last executing test programs: 2.342298769s ago: executing program 4 (id=6580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc", @ANYBLOB], 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 2.264151729s ago: executing program 2 (id=6581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r0], 0x7c}}, 0x20044080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000", @ANYRES32, @ANYBLOB="00000000e4ffffff0000", @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x5608, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) listen(0xffffffffffffffff, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.872576671s ago: executing program 2 (id=6587): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000015001001800128008000100677470000c00028008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="88b5d5dba1ae5d57497b08000000b0a81b663dc56899452ed19db5dc91c3d14be2959ac76db7d368b41a68b281eb2aa496b5afd1d535a12c893e6c475e5baff522c6070000006a17114675b4b7eae3137fc35e91258f5ce08da5efe5a218ad0bf788f5f2d4d976bf8a3af10189b749574da1246e4bb634607204feb1736a0e86a5815fbee0ddf3"], 0x40}}, 0x2400c080) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="13a18c04cbece8"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="050000000000f6004d0f00000000001400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f00000005c0)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000001c0)='{-^@\\\x83+C\x17\xd0]\x05\xc1\xbb]\x81\xa2!n\x94\xa0\xfb\x9c\x1c\xfa\xeb\xae\x93\xe4\xf0\x11\xdf\xed.\a\xf2W{\x061\xb7W\xc5b\xac\xd9c^\x91\xc3\'\x8e)\f$\x1f\x03\xb1\x91K\xbeK\xb4\x80\nwO\xb0\xd5\x90TTU\xb0E\xfa\x85]\x85\xe8\xb5\t\x9b\xcf\xf4\xb9\x1c>\xc8F?\x0f\xc6\x83IC\x02b\xa2\x11\xd3\xd8\xf0\xb3\x85\v\x02I*#\xc6@\xca\xdbM\xea<\xf3\xa3_\xff*\xaa~b{+\xc4I\xd1$)\xcf^\xaf\x92\xe1\xb4\x93\xfb\x05\x00\x00\x00\x00\x00\x00\x00\x9f\v\x81\xda\xe3`\xe7\x15\x05\b\x03-\xeckHP\xee\xcd\xd0\xe3\x0e\x05)\x97z\xdd0h\x8e\xe2\xb8\xeb\x8dOKK\x1b\xf7\xac\xfe\xc9\xf7\xcb\xb5\xac\x90\x9cZ\x18\x80I\t\xa2\xee\x1f\xfa\xa1\xc9\x84\x93\xcc\x85', 0xffffffffffffffff) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="9d00000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000016000000000000850000008200ffe19500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/oops_count', 0x40, 0x105) sendfile(r9, r9, 0x0, 0x2f) getpeername$unix(r9, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) 1.835157171s ago: executing program 4 (id=6588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000140)='./bus\x00', 0x147142, 0x89) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0), 0x0, 0x0, 0x2) 1.804463202s ago: executing program 4 (id=6590): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x50, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value}, 0x20) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x1) 1.759188422s ago: executing program 4 (id=6591): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f00000005c0)}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sigaltstack(0x0, &(0x7f00000006c0)={&(0x7f0000000640)=""/56, 0x0, 0x38}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) 1.229222204s ago: executing program 1 (id=6599): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cd9ae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2f4, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480), &(0x7f0000000200)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0x0, 0x0, @private1, @local}}}}, 0x0) r4 = memfd_secret(0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x1000, 0x6, 0x7f, 0xfffff000}, {0x2, 0xa2, 0x81}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbb00800000aaaaaaaa0086dd60828bf700383a00fc000000000000000000000000000000ff020000000000000000000000000001020090780000000060fd906300003a00fc01000000000000000000000000000000000000000000000000ffffac1e00011e520b4c951ee12e3adb8457bba601b2f9a79aaadac60afa3b94171623b6bccc12167a8b9c6aa6ad2cd388784e9e4dd8a398f61690cf2fc7f77eb2a6919ca675660e60f542c6ed7b966d55eff7fb8404b762523611aa8f3687f8b5c405d498ec9697de78675c61e1b06ffea8039030e110f1451f69f0dc7850cf7b0cb4e660f969f6bb3e80c1ecfad642657320d1fb50c01ffd942671be"], 0x0) 1.151271075s ago: executing program 3 (id=6600): mkdir(&(0x7f0000000400)='./file0\x00', 0xfa) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000700)) 1.100663005s ago: executing program 2 (id=6601): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x20000811) r1 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getegid() 1.063975235s ago: executing program 2 (id=6602): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x800, 0xc032802) unshare(0x68060200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.055872745s ago: executing program 3 (id=6603): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x800, 0xc032802) unshare(0x68060200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 867.575956ms ago: executing program 4 (id=6604): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r4, @ANYBLOB="08002a0000000000050029000100000020002b8004000380080001000104000005000200000000ef04b444a46f00000008002c"], 0x58}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000480)=0x8) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e2a30456b880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000ffffffff000000006e666c6f67000000000000000000000000000000000000000000000000000000500000002b25121b6eb244d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400"/510]}, 0x276) fchdir(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000200700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000000000000fcffffff0010000080840500", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000005fbaf6703e82438b21c73433e6e40936b21e057be0ee10003604133e2b327cd65259345dd5c1140a2cb4b4e27396b1daaab0c34a9d4363c91f01000100a19f6efdee8c9dfb532826026e6227c28c5ab4ae9d2f0680b06284b80c2f111fc5e084288dbb8d6d5535460eec9a37d99231777e5616b7b18388afcd3c9f872b9b691806721a65859abcbdebbf3dde143e60d0a0dfc90000000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cca", 0xc, 0x3c, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x9, 0x0, @void}}}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x2000006, 0x28011, r8, 0x0) 851.149346ms ago: executing program 2 (id=6605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000002c0)=@req={0x5b1d, 0xfffffff8, 0x6, 0x9}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x4, 0x11, 0x4}, @mpls={[], @generic="1dafe0deb54bc12c4e52d9fcca510c6aa2d815b856b4943b19b06885b98a8d437ec0e7465cf73c9db608ab89442083defeaf9ae92d2e20e8a895245cde59e090aa"}}, 0x4f) dup2(0xffffffffffffffff, r0) r6 = gettid() tkill(r6, 0x7) sendmsg$netlink(r3, &(0x7f0000000e80)={&(0x7f0000000340)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)=[{&(0x7f00000024c0)={0x139c, 0x27, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@generic="916d33b676bb1184368100000000000000973968c86cbba26b32c9274d1c75db784eed1b0500000000000000ce7d64ef4bc227633cdcf7c661401f5af8fe85c4cd64dc33f39f871dba6748ceebd63bacb08fb7917eb1933ac06b6a2de22cdec51d06683d545f90934f5aff7b576798dd7f984736ba", @generic="77a5638466ec89f78559660345a1307b5ce88649aab6a5fc7b714644a2458d731acb2b596064c02719e3d5d4093c50f1fd6e50fff945ef7c1e61266ef49e0a89794a64f30885ee7f419df09af20007f9a53758f3abaf1bca7ee504f9d1a3d1841d41de7de755b815113d4b9be6e2c0c41b2773696b0b4c86a68aecb2ba0d22545cef", @generic="ffd5af60e61bce4cef4508dfc7c4bc4fd10ee76bbf8ac6f25365bf185813d066879101c611cee1aa58e9939e59afbb92931c732f9bf76e54d726ae44ace7398a873365de29120b78183cb83f017ac00cc9c56e9176589ec278eccadf5ca384f6c8720c56182355ac01b12f920d2d3ae7173fd0661fc3b20710fd17fd11e0c04d9e5253a50228299f3d0bc9281d17e8e1e20f655a39688765efd025e00d446599e5c4c73c7f7e24a4b78ba8d174d8402e4a142261878372c2c7a2e0378532a3e39e84f56e6997df1e939e398d253a03a57649a41c3a7a8047283614eecd90468e4fb01bb01313a687725f7a41ab2c8e38c1428db844dcbe3da6", @nested={0x131, 0x66, 0x0, 0x1, [@typed={0xc, 0xac, 0x0, 0x0, @u64=0x9}, @generic="b5d23a3525e8f9b3af7e628ba09c0c0e37df69715aed5c4d3142a1000910262d138d2e1aa4a27d5f3b3fe976c81804274900665ff379f5237a1a2e457c1145781699a1b0da2a3db5636c0c59e3995d5f849d4f6386c24e822bda1f908939a8ee41cea80c1a48126a66be012beae6894de9eaff232b1d4f73ed580f3abac306d9075c", @typed={0xf, 0x126, 0x0, 0x0, @str='syzkaller1\x00'}, @generic="8c28f82f3bd4927457f410ea8ed2a0b7869692dea86c9f73b2f5d6dd723e1f0a781404caeb1a59435a60cd54b39d1516dff1aaa1ef2e6dcffe833dbf2177a493fd74163bfd344c2b8cf658b6eb14e579466c048df3f8e85b718e18e6fa8d98fffbc2887953f6d5e588dca1339364d0fb4f0090e0aa66d9a2a06d1ca8d3412ecb2051a65b2d7d551e811107", @nested={0x4, 0x122}]}, @typed={0x8, 0x2e, 0x0, 0x0, @pid}, @typed={0x5d, 0x3a, 0x0, 