last executing test programs: 1m20.360633141s ago: executing program 1 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r3, 0x1, 0x2}}, 0x20) 1m20.321341652s ago: executing program 1 (id=3162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x8, &(0x7f00000006c0), &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.246505873s ago: executing program 1 (id=3164): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0xf866, 0x10000005, 0x3, 0x3e, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r0, 0x402, 0x8) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r3, 0x0, 0x0, 0x0, 0x1200) syz_emit_ethernet(0x125, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) recvmsg$can_j1939(r3, 0x0, 0x40000041) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00perf_event -memory +blkio -pids +nat_prko -cpuset '], 0x33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) 1m19.354120365s ago: executing program 1 (id=3184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ftruncate(0xffffffffffffffff, 0xc17a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fe7d5b2e8049d25696474f4f0ae3a92610746f5fa1fad4e373fb45d83680bea569d6126fc34bb61a5236a4ba52656059336dd69a9b6a22f77bad48cd7a4fbc28293715ba6f87dff756c55fd4437bd8bc7d71ce5c7fa3e807e1bfbe76964ef0e7b183018f4360ab7ef38740e9bd09dc68494b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e", 0xc7}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r13, @ANYBLOB="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"], 0x1c8}}, 0x0) r14 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r14) 1m19.164836578s ago: executing program 1 (id=3188): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000740)=r0}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000037c0)=""/4068, 0xfe4}, {&(0x7f0000000340)=""/254, 0xfe}, {0x0}], 0x5}, 0x40012002) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) pwritev(r0, 0x0, 0x0, 0x7, 0x9bb4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/137, 0x89}], 0x1, &(0x7f0000000500)=""/241, 0xf1}, 0x4000a100) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000001200)="$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") writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="5bb064fbfe369a9516f7c51937ca1289c5024ff75a60ed73e77555081156d2bf1d43ed15c77b34083104ffa5ddac08e1f69da2c9463cecf1e793d988a6fce40b02168288532ae83e62f8e38e14be023e2553edece8df49394209e3c1ba2a3067f503b854b5a4be9e1a1fda9a4e78a7dfeb1352e6889d53c7e9394a5fff18d3af445c9fe4208b80197f3a3a52a2e4f8a1", 0x90}], 0x1) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="8000000000000000000000000000000000000000ccc90ec87bff6325a76029b6d81b0f3f74e5065e3a7ae017e7862cbd6bcf8296e42307877b0a3117c8fa42cb085752df68445705aa787668749778253924aedf65a2ef8aba17c5fa667063adb8d198ffb60b471a80c56a33ef8726093edba39b513ec3d08a671f54a33035b5272ca160dc110f29f9", @ANYRES32=r3, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x12, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000f000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018130000", @ANYRES32=r4, @ANYBLOB="0000000000000000d54b000104000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000b24e224542a66f4f756a465b31caa6b8124ec55fe6938b"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x3e, 0xc, &(0x7f0000000900)=ANY=[@ANYRES8=r7, @ANYRESHEX=r4, @ANYRESOCT=r1, @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000980)="3d341407f7d5f546af594e1dc4b8e66afbce9901a47cfb9ea095b87119def4a422d655b5c4066c87293847f4c55e8c7e711051a924058b0ac6db16bce933031e205065b6ab050d", 0x47}, {&(0x7f0000000a80)="d251f6b272e666a5e23c844386bd6bf84bff3ba55873fb976afb7228d1ca10a423083ffa2be5853609084a340e61385ec487b485c717cdcc0f25a10436827614a25d07822d9c31498eb4c136b4d4995ac75d8a09619a5baac47eed4d2acb460da36f73c74b0b7d8a4b973c6b25a6c98504fbaa39115d471c52b8b4a54a6fbd4c0f56beccc85c8c7e334afd433e8a69fa91fe88c382bdd81247b589936107ea106e447e3c8117f650672e80fd69493b98d3ed50a02985b20ba2a826927df6627ef5ccdd", 0xc3}], 0x2, &(0x7f0000001040)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r9, r7, r8, r1, r2, r9, 0xffffffffffffffff, r5, r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r9, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r8, r1, r8, r6, r0, 0xffffffffffffffff, r6]}}], 0xf0, 0x4000000}}], 0x1, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xb000001c}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r11, &(0x7f0000000400)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="999a", 0x2}, {&(0x7f0000000280)="0f0f0000", 0x4}], 0x3) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r12, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0xf7cc, 0x2, 0x0, 0x3b1, 0x0, r0}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) 1m18.28335265s ago: executing program 1 (id=3203): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = socket(0x2b, 0x80801, 0x1) bind$inet(r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x8010, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0xc, 0x8}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r10}, &(0x7f0000000800), &(0x7f0000000840)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xf, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xcf6, 0x58, &(0x7f0000000100)=""/88, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2e, r6, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r0, r0, r9, r10, r0, r0, r0, r0], &(0x7f0000000900)=[{0x3, 0x5, 0x6, 0x2}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x7, 0x4}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$eJzs28tvG8UfAPDvruP0/Ut+pTz6AAIFEfFImrRAD1xAIHEACQkO5RictJS6DWqCRKsICkLliCpx4IY4IvEXcIILAk5IXDjAHVWqUC4tnIzW3k0c106T1KlL/flITmZ2ZzPz9ezYszvZAPrWSPYjidgZEb9HxFAju7LASOPXtcWFyt+LC5UkarXX/0rq5a4uLlSKosVxO/LMaBqRfpLE/jb1zp07f2qqWk2Kg8bnT787Pnfu/FMnT0+dmDkxc2by6NEjhyeefWby6a7EmbXp6r4PZg/sffnNS69Wjl1666dvkiL+lji6ZGS1nY/Wal2urrd2NaWTgR42hHUpRUTWXeX6+B+KUix33lC89HFPGwdsqlqtVtvRefeFGnAHS2KtJU/lnxfAnaH4os+uf4vXLZp63BauPN+4ALq6uLA1Fhcq15biH4g0L1Nuub7tppGIOHbhny+zV2zOfQgAgBW+y+Y/T7ab/6VxT1O5/+VrQ8MR8f+I2B0Rd0XEnoi4O6Je9t6IuG+d9bcuklw//0kvbyiwNcrmf8/la1vXVsz/itlfDJfy3K56/OXk+MnqzKH8PRmN8pYsP7FKHd+/+OtnnfY1z/+yV1Z/MRfM23F5YMvKY6an5qduJuZmVz6K2DfQLv5kaSUgiYi9EbFvg3WcfPzrA532dYq/vJY/3IV1ptpXEY81+v9CtMRfSFZfnxzfGtWZQ+PFWXG9n3+5+FrLpt+KxA36/+0vbj7EVWX9v73t+b8U/3CyvF47c3Zu/XVc/OPTjtc0Gz3/B5M36unBfNv7U/PzZyciBpNXGo1u3j65fGyRL8pn8Y8ebD/+d8fyO7E/IrKT+P6IeCAiHszb/lBEPBwRB1eJ/8cXHnln4/Fvriz+6XX1/3JiMFq3tE+UTv3w7YpKh9cTf9b/R+qp0XzLWj7/1tKujZ3NAAAA8N+TRsTOSNKxpXSajo01/l9+T2xPq7Nz808cn33vzHTjGYHhKKfFna6hpvuhE/llfZGfbMkfzu8bf17aVs+PVWar070OHvrcjg7jP/NnqdetAzad57Wgfxn/0L+Mf+hfxj/0rzbjf1sv2gHceu2+/z/sQTuAW69l/Fv2gz7i+h/6l/EP/cv4h740ty1u/JC8hMR1iUhvi2ZIbFKi159MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//9oj+L0") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r12, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x2f92, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1m3.252957021s ago: executing program 32 (id=3203): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r7 = socket(0x2b, 0x80801, 0x1) bind$inet(r7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x8010, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a40)={0x0, 0xc, 0x8}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r10}, &(0x7f0000000800), &(0x7f0000000840)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xf, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0xcf6, 0x58, &(0x7f0000000100)=""/88, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2e, r6, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r0, r0, r9, r10, r0, r0, r0, r0], &(0x7f0000000900)=[{0x3, 0x5, 0x6, 0x2}, {0x4, 0x5, 0x6, 0x6}, {0x3, 0x2, 0x7, 0x4}], 0x10, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x449e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffe}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x44d, &(0x7f0000001280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) pwritev2(r12, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x2f92, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 2.599675873s ago: executing program 0 (id=4825): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) (fail_nth: 3) 2.513447264s ago: executing program 0 (id=4827): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) fcntl$dupfd(r2, 0x406, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0880, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.634868487s ago: executing program 5 (id=4844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) 1.634618957s ago: executing program 0 (id=4845): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 1.633814727s ago: executing program 5 (id=4847): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) creat(0x0, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) renameat2(r0, 0x0, r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000280)={0x40, 0x140a, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040090}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$selinux_load(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) chdir(&(0x7f0000000180)='./file0/file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 1.628021017s ago: executing program 3 (id=4849): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x400, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x8000004) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2001, 0x1f0) faccessat2(r7, &(0x7f0000000200)='./file0\x00', 0xc8, 0x1200) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000019"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) mq_unlink(0x0) 1.590674587s ago: executing program 5 (id=4850): timer_create(0xb00, &(0x7f00000002c0)={0x0, 0x2b, 0x4, @thr={&(0x7f0000019200), 0x0}}, 0x0) 1.536733588s ago: executing program 3 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x0) 1.536434448s ago: executing program 5 (id=4852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r9, &(0x7f0000000100)={[], 0x20}, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r9, 0x41, 0x1ff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000001800128008000100687372000c00028008000100", @ANYRES32=r10, @ANYBLOB="f46390320ea1acc9dde7faa546d63b74ce344b81adba893db428a5941cd43f4a4a98d25529f7a39a5d92bfcbdc74561300fbea3c89"], 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r10}, 0x14) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x4044000) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) dup2(r5, r6) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 1.535565578s ago: executing program 0 (id=4853): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000000600)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216baca6fb454385ead471969bdf9b82994cff07000000000080000000004708f53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee00300000000000000f9c76d150aa52a4eecb94fe48e79205c96a007b13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f00d0f776508c01efa705", 0xa1}, {&(0x7f0000000000)="6b7530008c6cd1f9e0ea4850a06adcb329c78d3acf3d4961984477123b9fdae94cf1b7de9f98486b2e2f46be33f324bcc846fb69ca2a48f3974ba66b10182d528450e3a2c4843dca488e2dfadadd89aa14b580e8a1423c8cb9c9c9", 0x5b}, {&(0x7f0000001cc0)="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", 0xff5a}], 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES16=r0, @ANYBLOB="ac141431e00000010000000038000000000000000000000007000000019404000094040000441c8981ac14141500000000ac1414bb000000040000000000000002000000"], 0x58}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/11], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000f00)="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", 0xd8d}], 0x1, 0x0, 0x0, 0x28004010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 1.441750389s ago: executing program 3 (id=4854): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801100000000000000000850000007d00000095f601452b1aefa204370000000000", @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000050) 1.41442492s ago: executing program 3 (id=4855): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0xf866, 0x10000005, 0x3, 0x3e, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r0, 0x402, 0x8) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r3, 0x0, 0x0, 0x0, 0x1200) syz_emit_ethernet(0x125, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) recvmsg$can_j1939(r3, 0x0, 0x40000041) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00perf_event -memory +blkio -pids +nat_prko -cpuset '], 0x33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) 1.41379846s ago: executing program 0 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100080005"], 0x40}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) (async) socket$key(0xf, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf2519000000200001801400020073797a6b616c6c65723100000000000008000300030000003000", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f627269646765000800030003000000aeff0100", @ANYRES32=0x0, @ANYBLOB="1c000180"], 0x80}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000005c0)}, 0x16) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000090000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r8, 0x0, 0xffffffffffffff99}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="750a00000000000061119c00000000001800000000000000000000000e00000095000000000900000000000000309ea3f79c5b63f3525b6930b50b2ef57b2a3d1829eed801a06c1506f9eeb1f159d42e46d5462636d875fca3797bed4470f11d8f14425caa8b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, 0x0, 0x811) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) (async) syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60000000000c00000000000000000000dfffffffffffffffff0200000000000000000000000000010420655800000000000000000800000086dd080088be0000"], 0x0) 1.133826444s ago: executing program 4 (id=4859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) 1.091100374s ago: executing program 4 (id=4860): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000080)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@norecovery}]}, 0x5, 0x596, &(0x7f0000000400)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) creat(0x0, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) renameat2(r0, 0x0, r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000280)={0x40, 0x140a, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040090}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) write$selinux_load(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x2000) chdir(&(0x7f0000000180)='./file0/file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 975.687636ms ago: executing program 4 (id=4861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lsm_get_self_attr(0x64, &(0x7f0000000600)={0x0, 0x0, 0xe2, 0xc2, ""/194}, &(0x7f0000000040)=0xe2, 0x0) 884.343937ms ago: executing program 4 (id=4862): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="03800000000000000040bbbb0800450000000000000000019078ac1e0001ac1514aa030490781200023f2500000000000010000100007f0000017f00000100186371ae9b1c03"], 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 881.074167ms ago: executing program 4 (id=4863): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000a00)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0xffffffff, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@noload}, {@dioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") 