ 581.296196][T21117] usb 9-1: enqueue for inactive port 0 [ 581.306287][ T3416] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.318479][ T3416] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.330021][ T3416] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.341404][ T3416] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.366824][T21117] vhci_hcd: vhci_device speed not set [ 581.562373][ T3432] netlink: 388 bytes leftover after parsing attributes in process `syz.3.11100'. [ 581.848442][ T3439] loop6: detected capacity change from 0 to 512 [ 581.859722][ T3439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.873799][ T3439] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.899616][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.924273][ T3444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11103'. [ 581.933457][ T3444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11103'. [ 581.950203][ T3429] Process accounting resumed [ 581.996935][ T3451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11106'. [ 582.024533][ T3449] loop6: detected capacity change from 0 to 512 [ 582.038847][ T3449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.051989][ T3449] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 582.088936][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.219353][ T3467] vhci_hcd: invalid port number 96 [ 582.225088][ T3467] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 582.460275][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11115'. [ 582.469653][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11115'. [ 582.896030][ T3577] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.906160][ T3577] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.956235][ T3578] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.987008][ T3577] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.996901][ T3577] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.020333][ T3578] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.048275][ T3577] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.058249][ T3577] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.098850][ T3578] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.172651][ T3577] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.183070][ T3577] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.243008][ T3578] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 583.359619][ T3577] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.368012][ T3577] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.380161][ T3577] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.388492][ T3577] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.405048][ T3577] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.413542][ T3577] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.428627][ T3577] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.437090][ T3577] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.462668][ T3578] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.500739][ T3578] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.528422][ T3578] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.550299][ T3578] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 583.698524][ T3661] vlan2: entered allmulticast mode [ 583.703815][ T3661] batadv0: entered allmulticast mode [ 584.166874][ T23] vhci_hcd: vhci_device speed not set [ 584.184941][ T3685] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.194939][ T3685] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.551197][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 584.551230][ T29] audit: type=1400 audit(1747124143.968:20326): avc: denied { ioctl } for pid=3699 comm="syz.3.11153" path="socket:[118236]" dev="sockfs" ino=118236 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 584.685437][ T3685] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.695604][ T3685] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.719822][ T29] audit: type=1400 audit(1747124144.068:20327): avc: denied { setopt } for pid=3699 comm="syz.3.11153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 585.013445][ T3685] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.023532][ T3685] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.203642][ T3685] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.213581][ T3685] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.502082][ T3685] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.510534][ T3685] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.645714][ T3685] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.654483][ T3685] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.790578][ T3721] loop6: detected capacity change from 0 to 2048 [ 585.801011][ T3685] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.809340][ T3685] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.860034][ T29] audit: type=1400 audit(1747124145.268:20328): avc: denied { mounton } for pid=3720 comm="syz.6.11160" path="/209/file1" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 585.964401][ T3723] program syz.3.11159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.986540][ T3685] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.995108][ T3685] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.048394][ T3721] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.072028][ T29] audit: type=1400 audit(1747124145.488:20329): avc: denied { mount } for pid=3720 comm="syz.6.11160" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 