0x0, @binary="e82577f0b5229f1a61539162b091504a76d0ec26929fb8a1c125f9511d9f198280bb3ec126d170c937ad77df43a098ed19e47f745d84dddac14d19d9acd5375322d52fd413b7ebe730aceff7aee1e88d7b49bceb400233c5b3"}, @typed={0x20, 0x138, 0x0, 0x0, @binary="59d452693d6efe4683896c92be663e34f6d98b84fe94c709660aa2af"}, @nested={0x20, 0x33, 0x0, 0x1, [@typed={0x14, 0x62, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @typed={0x8, 0x91, 0x0, 0x0, @uid}]}, @generic="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"]}, 0x139c}, {&(0x7f00000003c0)={0xc0, 0x36, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@generic="454e3581900d3d14438572433c0564402ccab062a6011a233557a14f97a354f63e9723ae839b5c8b49be9a60a76e7b8ae5", @generic="445fcde53de701e69c0fbf5f0e7287ec76863bf1d62320f49db0e19d89b806e4d610ea0d50cb5f19630049894612c539295909d852dba94b79753c5b074397ae125d4c2788a8349fc5e067acfd94cc2313b3ac5879bf6a250af40de2eb2a5701afc3452f28384c93943c6172d2cc866405e61083a391b9f08c9bc4459bb6"]}, 0xc0}, {&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0ae57927b06d4fcef97bb99bb2bdfc8699040076800000008201b18004002980f324edfe290479a1a48de60d592a83e47382ed571698aa969de88181d5603e0c43000ddc51b7238e8f5db7a611bd641dc0139bba0b3c3730773ded112fb7fe107b1e83f1fdae27f55734198b94b4734fc8", @ANYRES32=0x0, @ANYBLOB="8142fd3e83b994bdd69b7779e8ad19f49d5cf30f09b9e42f71d7434808cbf9d86ede818077230cb9dc416eab29b91ec3cd611a0846726f9633a1056d6fb2b1738e8d21d8d13416fdf52c4977a46f9f20c1fcdf6ad0", @ANYBLOB="83b53438ccdb0f804fc391b6c01236cc3f469284526429513c4d8221dab8978bb969d3c5b1221a7c61c14e4f02c8caeb682750f83c5823edd5475f7ecdbf8c1507063d5bed949e4cfa148f0caf73cd7e64ef96b0c6509f397b8cbf22", @ANYBLOB="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"], 0x3f0}, {&(0x7f0000000b00)={0x10, 0x24, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x4, 0x0, 0x0, 0x20004800}, 0x40080d8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r7, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) 805.717957ms ago: executing program 3 (id=6606): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 773.343687ms ago: executing program 3 (id=6607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(&(0x7f0000000280), 0x18) 705.229427ms ago: executing program 1 (id=6608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) 698.231617ms ago: executing program 3 (id=6609): r0 = semget(0x1, 0x3, 0x400) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x6, 0x1000}], 0x1, &(0x7f0000000040)) r1 = syz_io_uring_setup(0x444f, &(0x7f0000000080)={0x0, 0x7717, 0x2000, 0x2, 0x35d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16, 0x10, 0xffffffffffffffff, 0x10000000) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16, 0x10, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x4000, @fd_index=0x7, 0x4, 0x0, 0x0, 0x4, 0x1, {0x2, r4}}) ftruncate(r1, 0x3) (async) ftruncate(r1, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18, r1}, 0x18) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r5, 0x4) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000280)={0x2, "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"}) shmget(0x0, 0x3000, 0x11, &(0x7f0000ffb000/0x3000)=nil) (async) r6 = shmget(0x0, 0x3000, 0x11, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r6, 0xc) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x800, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@remote}, &(0x7f00000006c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@remote, 0x0}, &(0x7f00000006c0)=0x14) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x8, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@lli}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000600)=""/119, 0x40f00, 0x2, '\x00', r7, @fallback=0x22, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x3, 0xf, 0xffffc8cc, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x9, &(0x7f00000007c0)=[r5, r5], &(0x7f0000000800)=[{0x4, 0x1, 0x6}, {0x0, 0x3, 0x3, 0x7}, {0x1, 0x2, 0xe, 0x5}, {0x0, 0x1, 0xc, 0x6}, {0x3, 0x3, 0xc, 0x5}, {0x5, 0x1, 0x1, 0x9}, {0x3, 0x1, 0x7, 0xa}, {0x1, 0x4, 0x2, 0xb}, {0x2, 0x3, 0x6, 0xb}], 0x10, 0x918, @void, @value}, 0x94) lgetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@random={'os2.', 'syzkaller\x00'}, &(0x7f0000000a00)=""/171, 0xab) (async) lgetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@random={'os2.', 'syzkaller\x00'}, &(0x7f0000000a00)=""/171, 0xab) r10 = semget$private(0x0, 0x3, 0x12) semctl$IPC_STAT(r10, 0x0, 0x2, &(0x7f0000000ac0)=""/101) (async) semctl$IPC_STAT(r10, 0x0, 0x2, &(0x7f0000000ac0)=""/101) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@mpls_getnetconf={0x2c, 0x52, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8, 0x1, r12}, @NETCONFA_IFINDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x51) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r13, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x140a, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r13, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, 0x140a, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x40) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000dc0)={0x7, 0x0, &(0x7f0000000d80)=[r8]}, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) semctl$IPC_INFO(r10, 0x4, 0x3, &(0x7f0000000e00)=""/38) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000ec0), 0x4001) (async) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000ec0), 0x4001) 579.156607ms ago: executing program 1 (id=6610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, r8, 0x25, 0x16, @val=@tcx={@void, @value=r0}}, 0x1c) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x113e, 0x0, 0x0, 0x10000}) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r2, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 556.325208ms ago: executing program 4 (id=6611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00 \x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x256, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0x85, 0x10000000, 0x101, 0x80000001}, 0x2, 0xcf}, [{0x100, 0x401, 0x3, 0x3ff, 0x0, 0x9}, {0x0, 0x5, 0x7, 0x3, 0xffff3bf3, 0x6}, {0xfffffff9, 0x0, 0xc, 0x95, 0x1, 0x53}, {0x7fff, 0x4, 0x2, 0x43d6, 0x5, 0x4}, {0xfffffffb, 0xaf4, 0xff, 0x0, 0x4, 0xfffffff9}, {0x7, 0x8, 0x5, 0x7, 0xfffeffff, 0xcb66}, {0x5, 0x7, 0x6, 0x2, 0xb, 0x17e}, {0x6, 0xe, 0x0, 0x5, 0x1, 0x2}, {0x2, 0x4, 0x6, 0xff, 0xe7}, {0x8, 0x3, 0x630, 0x8000, 0x4, 0xa6a5}, {0x5, 0x9, 0x1ff, 0x10000, 0xfffffffd, 0x94000000}, {0x7, 0x3, 0x2, 0xf28, 0x7, 0x8}, {0x7, 0xe6, 0x2, 0x0, 0x8002, 0x4}, {0x6, 0x2, 0xf, 0x6, 0x0, 0xe51f}, {0xffff8000, 0x10, 0x5, 0x0, 0x6, 0x3}, {0x9, 0xc, 0x10, 0x0, 0x6, 0x1}, {0x0, 0x140000, 0x4, 0x200, 0x1, 0x4}, {0x9, 0x10001, 0x0, 0x4, 0x2}, {0x80000000, 0x2, 0x3, 0x1, 0x772, 0x5}, {0x0, 0x9, 0x1, 0x80, 0x0, 0x8}, {0x5, 0x72b, 0x4, 0x3e1, 0x1000, 0x68f087b1}, {0x7, 0xc, 0xa0, 0x3, 0x4, 0x2}, {0x7, 0xb2, 0xe, 0xd91, 0x7, 0x8}, {0x24, 0xfffffffc, 0x9, 0x100, 0x1000, 0x8}, {0x40, 0x3, 0x7e, 0xb, 0x401, 0x8001}, {0x7, 0x5, 0x9, 0xadb, 0xf, 0x3}, {0x0, 0xfffffffe, 0x7, 0x3, 0x4, 0x7}, {0x5, 0xf186, 0x1, 0x2, 0x7, 0x2}, {0x25ea92ec, 0x2, 0x5, 0x5, 0x10, 0x6}, {0x3, 0x2, 0x4, 0xde08, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x3, 0x96c4}, {0x10, 0x7f, 0x6fe4, 0x1, 0x8, 0xffff}, {0x9, 0x10001, 0x800, 0x0, 0x10001, 0x3}, {0x2, 0x80, 0x4, 0x8, 0x4, 0x10001}, {0x8, 0x8000, 0xffffff7f, 0x7fffffff, 0x400, 0xb88}, {0xff2, 0x2, 0x1, 0x80000000, 0x48f4, 0x5}, {0x9, 0x8, 0x5, 0x1, 0x8000, 0x6}, {0x200, 0x8001, 0x0, 0xfffeffff, 0x7fff, 0xf}, {0x11, 0xfffffff4, 0xa48, 0x20, 0xd, 0x4}, {0x0, 0x0, 0x4, 0x7, 0xa32, 0x7fffffff}, {0x5, 0x0, 0x5, 0x81, 0x36b31344, 0x7}, {0x34, 0xc196, 0x7, 0x9, 0x6, 0xfffffffe}, {0x2, 0x0, 0xfffffe01, 0xffff0000, 0xf, 0xadc1}, {0x7, 0x1, 0x5, 0xde59, 0x6, 0xaa7c}, {0x80000001, 0x9, 0x7, 0x3, 0x9, 0x9}, {0x200, 0x4, 0x7fff, 0xff800000, 0x6, 0x800}, {0x9, 0x8, 0xfc4, 0x3, 0x7fffffff, 0x32}, {0x2, 0x6, 0x4ce0, 0x10, 0x5, 0x3}, {0x7, 0x6, 0x1, 0x4, 0x6}, {0xffffffff, 0x3, 0xfffff800, 0x10, 0x7fffffff, 0xffffffff}, {0x7, 0x6, 0xfffffffa, 0x1, 0x80000001, 0x27b7}, {0xfffffff9, 0x8, 0x9, 0x8, 0x0, 0x2}, {0x5, 0x1ff, 0x7, 0xe, 0x8, 0x6}, {0x2, 0x2, 0xea, 0x1, 0x4, 0x8}, {0x2, 0x99, 0x1, 0x3, 0xc, 0xec}, {0x2, 0x7f, 0x4, 0x6, 0xec36, 0x9}, {0x8, 0x3, 0x24000000, 0x5, 0x4, 0xff}, {0x7ff, 0xcf1, 0x7f, 0xd3, 0x3ff}, {0xfffffffb, 0x8, 0x9, 0x2, 0xc, 0x5}, {0x9, 0x8, 0x8001, 0x9, 0x6, 0x6}, {0x1ff, 0x7, 0xac, 0x254, 0x7, 0x80000000}, {0x0, 0x7, 0x0, 0x1, 0x6, 0x5}, {0x7, 0x1, 0x400, 0x7}, {0x1b7, 0x4, 0x6, 0xe6, 0x401, 0x6}, {0x5, 0xfffffff7, 0x6, 0xca1, 0x5, 0xfffffffc}, {0x7, 0x5, 0x4, 0x9, 0x8, 0x10}, {0xb, 0x3, 0x5, 0x7, 0x0, 0x2}, {0x7, 