477.419263ms ago: executing program 0 (id=4864): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") pwritev2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x7fff, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x951, @void, @value}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 470.441643ms ago: executing program 3 (id=4865): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801100000000000000000850000007d00000095f601452b1aefa204370000000000", @ANYRES64], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x40004) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x10}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000050) 448.903913ms ago: executing program 2 (id=4866): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') getdents64(r2, &(0x7f0000000080)=""/57, 0x39) 424.637864ms ago: executing program 3 (id=4867): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x4f41, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\xacC\x1f9\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x18f, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000040)='eth0\x00\xdd\xad4=2k\xf1\x05\x9bG\xeb\x85\xe6u*\x03\xb6J\x91y\xe1;F\xa2\x8df\xe6\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xa1\v\x00\x00\x00\x00\x00\x00\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0@\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15\x05\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8OF\xa7^\x8c\xaf\fu\xb7w\x9eF', 0x1, 0x0, 0x0) 397.550304ms ago: executing program 2 (id=4868): r0 = syz_io_uring_setup(0x88b, 0x0, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000070000000500", @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000340), 0x0}, 0x20) io_uring_enter(r0, 0x52de, 0xf62e, 0x8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB, @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c020000060a0b04000000000000000002000000400204803c0201800a0001006d617463680000002c020280080002400000000115020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c756cdcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f8700000008000100627066000900010073797a30000000000900020073797a32"], 0x294}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048010) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0x2}, 0x18) execve(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 248.051686ms ago: executing program 4 (id=4869): r0 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x7fff, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121c00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x951, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0xf, 0x0, [@dev, @loopback, @loopback]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x11) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 175.783297ms ago: executing program 2 (id=4870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001", 0x3, 0xfffffffffffffffd) 158.350257ms ago: executing program 2 (id=4871): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 125.721578ms ago: executing program 5 (id=4872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x7cb7562f2d67) listen(r1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x3, 0x12}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 125.108538ms ago: executing program 2 (id=4873): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a2"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000003ac0)=""/4123, 0x101b}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000000)=""/187, 0xbb}], 0x4}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 71.864839ms ago: executing program 5 (id=4874): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000002100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb695, 0xd}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 0s ago: executing program 2 (id=4875): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0xf866, 0x10000005, 0x3, 0x3e, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) socket$inet6(0xa, 0x3, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$notify(r0, 0x402, 0x8) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(r3, 0x0, 0x0, 0x0, 0x1200) syz_emit_ethernet(0x125, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) recvmsg$can_j1939(r3, 0x0, 0x40000041) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00perf_event -memory +blkio -pids +nat_prko -cpuset '], 0x33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) setitimer(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): actor+0x312/0x680 [ 224.376412][T13913] ? __pfx_direct_splice_actor+0x10/0x10 [ 224.376443][T13913] do_splice_direct+0xda/0x150 [ 224.376462][T13913] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 224.376540][T13913] vfs_copy_file_range+0x978/0xf30 [ 224.376583][T13913] __se_sys_copy_file_range+0x269/0x3b0 [ 224.376716][T13913] __x64_sys_copy_file_range+0x78/0x90 [ 224.376755][T13913] x64_sys_call+0x8c6/0x2fb0 [ 224.376784][T13913] do_syscall_64+0xd2/0x200 [ 224.376832][T13913] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.376869][T13913] ? clear_bhb_loop+0x40/0x90 [ 224.376934][T13913] ? clear_bhb_loop+0x40/0x90 [ 224.376963][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.376989][T13913] RIP: 0033:0x7f3a9142e969 [ 224.377063][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.377086][T13913] RSP: 002b:00007f3a8fa97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 224.377111][T13913] RAX: ffffffffffffffda RBX: 00007f3a91655fa0 RCX: 00007f3a9142e969 [ 224.377127][T13913] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 [ 224.377140][T13913] RBP: 00007f3a8fa97090 R08: 0000000000000009 R09: 0000000000000000 [ 224.377190][T13913] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 224.377206][T13913] R13: 0000000000000000 R14: 00007f3a91655fa0 R15: 00007fffa3c64cb8 [ 224.377230][T13913] [ 224.617293][T13915] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 224.625248][T13915] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3379'. [ 224.737557][T13934] bridge0: entered promiscuous mode [ 224.740154][T13929] SELinux: policydb version 1633826662 does not match my version range 15-34 [ 224.744873][T13934] macvlan2: entered promiscuous mode [ 224.762299][T13934] bridge0: port 3(macvlan2) entered blocking state [ 224.768072][T13929] SELinux: failed to load policy [ 224.768966][T13934] bridge0: port 3(macvlan2) entered disabled state [ 224.785491][T13934] macvlan2: entered allmulticast mode [ 224.790932][T13934] bridge0: entered allmulticast mode [ 224.809218][T13934] macvlan2: left allmulticast mode [ 224.814419][T13934] bridge0: left allmulticast mode [ 224.834740][T13934] bridge0: left promiscuous mode [ 224.895567][T13945] SELinux: policydb version 929445642 does not match my version range 15-34 [ 224.904629][T13945] SELinux: failed to load policy [ 225.352160][T13998] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 225.389414][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 225.398587][T14006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3398'. [ 225.448735][T14012] FAULT_INJECTION: forcing a failure. [ 225.448735][T14012] name failslab, interval 1, probability 0, space 0, times 0 [ 225.461687][T14012] CPU: 1 UID: 0 PID: 14012 Comm: syz.0.3399 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 225.461723][T14012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.461740][T14012] Call Trace: [ 225.461748][T14012] [ 225.461757][T14012] __dump_stack+0x1d/0x30 [ 225.461858][T14012] dump_stack_lvl+0xe8/0x140 [ 225.461894][T14012] dump_stack+0x15/0x1b [ 225.461915][T14012] should_fail_ex+0x265/0x280 [ 225.462018][T14012] should_failslab+0x8c/0xb0 [ 225.462047][T14012] kmem_cache_alloc_noprof+0x50/0x310 [ 225.462123][T14012] ? audit_log_start+0x365/0x6c0 [ 225.462168][T14012] audit_log_start+0x365/0x6c0 [ 225.462357][T14012] audit_seccomp+0x48/0x100 [ 225.462450][T14012] ? __seccomp_filter+0x68c/0x10d0 [ 225.462478][T14012] __seccomp_filter+0x69d/0x10d0 [ 225.462532][T14012] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 225.462615][T14012] ? vfs_write+0x75e/0x8e0 [ 225.462643][T14012] ? __rcu_read_unlock+0x4f/0x70 [ 225.462683][T14012] ? __fget_files+0x184/0x1c0 [ 225.462713][T14012] __secure_computing+0x82/0x150 [ 225.462739][T14012] syscall_trace_enter+0xcf/0x1e0 [ 225.462804][T14012] do_syscall_64+0xac/0x200 [ 225.462834][T14012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 225.462907][T14012] ? clear_bhb_loop+0x40/0x90 [ 225.462991][T14012] ? clear_bhb_loop+0x40/0x90 [ 225.463020][T14012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.463048][T14012] RIP: 0033:0x7f7bae88e969 [ 225.463067][T14012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.463093][T14012] RSP: 002b:00007f7bacef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.463190][T14012] RAX: ffffffffffffffda RBX: 00007f7baeab5fa0 RCX: 00007f7bae88e969 [ 225.463204][T14012] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 225.463216][T14012] RBP: 00007f7bacef7090 R08: 0000000000000000 R09: 0000000000000000 [ 225.463231][T14012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.463247][T14012] R13: 0000000000000000 R14: 00007f7baeab5fa0 R15: 00007ffe7843d928 [ 225.463272][T14012] [ 225.648937][T14049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14049 comm=syz.4.3405 [ 225.818233][T14059] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 225.989444][T14065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14065 comm=syz.2.3409 [ 226.181737][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3416'. [ 226.211300][T14086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14086 comm=syz.2.3417 [ 226.268442][T14090] bridge0: entered promiscuous mode [ 226.275236][T14090] macvlan2: entered promiscuous mode [ 226.283019][T14090] bridge0: port 3(macvlan2) entered blocking state [ 226.289724][T14090] bridge0: port 3(macvlan2) entered disabled state [ 226.297768][T14090] macvlan2: entered allmulticast mode [ 226.303204][T14090] bridge0: entered allmulticast mode [ 226.308984][T14090] macvlan2: left allmulticast mode [ 226.314249][T14090] bridge0: left allmulticast mode [ 226.321506][T14090] bridge0: left promiscuous mode [ 226.483090][T14094] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 226.544243][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3424'. [ 226.608218][T14108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.661414][T14108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.722153][T14108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.748560][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 226.764119][T14108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.837111][T14108] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.850022][T14108] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.864535][T14108] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.875834][T14108] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.963584][T14130] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 226.999248][T14133] netlink: 'syz.3.3432': attribute type 21 has an invalid length. [ 227.007176][T14133] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.118541][T14132] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 227.164548][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 227.194106][T14148] hsr_slave_0: left promiscuous mode [ 227.200114][T14148] hsr_slave_1: left promiscuous mode [ 227.953072][T14166] FAULT_INJECTION: forcing a failure. [ 227.953072][T14166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.966308][T14166] CPU: 1 UID: 0 PID: 14166 Comm: syz.0.3446 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 227.966401][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.966414][T14166] Call Trace: [ 227.966421][T14166] [ 227.966428][T14166] __dump_stack+0x1d/0x30 [ 227.966455][T14166] dump_stack_lvl+0xe8/0x140 [ 227.966481][T14166] dump_stack+0x15/0x1b [ 227.966561][T14166] should_fail_ex+0x265/0x280 [ 227.966581][T14166] should_fail+0xb/0x20 [ 227.966675][T14166] should_fail_usercopy+0x1a/0x20 [ 227.966704][T14166] _copy_from_user+0x1c/0xb0 [ 227.966736][T14166] ___sys_recvmsg+0xaa/0x370 [ 227.966775][T14166] ? 0xffffffff81000000 [ 227.966822][T14166] ? __rcu_read_unlock+0x4f/0x70 [ 227.966875][T14166] __x64_sys_recvmsg+0xd1/0x160 [ 227.966919][T14166] x64_sys_call+0xf19/0x2fb0 [ 227.966947][T14166] do_syscall_64+0xd2/0x200 [ 227.967039][T14166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 227.967074][T14166] ? clear_bhb_loop+0x40/0x90 [ 227.967097][T14166] ? clear_bhb_loop+0x40/0x90 [ 227.967180][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.967275][T14166] RIP: 0033:0x7f7bae88e969 [ 227.967293][T14166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.967317][T14166] RSP: 002b:00007f7bacef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 227.967341][T14166] RAX: ffffffffffffffda RBX: 00007f7baeab5fa0 RCX: 00007f7bae88e969 [ 227.967384][T14166] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 227.967400][T14166] RBP: 00007f7bacef7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.967416][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.967432][T14166] R13: 0000000000000000 R14: 00007f7baeab5fa0 R15: 00007ffe7843d928 [ 227.967455][T14166] [ 228.255608][T14170] bridge0: entered promiscuous mode [ 228.260870][T14170] macvlan2: entered promiscuous mode [ 228.267751][T14170] bridge0: port 3(macvlan2) entered blocking state [ 228.274436][T14170] bridge0: port 3(macvlan2) entered disabled state [ 228.281200][T14170] macvlan2: entered allmulticast mode [ 228.286638][T14170] bridge0: entered allmulticast mode [ 228.293992][T14170] macvlan2: left allmulticast mode [ 228.299155][T14170] bridge0: left allmulticast mode [ 228.304754][T14170] bridge0: left promiscuous mode [ 228.496410][T14190] capability: warning: `syz.2.3456' uses 32-bit capabilities (legacy support in use) [ 229.234016][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 229.234036][ T29] audit: type=1400 audit(1748857729.217:14668): avc: denied { create } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.261720][ T29] audit: type=1400 audit(1748857729.217:14669): avc: denied { bind } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.281560][ T29] audit: type=1400 audit(1748857729.217:14670): avc: denied { listen } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.301367][ T29] audit: type=1400 audit(1748857729.217:14671): avc: denied { connect } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.321211][ T29] audit: type=1400 audit(1748857729.217:14672): avc: denied { write } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.341027][ T29] audit: type=1400 audit(1748857729.217:14673): avc: denied { setopt } for pid=14196 comm="syz.0.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.471362][ T29] audit: type=1400 audit(1748857729.457:14674): avc: denied { bind } for pid=14203 comm="syz.2.