586.118315][ T29] audit: type=1400 audit(1747124145.518:20330): avc: denied { write } for pid=3720 comm="syz.6.11160" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.140624][ T29] audit: type=1400 audit(1747124145.518:20331): avc: denied { add_name } for pid=3720 comm="syz.6.11160" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.164048][ T29] audit: type=1400 audit(1747124145.518:20332): avc: denied { create } for pid=3720 comm="syz.6.11160" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 586.186449][ T29] audit: type=1400 audit(1747124145.518:20333): avc: denied { read append open } for pid=3720 comm="syz.6.11160" path="/209/file1/hugetlb.2MB.usage_in_bytes" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 586.287078][ T3740] __nla_validate_parse: 14 callbacks suppressed [ 586.287106][ T3740] netlink: 388 bytes leftover after parsing attributes in process `syz.4.11162'. [ 586.368583][ T29] audit: type=1400 audit(1747124145.788:20334): avc: denied { create } for pid=3743 comm="syz.5.11166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.394289][ T3742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11165'. [ 586.404495][ T29] audit: type=1400 audit(1747124145.788:20335): avc: denied { write } for pid=3743 comm="syz.5.11166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.446186][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.926157][ T3764] netlink: 388 bytes leftover after parsing attributes in process `syz.5.11172'. [ 586.974629][ T3764] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.985154][ T3764] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.170623][ T3764] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.180574][ T3764] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.430149][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11174'. [ 587.441927][ T3764] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.451870][ T3764] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.467416][ T3771] ipvlan2: entered promiscuous mode [ 587.514751][ T3778] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 587.629062][ T3764] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.638936][ T3764] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.736610][ T3783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11178'. [ 587.745950][ T3783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11178'. [ 588.470946][ T3836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11182'. [ 588.502732][ T3836] netlink: 'syz.2.11182': attribute type 30 has an invalid length. [ 588.538538][ T3851] netlink: 388 bytes leftover after parsing attributes in process `syz.2.11185'. [ 588.594603][ T3851] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.622948][ T3858] loop6: detected capacity change from 0 to 512 [ 588.647977][ T3851] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.649775][ T3858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.683398][ T3858] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.695595][ T3851] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.729957][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.748412][ T3851] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.769808][ T3880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11189'. [ 588.779048][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11189'. [ 588.823150][ T3851] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.835531][ T3851] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.850933][ T3851] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.868052][ T3851] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.133001][ T3764] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.141835][ T3764] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.175203][ T3764] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.184174][ T3764] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.207901][ T3764] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.216489][ T3764] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.250493][ T3764] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.259499][ T3764] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.556890][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 589.556908][ T29] audit: type=1400 audit(1747124148.908:20369): avc: denied { getopt } for pid=3952 comm="syz.3.11197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 589.584071][ T29] audit: type=1400 audit(1747124148.968:20370): avc: denied { ioctl } for pid=3959 comm="syz.3.11199" path="socket:[118697]" dev="sockfs" ino=118697 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 589.609397][ T29] audit: type=1400 audit(1747124148.968:20371): avc: denied { name_connect } for pid=3959 comm="syz.3.11199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 589.802584][ T3963] program syz.2.11193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.812426][ T3963] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 590.427593][ T3975] vhci_hcd: invalid port number 96 [ 590.433172][ T3975] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 590.519192][ T29] audit: type=1400 audit(1747124149.248:20372): avc: denied { write } for pid=3959 comm="syz.3.11199" lport=42665 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 590.542722][ T29] audit: type=1400 audit(1747124149.808:20373): avc: denied { write } for pid=3973 comm="syz.5.11204" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 590.600043][ T3977] loop6: detected capacity change from 0 to 2048 [ 