0x10, 0x4, 0x4, 0x2, 0x3}, {0xf, 0x9, 0x3, 0xc, 0xa, 0x8}, {0xfff, 0x26, 0x1ff, 0x8, 0x9, 0x2}, {0x7, 0x0, 0xa013c2a, 0xb, 0x3, 0x80}, {0x2, 0x8, 0x81, 0xa4, 0xc8, 0x80e7}, {0x2, 0xfffffb5e, 0x80, 0x8001, 0xc}, {0xffffffff, 0x3, 0x9, 0x0, 0x3, 0x7be}, {0x8001, 0xfffffff9, 0x2, 0xfffffff5, 0x1, 0xffff}, {0x88, 0xb, 0x7, 0x6, 0x1, 0xbdda}, {0x4, 0x7, 0x4, 0x9, 0x8, 0x86}, {0x7f, 0xffffffad, 0x7, 0x7, 0x601, 0x2}, {0x69c6, 0x8, 0x2, 0x1ff, 0xd, 0x1ff}, {0xff, 0x2, 0x9, 0x81, 0x1ff, 0x1ff}, {0x8000, 0x4, 0xfa95, 0x4, 0x3}, {0x6, 0xe19, 0x47d1a8c0, 0x638e, 0xffc00000, 0x7f}, {0x800, 0x92ad, 0x6, 0x0, 0x1, 0x8}, {0x7, 0xfffeffff, 0x0, 0x1, 0x6553}, {0x606, 0x100, 0x7, 0x7fffffff, 0xc5d, 0x9}, {0x2, 0xff, 0x2, 0xfffffffd, 0x3, 0x7}, {0x9, 0x642, 0xf, 0x81, 0x2, 0x7fff}, {0x10001, 0x79, 0x0, 0x7, 0xecf, 0x10}, {0x1, 0x8, 0x7, 0x30b96ad4, 0x2, 0x55f}, {0x0, 0x3, 0x7, 0x3, 0x6, 0xfffffffc}, {0xb, 0x1, 0x0, 0x5, 0x2, 0x5}, {0x3a6, 0x4, 0x3, 0x1, 0x4, 0x40}, {0x6, 0x4, 0x401, 0x0, 0x4, 0x5}, {0x7, 0x9ff, 0x9, 0x85, 0xec, 0x5}, {0x2, 0x6, 0x0, 0x1000, 0x1, 0x1}, {0x7, 0x7, 0x101, 0x800, 0x8, 0x5150792f}, {0x38, 0x1, 0x29, 0x81, 0x364c, 0x7}, {0x0, 0x69, 0x8001, 0x2, 0x2800, 0x10}, {0x1, 0x4, 0x7f, 0x9}, {0x9314, 0x6dc, 0x80000000, 0x10000, 0x1, 0x6}, {0x3, 0x0, 0x1, 0x0, 0xe32, 0x1}, {0x275, 0x7ff, 0x714, 0xff, 0x800, 0x3f}, {0x6, 0x0, 0x0, 0x63, 0xd7, 0x7}, {0xffffff81, 0x2, 0x1ff, 0xd, 0x8001, 0x1}, {0x9, 0x6, 0x8, 0x6, 0x8, 0x200}, {0x2, 0x3, 0x3, 0x7, 0xfff, 0x8ec}, {0x8f, 0x400, 0x2, 0x1410, 0x2e4f2a60, 0x101}, {0x400, 0x5, 0x3, 0x59c, 0x3, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x101, 0x81}, {0x4, 0x5, 0x4, 0xff000000, 0x2, 0x9}, {0x0, 0x10000, 0x8, 0x400, 0x3}, {0xe, 0x7, 0x968, 0x9, 0xfffffff8, 0x8}, {0xfff, 0x100, 0xffffffff, 0x0, 0x3, 0x7fffffff}, {0x38000, 0xfffffffc, 0xa55, 0x4, 0x1, 0x3}, {0x8, 0x1, 0x4, 0xb, 0x7fff, 0x3}, {0x7, 0x6, 0x8, 0xb, 0x2, 0x5}, {0x7, 0x3, 0xfffffff4, 0xc8c2, 0x9, 0x9}, {0xfffffffe, 0x0, 0x400, 0x9, 0x8, 0x3}, {0x65da, 0x7, 0xc, 0x10, 0xaf5, 0x2}, {0x2, 0x101, 0x40000, 0x0, 0x1, 0x5ee}, {0x0, 0x80, 0x7d, 0x6, 0x5, 0x7}, {0x1, 0x6, 0x6, 0x1, 0x0, 0x7}, {0x0, 0xffffff80, 0x5, 0x10000}, {0x1000, 0x57a, 0x1, 0x150, 0x48, 0xfffffff7}, {0xff, 0x5, 0xfffff062, 0x4, 0x6, 0x839}, {0x3, 0x4, 0x4, 0x800, 0x3, 0x5}, {0x6, 0x20000, 0x1, 0x4, 0x7d37e82b, 0x1}, {0x5, 0x2, 0xdb9, 0x5, 0x7f, 0xf}], [{0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2701bacba0e67511, 0xb2e20321f287c22d}, {0x2, 0x89d99ddbf36fb21a}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffff152c00907800000000"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f0000000600)={&(0x7f0000000540)=""/61, 0x1, 0x3d}, &(0x7f00000006c0)={&(0x7f0000000640)=""/56, 0x0, 0x38}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) 505.187638ms ago: executing program 3 (id=6612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00 \x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x256, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0x85, 0x10000000, 0x101, 0x80000001}, 0x2, 0xcf}, [{0x100, 0x401, 0x3, 0x3ff, 0x0, 0x9}, {0x0, 0x5, 0x7, 0x3, 0xffff3bf3, 0x6}, {0xfffffff9, 0x0, 0xc, 0x95, 0x1, 0x53}, {0x7fff, 0x4, 0x2, 0x43d6, 0x5, 0x4}, {0xfffffffb, 0xaf4, 0xff, 0x0, 0x4, 0xfffffff9}, {0x7, 0x8, 0x5, 0x7, 0xfffeffff, 0xcb66}, {0x5, 0x7, 0x6, 0x2, 0xb, 0x17e}, {0x6, 0xe, 0x0, 0x5, 0x1, 0x2}, {0x2, 0x4, 0x6, 0xff, 0xe7}, {0x8, 0x3, 0x630, 0x8000, 0x4, 0xa6a5}, {0x5, 0x9, 0x1ff, 0x10000, 0xfffffffd, 0x94000000}, {0x7, 0x3, 0x2, 0xf28, 0x7, 0x8}, {0x7, 0xe6, 0x2, 0x0, 0x8002, 0x4}, {0x6, 0x2, 0xf, 0x6, 0x0, 0xe51f}, {0xffff8000, 0x10, 0x5, 0x0, 0x6, 0x3}, {0x9, 0xc, 0x10, 0x0, 0x6, 0x1}, {0x0, 0x140000, 0x4, 0x200, 0x1, 0x4}, {0x9, 0x10001, 0x0, 0x4, 0x2}, {0x80000000, 0x2, 0x3, 0x1, 0x772, 0x5}, {0x0, 0x9, 0x1, 0x80, 0x0, 0x8}, {0x5, 0x72b, 0x4, 0x3e1, 0x1000, 0x68f087b1}, {0x7, 0xc, 0xa0, 0x3, 0x4, 0x2}, {0x7, 0xb2, 0xe, 0xd91, 0x7, 0x8}, {0x24, 0xfffffffc, 0x9, 0x100, 0x1000, 0x8}, {0x40, 0x3, 0x7e, 0xb, 0x401, 0x8001}, {0x7, 0x5, 0x9, 0xadb, 0xf, 0x3}, {0x0, 0xfffffffe, 0x7, 0x3, 0x4, 0x7}, {0x5, 0xf186, 0x1, 0x2, 0x7, 0x2}, {0x25ea92ec, 0x2, 0x5, 0x5, 0x10, 0x6}, {0x3, 0x2, 0x4, 0xde08, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x3, 0x96c4}, {0x10, 0x7f, 0x6fe4, 0x1, 0x8, 0xffff}, {0x9, 0x10001, 0x800, 0x0, 0x10001, 0x3}, {0x2, 0x80, 0x4, 0x8, 0x4, 0x10001}, {0x8, 0x8000, 0xffffff7f, 0x7fffffff, 0x400, 0xb88}, {0xff2, 0x2, 0x1, 0x80000000, 0x48f4, 0x5}, {0x9, 0x8, 0x5, 0x1, 0x8000, 0x6}, {0x200, 0x8001, 0x0, 0xfffeffff, 0x7fff, 0xf}, {0x11, 0xfffffff4, 0xa48, 0x20, 0xd, 0x4}, {0x0, 0x0, 0x4, 0x7, 0xa32, 0x7fffffff}, {0x5, 0x0, 0x5, 0x81, 0x36b31344, 0x7}, {0x34, 0xc196, 0x7, 0x9, 0x6, 0xfffffffe}, {0x2, 0x0, 0xfffffe01, 0xffff0000, 0xf, 0xadc1}, {0x7, 0x1, 0x5, 0xde59, 0x6, 0xaa7c}, {0x80000001, 0x9, 0x7, 0x3, 0x9, 0x9}, {0x200, 0x4, 0x7fff, 0xff800000, 0x6, 0x800}, {0x9, 0x8, 0xfc4, 0x3, 0x7fffffff, 0x32}, {0x2, 0x6, 0x4ce0, 0x10, 0x5, 0x3}, {0x7, 0x6, 0x1, 0x4, 0x6}, {0xffffffff, 0x3, 0xfffff800, 0x10, 0x7fffffff, 0xffffffff}, {0x7, 0x6, 0xfffffffa, 0x1, 0x80000001, 0x27b7}, {0xfffffff9, 0x8, 0x9, 0x8, 0x0, 0x2}, {0x5, 0x1ff, 0x7, 0xe, 0x8, 0x6}, {0x2, 0x2, 0xea, 0x1, 0x4, 0x8}, {0x2, 0x99, 0x1, 0x3, 0xc, 0xec}, {0x2, 0x7f, 0x4, 0x6, 0xec36, 0x9}, {0x8, 0x3, 0x24000000, 0x5, 0x4, 0xff}, {0x7ff, 0xcf1, 0x7f, 0xd3, 0x3ff}, {0xfffffffb, 0x8, 0x9, 0x2, 0xc, 0x5}, {0x9, 0x8, 0x8001, 0x9, 0x6, 0x6}, {0x1ff, 0x7, 0xac, 0x254, 0x7, 0x80000000}, {0x0, 0x7, 0x0, 0x1, 0x6, 0x5}, {0x7, 0x1, 0x400, 0x7}, {0x1b7, 0x4, 0x6, 0xe6, 0x401, 0x6}, {0x5, 0xfffffff7, 0x6, 0xca1, 0x5, 0xfffffffc}, {0x7, 0x5, 0x4, 0x9, 0x8, 0x10}, {0xb, 0x3, 0x5, 0x7, 0x0, 0x2}, {0x7, 0x10, 0x4, 0x4, 0x2, 0x3}, {0xf, 0x9, 0x3, 0xc, 0xa, 0x8}, {0xfff, 0x26, 0x1ff, 0x8, 0x9, 0x2}, {0x7, 0x0, 0xa013c2a, 0xb, 0x3, 0x80}, {0x2, 0x8, 0x81, 0xa4, 0xc8, 0x80e7}, {0x2, 0xfffffb5e, 0x80, 0x8001, 0xc}, {0xffffffff, 0x3, 0x9, 0x0, 0x3, 0x7be}, {0x8001, 0xfffffff9, 0x2, 0xfffffff5, 0x1, 0xffff}, {0x88, 0xb, 0x7, 0x6, 0x1, 0xbdda}, {0x4, 0x7, 0x4, 0x9, 0x8, 0x86}, {0x7f, 0xffffffad, 0x7, 0x7, 0x601, 0x2}, {0x69c6, 0x8, 0x2, 0x1ff, 0xd, 0x1ff}, {0xff, 0x2, 0x9, 0x81, 0x1ff, 0x1ff}, {0x8000, 0x4, 0xfa95, 0x4, 0x3}, {0x6, 0xe19, 0x47d1a8c0, 0x638e, 0xffc00000, 0x7f}, {0x800, 0x92ad, 0x6, 0x0, 0x1, 0x8}, {0x7, 0xfffeffff, 0x0, 0x1, 0x6553}, {0x606, 0x100, 0x7, 0x7fffffff, 0xc5d, 0x9}, {0x2, 0xff, 0x2, 0xfffffffd, 0x3, 0x7}, {0x9, 0x642, 0xf, 0x81, 0x2, 0x7fff}, {0x10001, 0x79, 0x0, 0x7, 0xecf, 0x10}, {0x1, 0x8, 0x7, 0x30b96ad4, 0x2, 0x55f}, {0x0, 0x3, 0x7, 0x3, 0x6, 0xfffffffc}, {0xb, 0x1, 0x0, 0x5, 0x2, 0x5}, {0x3a6, 0x4, 0x3, 0x1, 0x4, 0x40}, {0x6, 0x4, 0x401, 0x0, 0x4, 0x5}, {0x7, 0x9ff, 0x9, 0x85, 0xec, 0x5}, {0x2, 0x6, 0x0, 0x1000, 0x1, 0x1}, {0x7, 0x7, 0x101, 0x800, 0x8, 0x5150792f}, {0x38, 0x1, 0x29, 0x81, 0x364c, 0x7}, {0x0, 0x69, 0x8001, 0x2, 0x2800, 0x10}, {0x1, 0x4, 0x7f, 0x9}, {0x9314, 0x6dc, 0x80000000, 0x10000, 0x1, 0x6}, {0x3, 0x0, 0x1, 0x0, 0xe32, 0x1}, {0x275, 0x7ff, 0x714, 0xff, 0x800, 0x3f}, {0x6, 0x0, 0x0, 0x63, 0xd7, 0x7}, {0xffffff81, 0x2, 0x1ff, 0xd, 0x8001, 0x1}, {0x9, 0x6, 0x8, 0x6, 0x8, 0x200}, {0x2, 0x3, 0x3, 0x7, 0xfff, 0x8ec}, {0x8f, 0x400, 0x2, 0x1410, 0x2e4f2a60, 0x101}, {0x400, 0x5, 0x3, 0x59c, 0x3, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x101, 0x81}, {0x4, 0x5, 0x4, 0xff000000, 0x2, 0x9}, {0x0, 0x10000, 0x8, 0x400, 0x3}, {0xe, 0x7, 0x968, 0x9, 0xfffffff8, 0x8}, {0xfff, 0x100, 0xffffffff, 0x0, 0x3, 0x7fffffff}, {0x38000, 0xfffffffc, 0xa55, 0x4, 0x1, 0x3}, {0x8, 0x1, 0x4, 0xb, 0x7fff, 0x3}, {0x7, 0x6, 0x8, 0xb, 0x2, 0x5}, {0x7, 0x3, 0xfffffff4, 0xc8c2, 0x9, 0x9}, {0xfffffffe, 0x0, 0x400, 0x9, 0x8, 0x3}, {0x65da, 0x7, 0xc, 0x10, 0xaf5, 0x2}, {0x2, 0x101, 0x40000, 0x0, 0x1, 0x5ee}, {0x0, 0x80, 0x7d, 0x6, 0x5, 0x7}, {0x1, 0x6, 0x6, 0x1, 0x0, 0x7}, {0x0, 0xffffff80, 0x5, 0x10000}, {0x1000, 0x57a, 0x1, 0x150, 0x48, 0xfffffff7}, {0xff, 0x5, 0xfffff062, 0x4, 0x6, 0x839}, {0x3, 0x4, 0x4, 0x800, 0x3, 0x5}, {0x6, 0x20000, 0x1, 0x4, 0x7d37e82b, 0x1}, {0x5, 0x2, 0xdb9, 0x5, 0x7f, 0xf}], [{0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2701bacba0e67511, 0xb2e20321f287c22d}, {0x2, 0x89d99ddbf36fb21a}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), 0x0}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffff152c00907800000000"], 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) sigaltstack(&(0x7f0000000600)={&(0x7f0000000540)=""/61, 0x1, 0x3d}, &(0x7f00000006c0)={&(0x7f0000000640)=""/56, 0x0, 0x38}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) 395.387318ms ago: executing program 0 (id=6613): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x20000811) r1 = socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) getegid() 357.385688ms ago: executing program 2 (id=6614): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f00000005c0)}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[], 0xff2e) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sigaltstack(0x0, &(0x7f00000006c0)={&(0x7f0000000640)=""/56, 0x0, 0x38}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) 314.260449ms ago: executing program 0 (id=6615): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 240.107339ms ago: executing program 0 (id=6616): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x800, 0xc032802) unshare(0x68060200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 93.49079ms ago: executing program 1 (id=6617): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 67.72232ms ago: executing program 0 (id=6618): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 31.40812ms ago: executing program 0 (id=6619): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) set_robust_list(&(0x7f0000000280), 0x18) 20.70854ms ago: executing program 1 (id=6620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xb0}}, 0x0) 1.92371ms ago: executing program 0 (id=6621): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000eaffffffffffffff00"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) 0s ago: executing program 1 (id=6622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00010007000000060000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="6811853d292bba68eede3fcb5fc98719176b06b4d1a8b03b4c5f11e08fa4b547c71f63e754f47ccd0b8ff88f0aac98", @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRESOCT=r2, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002540)=ANY=[@ANYBLOB="0a00000001010000ff", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@nodioread_nolock}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000000000000000000d03000000000000000000000105000000080000000100000000000007000000000000000000000003000000000100000002000000000000000061"], 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) preadv2(r1, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000280)=""/8, 0x8}, {&(0x7f00000002c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000780)=""/127, 0x7f}, {&(0x7f0000000380)}, {&(0x7f00000008c0)=""/88, 0x58}, {&(0x7f0000000940)=""/116, 0x74}, {&(0x7f00000009c0)=""/200, 0xc8}], 0x9, 0x200, 0x2, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) lchown(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0xefff, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): 90b4dc0809 [ 424.341004][T21101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.360645][T21101] RSP: 002b:00007f90b3437058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 424.369121][T21101] RAX: ffffffffffffffda RBX: 00007f90b4f85fa0 RCX: 00007f90b4dc0809 [ 424.377111][T21101] RDX: 000000000000000e RSI: 00000000200002c0 RDI: 0000000000000006 [ 424.385296][T21101] RBP: 00007f90b34370a0 R08: 00000000200000c0 R09: 0000000000000014 [ 424.393365][T21101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.401443][T21101] R13: 0000000000000000 R14: 00007f90b4f85fa0 R15: 00007ffc4a66c708 [ 424.409506][T21101] [ 424.811679][T21126] serio: Serial port ptm1 [ 424.958110][T21135] serio: Serial port ptm1 [ 425.099261][T21143] FAULT_INJECTION: forcing a failure. [ 425.099261][T21143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.112490][T21143] CPU: 0 UID: 0 PID: 21143 Comm: syz.0.5569 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 425.123201][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 425.133311][T21143] Call Trace: [ 425.136605][T21143] [ 425.139615][T21143] dump_stack_lvl+0xf2/0x150 [ 425.144251][T21143] dump_stack+0x15/0x20 [ 425.148490][T21143] should_fail_ex+0x223/0x230 [ 425.153223][T21143] should_fail+0xb/0x10 [ 425.157436][T21143] should_fail_usercopy+0x1a/0x20 [ 425.162550][T21143] _copy_from_user+0x1e/0xb0 [ 425.167206][T21143] get_timespec64+0x49/0x140 [ 425.171901][T21143] __x64_sys_recvmmsg+0xa1/0x170 [ 425.176932][T21143] x64_sys_call+0x2a9a/0x2dc0 [ 425.181747][T21143] do_syscall_64+0xc9/0x1c0 [ 425.186317][T21143] ? clear_bhb_loop+0x55/0xb0 [ 425.191011][T21143] ? clear_bhb_loop+0x55/0xb0 [ 425.195705][T21143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.201662][T21143] RIP: 0033:0x7fa2f8710809 [ 425.206530][T21143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.226191][T21143] RSP: 002b:00007fa2f6d87058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 425.234633][T21143] RAX: ffffffffffffffda RBX: 00007fa2f88d5fa0 RCX: 00007fa2f8710809 [ 425.242633][T21143] RDX: 0000000000000001 RSI: 0000000020002d40 RDI: 0000000000000004 [ 425.250666][T21143] RBP: 00007fa2f6d870a0 R08: 0000000020002e80 R09: 0000000000000000 [ 425.258767][T21143] R10: 0000000000010080 R11: 0000000000000246 R12: 0000000000000001 [ 425.266771][T21143] R13: 0000000000000000 R14: 00007fa2f88d5fa0 R15: 00007ffc8558d348 [ 425.274782][T21143] [ 425.302882][T21158] serio: Serial port ptm1 [ 425.516006][T21177] syz.4.5578[21177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.516078][T21177] syz.4.5578[21177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.527869][T21177] syz.4.5578[21177] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.542033][T21177] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 425.565392][T21179] netlink: 'syz.2.5577': attribute type 16 has an invalid length. [ 425.602348][T21179] serio: Serial port ptm0 [ 425.638683][T21186] syz.3.5581[21186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.654419][T21186] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 425.719209][T21196] serio: Serial port ptm0 [ 425.736137][T21194] serio: Serial port ptm1 [ 425.773331][T21202] serio: Serial port ptm1 [ 425.918327][T21219] netlink: 'syz.3.5595': attribute type 16 has an invalid length. [ 425.966978][T21219] serio: Serial port ptm0 [ 425.973414][T21224] wireguard0: entered promiscuous mode [ 425.979017][T21224] wireguard0: entered allmulticast mode [ 426.154224][T21234] syzkaller0: entered promiscuous mode [ 426.159887][T21234] syzkaller0: entered allmulticast mode [ 426.436184][T21264] netlink: 'syz.3.5610': attribute type 16 has an invalid length. [ 426.473819][T21267] 9pnet_fd: Insufficient options for proto=fd [ 426.482960][T21268] __nla_validate_parse: 7 callbacks suppressed [ 426.482975][T21268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5612'. [ 426.505652][T21264] serio: Serial port ptm1 [ 426.764112][T21288] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 426.852330][T21293] serio: Serial port ptm2 [ 426.942196][T21296] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5621'. [ 426.960400][T21296] 1ªX¹¦À: renamed from 60ªX¹¦À [ 427.033831][T21301] 9pnet_fd: Insufficient options for proto=fd [ 427.041836][T21296] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 427.089054][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5626'. [ 427.098090][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5626'. [ 427.170275][T21305] gretap0: entered promiscuous mode [ 427.177818][T21305] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.282221][T21310] serio: Serial port ptm2 [ 427.496789][T21330] bpf_get_probe_write_proto: 2 callbacks suppressed [ 427.496811][T21330] syz.1.5632[21330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.512633][T21330] syz.1.5632[21330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.526686][T21330] syz.1.5632[21330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.530301][T21336] serio: Serial port ptm2 [ 427.555134][T21330] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 427.684953][T21338] syzkaller0: entered promiscuous mode [ 427.687897][T21348] 9pnet_fd: Insufficient options for proto=fd [ 427.690501][T21338] syzkaller0: entered allmulticast mode [ 427.693999][T21321] chnl_net:caif_netlink_parms(): no params data found [ 427.802826][T21321] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.809959][T21321] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.828078][T21321] bridge_slave_0: entered allmulticast mode [ 427.836858][T21321] bridge_slave_0: entered promiscuous mode [ 427.846753][T21360] serio: Serial port ptm1 [ 427.860693][T21321] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.867812][T21321] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.877614][T21321] bridge_slave_1: entered allmulticast mode [ 427.894038][T21321] bridge_slave_1: entered promiscuous mode [ 427.926930][T21321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.931185][T21374] 9pnet_fd: Insufficient options for proto=fd [ 427.950188][T21321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.969291][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 427.969309][ T29] audit: type=1326 audit(1732789919.261:6974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.010735][T21321] team0: Port device team_slave_0 added [ 428.021486][T21321] team0: Port device team_slave_1 added [ 428.026877][ T29] audit: type=1326 audit(1732789919.291:6975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.050661][ T29] audit: type=1326 audit(1732789919.291:6976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.074396][ T29] audit: type=1326 audit(1732789919.291:6977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.098019][ T29] audit: type=1326 audit(1732789919.291:6978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.121573][ T29] audit: type=1326 audit(1732789919.291:6979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.145028][ T29] audit: type=1326 audit(1732789919.291:6980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.168596][ T29] audit: type=1326 audit(1732789919.291:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.192076][ T29] audit: type=1326 audit(1732789919.291:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.215663][ T29] audit: type=1326 audit(1732789919.291:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21377 comm="syz.0.5648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2f8710809 code=0x7ffc0000 [ 428.251940][T21388] serio: Serial port ptm1 [ 428.255133][T21321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.263313][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.289262][T21321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.317662][T21321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.324782][T21321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.350770][T21321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.441495][T21401] 9pnet_fd: Insufficient options for proto=fd [ 428.485945][T21321] hsr_slave_0: entered promiscuous mode [ 428.518057][T21321] hsr_slave_1: entered promiscuous mode [ 428.528190][T21321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.538151][T21321] Cannot create hsr debugfs directory [ 428.571571][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5664'. [ 428.637127][T21416] serio: Serial port ptm1 [ 428.727529][T21321] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.812082][T21321] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.876917][T21321] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.892909][T21440] 9pnet_fd: Insufficient options for proto=fd [ 428.926022][T21321] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.021852][T21321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.042383][T21321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.064123][T21321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.169429][T21447] syzkaller0: entered promiscuous mode [ 429.175112][T21447] syzkaller0: entered allmulticast mode [ 429.183915][T21321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.315529][T21321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.354239][T21321] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.388145][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.395374][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.411657][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5674'. [ 429.423091][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.430199][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.490870][T21453] serio: Serial port ptm0 [ 429.601165][T21321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.789255][T21321] veth0_vlan: entered promiscuous mode [ 429.799008][T21321] veth1_vlan: entered promiscuous mode [ 429.820761][T21321] veth0_macvtap: entered promiscuous mode [ 429.831004][T21321] veth1_macvtap: entered promiscuous mode [ 429.847774][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.858464][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.868294][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.878861][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.888940][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.899690][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.909693][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.920229][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.930077][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.940645][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.950628][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.961077][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.970999][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.981585][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.991430][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.001874][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.011746][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.022284][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.032140][T21321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.042623][T21321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.054979][T21321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.098136][T21321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.146016][T21321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.154871][T21321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.163699][T21321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.172606][T21321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.198825][T21487] 9pnet_fd: Insufficient options for proto=fd [ 430.278258][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5682'. [ 430.344019][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5684'. [ 430.370415][T21498] serio: Serial port ptm1 [ 430.414442][T21502] netem: change failed [ 431.109761][T21538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5695'. [ 431.204834][T21538] serio: Serial port ptm0 [ 431.278045][T21548] wireguard2: entered promiscuous mode [ 431.283607][T21548] wireguard2: entered allmulticast mode [ 431.396444][T21568] netlink: 'syz.3.5705': attribute type 23 has an invalid length. [ 431.404459][T21568] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.549172][T21583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5709'. [ 431.630059][T21583] serio: Serial port ptm0 [ 431.754233][T21602] FAULT_INJECTION: forcing a failure. [ 431.754233][T21602] name failslab, interval 1, probability 0, space 0, times 0 [ 431.767010][T21602] CPU: 0 UID: 0 PID: 21602 Comm: syz.3.5717 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 431.777478][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.787559][T21602] Call Trace: [ 431.790853][T21602] [ 431.794006][T21602] dump_stack_lvl+0xf2/0x150 [ 431.798629][T21602] dump_stack+0x15/0x20 [ 431.802829][T21602] should_fail_ex+0x223/0x230 [ 431.807616][T21602] should_failslab+0x8f/0xb0 [ 431.812419][T21602] __kmalloc_node_noprof+0xad/0x410 [ 431.817672][T21602] ? __kvmalloc_node_noprof+0x72/0x170 [ 431.823191][T21602] ? __rcu_read_unlock+0x4e/0x70 [ 431.828219][T21602] __kvmalloc_node_noprof+0x72/0x170 [ 431.833524][T21602] xt_alloc_entry_offsets+0x47/0x50 [ 431.838752][T21602] translate_table+0xa3/0xf70 [ 431.843463][T21602] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 431.849568][T21602] ? _copy_from_user+0x8d/0xb0 [ 431.854705][T21602] do_ipt_set_ctl+0x7bd/0x8b0 [ 431.859412][T21602] nf_setsockopt+0x195/0x1b0 [ 431.864035][T21602] ip_setsockopt+0xea/0x100 [ 431.868559][T21602] udp_setsockopt+0x95/0xb0 [ 431.873085][T21602] sock_common_setsockopt+0x64/0x80 [ 431.878311][T21602] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 431.884360][T21602] __sys_setsockopt+0x187/0x200 [ 431.889269][T21602] __x64_sys_setsockopt+0x66/0x80 [ 431.894381][T21602] x64_sys_call+0x282e/0x2dc0 [ 431.899097][T21602] do_syscall_64+0xc9/0x1c0 [ 431.903694][T21602] ? clear_bhb_loop+0x55/0xb0 [ 431.908412][T21602] ? clear_bhb_loop+0x55/0xb0 [ 431.913098][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.919059][T21602] RIP: 0033:0x7f16e4000809 [ 431.923577][T21602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.943226][T21602] RSP: 002b:00007f16e2677058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.951649][T21602] RAX: ffffffffffffffda RBX: 00007f16e41c5fa0 RCX: 00007f16e4000809 [ 431.959690][T21602] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000005 [ 431.967698][T21602] RBP: 00007f16e26770a0 R08: 00000000000002a0 R09: 0000000000000000 [ 431.975680][T21602] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.983702][T21602] R13: 