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 229.492935][T14206] __nla_validate_parse: 3 callbacks suppressed [ 229.492954][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 229.511953][ T29] audit: type=1326 audit(1748857729.497:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14203 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 229.535633][ T29] audit: type=1326 audit(1748857729.497:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14203 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 229.559421][ T29] audit: type=1326 audit(1748857729.497:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14203 comm="syz.2.3462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 229.602554][T14213] program syz.4.3465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.638719][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3468'. [ 229.652360][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3467'. [ 229.665444][T14217] bridge0: entered promiscuous mode [ 229.670803][T14217] macvtap0: entered promiscuous mode [ 229.676344][T14217] macvtap0: entered allmulticast mode [ 229.681807][T14217] bridge0: entered allmulticast mode [ 229.692273][T14217] bridge0: left allmulticast mode [ 229.697471][T14217] bridge0: left promiscuous mode [ 229.871009][T14222] program syz.4.3469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.972755][T14226] lo speed is unknown, defaulting to 1000 [ 230.036011][T14226] chnl_net:caif_netlink_parms(): no params data found [ 230.074157][T14226] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.081746][T14226] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.089622][T14226] bridge_slave_0: entered allmulticast mode [ 230.096273][T14226] bridge_slave_0: entered promiscuous mode [ 230.103386][T14226] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.110527][T14226] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.117900][T14226] bridge_slave_1: entered allmulticast mode [ 230.124652][T14226] bridge_slave_1: entered promiscuous mode [ 230.144734][T14226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.155383][T14226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.175758][T14226] team0: Port device team_slave_0 added [ 230.182640][T14226] team0: Port device team_slave_1 added [ 230.199098][T14226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.206111][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.232207][T14226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.243621][T14226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.250597][T14226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.276646][T14226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.305012][T14226] hsr_slave_0: entered promiscuous mode [ 230.311264][T14226] hsr_slave_1: entered promiscuous mode [ 230.317208][T14226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.324811][T14226] Cannot create hsr debugfs directory [ 230.392016][T14226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 230.401074][T14226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 230.409930][T14226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 230.419611][T14226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 230.454666][T14226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.467907][T14226] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.477525][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.484746][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.496496][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.503664][ T7055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.572102][T14226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.710336][T14226] veth0_vlan: entered promiscuous mode [ 230.719203][T14226] veth1_vlan: entered promiscuous mode [ 230.740500][T14226] veth0_macvtap: entered promiscuous mode [ 230.749789][T14226] veth1_macvtap: entered promiscuous mode [ 230.764410][T14226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.776606][T14226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.787683][T14226] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.796519][T14226] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.805430][T14226] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.814233][T14226] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.927712][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 230.953832][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3470'. [ 231.005833][T14279] SELinux: policydb version 945894246 does not match my version range 15-34 [ 231.014898][T14279] SELinux: failed to load policy [ 231.039820][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 231.048880][T14285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3481'. [ 231.107967][T14288] siw: device registration error -23 [ 231.179236][T14299] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 231.210282][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 231.226159][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3488'. [ 231.300882][T14312] SELinux: policydb version 1650734950 does not match my version range 15-34 [ 231.312348][T14312] SELinux: failed to load policy [ 231.375394][T14316] siw: device registration error -23 [ 231.446530][T14321] sd 0:0:1:0: device reset [ 231.544701][T14326] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3496'. [ 231.703342][T14340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14340 comm=syz.0.3501 [ 231.796582][T14346] lo speed is unknown, defaulting to 1000 [ 232.118356][T14370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14370 comm=syz.0.3515 [ 232.130133][T14368] siw: device registration error -23 [ 232.248163][T14387] bridge0: entered promiscuous mode [ 232.253839][T14387] macvlan2: entered promiscuous mode [ 232.260357][T14387] bridge0: port 3(macvlan2) entered blocking state [ 232.267153][T14387] bridge0: port 3(macvlan2) entered disabled state [ 232.274873][T14387] macvlan2: entered allmulticast mode [ 232.280313][T14387] bridge0: entered allmulticast mode [ 232.286492][T14387] macvlan2: left allmulticast mode [ 232.291719][T14387] bridge0: left allmulticast mode [ 232.297804][T14387] bridge0: left promiscuous mode [ 232.347822][T14394] bridge0: entered promiscuous mode [ 232.353425][T14394] macvlan2: entered promiscuous mode [ 232.360274][T14394] bridge0: port 3(macvlan2) entered blocking state [ 232.366993][T14394] bridge0: port 3(macvlan2) entered disabled state [ 232.374716][T14394] macvlan2: entered allmulticast mode [ 232.380167][T14394] bridge0: entered allmulticast mode [ 232.391710][T14394] macvlan2: left allmulticast mode [ 232.396906][T14394] bridge0: left allmulticast mode [ 232.405888][T14394] bridge0: left promiscuous mode [ 232.415893][T14398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14398 comm=syz.4.3528 [ 232.447225][T14400] sd 0:0:1:0: device reset [ 232.675781][T14405] netlink: 'syz.4.3531': attribute type 2 has an invalid length. [ 233.094653][T14431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=14431 comm=syz.0.3540 [ 233.239740][T14435] bridge0: entered promiscuous mode [ 233.269435][T14435] macvlan2: entered promiscuous mode [ 233.297898][T14435] bridge0: port 3(macvlan2) entered blocking state [ 233.304899][T14435] bridge0: port 3(macvlan2) entered disabled state [ 233.334600][T14435] macvlan2: entered allmulticast mode [ 233.340269][T14435] bridge0: entered allmulticast mode [ 233.365593][T14435] macvlan2: left allmulticast mode [ 233.370795][T14435] bridge0: left allmulticast mode [ 233.386670][T14435] bridge0: left promiscuous mode [ 233.702652][T14457] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.711482][T14457] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.720208][T14457] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.728969][T14457] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.263234][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 234.263252][ T29] audit: type=1326 audit(1748857734.247:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.293187][ T29] audit: type=1326 audit(1748857734.247:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.316828][ T29] audit: type=1326 audit(1748857734.247:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.340593][ T29] audit: type=1326 audit(1748857734.247:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.364413][ T29] audit: type=1326 audit(1748857734.247:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.390917][ T29] audit: type=1326 audit(1748857734.247:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.414670][ T29] audit: type=1326 audit(1748857734.247:15121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14481 comm="syz.2.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 234.442815][ T29] audit: type=1400 audit(1748857734.427:15122): avc: denied { read write } for pid=14487 comm="syz.2.3561" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.466365][ T29] audit: type=1400 audit(1748857734.427:15123): avc: denied { open } for pid=14487 comm="syz.2.3561" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.525152][ T29] audit: type=1400 audit(1748857734.507:15124): avc: denied { write } for pid=14487 comm="syz.2.3561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.763035][T14506] SELinux: policydb version 1650734950 does not match my version range 15-34 [ 234.773339][T14506] SELinux: failed to load policy [ 234.783482][T14493] FAULT_INJECTION: forcing a failure. [ 234.783482][T14493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.796616][T14493] CPU: 1 UID: 0 PID: 14493 Comm: syz.0.3563 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 234.796653][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.796667][T14493] Call Trace: [ 234.796675][T14493] [ 234.796686][T14493] __dump_stack+0x1d/0x30 [ 234.796713][T14493] dump_stack_lvl+0xe8/0x140 [ 234.796738][T14493] dump_stack+0x15/0x1b [ 234.796769][T14493] should_fail_ex+0x265/0x280 [ 234.796797][T14493] should_fail+0xb/0x20 [ 234.796868][T14493] should_fail_usercopy+0x1a/0x20 [ 234.796896][T14493] _copy_from_user+0x1c/0xb0 [ 234.796925][T14493] restore_altstack+0x4b/0x2d0 [ 234.796951][T14493] ? __set_task_blocked+0x23a/0x2a0 [ 234.796976][T14493] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 234.797004][T14493] ? _raw_spin_unlock_irq+0x26/0x50 [ 234.797040][T14493] ? signal_setup_done+0x266/0x290 [ 234.797063][T14493] ? xfd_validate_state+0x45/0xf0 [ 234.797163][T14493] ? fpu__clear_user_states+0x63/0x1e0 [ 234.797192][T14493] ? fpregs_mark_activate+0x66/0x140 [ 234.797222][T14493] ? fpu__clear_user_states+0x63/0x1e0 [ 234.797255][T14493] ? arch_do_signal_or_restart+0x2f3/0x480 [ 234.797322][T14493] x64_sys_call+0x2e8a/0x2fb0 [ 234.797395][T14493] do_syscall_64+0xd2/0x200 [ 234.797426][T14493] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.797462][T14493] ? clear_bhb_loop+0x40/0x90 [ 234.797487][T14493] ? clear_bhb_loop+0x40/0x90 [ 234.797620][T14493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.797645][T14493] RIP: 0033:0x7f7bae82ab39 [ 234.797662][T14493] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 234.797684][T14493] RSP: 002b:00007f7bacef6a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 234.797757][T14493] RAX: ffffffffffffffda RBX: 00007f7baeab5fa0 RCX: 00007f7bae82ab39 [ 234.797774][T14493] RDX: 00007f7bacef6a80 RSI: 00007f7bacef6bb0 RDI: 0000000000000011 [ 234.797789][T14493] RBP: 00007f7bacef7090 R08: 0000000000000000 R09: 0000000000000000 [ 234.797856][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.797873][T14493] R13: 0000000000000000 R14: 00007f7baeab5fa0 R15: 00007ffe7843d928 [ 234.797896][T14493] [ 235.053023][T14509] __nla_validate_parse: 4 callbacks suppressed [ 235.053046][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3570'. [ 235.079508][T14509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 235.312447][T14537] block device autoloading is deprecated and will be removed. [ 236.205254][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3585'. [ 236.214215][T14656] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3585'. [ 236.332473][T14667] bridge0: entered promiscuous mode [ 236.339314][T14667] macvlan2: entered promiscuous mode [ 236.396326][T14667] bridge0: port 3(macvlan2) entered blocking state [ 236.403431][T14667] bridge0: port 3(macvlan2) entered disabled state [ 236.511140][T14667] macvlan2: entered allmulticast mode [ 236.516591][T14667] bridge0: entered allmulticast mode [ 236.528953][T14667] macvlan2: left allmulticast mode [ 236.534141][T14667] bridge0: left allmulticast mode [ 236.597694][T14667] bridge0: left promiscuous mode [ 236.633955][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 236.749423][T14696] netlink: 182 bytes leftover after parsing attributes in process `syz.5.3598'. [ 236.804163][T14700] batadv1: entered promiscuous mode [ 236.945901][T14706] bridge0: entered promiscuous mode [ 236.957550][T14706] macvlan2: entered promiscuous mode [ 236.974404][T14706] bridge0: port 3(macvlan2) entered blocking state [ 236.981213][T14706] bridge0: port 3(macvlan2) entered disabled state [ 237.004089][T14706] macvlan2: entered allmulticast mode [ 237.009860][T14706] bridge0: entered allmulticast mode [ 237.017315][T14706] macvlan2: left allmulticast mode [ 237.022573][T14706] bridge0: left allmulticast mode [ 237.029624][T14706] bridge0: left promiscuous mode [ 237.237372][T14716] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 237.244079][T14716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.251757][T14716] vhci_hcd vhci_hcd.0: Device attached [ 237.277906][T14716] IPv6: Can't replace route, no match found [ 237.303027][T14718] vhci_hcd: connection closed [ 237.303331][ T7055] vhci_hcd: stop threads [ 237.312360][ T7055] vhci_hcd: release socket [ 237.316823][ T7055] vhci_hcd: disconnect device [ 237.445451][T14725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.483826][T14726] netlink: 'syz.0.3608': attribute type 10 has an invalid length. [ 237.491810][T14726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3608'. [ 237.528585][T14726] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 237.555779][T14726] team0: Failed to send options change via netlink (err -105) [ 237.563364][T14726] team0: Port device geneve1 added [ 237.629373][T14725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.647892][T14729] SELinux: Context system_u: is not valid (left unmapped). [ 237.706609][T14725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.785903][T14725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.871653][T14725] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.895038][T14725] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.917185][T14725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.982650][T14725] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.284094][T14747] sd 0:0:1:0: device reset [ 238.442215][T14755] siw: device registration error -23 [ 238.461749][T14757] SELinux: policydb version 945894246 does not match my version range 15-34 [ 238.472521][T14757] SELinux: failed to load policy [ 238.576870][T14760] SELinux: policydb version 862336778 does not match my version range 15-34 [ 238.586556][T14760] SELinux: failed to load policy [ 238.697491][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 238.713355][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 238.911752][T14780] sd 0:0:1:0: device reset [ 238.969288][T14785] SELinux: policydb version 808464439 does