591.078752][ T3995] vhci_hcd: invalid port number 96 [ 591.084201][ T3995] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 591.333496][ T4016] __nla_validate_parse: 5 callbacks suppressed [ 591.333512][ T4016] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11217'. [ 591.401619][ T4018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11215'. [ 591.456644][ T29] audit: type=1400 audit(1747124150.868:20374): avc: denied { mount } for pid=4027 comm="syz.2.11222" name="/" dev="configfs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 591.482391][ T29] audit: type=1400 audit(1747124150.898:20375): avc: denied { search } for pid=4027 comm="syz.2.11222" name="/" dev="configfs" ino=1627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 591.534669][ T4033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11224'. [ 591.543911][ T4033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11224'. [ 591.708011][ T4048] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11228'. [ 591.732709][ T4056] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11231'. [ 591.764615][ T29] audit: type=1400 audit(1747124151.178:20376): avc: denied { tracepoint } for pid=4057 comm="syz.2.11232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 591.792288][ T29] audit: type=1400 audit(1747124151.208:20377): avc: denied { create } for pid=4057 comm="syz.2.11232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 591.857743][ T29] audit: type=1400 audit(1747124151.278:20378): avc: denied { connect } for pid=4061 comm="syz.4.11236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 591.878713][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11235'. [ 591.907026][ T4070] FAULT_INJECTION: forcing a failure. [ 591.907026][ T4070] name failslab, interval 1, probability 0, space 0, times 0 [ 591.907733][ T4064] ipvlan2: entered promiscuous mode [ 591.920335][ T4070] CPU: 0 UID: 0 PID: 4070 Comm: syz.5.11237 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 591.920369][ T4070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 591.920384][ T4070] Call Trace: [ 591.920391][ T4070] [ 591.920400][ T4070] __dump_stack+0x1d/0x30 [ 591.920421][ T4070] dump_stack_lvl+0xe8/0x140 [ 591.920440][ T4070] dump_stack+0x15/0x1b [ 591.920456][ T4070] should_fail_ex+0x265/0x280 [ 591.920486][ T4070] should_failslab+0x8c/0xb0 [ 591.920513][ T4070] kmem_cache_alloc_noprof+0x50/0x310 [ 591.920532][ T4070] ? mas_alloc_nodes+0x265/0x520 [ 591.920556][ T4070] mas_alloc_nodes+0x265/0x520 [ 591.920580][ T4070] mas_preallocate+0x456/0x680 [ 591.920604][ T4070] mmap_region+0x966/0x1470 [ 591.920653][ T4070] do_mmap+0x9de/0xc20 [ 591.920678][ T4070] vm_mmap_pgoff+0x17a/0x2e0 [ 591.920702][ T4070] ksys_mmap_pgoff+0xc2/0x310 [ 591.920725][ T4070] ? __x64_sys_mmap+0x49/0x70 [ 591.920744][ T4070] x64_sys_call+0x1602/0x2fb0 [ 591.920764][ T4070] do_syscall_64+0xd0/0x1a0 [ 591.920785][ T4070] ? clear_bhb_loop+0x40/0x90 [ 591.920804][ T4070] ? clear_bhb_loop+0x40/0x90 [ 591.920824][ T4070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.920844][ T4070] RIP: 0033:0x7f3f54c6e9a3 [ 591.920859][ T4070] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 591.920876][ T4070] RSP: 002b:00007f3f532d6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 591.920895][ T4070] RAX: ffffffffffffffda RBX: 0000000000000b7c RCX: 00007f3f54c6e9a3 [ 591.920907][ T4070] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 591.920919][ T4070] RBP: 0000200000000c42 R08: 00000000ffffffff R09: 0000000000000000 [ 591.920931][ T4070] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 591.920943][ T4070] R13: 00007f3f532d6ef0 R14: 00007f3f532d6eb0 R15: 0000200000000c00 [ 591.920960][ T4070] [ 591.980302][ T4057] cgroup: fork rejected by pids controller in [ 592.020798][ T4066] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11234'. [ 592.023432][ T4057] /syz2 [ 592.115401][ T4075] SELinux: failed to load policy [ 592.209338][ T4075] loop9: detected capacity change from 0 to 7 [ 592.209451][ T4075] Buffer I/O error on dev loop9, logical block 0, async page read [ 592.209556][ T4075] Buffer I/O error on dev loop9, logical block 0, async page read [ 592.209573][ T4075] loop9: unable to read partition table [ 592.209592][ T4075] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 592.209592][ T4075] U) failed (rc=-5) [ 592.291868][ T4189] loop6: detected capacity change from 0 to 512 [ 592.312924][ T4189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.312985][ T4189] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.353487][ T4194] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11246'. [ 592.366370][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.389672][ T2082] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.417886][ T2082] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.465157][ T4201] loop6: detected capacity change from 0 to 512 [ 592.519063][ T2082] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.568559][ T4201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.586368][ T2082] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.587772][ T4201] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.639049][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.697287][ T2082] bridge_slave_1: left allmulticast mode [ 592.699134][ T4219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11252'. [ 592.703334][ T2082] bridge_slave_1: left promiscuous mode [ 592.703578][ T2082] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.727402][ T2082] bridge_slave_0: left allmulticast mode [ 