0000000000000000 R14: 00007f16e41c5fa0 R15: 00007ffefb3b7248 [ 431.991691][T21602] [ 432.062254][T21613] FAULT_INJECTION: forcing a failure. [ 432.062254][T21613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.075436][T21613] CPU: 0 UID: 0 PID: 21613 Comm: syz.3.5721 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 432.085938][T21613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.096282][T21613] Call Trace: [ 432.099582][T21613] [ 432.102576][T21613] dump_stack_lvl+0xf2/0x150 [ 432.107189][T21613] dump_stack+0x15/0x20 [ 432.111353][T21613] should_fail_ex+0x223/0x230 [ 432.116121][T21613] should_fail+0xb/0x10 [ 432.120298][T21613] should_fail_usercopy+0x1a/0x20 [ 432.125343][T21613] _copy_from_user+0x1e/0xb0 [ 432.129948][T21613] copy_msghdr_from_user+0x54/0x2a0 [ 432.135184][T21613] ? __fget_files+0x17c/0x1c0 [ 432.139877][T21613] __sys_sendmsg+0x13e/0x230 [ 432.144517][T21613] __x64_sys_sendmsg+0x46/0x50 [ 432.149310][T21613] x64_sys_call+0x2734/0x2dc0 [ 432.154014][T21613] do_syscall_64+0xc9/0x1c0 [ 432.158591][T21613] ? clear_bhb_loop+0x55/0xb0 [ 432.163351][T21613] ? clear_bhb_loop+0x55/0xb0 [ 432.168036][T21613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.173954][T21613] RIP: 0033:0x7f16e4000809 [ 432.178431][T21613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.198051][T21613] RSP: 002b:00007f16e2677058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.206626][T21613] RAX: ffffffffffffffda RBX: 00007f16e41c5fa0 RCX: 00007f16e4000809 [ 432.214607][T21613] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 432.222738][T21613] RBP: 00007f16e26770a0 R08: 0000000000000000 R09: 0000000000000000 [ 432.230721][T21613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.238770][T21613] R13: 0000000000000000 R14: 00007f16e41c5fa0 R15: 00007ffefb3b7248 [ 432.246758][T21613] [ 432.408796][T21618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5724'. [ 432.543281][T21618] serio: Serial port ptm0 [ 432.690605][T21641] netlink: 'syz.0.5732': attribute type 23 has an invalid length. [ 432.698549][T21641] IPv6: NLM_F_CREATE should be specified when creating new route [ 432.706502][T21634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 432.713282][T21634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 432.721133][T21634] vhci_hcd vhci_hcd.0: Device attached [ 432.776383][T21644] vhci_hcd: connection closed [ 432.776514][ T330] vhci_hcd: stop threads [ 432.785631][ T330] vhci_hcd: release socket [ 432.790166][ T330] vhci_hcd: disconnect device [ 432.807292][T21650] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 432.889871][T21658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5740'. [ 432.915720][T21658] serio: Serial port ptm0 [ 433.334404][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 433.334431][ T29] audit: type=1400 audit(1732789924.621:7288): avc: denied { unmount } for pid=13197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 433.418882][ T29] audit: type=1400 audit(1732789924.701:7289): avc: denied { create } for pid=21679 comm="syz.2.5748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 433.455622][ T29] audit: type=1326 audit(1732789924.731:7290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.479506][ T29] audit: type=1326 audit(1732789924.741:7291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.503303][ T29] audit: type=1326 audit(1732789924.741:7292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.526878][ T29] audit: type=1326 audit(1732789924.741:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.550443][ T29] audit: type=1326 audit(1732789924.741:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.573931][ T29] audit: type=1326 audit(1732789924.741:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.597657][ T29] audit: type=1326 audit(1732789924.741:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.621201][ T29] audit: type=1326 audit(1732789924.741:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21679 comm="syz.2.5748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 433.648610][T21688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5752'. [ 433.676848][T21688] serio: Serial port ptm0 [ 433.715501][T21694] syz.3.5754[21694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.715579][T21694] syz.3.5754[21694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.741857][T21694] syz.3.5754[21694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.767143][T21697] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 433.910471][T21701] syzkaller0: entered promiscuous mode [ 433.916037][T21701] syzkaller0: entered allmulticast mode [ 434.026311][T21711] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5759'. [ 434.043259][T21711] 1ªX¹¦À: renamed from 60ªX¹¦À [ 434.050319][T21711] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 434.222792][T21714] ref_ctr increment failed for inode: 0xad5 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888119bc1f80 [ 434.239857][T21713] uprobe: syz.0.5761:21713 failed to unregister, leaking uprobe [ 434.838476][T21741] syz.1.5773[21741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.838592][T21741] syz.1.5773[21741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.878456][T21741] syz.1.5773[21741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.900935][T21741] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 435.312227][T21779] syz.2.5787[21779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.312291][T21779] syz.2.5787[21779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.339313][T21779] syz.2.5787[21779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.373189][T21779] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 435.510553][T21788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5788'. [ 435.521138][T21788] 0ªX¹¦À: renamed from 61ªX¹¦À [ 435.531297][T21788] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 436.045220][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'. [ 436.067217][T21818] serio: Serial port ptm1 [ 436.137192][T21822] syz.1.5800[21822] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.138257][T21822] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 436.735590][T21853] serio: Serial port ptm0 [ 436.884255][T21866] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5813'. [ 436.898021][T21866] 1ªX¹¦À: renamed from 60ªX¹¦À [ 436.907746][T21866] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 437.306283][T21889] serio: Serial port ptm0 [ 437.480473][T21899] serio: Serial port ptm2 [ 437.745325][T21918] serio: Serial port ptm0 [ 438.670726][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 438.670745][ T29] audit: type=1326 audit(1732789929.961:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.700685][ T29] audit: type=1326 audit(1732789929.961:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.779424][ T29] audit: type=1326 audit(1732789930.011:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21935 comm="syz.1.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 438.794342][T21939] serio: Serial port ptm0 [ 438.803000][ T29] audit: type=1326 audit(1732789930.011:7520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21935 comm="syz.1.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 438.830807][ T29] audit: type=1326 audit(1732789930.011:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.854314][ T29] audit: type=1326 audit(1732789930.011:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.877988][ T29] audit: type=1326 audit(1732789930.011:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.901554][ T29] audit: type=1326 audit(1732789930.011:7524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.925169][ T29] audit: type=1326 audit(1732789930.011:7525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 438.948761][ T29] audit: type=1326 audit(1732789930.011:7526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21933 comm="syz.3.5840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e4000809 code=0x7ffc0000 [ 439.201162][T21973] serio: Serial port ptm0 [ 439.218350][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5854'. [ 439.344757][T21989] wireguard0: entered promiscuous mode [ 439.350380][T21989] wireguard0: entered allmulticast mode [ 439.697856][T22003] netlink: 'syz.4.5865': attribute type 23 has an invalid length. [ 439.705845][T22003] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.786618][T22013] serio: Serial port ptm2 [ 439.881362][T22020] syzkaller0: entered promiscuous mode [ 439.886874][T22020] syzkaller0: entered allmulticast mode [ 440.231589][T22028] chnl_net:caif_netlink_parms(): no params data found [ 440.361636][T22028] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.368810][T22028] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.387699][T22028] bridge_slave_0: entered allmulticast mode [ 440.406676][T22028] bridge_slave_0: entered promiscuous mode [ 440.423839][T22028] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.430972][T22028] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.449409][T22028] bridge_slave_1: entered allmulticast mode [ 440.467478][T22028] bridge_slave_1: entered promiscuous mode [ 440.516631][T22028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.527970][T22028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.555183][T22028] team0: Port device team_slave_0 added [ 440.565555][T22028] team0: Port device team_slave_1 added [ 440.584309][T22028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.591308][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.617580][T22028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.631119][T22028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.638089][T22028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.664046][T22028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.743133][T22028] hsr_slave_0: entered promiscuous mode [ 440.753559][T22028] hsr_slave_1: entered promiscuous mode [ 440.766555][T22028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.784593][T22028] Cannot create hsr debugfs directory [ 440.913725][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5888'. [ 440.926382][T22028] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.989680][T22071] serio: Serial port ptm0 [ 441.005956][T22028] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.091749][T22028] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.132235][T22028] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.257884][T22028] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 441.285143][T22028] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 441.356449][T22090] syzkaller0: entered promiscuous mode [ 441.362031][T22090] syzkaller0: entered allmulticast mode [ 441.368945][T22028] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 441.398835][T22028] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 441.493163][T22028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.514172][T22028] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.528248][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.535373][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.554040][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.561199][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.669193][T22028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.760274][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5900'. [ 441.789009][T22115] serio: Serial port ptm2 [ 441.805603][T22028] veth0_vlan: entered promiscuous mode [ 441.826883][T22028] veth1_vlan: entered promiscuous mode [ 441.855281][T22028] veth0_macvtap: entered promiscuous mode [ 441.875006][T22028] veth1_macvtap: entered promiscuous mode [ 441.896911][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.907697][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.918345][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.928913][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.938913][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.949470][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.959803][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.970313][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.980236][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.990717][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.000601][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.011543][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.021438][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.031922][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.041823][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.052532][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.062542][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.073039][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.082935][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.093492][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.103433][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.114134][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.127357][T22028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.166741][T22028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.177312][T22028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.188551][T22028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.200164][T22028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.209033][T22028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.218026][T22028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.227148][T22028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.545172][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 442.554227][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 442.608936][T22148] serio: Serial port ptm0 [ 442.689078][T22163] bpf_get_probe_write_proto: 2 callbacks suppressed [ 442.689094][T22163] syz.2.5917[22163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.695840][T22163] syz.2.5917[22163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.733452][T22163] syz.2.5917[22163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.786006][T22163] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 442.960544][T22183] loop0: detected capacity change from 0 to 1024 [ 442.974900][T22183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.986730][T22183] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 443.003714][T22183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 443.024656][T22183] System zones: 0-1, 3-36 [ 443.035110][T22183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.134302][T13353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.501120][T22203] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5931'. [ 443.586357][T22205] syz.0.5932[22205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.586552][T22205] syz.0.5932[22205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.642429][T22205] syz.0.5932[22205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.698859][T22206] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 443.755445][T22205] loop0: detected capacity change from 0 to 128 [ 443.790966][ T29] kauditd_printk_skb: 728 callbacks suppressed [ 443.790985][ T29] audit: type=1326 audit(1732789935.081:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 443.813120][T22205] vfat: Unknown parameter '/dev/bus/usb/00#/00#' [ 443.831231][T22212] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 443.870517][ T29] audit: type=1400 audit(1732789935.081:8256): avc: denied { mounton } for pid=22204 comm="syz.0.5932" path="/syzcgroup/cpu/syz0/syz0/file1" dev="cgroup" ino=885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 443.895126][ T29] audit: type=1326 audit(1732789935.121:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 443.918743][ T29] audit: type=1326 audit(1732789935.121:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 443.942252][ T29] audit: type=1326 audit(1732789935.121:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 443.965824][ T29] audit: type=1326 audit(1732789935.121:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 443.989464][ T29] audit: type=1326 audit(1732789935.121:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 444.013030][ T29] audit: type=1326 audit(1732789935.121:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22213 comm="syz.4.