not match my version range 15-34 [ 238.978539][T14785] SELinux: failed to load policy [ 239.614876][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 239.614894][ T29] audit: type=1400 audit(1748857739.597:15294): avc: denied { mount } for pid=14813 comm="syz.2.3644" name="/" dev="ramfs" ino=46554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 239.713586][T14816] SELinux: policydb version 945894246 does not match my version range 15-34 [ 239.941047][T14816] SELinux: failed to load policy [ 240.046453][T14824] lo speed is unknown, defaulting to 1000 [ 240.181548][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3653'. [ 240.242523][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 240.360446][T14842] sd 0:0:1:0: device reset [ 240.479565][ T29] audit: type=1400 audit(1748857740.457:15295): avc: denied { read } for pid=14846 comm="syz.2.3657" path="socket:[47397]" dev="sockfs" ino=47397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 240.576583][T14849] SELinux: policydb version 945894246 does not match my version range 15-34 [ 240.585720][T14849] SELinux: failed to load policy [ 240.636890][T14851] sd 0:0:1:0: device reset [ 240.739395][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3663'. [ 240.748405][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3663'. [ 240.779089][T14863] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3664'. [ 240.913443][ T29] audit: type=1400 audit(1748857740.887:15296): avc: denied { wake_alarm } for pid=14860 comm="syz.5.3663" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 240.996410][T14872] 9pnet_fd: Insufficient options for proto=fd [ 241.029135][T14874] SELinux: policydb version 1801414010 does not match my version range 15-34 [ 241.029160][T14874] SELinux: failed to load policy [ 241.066493][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 241.079670][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'. [ 241.097482][T14867] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 241.176646][ T29] audit: type=1400 audit(1748857741.157:15297): avc: denied { ioctl } for pid=14882 comm="syz.2.3673" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 241.204648][T14883] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3673'. [ 241.218498][ T29] audit: type=1400 audit(1748857741.197:15298): avc: denied { connect } for pid=14882 comm="syz.2.3673" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.248888][T14887] FAULT_INJECTION: forcing a failure. [ 241.248888][T14887] name failslab, interval 1, probability 0, space 0, times 0 [ 241.248922][T14887] CPU: 1 UID: 0 PID: 14887 Comm: syz.3.3675 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 241.249031][T14887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.249112][T14887] Call Trace: [ 241.249118][T14887] [ 241.249125][T14887] __dump_stack+0x1d/0x30 [ 241.249206][T14887] dump_stack_lvl+0xe8/0x140 [ 241.249225][T14887] dump_stack+0x15/0x1b [ 241.249309][T14887] should_fail_ex+0x265/0x280 [ 241.249336][T14887] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 241.249367][T14887] ? proc_thread_self_get_link+0xb0/0x130 [ 241.249417][T14887] should_failslab+0x8c/0xb0 [ 241.249450][T14887] __kmalloc_cache_noprof+0x4c/0x320 [ 241.249497][T14887] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 241.249572][T14887] proc_thread_self_get_link+0xb0/0x130 [ 241.249647][T14887] pick_link+0x47d/0x830 [ 241.249739][T14887] step_into+0x7b6/0x820 [ 241.249776][T14887] ? inode_permission+0x106/0x310 [ 241.249816][T14887] link_path_walk+0x571/0x900 [ 241.249857][T14887] path_openat+0x1de/0x2170 [ 241.249894][T14887] ? _parse_integer_limit+0x170/0x190 [ 241.249950][T14887] do_filp_open+0x109/0x230 [ 241.249985][T14887] do_sys_openat2+0xa6/0x110 [ 241.250046][T14887] __x64_sys_openat+0xf2/0x120 [ 241.250092][T14887] x64_sys_call+0x1af/0x2fb0 [ 241.250129][T14887] do_syscall_64+0xd2/0x200 [ 241.250169][T14887] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.250207][T14887] ? clear_bhb_loop+0x40/0x90 [ 241.250236][T14887] ? clear_bhb_loop+0x40/0x90 [ 241.250312][T14887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.250341][T14887] RIP: 0033:0x7f7dbe5ad2d0 [ 241.250361][T14887] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 241.250386][T14887] RSP: 002b:00007f7dbcc16f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 241.250412][T14887] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7dbe5ad2d0 [ 241.250429][T14887] RDX: 0000000000000002 RSI: 00007f7dbcc16fa0 RDI: 00000000ffffff9c [ 241.250514][T14887] RBP: 00007f7dbcc16fa0 R08: 0000000000000000 R09: 0000000000000000 [ 241.250531][T14887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 241.250547][T14887] R13: 0000000000000000 R14: 00007f7dbe7d5fa0 R15: 00007ffe837409d8 [ 241.250572][T14887] [ 241.253861][ T29] audit: type=1400 audit(1748857741.197:15299): avc: denied { write } for pid=14882 comm="syz.2.3673" path="socket:[47545]" dev="sockfs" ino=47545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 241.372635][T14891] sd 0:0:1:0: device reset [ 241.462505][ T29] audit: type=1326 audit(1748857741.437:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbe5ae969 code=0x7ffc0000 [ 241.549761][ T29] audit: type=1326 audit(1748857741.437:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbe5ae969 code=0x7ffc0000 [ 241.550716][ T29] audit: type=1326 audit(1748857741.447:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dbe5ae969 code=0x7ffc0000 [ 241.597003][ T29] audit: type=1326 audit(1748857741.447:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.3.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dbe5ae969 code=0x7ffc0000 [ 241.699482][T14903] SELinux: policydb version 945894246 does not match my version range 15-34 [ 241.708719][T14903] SELinux: failed to load policy [ 241.860534][T14905] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 241.945077][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3691'. [ 242.064024][T14931] sd 0:0:1:0: device reset [ 242.083316][T14933] SELinux: policydb version 1650734950 does not match my version range 15-34 [ 242.093302][T14933] SELinux: failed to load policy [ 242.160876][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3696'. [ 242.238409][T14941] siw: device registration error -23 [ 242.283181][T14948] syzkaller0: entered promiscuous mode [ 242.288731][T14948] syzkaller0: entered allmulticast mode [ 242.309441][T14952] ip6gretap0: entered promiscuous mode [ 242.315648][T14952] macvtap0: entered promiscuous mode [ 242.321461][T14952] macvtap0: entered allmulticast mode [ 242.326983][T14952] ip6gretap0: entered allmulticast mode [ 242.357952][T14952] ip6gretap0: left allmulticast mode [ 242.363538][T14952] ip6gretap0: left promiscuous mode [ 242.469862][T14963] SELinux: policydb version 1633826662 does not match my version range 15-34 [ 242.470588][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.486733][T14965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.495583][T14963] SELinux: failed to load policy [ 242.501551][T14965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.509022][T14965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.623372][T14971] sd 0:0:1:0: device reset [ 242.788153][T14989] SELinux: policydb version 1714883124 does not match my version range 15-34 [ 242.797519][T14989] SELinux: failed to load policy [ 243.313603][T15025] FAULT_INJECTION: forcing a failure. [ 243.313603][T15025] name failslab, interval 1, probability 0, space 0, times 0 [ 243.326311][T15025] CPU: 1 UID: 0 PID: 15025 Comm: syz.4.3731 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 243.326344][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.326368][T15025] Call Trace: [ 243.326398][T15025] [ 243.326407][T15025] __dump_stack+0x1d/0x30 [ 243.326428][T15025] dump_stack_lvl+0xe8/0x140 [ 243.326556][T15025] dump_stack+0x15/0x1b [ 243.326580][T15025] should_fail_ex+0x265/0x280 [ 243.326605][T15025] ? __se_sys_mount+0xef/0x2e0 [ 243.326716][T15025] should_failslab+0x8c/0xb0 [ 243.326749][T15025] __kmalloc_cache_noprof+0x4c/0x320 [ 243.326788][T15025] ? memdup_user+0x99/0xd0 [ 243.326879][T15025] __se_sys_mount+0xef/0x2e0 [ 243.326979][T15025] ? fput+0x8f/0xc0 [ 243.327058][T15025] ? ksys_write+0x192/0x1a0 [ 243.327084][T15025] __x64_sys_mount+0x67/0x80 [ 243.327153][T15025] x64_sys_call+0xd36/0x2fb0 [ 243.327181][T15025] do_syscall_64+0xd2/0x200 [ 243.327217][T15025] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.327253][T15025] ? clear_bhb_loop+0x40/0x90 [ 243.327288][T15025] ? clear_bhb_loop+0x40/0x90 [ 243.327316][T15025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.327348][T15025] RIP: 0033:0x7fadb590e969 [ 243.327369][T15025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.327387][T15025] RSP: 002b:00007fadb3f77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.327408][T15025] RAX: ffffffffffffffda RBX: 00007fadb5b35fa0 RCX: 00007fadb590e969 [ 243.327424][T15025] RDX: 0000200000000280 RSI: 00002000000002c0 RDI: 0000000000000000 [ 243.327441][T15025] RBP: 00007fadb3f77090 R08: 0000200000000180 R09: 0000000000000000 [ 243.327457][T15025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.327537][T15025] R13: 0000000000000000 R14: 00007fadb5b35fa0 R15: 00007ffe8271e1b8 [ 243.327556][T15025] [ 243.645097][T15033] SELinux: policydb version 946092337 does not match my version range 15-34 [ 243.654927][T15033] SELinux: failed to load policy [ 244.027414][T15054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.070701][T15057] hsr_slave_0: left promiscuous mode [ 244.076635][T15057] hsr_slave_1: left promiscuous mode [ 244.095294][T15054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.169285][T15054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.215228][T15054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.271334][T15054] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.284804][T15054] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.298543][T15054] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.312523][T15054] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.621050][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 244.621068][ T29] audit: type=1326 audit(1748857744.597:15625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.682450][ T29] audit: type=1326 audit(1748857744.637:15626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.706181][ T29] audit: type=1400 audit(1748857744.637:15627): avc: denied { create } for pid=15087 comm="syz.5.3754" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.727809][ T29] audit: type=1326 audit(1748857744.637:15628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.751605][ T29] audit: type=1400 audit(1748857744.637:15629): avc: denied { map } for pid=15087 comm="syz.5.3754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.776310][ T29] audit: type=1400 audit(1748857744.637:15630): avc: denied { read write } for pid=15087 comm="syz.5.3754" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=48074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 244.801658][ T29] audit: type=1326 audit(1748857744.637:15631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.825581][ T29] audit: type=1326 audit(1748857744.637:15632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.849504][ T29] audit: type=1326 audit(1748857744.637:15633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 244.873125][ T29] audit: type=1326 audit(1748857744.637:15634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15085 comm="syz.2.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 245.312691][T15121] __nla_validate_parse: 20 callbacks suppressed [ 245.312710][T15121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3769'. [ 245.737765][T15143] bridge0: entered promiscuous mode [ 245.744734][T15143] macvlan2: entered promiscuous mode [ 245.782134][T15146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 245.796207][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3780'. [ 245.875385][T15148] siw: device registration error -23 [ 245.910241][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 245.998840][T15157] SELinux: policydb version 808466231 does not match my version range 15-34 [ 246.014797][T15157] SELinux: failed to load policy [ 246.105363][T15181] bridge0: entered promiscuous mode [ 246.110792][T15181] macvlan2: entered promiscuous mode [ 246.144510][T15183] siw: device registration error -23 [ 246.165997][T15189] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3797'. [ 246.189285][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 246.345888][T15196] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 246.402815][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 246.411853][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 246.440572][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 246.452942][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3803'. [ 246.640361][T15227] siw: device registration error -23 [ 246.748264][T15230] SELinux: policydb version 540028976 does not match my version range 15-34 [ 246.771821][T15230] SELinux: failed to load policy [ 246.831023][T15236] IPVS: stopping master sync thread 15238 ... [ 247.075443][T15256] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 247.139193][T15258] ip6gretap0: entered promiscuous mode [ 247.144926][T15259] siw: device registration error -23 [ 247.150871][T15258] macvtap0: entered promiscuous mode [ 247.156586][T15258] macvtap0: entered allmulticast mode [ 247.162069][T15258] ip6gretap0: entered allmulticast mode [ 247.179533][T15258] ip6gretap0: left allmulticast mode [ 247.185015][T15258] ip6gretap0: left promiscuous mode [ 247.217996][T15264] SELinux: policydb version 808464439 does not match my version range 15-34 [ 247.228266][T15264] SELinux: failed to load policy [ 247.759166][T15350] SELinux: policydb version 540028976 does not match my version range 15-34 [ 247.768551][T15350] SELinux: failed to load policy [ 248.135352][T15394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=15394 comm=syz.5.3842 [ 248.261268][T15398] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 248.554493][T15421] ip6gretap0: entered promiscuous mode [ 248.586241][T15421] macvtap0: entered promiscuous mode [ 248.591891][T15421] macvtap0: entered allmulticast mode [ 248.597335][T15421] ip6gretap0: entered allmulticast mode [ 248.607410][T15425] ip6gretap0: left allmulticast mode [ 248.612869][T15425] ip6gretap0: left promiscuous mode [ 248.693580][T15430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=15430 comm=syz.4.3855 [ 249.168653][T15453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=15453 comm=syz.4.3866 [ 249.646657][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 249.646676][ T29] audit: type=1326 audit(1748857749.627:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 249.678015][ T29] audit: type=1326 audit(1748857749.657:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 249.694939][T15480] SELinux: policydb version 1801414010 does not match my version range 15-34 [ 249.701330][ T29] audit: type=1326 audit(1748857749.657:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 249.726801][T15480] SELinux: failed to load policy [ 249.733740][ T29] audit: type=1326 audit(1748857749.657:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 249.763209][ T29] audit: type=1326 audit(1748857749.657:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 249.787008][ T29] audit: type=1326 audit(1748857749.657:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadb590d2d0 code=0x7ffc0000 [ 249.810703][ T29] audit: type=1326 audit(1748857749.657:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fadb5910197 code=0x7ffc0000 [ 249.810739][ T29] audit: type=1326 audit(1748857749.657:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 249.810835][ T29] audit: type=1400 audit(1748857749.657:16171): avc: denied { create } for pid=15475 comm="syz.4.3876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.810864][ T29] audit: type=1326 audit(1748857749.657:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15475 comm="syz.4.