592.733387][ T2082] bridge_slave_0: left promiscuous mode [ 592.739498][ T2082] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.749828][ T4221] vhci_hcd: invalid port number 96 [ 592.755138][ T4221] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 592.825151][ T4227] loop6: detected capacity change from 0 to 512 [ 592.832959][ T4227] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.842409][ T4227] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 592.861549][ T4227] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 592.871219][ T4227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 592.879468][ T4227] System zones: 0-2, 18-18, 34-34 [ 592.884855][ T4227] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 592.900444][ T4227] EXT4-fs (loop6): 1 truncate cleaned up [ 592.906530][ T4227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.018743][ T2082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.028212][ T2082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.037678][ T2082] bond0 (unregistering): Released all slaves [ 593.046037][ T2082] bond1 (unregistering): Released all slaves [ 593.084792][ T2082] hsr_slave_0: left promiscuous mode [ 593.091145][ T2082] hsr_slave_1: left promiscuous mode [ 593.096840][ T2082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.104660][ T2082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.140443][ T2082] team0 (unregistering): Port device team_slave_1 removed [ 593.152992][ T2082] team0 (unregistering): Port device team_slave_0 removed [ 593.165352][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.178630][ T4244] SELinux: Context is not valid (left unmapped). [ 593.254605][ T4250] gretap1: entered promiscuous mode [ 593.260625][ T4250] gretap1: entered allmulticast mode [ 593.302028][ T4259] loop6: detected capacity change from 0 to 512 [ 593.311673][ T4203] chnl_net:caif_netlink_parms(): no params data found [ 593.319020][ T4259] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 593.350303][ T4259] EXT4-fs (loop6): 1 truncate cleaned up [ 593.357310][ T4259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.398988][ T4266] vhci_hcd: invalid port number 96 [ 593.404251][ T4266] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 593.424967][T30096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.435207][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.442519][ T4203] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.450448][ T4203] bridge_slave_0: entered allmulticast mode [ 593.457511][ T4203] bridge_slave_0: entered promiscuous mode [ 593.464817][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.472144][ T4203] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.479823][ T4203] bridge_slave_1: entered allmulticast mode [ 593.486686][ T4203] bridge_slave_1: entered promiscuous mode [ 593.504725][ T4203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.515370][ T4203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.534542][ T4203] team0: Port device team_slave_0 added [ 593.542499][ T4203] team0: Port device team_slave_1 added [ 593.563099][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.570220][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.596805][ T4203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.610301][ T4203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.617767][ T4203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.644928][ T4203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.685187][ T4280] nfs4: Bad value for 'source' [ 593.692992][ T4203] hsr_slave_0: entered promiscuous mode [ 593.699212][ T4203] hsr_slave_1: entered promiscuous mode [ 593.705624][ T4203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.713878][ T4203] Cannot create hsr debugfs directory [ 593.749330][ T4280] loop6: detected capacity change from 0 to 512 [ 593.756058][ T4280] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 593.995010][ T4303] loop6: detected capacity change from 0 to 132 [ 594.050210][ T4307] loop6: detected capacity change from 0 to 164 [ 594.057565][ T4307] iso9660: Unknown parameter '0x000000000000000301777777777777777777777utf8' [ 594.084320][ T3373] kernel write not supported for file /562/attr/sockcreate (pid: 3373 comm: kworker/1:2) [ 594.339747][ T4203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.353671][ T4203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.432847][ T4203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.458886][ T4203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.550189][ T4322] ================================================================== [ 594.558501][ T4322] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 594.566445][ T4322] [ 594.568782][ T4322] write to 0xffff888100047470 of 4 bytes by task 4317 on cpu 1: [ 594.576685][ T4322] vmalloc_info_show+0x421/0x790 [ 594.581789][ T4322] seq_read_iter+0x319/0x940 [ 594.586505][ T4322] proc_reg_read_iter+0x10d/0x180 [ 594.591800][ T4322] vfs_read+0x5ca/0x6f0 [ 594.596212][ T4322] ksys_read+0xda/0x1a0 [ 594.600498][ T4322] __x64_sys_read+0x40/0x50 [ 594.605122][ T4322] x64_sys_call+0x2d77/0x2fb0 [ 594.610020][ T4322] do_syscall_64+0xd0/0x1a0 [ 594.614711][ T4322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.620752][ T4322] [ 594.623258][ T4322] read to 0xffff888100047470 of 4 bytes by task 4322 on cpu 0: [ 594.631113][ T4322] vmalloc_info_show+0x553/0x790 [ 594.636324][ T4322] seq_read_iter+0x319/0x940 [ 594.641100][ T4322] proc_reg_read_iter+0x10d/0x180 [ 594.646214][ T4322] vfs_read+0x5ca/0x6f0 [ 594.650388][ T4322] ksys_read+0xda/0x1a0 [ 594.654552][ T4322] __x64_sys_read+0x40/0x50 [ 594.659068][ T4322] x64_sys_call+0x2d77/0x2fb0 [ 594.663752][ T4322] do_syscall_64+0xd0/0x1a0 [ 594.668278][ T4322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.674211][ T4322] [ 594.676657][ T4322] value changed: 0x00000004 -> 0x00000002 [ 594.682888][ T4322] [ 594.685387][ T4322] Reported by Kernel Concurrency Sanitizer on: [ 594.692156][ T4322] CPU: 0 UID: 0 PID: 4322 Comm: syz.6.11283 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 594.704852][ T4322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 594.715267][ T4322] ================================================================== [ 594.761643][ T4317] ================================================================== [ 594.770092][ T4317] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 594.777879][ T4317] [ 594.780331][ T4317] write to 0xffff888100047470 of 4 bytes by task 4322 on cpu 0: [ 594.788084][ T4317] vmalloc_info_show+0x421/0x790 [ 594.793325][ T4317] seq_read_iter+0x319/0x940 [ 594.797941][ T4317] proc_reg_read_iter+0x10d/0x180 [ 594.803115][ T4317] vfs_read+0x5ca/0x6f0 [ 594.807272][ T4317] ksys_read+0xda/0x1a0 [ 594.811528][ T4317] __x64_sys_read+0x40/0x50 [ 594.816114][ T4317] x64_sys_call+0x2d77/0x2fb0 [ 594.820961][ T4317] do_syscall_64+0xd0/0x1a0 [ 594.825469][ T4317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.831535][ T4317] [ 594.833848][ T4317] read-write to 0xffff888100047470 of 4 bytes by task 4317 on cpu 1: [ 594.841904][ T4317] vmalloc_info_show+0x481/0x790 [ 594.846946][ T4317] seq_read_iter+0x319/0x940 [ 594.851570][ T4317] proc_reg_read_iter+0x10d/0x180 [ 594.856599][ T4317] vfs_read+0x5ca/0x6f0 [ 594.861102][ T4317] ksys_read+0xda/0x1a0 [ 594.865378][ T4317] __x64_sys_read+0x40/0x50 [ 594.869886][ T4317] x64_sys_call+0x2d77/0x2fb0 [ 594.874764][ T4317] do_syscall_64+0xd0/0x1a0 [ 594.879489][ T4317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.885518][ T4317] [ 594.887855][ T4317] value changed: 0x00000007 -> 0x00000094 [ 594.893715][ T4317] [ 594.896144][ T4317] Reported by Kernel Concurrency Sanitizer on: [ 594.902484][ T4317] CPU: 1 UID: 0 PID: 4317 Comm: syz.4.11284 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 594.915299][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 594.925369][ T4317] ================================================================== [ 595.089532][ T4203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.101889][ T4203] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.111548][T24209] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.119119][T24209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.130702][T24210] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.137879][T24210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.201980][ T4203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.259857][ T4203] veth0_vlan: entered promiscuous mode [ 595.267902][ T4203] veth1_vlan: entered promiscuous mode [ 595.283507][ T4203] veth0_macvtap: entered promiscuous mode [ 595.292093][ T4203] veth1_macvtap: entered promiscuous mode [ 595.302437][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.314052][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.323960][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.334489][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.344767][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.355232][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.365987][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.376700][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.387467][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.397887][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.408984][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.419121][ T4203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.429615][ T4203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.440509][ T4203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.450751][ T4203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.459768][ T4203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.469179][ T4203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.477964][ T4203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.498839][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 595.498854][ T29] audit: type=1400 audit(2000000001.500:20431): avc: denied { mounton } for pid=4203 comm="syz-executor" path="/root/syzkaller.F6ejCr/syz-tmp" dev="sda1" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 595.531722][ T29] audit: type=1400 audit(2000000001.500:20432): avc: denied { mount } for pid=4203 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 595.554446][ T29] audit: type=1400 audit(2000000001.500:20433): avc: denied { mounton } for pid=4203 comm="syz-executor" path="/root/syzkaller.F6ejCr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 595.581899][ T29] audit: type=1400 audit(2000000001.500:20434): avc: denied { mounton } for pid=4203 comm="syz-executor" path="/root/syzkaller.F6ejCr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=120583 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 595.610596][ T29] audit: type=1400 audit(2000000001.530:20435): avc: denied { mounton } for pid=4203 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 595.634733][ T29] audit: type=1400 audit(2000000001.530:20436): avc: denied { mount } for pid=4203 comm="syz-executor" name="/" dev="gadgetfs" ino=3763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1