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fadb5910197 code=0x7ffc0000 [ 250.490462][T15558] __nla_validate_parse: 9 callbacks suppressed [ 250.490534][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3893'. [ 250.562877][T15571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3897'. [ 250.612465][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3898'. [ 250.635268][T15586] syz_tun: entered promiscuous mode [ 250.646959][T15586] macvtap1: entered promiscuous mode [ 250.652691][T15586] macvtap1: entered allmulticast mode [ 250.658295][T15586] syz_tun: entered allmulticast mode [ 250.686399][T15593] syz_tun: left allmulticast mode [ 250.691691][T15593] syz_tun: left promiscuous mode [ 250.935823][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3910'. [ 250.945015][T15639] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3910'. [ 251.932939][T15675] siw: device registration error -23 [ 252.171592][T15698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3933'. [ 252.665613][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 252.680708][T15761] syz_tun: entered promiscuous mode [ 252.688195][T15761] macvtap0: entered promiscuous mode [ 252.693718][T15761] macvtap0: entered allmulticast mode [ 252.699275][T15761] syz_tun: entered allmulticast mode [ 252.727706][T15761] syz_tun: left allmulticast mode [ 252.732925][T15761] syz_tun: left promiscuous mode [ 252.892453][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 253.503361][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 253.907938][T15916] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3990'. [ 254.654392][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 254.654410][ T29] audit: type=1400 audit(1748857754.637:16817): avc: denied { unlink } for pid=12817 comm="syz-executor" name="file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 254.809324][ T29] audit: type=1326 audit(1748857754.787:16818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 254.833138][ T29] audit: type=1326 audit(1748857754.787:16819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 254.856846][ T29] audit: type=1326 audit(1748857754.787:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 254.880678][ T29] audit: type=1326 audit(1748857754.787:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 254.904388][ T29] audit: type=1326 audit(1748857754.787:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 255.030508][ T29] audit: type=1326 audit(1748857754.787:16823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 255.054513][ T29] audit: type=1326 audit(1748857754.787:16824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 255.078863][ T29] audit: type=1326 audit(1748857754.787:16825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 255.102698][ T29] audit: type=1326 audit(1748857754.787:16826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15951 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 255.132940][T15955] syz_tun: entered promiscuous mode [ 255.146253][T15962] SELinux: policydb version 1681469798 does not match my version range 15-34 [ 255.155903][T15955] macvtap1: entered promiscuous mode [ 255.161417][T15955] macvtap1: entered allmulticast mode [ 255.166871][T15955] syz_tun: entered allmulticast mode [ 255.180683][T15962] SELinux: failed to load policy [ 255.194940][T15966] syz_tun: left allmulticast mode [ 255.200283][T15966] syz_tun: left promiscuous mode [ 256.349504][T16012] __nla_validate_parse: 5 callbacks suppressed [ 256.349569][T16012] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 256.400537][T16017] veth1_to_bond: entered allmulticast mode [ 256.408517][T16017] veth1_to_bond: entered promiscuous mode [ 256.463080][T16011] veth1_to_bond: left promiscuous mode [ 256.468845][T16011] veth1_to_bond: left allmulticast mode [ 256.540250][T16033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4040'. [ 256.776537][T16051] netlink: 356 bytes leftover after parsing attributes in process `syz.3.4047'. [ 256.849743][T16039] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 256.945034][T16059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16059 comm=syz.0.4050 [ 256.971437][T16060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16060 comm=syz.0.4050 [ 257.005243][T16062] SELinux: syz.3.4051 (16062) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 257.044831][T16062] openvswitch: netlink: Message has 6 unknown bytes. [ 257.053999][T16059] vlan2: entered allmulticast mode [ 257.059156][T16059] bond2: entered allmulticast mode [ 257.387365][T16098] FAULT_INJECTION: forcing a failure. [ 257.387365][T16098] name failslab, interval 1, probability 0, space 0, times 0 [ 257.400140][T16098] CPU: 0 UID: 0 PID: 16098 Comm: syz.5.4058 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 257.400178][T16098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.400192][T16098] Call Trace: [ 257.400207][T16098] [ 257.400218][T16098] __dump_stack+0x1d/0x30 [ 257.400243][T16098] dump_stack_lvl+0xe8/0x140 [ 257.400267][T16098] dump_stack+0x15/0x1b [ 257.400363][T16098] should_fail_ex+0x265/0x280 [ 257.400387][T16098] should_failslab+0x8c/0xb0 [ 257.400422][T16098] kmem_cache_alloc_noprof+0x50/0x310 [ 257.400460][T16098] ? audit_log_start+0x365/0x6c0 [ 257.400498][T16098] audit_log_start+0x365/0x6c0 [ 257.400546][T16098] audit_seccomp+0x48/0x100 [ 257.400637][T16098] ? __seccomp_filter+0x68c/0x10d0 [ 257.400691][T16098] __seccomp_filter+0x69d/0x10d0 [ 257.400721][T16098] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.400750][T16098] ? vfs_write+0x75e/0x8e0 [ 257.400771][T16098] ? __rcu_read_unlock+0x4f/0x70 [ 257.400877][T16098] ? __fget_files+0x184/0x1c0 [ 257.400910][T16098] __secure_computing+0x82/0x150 [ 257.400938][T16098] syscall_trace_enter+0xcf/0x1e0 [ 257.400964][T16098] do_syscall_64+0xac/0x200 [ 257.401000][T16098] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.401089][T16098] ? clear_bhb_loop+0x40/0x90 [ 257.401118][T16098] ? clear_bhb_loop+0x40/0x90 [ 257.401146][T16098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.401174][T16098] RIP: 0033:0x7f19da32e969 [ 257.401194][T16098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.401230][T16098] RSP: 002b:00007f19d8997038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 257.401255][T16098] RAX: ffffffffffffffda RBX: 00007f19da555fa0 RCX: 00007f19da32e969 [ 257.401271][T16098] RDX: 0000000000000000 RSI: 0000000000000100 RDI: ffffffffffffffff [ 257.401286][T16098] RBP: 00007f19d8997090 R08: 0000000000000000 R09: 0000000000000000 [ 257.401300][T16098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.401315][T16098] R13: 0000000000000000 R14: 00007f19da555fa0 R15: 00007ffef5f54308 [ 257.401337][T16098] [ 257.615266][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 257.627710][T16102] ip6gretap0: entered promiscuous mode [ 257.634456][T16102] macvtap1: entered promiscuous mode [ 257.639962][T16102] macvtap1: entered allmulticast mode [ 257.645480][T16102] ip6gretap0: entered allmulticast mode [ 257.655528][T16102] ip6gretap0: left allmulticast mode [ 257.661101][T16102] ip6gretap0: left promiscuous mode [ 257.963658][T16108] Set syz1 is full, maxelem 65536 reached [ 257.989948][T16116] infiniband syz!: set active [ 257.994737][T16116] infiniband syz!: added team_slave_0 [ 258.017735][T16116] RDS/IB: syz!: added [ 258.034516][T16116] smc: adding ib device syz! with port count 1 [ 258.056314][T16116] smc: ib device syz! port 1 has pnetid [ 258.697053][T16175] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4068'. [ 258.897480][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4069'. [ 259.333082][T16187] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 259.525082][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 259.690519][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 259.690534][ T29] audit: type=1400 audit(1748857759.667:17068): avc: denied { create } for pid=16210 comm="syz.5.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.721566][T16211] random: crng reseeded on system resumption [ 259.756627][ T29] audit: type=1400 audit(1748857759.697:17069): avc: denied { setopt } for pid=16210 comm="syz.5.4084" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.777511][ T29] audit: type=1400 audit(1748857759.697:17070): avc: denied { ioctl } for pid=16210 comm="syz.5.4084" path="socket:[52034]" dev="sockfs" ino=52034 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 259.802663][ T29] audit: type=1400 audit(1748857759.707:17071): avc: denied { append } for pid=16210 comm="syz.5.4084" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.826046][ T29] audit: type=1400 audit(1748857759.707:17072): avc: denied { open } for pid=16210 comm="syz.5.4084" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 259.849668][ T29] audit: type=1400 audit(1748857759.717:17073): avc: denied { firmware_load } for pid=7064 comm="kworker/u8:14" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 259.874911][ T29] audit: type=1326 audit(1748857759.717:17074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16210 comm="syz.5.4084" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x0 [ 260.149154][ T29] audit: type=1326 audit(1748857760.107:17075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 260.173862][ T29] audit: type=1326 audit(1748857760.107:17076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 260.197945][ T29] audit: type=1326 audit(1748857760.107:17077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a9142e969 code=0x7ffc0000 [ 260.256831][T16229] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4091'. [ 260.419007][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4092'. [ 261.110191][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'. [ 261.415317][T16276] __nla_validate_parse: 2 callbacks suppressed [ 261.415331][T16276] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4111'. [ 261.441671][T16276] program syz.2.4111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.451476][T16276] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 261.499904][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'. [ 261.550701][ T3745] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 261.558938][ T3745] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.574022][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4115'. [ 261.617632][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 261.654964][T16289] macvtap2: entered promiscuous mode [ 261.660498][T16289] macvtap2: entered allmulticast mode [ 261.665978][T16289] bridge0: entered allmulticast mode [ 261.719018][T16289] bridge0: left allmulticast mode [ 261.853802][T16310] random: crng reseeded on system resumption [ 262.011719][T16312] siw: device registration error -23 [ 262.136305][T16317] FAULT_INJECTION: forcing a failure. [ 262.136305][T16317] name failslab, interval 1, probability 0, space 0, times 0 [ 262.149053][T16317] CPU: 1 UID: 0 PID: 16317 Comm: syz.5.4127 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 262.149090][T16317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.149107][T16317] Call Trace: [ 262.149114][T16317] [ 262.149124][T16317] __dump_stack+0x1d/0x30 [ 262.149150][T16317] dump_stack_lvl+0xe8/0x140 [ 262.149175][T16317] dump_stack+0x15/0x1b [ 262.149220][T16317] should_fail_ex+0x265/0x280 [ 262.149247][T16317] should_failslab+0x8c/0xb0 [ 262.149336][T16317] kmem_cache_alloc_noprof+0x50/0x310 [ 262.149373][T16317] ? getname_flags+0x80/0x3b0 [ 262.149411][T16317] getname_flags+0x80/0x3b0 [ 262.149439][T16317] __se_sys_acct+0x3d/0x490 [ 262.149530][T16317] __x64_sys_acct+0x1f/0x30 [ 262.149622][T16317] x64_sys_call+0x18cf/0x2fb0 [ 262.149644][T16317] do_syscall_64+0xd2/0x200 [ 262.149676][T16317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.149708][T16317] ? clear_bhb_loop+0x40/0x90 [ 262.149744][T16317] ? clear_bhb_loop+0x40/0x90 [ 262.149773][T16317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.149794][T16317] RIP: 0033:0x7f19da32e969 [ 262.149808][T16317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.149827][T16317] RSP: 002b:00007f19d8997038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 262.149973][T16317] RAX: ffffffffffffffda RBX: 00007f19da555fa0 RCX: 00007f19da32e969 [ 262.149987][T16317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 262.150003][T16317] RBP: 00007f19d8997090 R08: 0000000000000000 R09: 0000000000000000 [ 262.150019][T16317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.150031][T16317] R13: 0000000000000000 R14: 00007f19da555fa0 R15: 00007ffef5f54308 [ 262.150091][T16317] [ 262.353393][ T3392] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 262.369602][ T3392] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.773334][ T3392] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 262.784797][ T3392] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 262.851603][T16348] bridge0: entered promiscuous mode [ 262.858879][T16348] bridge0: port 3(macvlan2) entered blocking state [ 262.865644][T16348] bridge0: port 3(macvlan2) entered disabled state [ 262.882150][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4142'. [ 262.891816][T16348] macvlan2: entered allmulticast mode [ 262.897224][T16348] bridge0: entered allmulticast mode [ 262.920738][T16348] macvlan2: left allmulticast mode [ 262.925978][T16348] bridge0: left allmulticast mode [ 262.932033][T16348] bridge0: left promiscuous mode [ 263.073024][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4150'. [ 263.097841][T16375] ip6gretap0: entered promiscuous mode [ 263.105457][T16375] macvtap2: entered promiscuous mode [ 263.111014][T16375] macvtap2: entered allmulticast mode [ 263.116502][T16375] ip6gretap0: entered allmulticast mode [ 263.129466][T16380] ip6gretap0: left allmulticast mode [ 263.134999][T16380] ip6gretap0: left promiscuous mode [ 263.468370][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 263.476334][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.693145][ T3392] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 263.706096][ T3392] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.887781][T16464] SELinux: Context system_u:object_r:ld_so_cache_t:s0 is not valid (left unmapped). [ 263.999216][T16479] openvswitch: netlink: Message has 6 unknown bytes. [ 264.088521][T16470] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 264.124879][T16492] SELinux: policydb version 175402101 does not match my version range 15-34 [ 264.144552][T16492] SELinux: failed to load policy [ 264.303899][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4207'. [ 264.313061][T16504] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4207'. [ 264.355614][T16502] SELinux: ebitmap: truncated map [ 264.369320][T16502] SELinux: failed to load policy [ 264.410045][T16508] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 264.455632][T16508] SELinux: failed to load policy [ 264.482107][ T36] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 264.523978][ T36] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.623747][T16519] SELinux: policydb version 946092337 does not match my version range 15-34 [ 264.641425][T16519] SELinux: failed to load policy [ 264.705591][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 264.705612][ T29] audit: type=1326 audit(1748857764.687:17560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.780502][ T29] audit: type=1326 audit(1748857764.687:17561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.804297][ T29] audit: type=1326 audit(1748857764.747:17562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.828729][ T29] audit: type=1326 audit(1748857764.747:17563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.852720][ T29] audit: type=1326 audit(1748857764.747:17564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.876824][ T29] audit: type=1326 audit(1748857764.747:17565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19da32d2d0 code=0x7ffc0000 [ 264.876860][ T29] audit: type=1326 audit(1748857764.747:17566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f19da330197 code=0x7ffc0000 [ 264.876894][ T29] audit: type=1326 audit(1748857764.747:17567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 264.876994][ T29] audit: type=1326 audit(1748857764.747:17568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f19da330197 code=0x7ffc0000 [ 264.877026][ T29] audit: type=1326 audit(1748857764.747:17569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16523 comm="syz.5.4215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19da32d5ca code=0x7ffc0000 [ 264.910917][T16521] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 264.960717][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 265.023442][T16536] ip6gretap0: entered promiscuous mode [ 265.029033][T16536] macvtap3: entered promiscuous mode [ 265.034521][T16536] macvtap3: entered allmulticast mode [ 265.034541][T16536] ip6gretap0: entered allmulticast mode [ 265.051056][T16537] ip6gretap0: left allmulticast mode [ 265.051160][T16537] ip6gretap0: left promiscuous mode [ 265.256733][T16548] random: crng reseeded on system resumption [ 265.291000][T16550] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4225'. [ 265.522654][T16583] SELinux: policydb version 540028976 does not match my version range 15-34 [ 265.531875][T16583] SELinux: failed to load policy [ 265.568561][T16573] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 265.690537][T16597] lo speed is unknown, defaulting to 1000 [ 265.788544][T16614] SELinux: policydb version 1667392567 does not match my version range 15-34 [ 265.797853][T16614] SELinux: failed to load policy [ 266.039271][T16632] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 266.149747][T16646] SELinux: policydb version 1114333029 does not match my version range 15-34 [ 266.158916][T16646] SELinux: failed to load policy [ 266.728094][T16692] __nla_validate_parse: 5 callbacks suppressed [ 266.728114][T16692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'. [ 266.887830][T16706] FAULT_INJECTION: forcing a failure. [ 266.887830][T16706] name failslab, interval 1, probability 0, space 0, times 0 [ 266.900801][T16706] CPU: 1 UID: 0 PID: 16706 Comm: syz.2.4295 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 266.900848][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.900861][T16706] Call Trace: [ 266.900867][T16706] [ 266.900874][T16706] __dump_stack+0x1d/0x30 [ 266.900896][T16706] dump_stack_lvl+0xe8/0x140 [ 266.900920][T16706] dump_stack+0x15/0x1b [ 266.900945][T16706] should_fail_ex+0x265/0x280 [ 266.901072][T16706] should_failslab+0x8c/0xb0 [ 266.901099][T16706] __kmalloc_node_noprof+0xa9/0x410 [ 266.901129][T16706] ? __vmalloc_node_range_noprof+0x3f9/0xe00 [ 266.901222][T16706] __vmalloc_node_range_noprof+0x3f9/0xe00 [ 266.901281][T16706] ? sel_write_load+0x158/0x380 [ 266.901336][T16706] vmalloc_noprof+0x82/0xc0 [ 266.901378][T16706] ? sel_write_load+0x158/0x380 [ 266.901463][T16706] sel_write_load+0x158/0x380 [ 266.901501][T16706] ? __pfx_sel_write_load+0x10/0x10 [ 266.901533][T16706] vfs_write+0x269/0x8e0 [ 266.901558][T16706] ? __rcu_read_unlock+0x4f/0x70 [ 266.901617][T16706] ? __fget_files+0x184/0x1c0 [ 266.901653][T16706] ksys_write+0xda/0x1a0 [ 266.901725][T16706] __x64_sys_write+0x40/0x50 [ 266.901754][T16706] x64_sys_call+0x2cdd/0x2fb0 [ 266.901813][T16706] do_syscall_64+0xd2/0x200 [ 266.901848][T16706] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.901875][T16706] ? clear_bhb_loop+0x40/0x90 [ 266.901920][T16706] ? clear_bhb_loop+0x40/0x90 [ 266.901948][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.901975][T16706] RIP: 0033:0x7f3a9142e969 [ 266.902001][T16706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.902034][T16706] RSP: 002b:00007f3a8fa97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.902092][T16706] RAX: ffffffffffffffda RBX: 00007f3a91655fa0 RCX: 00007f3a9142e969 [ 266.902105][T16706] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.902122][T16706] RBP: 00007f3a8fa97090 R08: 0000000000000000 R09: 0000000000000000 [ 266.902138][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.902151][T16706] R13: 0000000000000000 R14: 00007f3a91655fa0 R15: 00007fffa3c64cb8 [ 266.902171][T16706] [ 267.122832][T16706] syz.2.4295: vmalloc error: size 8192, failed to allocated page array size 16, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 267.139172][T16706] CPU: 1 UID: 0 PID: 16706 Comm: syz.2.4295 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 267.139208][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.139225][T16706] Call Trace: [ 267.139233][T16706] [ 267.139243][T16706] __dump_stack+0x1d/0x30 [ 267.139265][T16706] dump_stack_lvl+0xe8/0x140 [ 267.139364][T16706] dump_stack+0x15/0x1b [ 267.139380][T16706] warn_alloc+0x12b/0x1a0 [ 267.139426][T16706] __vmalloc_node_range_noprof+0x497/0xe00 [ 267.139522][T16706] ? sel_write_load+0x158/0x380 [ 267.139563][T16706] vmalloc_noprof+0x82/0xc0 [ 267.139603][T16706] ? sel_write_load+0x158/0x380 [ 267.139686][T16706] sel_write_load+0x158/0x380 [ 267.139724][T16706] ? __pfx_sel_write_load+0x10/0x10 [ 267.139756][T16706] vfs_write+0x269/0x8e0 [ 267.139833][T16706] ? __rcu_read_unlock+0x4f/0x70 [ 267.139862][T16706] ? __fget_files+0x184/0x1c0 [ 267.139897][T16706] ksys_write+0xda/0x1a0 [ 267.139920][T16706] __x64_sys_write+0x40/0x50 [ 267.140003][T16706] x64_sys_call+0x2cdd/0x2fb0 [ 267.140027][T16706] do_syscall_64+0xd2/0x200 [ 267.140087][T16706] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.140115][T16706] ? clear_bhb_loop+0x40/0x90 [ 267.140136][T16706] ? clear_bhb_loop+0x40/0x90 [ 267.140165][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.140212][T16706] RIP: 0033:0x7f3a9142e969 [ 267.140232][T16706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.140256][T16706] RSP: 002b:00007f3a8fa97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.140353][T16706] RAX: ffffffffffffffda RBX: 00007f3a91655fa0 RCX: 00007f3a9142e969 [ 267.140369][T16706] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 267.140382][T16706] RBP: 00007f3a8fa97090 R08: 0000000000000000 R09: 0000000000000000 [ 267.140394][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.140406][T16706] R13: 0000000000000000 R14: 00007f3a91655fa0 R15: 00007fffa3c64cb8 [ 267.140424][T16706] [ 267.140441][T16706] Mem-Info: [ 267.350297][T16706] active_anon:9376 inactive_anon:0 isolated_anon:0 [ 267.350297][T16706] active_file:21259 inactive_file:2506 isolated_file:0 [ 267.350297][T16706] unevictable:0 dirty:128 writeback:0 [ 267.350297][T16706] slab_reclaimable:3011 slab_unreclaimable:17511 [ 267.350297][T16706] mapped:37456 shmem:1545 pagetables:1326 [ 267.350297][T16706] sec_pagetables:0 bounce:0 [ 267.350297][T16706] kernel_misc_reclaimable:0 [ 267.350297][T16706] free:1868862 free_pcp:10540 free_cma:0 [ 267.395437][T16706] Node 0 active_anon:37504kB inactive_anon:0kB active_file:85036kB inactive_file:10024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149824kB dirty:512kB writeback:0kB shmem:6180kB writeback_tmp:0kB kernel_stack:3312kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 267.397189][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4303'. [ 267.424282][T16706] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.462016][T16706] lowmem_reserve[]: 0 2882 7861 7861 [ 267.467362][T16706] Node 0 DMA32 free:2947908kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951436kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 267.497542][T16706] lowmem_reserve[]: 0 0 4978 4978 [ 267.502736][T16706] Node 0 Normal free:4512180kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37504kB inactive_anon:0kB active_file:85036kB inactive_file:10024kB unevictable:0kB writepending:512kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:38556kB local_pcp:1964kB free_cma:0kB [ 267.534806][T16706] lowmem_reserve[]: 0 0 0 0 [ 267.539439][T16706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.552291][T16706] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947908kB [ 267.568572][T16706] Node 0 Normal: 718*4kB (UME) 1173*8kB (UME) 831*16kB (UME) 963*32kB (UME) 412*64kB (UME) 150*128kB (UME) 49*256kB (UM) 36*512kB (UM) 15*1024kB (UME) 6*2048kB (UME) 1062*4096kB (UM) = 4510512kB [ 267.588079][T16706] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 267.597468][T16706] 25306 total pagecache pages [ 267.602250][T16706] 0 pages in swap cache [ 267.606416][T16706] Free swap = 124996kB [ 267.610629][T16706] Total swap = 124996kB [ 267.614860][T16706] 2097051 pages RAM [ 267.618685][T16706] 0 pages HighMem/MovableOnly [ 267.623396][T16706] 80794 pages reserved [ 267.667127][T16731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=16731 comm=syz.0.4304 [ 267.742359][T16739] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4308'. [ 267.770296][T16741] random: crng reseeded on system resumption [ 267.809250][T16743] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4310'. [ 267.853405][T16737] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 267.933625][T16746] SELinux: policydb version 1650734950 does not match my version range 15-34 [ 267.943821][T16746] SELinux: failed to load policy [ 268.061511][ T3745] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 268.073113][ T3745] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.252237][T16771] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 268.589805][T16785] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 268.686617][T16801] siw: device registration error -23 [ 268.709665][T16806] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 268.743618][T16809] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4339'. [ 269.072898][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4345'. [ 269.081868][T16822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4345'. [ 269.149531][T16824] bridge0: entered promiscuous mode [ 269.158272][T16824] macvtap1: entered promiscuous mode [ 269.163770][T16824] macvtap1: entered allmulticast mode [ 269.169182][T16824] bridge0: entered allmulticast mode [ 269.729308][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 269.729327][ T29] audit: type=1326 audit(1748857769.707:17983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.751398][T16842] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 269.759719][ T29] audit: type=1326 audit(1748857769.707:17984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.791974][ T29] audit: type=1326 audit(1748857769.717:17985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815485][ T29] audit: type=1326 audit(1748857769.717:17986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815595][ T29] audit: type=1326 audit(1748857769.717:17987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815624][ T29] audit: type=1326 audit(1748857769.717:17988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815724][ T29] audit: type=1326 audit(1748857769.717:17989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815760][ T29] audit: type=1326 audit(1748857769.717:17990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815803][ T29] audit: type=1326 audit(1748857769.717:17991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 269.815852][ T29] audit: type=1326 audit(1748857769.717:17992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16848 comm="syz.5.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 270.173420][T16873] program syz.4.4368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.183271][T16873] netlink: 'syz.4.4368': attribute type 10 has an invalid length. [ 270.361346][T16880] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 270.772695][T16905] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 270.853464][T16914] FAULT_INJECTION: forcing a failure. [ 270.853464][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 270.866366][T16914] CPU: 1 UID: 0 PID: 16914 Comm: syz.4.4386 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 270.866397][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.866411][T16914] Call Trace: [ 270.866418][T16914] [ 270.866426][T16914] __dump_stack+0x1d/0x30 [ 270.866463][T16914] dump_stack_lvl+0xe8/0x140 [ 270.866488][T16914] dump_stack+0x15/0x1b [ 270.866510][T16914] should_fail_ex+0x265/0x280 [ 270.866536][T16914] should_failslab+0x8c/0xb0 [ 270.866563][T16914] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 270.866623][T16914] ? sidtab_sid2str_get+0xa0/0x130 [ 270.866672][T16914] kmemdup_noprof+0x2b/0x70 [ 270.866789][T16914] sidtab_sid2str_get+0xa0/0x130 [ 270.866847][T16914] security_sid_to_context_core+0x1eb/0x2e0 [ 270.866876][T16914] security_sid_to_context+0x27/0x40 [ 270.866970][T16914] selinux_lsmprop_to_secctx+0x67/0xf0 [ 270.867001][T16914] security_lsmprop_to_secctx+0x43/0x80 [ 270.867039][T16914] audit_log_task_context+0x77/0x190 [ 270.867065][T16914] audit_log_task+0xf4/0x250 [ 270.867158][T16914] audit_seccomp+0x61/0x100 [ 270.867191][T16914] ? __seccomp_filter+0x68c/0x10d0 [ 270.867261][T16914] __seccomp_filter+0x69d/0x10d0 [ 270.867285][T16914] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 270.867505][T16914] ? vfs_write+0x75e/0x8e0 [ 270.867538][T16914] __secure_computing+0x82/0x150 [ 270.867596][T16914] syscall_trace_enter+0xcf/0x1e0 [ 270.867624][T16914] do_syscall_64+0xac/0x200 [ 270.867654][T16914] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 270.867703][T16914] ? clear_bhb_loop+0x40/0x90 [ 270.867730][T16914] ? clear_bhb_loop+0x40/0x90 [ 270.867757][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.867778][T16914] RIP: 0033:0x7fadb590e969 [ 270.867897][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.867921][T16914] RSP: 002b:00007fadb3f77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 270.867939][T16914] RAX: ffffffffffffffda RBX: 00007fadb5b35fa0 RCX: 00007fadb590e969 [ 270.867953][T16914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 270.867969][T16914] RBP: 00007fadb3f77090 R08: 0000000000000000 R09: 0000000000000000 [ 270.867984][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.868049][T16914] R13: 0000000000000000 R14: 00007fadb5b35fa0 R15: 00007ffe8271e1b8 [ 270.868069][T16914] [ 271.254137][ T3745] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 271.274771][ T3745] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.407335][T16936] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 271.626019][ T3745] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 271.642222][ T3745] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.687849][T16976] SELinux: policydb version 1851859060 does not match my version range 15-34 [ 271.717814][T16976] SELinux: failed to load policy [ 271.888871][T16986] random: crng reseeded on system resumption [ 272.232856][T17028] random: crng reseeded on system resumption [ 272.444111][T17057] __nla_validate_parse: 6 callbacks suppressed [ 272.444175][T17057] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4433'. [ 272.655637][T17097] random: crng reseeded on system resumption [ 272.697465][T17095] siw: device registration error -23 [ 272.706320][T17106] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4442'. [ 272.966748][T17122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'. [ 273.022048][T17134] random: crng reseeded on system resumption [ 273.165319][T17144] SELinux: failed to load policy [ 273.265675][T17159] random: crng reseeded on system resumption [ 273.476279][T17177] siw: device registration error -23 [ 273.609472][T17195] random: crng reseeded on system resumption [ 273.780141][T17207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4486'. [ 274.183958][T17253] random: crng reseeded on system resumption [ 274.249979][T17259] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4511'. [ 274.404317][T17264] lo speed is unknown, defaulting to 1000 [ 274.498644][T17264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4509'. [ 274.735569][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 274.735587][ T29] audit: type=1326 audit(1748857774.717:18468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 274.963441][ T29] audit: type=1326 audit(1748857774.757:18469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 274.987267][ T29] audit: type=1326 audit(1748857774.757:18470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.011049][ T29] audit: type=1326 audit(1748857774.757:18471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.034747][ T29] audit: type=1326 audit(1748857774.757:18472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.058443][ T29] audit: type=1326 audit(1748857774.757:18473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.082489][ T29] audit: type=1326 audit(1748857774.757:18474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.105999][ T29] audit: type=1326 audit(1748857774.757:18475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.129951][ T29] audit: type=1326 audit(1748857774.757:18476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.153577][ T29] audit: type=1326 audit(1748857774.757:18477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.4.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 275.295593][T17281] random: crng reseeded on system resumption [ 275.980003][T17321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17321 comm=syz.2.4531 [ 276.204568][T17336] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4535'. [ 276.300817][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4539'. [ 276.320323][T17353] bridge0: entered promiscuous mode [ 276.325904][T17353] macvtap2: entered promiscuous mode [ 276.331458][T17353] macvtap2: entered allmulticast mode [ 276.336865][T17353] bridge0: entered allmulticast mode [ 276.477842][T17369] siw: device registration error -23 [ 276.563594][T17384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17384 comm=syz.5.4543 [ 276.890381][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4551'. [ 277.088897][T17430] SELinux: policydb version 540028976 does not match my version range 15-34 [ 277.109344][T17430] SELinux: failed to load policy [ 277.115158][T17434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17434 comm=syz.3.4554 [ 277.417532][T17460] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4562'. [ 277.476978][T17469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17469 comm=syz.5.4566 [ 277.498747][T17467] SELinux: policydb version 540028976 does not match my version range 15-34 [ 277.509299][T17467] SELinux: failed to load policy [ 277.589721][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4573'. [ 277.598696][T17484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4573'. [ 278.289200][T17497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17497 comm=syz.4.4578 [ 278.309208][T17495] random: crng reseeded on system resumption [ 278.341307][T17499] SELinux: policydb version 808464439 does not match my version range 15-34 [ 278.350190][T17499] SELinux: failed to load policy [ 278.551765][T17520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=17520 comm=syz.4.4589 [ 278.763939][T17536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4596'. [ 278.907096][T17547] siw: device registration error -23 [ 279.067782][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4602'. [ 279.382941][T17561] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4605'. [ 279.744473][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 279.744532][ T29] audit: type=1326 audit(1748857779.727:18719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.803758][ T29] audit: type=1326 audit(1748857779.757:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.827656][ T29] audit: type=1326 audit(1748857779.757:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.851638][ T29] audit: type=1326 audit(1748857779.757:18722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.875380][ T29] audit: type=1326 audit(1748857779.757:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.899147][ T29] audit: type=1326 audit(1748857779.757:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.922892][ T29] audit: type=1326 audit(1748857779.757:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.946683][ T29] audit: type=1326 audit(1748857779.757:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.970288][ T29] audit: type=1326 audit(1748857779.757:18727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 279.993897][ T29] audit: type=1326 audit(1748857779.767:18728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17563 comm="syz.4.4606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fadb590e969 code=0x7ffc0000 [ 280.083445][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4610'. [ 280.102821][T17580] random: crng reseeded on system resumption [ 280.273418][T17593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4616'. [ 280.310858][T17593] FAULT_INJECTION: forcing a failure. [ 280.310858][T17593] name failslab, interval 1, probability 0, space 0, times 0 [ 280.323734][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.2.4616 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 280.323769][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.323785][T17593] Call Trace: [ 280.323800][T17593] [ 280.323810][T17593] __dump_stack+0x1d/0x30 [ 280.323903][T17593] dump_stack_lvl+0xe8/0x140 [ 280.323924][T17593] dump_stack+0x15/0x1b [ 280.323940][T17593] should_fail_ex+0x265/0x280 [ 280.323963][T17593] should_failslab+0x8c/0xb0 [ 280.324026][T17593] kmem_cache_alloc_noprof+0x50/0x310 [ 280.324057][T17593] ? skb_clone+0x151/0x1f0 [ 280.324189][T17593] skb_clone+0x151/0x1f0 [ 280.324230][T17593] __netlink_deliver_tap+0x2c9/0x500 [ 280.324276][T17593] netlink_sendskb+0x126/0x150 [ 280.324303][T17593] netlink_unicast+0x28a/0x670 [ 280.324377][T17593] netlink_ack+0x4c8/0x500 [ 280.324408][T17593] netlink_rcv_skb+0x192/0x220 [ 280.324436][T17593] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 280.324542][T17593] nfnetlink_rcv+0x16b/0x1690 [ 280.324565][T17593] ? __kfree_skb+0x109/0x150 [ 280.324613][T17593] ? nlmon_xmit+0x4f/0x60 [ 280.324688][T17593] ? consume_skb+0x49/0x150 [ 280.324745][T17593] ? nlmon_xmit+0x4f/0x60 [ 280.324778][T17593] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 280.324895][T17593] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 280.324959][T17593] ? __dev_queue_xmit+0x182/0x1fb0 [ 280.325021][T17593] ? __account_obj_stock+0x211/0x350 [ 280.325054][T17593] ? ref_tracker_free+0x37d/0x3e0 [ 280.325080][T17593] ? __netlink_deliver_tap+0x4dc/0x500 [ 280.325170][T17593] netlink_unicast+0x59e/0x670 [ 280.325208][T17593] netlink_sendmsg+0x58b/0x6b0 [ 280.325251][T17593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.325324][T17593] __sock_sendmsg+0x145/0x180 [ 280.325361][T17593] ____sys_sendmsg+0x31e/0x4e0 [ 280.325405][T17593] ___sys_sendmsg+0x17b/0x1d0 [ 280.325468][T17593] __x64_sys_sendmsg+0xd4/0x160 [ 280.325525][T17593] x64_sys_call+0x2999/0x2fb0 [ 280.325601][T17593] do_syscall_64+0xd2/0x200 [ 280.325631][T17593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.325665][T17593] ? clear_bhb_loop+0x40/0x90 [ 280.325772][T17593] ? clear_bhb_loop+0x40/0x90 [ 280.325808][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.325830][T17593] RIP: 0033:0x7f3a9142e969 [ 280.325845][T17593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.325863][T17593] RSP: 002b:00007f3a8fa97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.325884][T17593] RAX: ffffffffffffffda RBX: 00007f3a91655fa0 RCX: 00007f3a9142e969 [ 280.325900][T17593] RDX: 0000000000004094 RSI: 0000200000000180 RDI: 0000000000000003 [ 280.325976][T17593] RBP: 00007f3a8fa97090 R08: 0000000000000000 R09: 0000000000000000 [ 280.325992][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.326007][T17593] R13: 0000000000000000 R14: 00007f3a91655fa0 R15: 00007fffa3c64cb8 [ 280.326031][T17593] [ 280.698042][T17608] loop0: detected capacity change from 0 to 512 [ 280.707597][T17612] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4626'. [ 280.709563][T17608] EXT4-fs: Ignoring removed mblk_io_submit option [ 280.724068][T17608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 280.736575][T17608] EXT4-fs (loop0): 1 truncate cleaned up [ 280.742936][T17608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.933330][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4630'. [ 280.996838][T12817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.573448][T17644] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 281.594047][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4639'. [ 281.748202][ T3381] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 281.757191][ T3381] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.260724][T17720] SELinux: policydb version 808464439 does not match my version range 15-34 [ 282.282321][T17720] SELinux: failed to load policy [ 282.620847][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4667'. [ 282.629878][T17781] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4667'. [ 283.174433][T17811] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 283.350132][ T3745] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 283.353921][ T3745] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.454854][T17962] random: crng reseeded on system resumption [ 284.547431][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 284.813915][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 284.813934][ T29] audit: type=1326 audit(1748857784.797:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.860643][ T29] audit: type=1326 audit(1748857784.827:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.884415][ T29] audit: type=1326 audit(1748857784.827:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.908073][ T29] audit: type=1326 audit(1748857784.827:18908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.931738][ T29] audit: type=1326 audit(1748857784.827:18909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.955411][ T29] audit: type=1326 audit(1748857784.827:18910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 284.979299][ T29] audit: type=1326 audit(1748857784.827:18911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 285.002974][ T29] audit: type=1326 audit(1748857784.827:18912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 285.026650][ T29] audit: type=1326 audit(1748857784.827:18913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 285.050490][ T29] audit: type=1326 audit(1748857784.827:18914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.5.4703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19da32e969 code=0x7ffc0000 [ 285.144849][T17987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17987 comm=syz.5.4705 [ 285.358165][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4710'. [ 285.452836][T18005] siw: device registration error -23 [ 285.548776][T18007] Driver unsupported XDP return value 0 on prog (id 3108) dev N/A, expect packet loss! [ 285.599347][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.2.4718 [ 285.832147][T18038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4728'. [ 285.876423][T18042] SELinux: policydb version 808464439 does not match my version range 15-34 [ 285.885617][T18042] SELinux: failed to load policy [ 285.900709][T18040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'. [ 286.314684][T18055] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 286.479760][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4740'. [ 286.526977][T18073] FAULT_INJECTION: forcing a failure. [ 286.526977][T18073] name failslab, interval 1, probability 0, space 0, times 0 [ 286.539832][T18073] CPU: 0 UID: 0 PID: 18073 Comm: syz.0.4741 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 286.539866][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.539881][T18073] Call Trace: [ 286.539888][T18073] [ 286.539897][T18073] __dump_stack+0x1d/0x30 [ 286.539985][T18073] dump_stack_lvl+0xe8/0x140 [ 286.540011][T18073] dump_stack+0x15/0x1b [ 286.540031][T18073] should_fail_ex+0x265/0x280 [ 286.540056][T18073] should_failslab+0x8c/0xb0 [ 286.540131][T18073] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 286.540163][T18073] ? sidtab_sid2str_get+0xa0/0x130 [ 286.540227][T18073] kmemdup_noprof+0x2b/0x70 [ 286.540262][T18073] sidtab_sid2str_get+0xa0/0x130 [ 286.540301][T18073] security_sid_to_context_core+0x1eb/0x2e0 [ 286.540340][T18073] security_sid_to_context+0x27/0x40 [ 286.540367][T18073] selinux_lsmprop_to_secctx+0x67/0xf0 [ 286.540403][T18073] security_lsmprop_to_secctx+0x43/0x80 [ 286.540450][T18073] audit_log_task_context+0x77/0x190 [ 286.540515][T18073] audit_log_task+0xf4/0x250 [ 286.540657][T18073] audit_seccomp+0x61/0x100 [ 286.540694][T18073] ? __seccomp_filter+0x68c/0x10d0 [ 286.540727][T18073] __seccomp_filter+0x69d/0x10d0 [ 286.540785][T18073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 286.540873][T18073] ? vfs_write+0x75e/0x8e0 [ 286.540894][T18073] ? __rcu_read_unlock+0x4f/0x70 [ 286.540998][T18073] ? __fget_files+0x184/0x1c0 [ 286.541108][T18073] __secure_computing+0x82/0x150 [ 286.541139][T18073] syscall_trace_enter+0xcf/0x1e0 [ 286.541173][T18073] do_syscall_64+0xac/0x200 [ 286.541233][T18073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.541285][T18073] ? clear_bhb_loop+0x40/0x90 [ 286.541362][T18073] ? clear_bhb_loop+0x40/0x90 [ 286.541392][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.541421][T18073] RIP: 0033:0x7f7bae88e969 [ 286.541441][T18073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.541512][T18073] RSP: 002b:00007f7bacef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000062 [ 286.541613][T18073] RAX: ffffffffffffffda RBX: 00007f7baeab5fa0 RCX: 00007f7bae88e969 [ 286.541705][T18073] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffffff [ 286.541721][T18073] RBP: 00007f7bacef7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.541737][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.541754][T18073] R13: 0000000000000000 R14: 00007f7baeab5fa0 R15: 00007ffe7843d928 [ 286.541779][T18073] [ 286.825061][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4743'. [ 286.927440][T18087] random: crng reseeded on system resumption [ 287.037336][T18095] SELinux: policydb version 828782346 does not match my version range 15-34 [ 287.047953][T18095] SELinux: failed to load policy [ 287.186470][T18114] SELinux: syz.5.4759 (18114) set checkreqprot to 1. This is no longer supported. [ 287.219093][T18103] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 287.315557][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4766'. [ 287.324596][T18129] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4766'. [ 287.796910][T18137] siw: device registration error -23 [ 287.797213][T18137] __nla_validate_parse: 2 callbacks suppressed [ 287.797229][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4769'. [ 288.019349][T18155] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.058243][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4778'. [ 288.069566][T18155] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.101915][T18158] wireguard0: entered promiscuous mode [ 288.107456][T18158] wireguard0: entered allmulticast mode [ 288.125860][T18161] FAULT_INJECTION: forcing a failure. [ 288.125860][T18161] name failslab, interval 1, probability 0, space 0, times 0 [ 288.125892][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.4.4779 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 288.125919][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.125931][T18161] Call Trace: [ 288.125937][T18161] [ 288.125944][T18161] __dump_stack+0x1d/0x30 [ 288.125964][T18161] dump_stack_lvl+0xe8/0x140 [ 288.126006][T18161] dump_stack+0x15/0x1b [ 288.126080][T18161] should_fail_ex+0x265/0x280 [ 288.126218][T18161] should_failslab+0x8c/0xb0 [ 288.126258][T18161] kmem_cache_alloc_node_noprof+0x57/0x320 [ 288.126359][T18161] ? __alloc_skb+0x101/0x320 [ 288.126392][T18161] __alloc_skb+0x101/0x320 [ 288.126433][T18161] netlink_alloc_large_skb+0xba/0xf0 [ 288.126474][T18161] netlink_sendmsg+0x3cf/0x6b0 [ 288.126587][T18161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.126711][T18161] __sock_sendmsg+0x145/0x180 [ 288.126733][T18161] ____sys_sendmsg+0x31e/0x4e0 [ 288.126848][T18161] ___sys_sendmsg+0x17b/0x1d0 [ 288.126933][T18161] __x64_sys_sendmsg+0xd4/0x160 [ 288.126969][T18161] x64_sys_call+0x2999/0x2fb0 [ 288.126990][T18161] do_syscall_64+0xd2/0x200 [ 288.127082][T18161] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.127109][T18161] ? clear_bhb_loop+0x40/0x90 [ 288.127130][T18161] ? clear_bhb_loop+0x40/0x90 [ 288.127155][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.127202][T18161] RIP: 0033:0x7fadb590e969 [ 288.127217][T18161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.127288][T18161] RSP: 002b:00007fadb3f77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.127307][T18161] RAX: ffffffffffffffda RBX: 00007fadb5b35fa0 RCX: 00007fadb590e969 [ 288.127319][T18161] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 288.127333][T18161] RBP: 00007fadb3f77090 R08: 0000000000000000 R09: 0000000000000000 [ 288.127348][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.127363][T18161] R13: 0000000000000000 R14: 00007fadb5b35fa0 R15: 00007ffe8271e1b8 [ 288.127397][T18161] [ 288.251981][T18148] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 288.387376][T18155] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.433836][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4784'. [ 288.445959][T18171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.469221][T18176] wireguard0: entered promiscuous mode [ 288.474769][T18176] wireguard0: entered allmulticast mode [ 288.486628][T18155] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.516438][T18171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.538284][T18155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.550905][T18155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.563865][T18155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.576377][T18155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.600455][T18171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.667803][T18187] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4788'. [ 288.672670][T18189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4789'. [ 288.688419][T18171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.768136][T18171] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.782594][T18171] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.794846][T18171] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.810223][T18171] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.908268][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4794'. [ 288.917510][T18200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4794'. [ 289.176666][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4797'. [ 289.325356][T18210] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4798'. [ 289.502961][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4801'. [ 289.591737][T18203] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 289.821023][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 289.821043][ T29] audit: type=1326 audit(1748857789.797:19174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.854321][ T29] audit: type=1326 audit(1748857789.837:19175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.878377][ T29] audit: type=1326 audit(1748857789.837:19176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.902271][ T29] audit: type=1326 audit(1748857789.837:19177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.926081][ T29] audit: type=1326 audit(1748857789.837:19178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.949868][ T29] audit: type=1326 audit(1748857789.837:19179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.973563][ T29] audit: type=1326 audit(1748857789.837:19180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 289.997208][ T29] audit: type=1326 audit(1748857789.837:19181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 290.021076][ T29] audit: type=1326 audit(1748857789.837:19182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 290.044773][ T29] audit: type=1326 audit(1748857789.837:19183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18242 comm="syz.0.4811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bae88e969 code=0x7ffc0000 [ 290.264395][T18254] siw: device registration error -23 [ 290.362567][T18256] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 290.380859][T18268] random: crng reseeded on system resumption [ 290.432607][ T36] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 290.451928][ T36] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 290.479356][T18277] FAULT_INJECTION: forcing a failure. [ 290.479356][T18277] name failslab, interval 1, probability 0, space 0, times 0 [ 290.492184][T18277] CPU: 1 UID: 0 PID: 18277 Comm: syz.0.4825 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 290.492222][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.492318][T18277] Call Trace: [ 290.492325][T18277] [ 290.492334][T18277] __dump_stack+0x1d/0x30 [ 290.492361][T18277] dump_stack_lvl+0xe8/0x140 [ 290.492385][T18277] dump_stack+0x15/0x1b [ 290.492410][T18277] should_fail_ex+0x265/0x280 [ 290.492435][T18277] ? dev_ethtool+0x96/0x1650 [ 290.492458][T18277] should_failslab+0x8c/0xb0 [ 290.492484][T18277] __kmalloc_cache_noprof+0x4c/0x320 [ 290.492579][T18277] dev_ethtool+0x96/0x1650 [ 290.492601][T18277] ? full_name_hash+0x92/0xe0 [ 290.492636][T18277] ? strcmp+0x22/0x50 [ 290.492670][T18277] dev_ioctl+0x2e0/0x960 [ 290.492811][T18277] sock_do_ioctl+0x197/0x220 [ 290.492912][T18277] sock_ioctl+0x41b/0x610 [ 290.492932][T18277] ? __pfx_sock_ioctl+0x10/0x10 [ 290.492972][T18277] __se_sys_ioctl+0xcb/0x140 [ 290.492998][T18277] __x64_sys_ioctl+0x43/0x50 [ 290.493080][T18277] x64_sys_call+0x19a8/0x2fb0 [ 290.493104][T18277] do_syscall_64+0xd2/0x200 [ 290.493158][T18277] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 290.493202][T18277] ? clear_bhb_loop+0x40/0x90 [ 290.493229][T18277] ? clear_bhb_loop+0x40/0x90 [ 290.493275][T18277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.493302][T18277] RIP: 0033:0x7f7bae88e969 [ 290.493322][T18277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.493357][T18277] RSP: 002b:00007f7bacef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.493380][T18277] RAX: ffffffffffffffda RBX: 00007f7baeab5fa0 RCX: 00007f7bae88e969 [ 290.493442][T18277] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000005 [ 290.493460][T18277] RBP: 00007f7bacef7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.493476][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.493491][T18277] R13: 0000000000000000 R14: 00007f7baeab5fa0 R15: 00007ffe7843d928 [ 290.493514][T18277] [ 290.503785][T18274] block device autoloading is deprecated and will be removed. [ 290.858838][T18324] loop4: detected capacity change from 0 to 1024 [ 290.885900][T18324] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.938060][T18324] SELinux: policydb version 808464439 does not match my version range 15-34 [ 290.950512][T18324] SELinux: failed to load policy [ 290.992928][T12375] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 291.019790][T18330] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 291.028861][T18346] loop4: detected capacity change from 0 to 128 [ 291.128515][T18346] syz.4.4837: attempt to access beyond end of device [ 291.128515][T18346] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 291.447836][T18413] SELinux: policydb version 808464439 does not match my version range 15-34 [ 291.458707][T18413] SELinux: failed to load policy [ 291.598039][T18415] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 291.634142][T18427] netlink: 'syz.0.4853': attribute type 6 has an invalid length. [ 291.658083][ T3381] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 291.677508][ T3381] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.009372][T18476] loop4: detected capacity change from 0 to 1024 [ 292.032531][T18476] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.063991][T18476] SELinux: policydb version 808464439 does not match my version range 15-34 [ 292.073420][T18476] SELinux: failed to load policy [ 292.097618][T12375] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 292.450264][T18502] loop4: detected capacity change from 0 to 512 [ 292.466823][T18502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 292.492016][T18502] EXT4-fs (loop4): 1 truncate cleaned up [ 292.498256][T18502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.512134][T18502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.803322][T18549] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 292.845765][T18552] loop4: detected capacity change from 0 to 1024 [ 292.861921][T18552] EXT4-fs: Ignoring removed oldalloc option [ 292.881175][T18552] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 292.913199][T18552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.955551][T18562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=18562 comm=syz.2.4873 [ 293.076364][T18566] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.106435][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.115341][ T9] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.157726][T18566] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.248831][T18565] ================================================================== [ 293.256963][T18565] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_release [ 293.265941][T18565] [ 293.268270][T18565] write to 0xffff888119298e00 of 8 bytes by task 18552 on cpu 1: [ 293.275998][T18565] page_pool_release+0x28a/0x810 [ 293.280957][T18565] page_pool_destroy+0x202/0x370 [ 293.285920][T18565] bpf_test_run_xdp_live+0xf79/0xfe0 [ 293.291229][T18565] bpf_prog_test_run_xdp+0x4f5/0x910 [ 293.296534][T18565] bpf_prog_test_run+0x22a/0x390 [ 293.301485][T18565] __sys_bpf+0x3dc/0x790 [ 293.305746][T18565] __x64_sys_bpf+0x41/0x50 [ 293.310205][T18565] x64_sys_call+0x2478/0x2fb0 [ 293.314906][T18565] do_syscall_64+0xd2/0x200 [ 293.319526][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.325431][T18565] [ 293.327760][T18565] read to 0xffff888119298e00 of 8 bytes by task 18565 on cpu 0: [ 293.335420][T18565] page_pool_put_unrefed_netmem+0x3e6/0x590 [ 293.341420][T18565] napi_pp_put_page+0xe9/0x200 [ 293.346214][T18565] skb_free_head+0x12c/0x150 [ 293.350827][T18565] skb_release_data+0x33b/0x370 [ 293.355715][T18565] __kfree_skb+0x44/0x150 [ 293.360062][T18565] sk_skb_reason_drop+0xbd/0x270 [ 293.365020][T18565] udpv6_recvmsg+0x1d1/0xc30 [ 293.369647][T18565] inet6_recvmsg+0x143/0x290 [ 293.374264][T18565] sock_recvmsg_nosec+0x5f/0x130 [ 293.379213][T18565] ____sys_recvmsg+0x26f/0x280 [ 293.384019][T18565] ___sys_recvmsg+0x11f/0x370 [ 293.388780][T18565] do_recvmmsg+0x1ef/0x540 [ 293.393221][T18565] __x64_sys_recvmmsg+0xe5/0x170 [ 293.398211][T18565] x64_sys_call+0x1c6a/0x2fb0 [ 293.402901][T18565] do_syscall_64+0xd2/0x200 [ 293.407432][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.413334][T18565] [ 293.415658][T18565] value changed: 0xffffea0004427ec0 -> 0x0000000000000000 [ 293.422769][T18565] [ 293.425100][T18565] Reported by Kernel Concurrency Sanitizer on: [ 293.431275][T18565] CPU: 0 UID: 0 PID: 18565 Comm: syz.4.4869 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(voluntary) [ 293.443440][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.453505][T18565] ================================================================== [ 293.475506][T18566] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.533343][T18566] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.592663][T18566] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.605053][T18566] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.617312][T18566] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.629686][T18566] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.651856][T12375] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.