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86540809 code=0x7ffc0000 [ 444.036870][ T29] audit: type=1326 audit(1732789935.151:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22211 comm="syz.1.5935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 444.080481][ T29] audit: type=1326 audit(1732789935.161:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22211 comm="syz.1.5935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 444.110902][T22225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5939'. [ 444.292985][T22248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5945'. [ 444.376166][T22254] loop0: detected capacity change from 0 to 512 [ 444.413212][T22254] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 444.547259][T22254] EXT4-fs (loop0): failed to open journal device unknown-block(11,127) -6 [ 444.689286][T22266] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5953'. [ 444.703554][T22266] 0ªX¹¦À: renamed from 61ªX¹¦À [ 444.710884][T22266] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 444.743415][T22265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5956'. [ 444.771701][T22265] serio: Serial port ptm2 [ 445.083945][T22240] syz.2.5946 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 445.098127][T22240] CPU: 0 UID: 0 PID: 22240 Comm: syz.2.5946 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 445.108579][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.116765][T22275] FAULT_INJECTION: forcing a failure. [ 445.116765][T22275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.118636][T22240] Call Trace: [ 445.118647][T22240] [ 445.118657][T22240] dump_stack_lvl+0xf2/0x150 [ 445.118689][T22240] dump_stack+0x15/0x20 [ 445.118712][T22240] dump_header+0x83/0x2d0 [ 445.151152][T22240] oom_kill_process+0x341/0x4c0 [ 445.156095][T22240] out_of_memory+0x9af/0xbe0 [ 445.160759][T22240] ? css_next_descendant_pre+0x11c/0x140 [ 445.166426][T22240] mem_cgroup_out_of_memory+0x13e/0x190 [ 445.172040][T22240] try_charge_memcg+0x508/0x7f0 [ 445.176914][T22240] obj_cgroup_charge_pages+0xbd/0x1a0 [ 445.182315][T22240] __memcg_kmem_charge_page+0x9d/0x170 [ 445.187859][T22240] __alloc_pages_noprof+0x1bc/0x340 [ 445.193072][T22240] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 445.198468][T22240] alloc_pages_noprof+0xe1/0x100 [ 445.203525][T22240] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 445.209354][T22240] __kvmalloc_node_noprof+0x121/0x170 [ 445.214748][T22240] ? ip_set_alloc+0x1f/0x30 [ 445.219341][T22240] ip_set_alloc+0x1f/0x30 [ 445.223688][T22240] hash_ipport_create+0x4dc/0x9f0 [ 445.228818][T22240] ? __pfx_hash_ipport_create+0x10/0x10 [ 445.234474][T22240] ip_set_create+0x359/0x8a0 [ 445.239148][T22240] ? strnstr+0x61/0x100 [ 445.243375][T22240] ? __nla_parse+0x40/0x60 [ 445.247817][T22240] nfnetlink_rcv_msg+0x4a9/0x570 [ 445.252866][T22240] netlink_rcv_skb+0x12c/0x230 [ 445.257784][T22240] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 445.263288][T22240] nfnetlink_rcv+0x16c/0x15d0 [ 445.267979][T22240] ? kmem_cache_free+0xdc/0x2d0 [ 445.272847][T22240] ? nlmon_xmit+0x51/0x60 [ 445.277262][T22240] ? __kfree_skb+0x102/0x150 [ 445.281919][T22240] ? consume_skb+0x49/0x160 [ 445.286454][T22240] ? nlmon_xmit+0x51/0x60 [ 445.290796][T22240] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 445.296172][T22240] ? __dev_queue_xmit+0xb6e/0x2090 [ 445.301294][T22240] ? ref_tracker_free+0x3a5/0x410 [ 445.306450][T22240] ? __dev_queue_xmit+0x186/0x2090 [ 445.311610][T22240] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 445.317132][T22240] netlink_unicast+0x599/0x670 [ 445.321907][T22240] netlink_sendmsg+0x5cc/0x6e0 [ 445.326895][T22240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.332271][T22240] __sock_sendmsg+0x140/0x180 [ 445.337004][T22240] ____sys_sendmsg+0x312/0x410 [ 445.341797][T22240] __sys_sendmsg+0x19d/0x230 [ 445.346426][T22240] __x64_sys_sendmsg+0x46/0x50 [ 445.351267][T22240] x64_sys_call+0x2734/0x2dc0 [ 445.356014][T22240] do_syscall_64+0xc9/0x1c0 [ 445.360580][T22240] ? clear_bhb_loop+0x55/0xb0 [ 445.365281][T22240] ? clear_bhb_loop+0x55/0xb0 [ 445.369975][T22240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.375904][T22240] RIP: 0033:0x7fddce660809 [ 445.380363][T22240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.399985][T22240] RSP: 002b:00007fddcccd7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.408514][T22240] RAX: ffffffffffffffda RBX: 00007fddce825fa0 RCX: 00007fddce660809 [ 445.416493][T22240] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 445.424475][T22240] RBP: 00007fddce6d393e R08: 0000000000000000 R09: 0000000000000000 [ 445.432493][T22240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.440489][T22240] R13: 0000000000000000 R14: 00007fddce825fa0 R15: 00007ffffe6665a8 [ 445.448518][T22240] [ 445.451546][T22275] CPU: 1 UID: 0 PID: 22275 Comm: syz.3.5960 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 445.451949][T22240] memory: usage 307200kB, limit 307200kB, failcnt 697 [ 445.461979][T22275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.462045][T22275] Call Trace: [ 445.462053][T22275] [ 445.462062][T22275] dump_stack_lvl+0xf2/0x150 [ 445.462093][T22275] dump_stack+0x15/0x20 [ 445.468955][T22240] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 445.478974][T22275] should_fail_ex+0x223/0x230 [ 445.482260][T22240] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 445.485183][T22275] should_fail+0xb/0x10 [ 445.485213][T22275] should_fail_usercopy+0x1a/0x20 [ 445.489808][T22240] Memory cgroup stats for [ 445.493931][T22275] _copy_from_user+0x1e/0xb0 [ 445.501984][T22240] /syz2 [ 445.506464][T22275] kstrtouint_from_user+0x76/0xe0 [ 445.513765][T22240] : [ 445.517879][T22275] ? 0xffffffff81000000 [ 445.542256][T22240] cache 0 [ 445.546364][T22275] ? selinux_file_permission+0x22a/0x360 [ 445.549395][T22240] rss 0 [ 445.554962][T22275] proc_fail_nth_write+0x4f/0x150 [ 445.557722][T22240] shmem 0 [ 445.557734][T22240] mapped_file 0 [ 445.562731][T22275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.565676][T22240] dirty 0 [ 445.565687][T22240] writeback 0 [ 445.569124][T22275] vfs_write+0x281/0x920 [ 445.574779][T22240] workingset_refault_anon 372 [ 445.577721][T22275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 445.581036][T22240] workingset_refault_file 524 [ 445.585233][T22275] ? __fget_files+0x17c/0x1c0 [ 445.589924][T22240] swap 184320 [ 445.595422][T22275] ksys_write+0xe8/0x1b0 [ 445.600251][T22240] swapcached 0 [ 445.604755][T22275] __x64_sys_write+0x42/0x50 [ 445.608027][T22240] pgpgin 263050 [ 445.608037][T22240] pgpgout 263050 [ 445.608045][T22240] pgfault 454992 [ 445.608052][T22240] pgmajfault 190 [ 445.608058][T22240] inactive_anon 0 [ 445.608065][T22240] active_anon 0 [ 445.612295][T22275] x64_sys_call+0x287e/0x2dc0 [ 445.615681][T22240] inactive_file 0 [ 445.620285][T22275] do_syscall_64+0xc9/0x1c0 [ 445.623788][T22240] active_file 0 [ 445.623800][T22240] unevictable 0 [ 445.627322][T22275] ? clear_bhb_loop+0x55/0xb0 [ 445.630890][T22240] hierarchical_memory_limit 314572800 [ 445.634394][T22275] ? clear_bhb_loop+0x55/0xb0 [ 445.638016][T22240] hierarchical_memsw_limit 9223372036854771712 [ 445.641461][T22275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.646144][T22240] total_cache 0 [ 445.646156][T22240] total_rss 0 [ 445.649763][T22275] RIP: 0033:0x7f551d19f2bf [ 445.649787][T22275] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 445.649811][T22275] RSP: 002b:00007f551b817050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 445.654314][T22240] total_shmem 0 [ 445.657766][T22275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f551d19f2bf [ 445.661254][T22240] total_mapped_file 0 [ 445.665907][T22275] RDX: 0000000000000001 RSI: 00007f551b8170b0 RDI: 0000000000000006 [ 445.671303][T22240] total_dirty 0 [ 445.675929][T22275] RBP: 00007f551b8170a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.682198][T22240] total_writeback 0 [ 445.688057][T22275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 445.691560][T22240] total_workingset_refault_anon 372 [ 445.694903][T22275] R13: 0000000000000000 R14: 00007f551d365fa0 R15: 00007fff99957848 [ 445.699364][T22240] total_workingset_refault_file 524 [ 445.718912][T22275] [ 445.797248][T22240] total_swap 184320 [ 445.801158][T22240] total_swapcached 0 [ 445.805111][T22240] total_pgpgin 263050 [ 445.809118][T22240] total_pgpgout 263050 [ 445.813214][T22240] total_pgfault 454992 [ 445.817316][T22240] total_pgmajfault 190 [ 445.821541][T22240] total_inactive_anon 0 [ 445.825710][T22240] total_active_anon 0 [ 445.829724][T22240] total_inactive_file 0 [ 445.833927][T22240] total_active_file 0 [ 445.837917][T22240] total_unevictable 0 [ 445.841931][T22240] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5946,pid=22239,uid=0 [ 445.855019][T22288] loop0: detected capacity change from 0 to 512 [ 445.856678][T22240] Memory cgroup out of memory: Killed process 22239 (syz.2.5946) total-vm:95124kB, anon-rss:740kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 445.946349][T22288] loop0: detected capacity change from 0 to 1024 [ 445.960224][T22290] syz.3.5966[22290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.960400][T22290] syz.3.5966[22290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.972133][T22290] syz.3.5966[22290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.984462][T22288] EXT4-fs: inline encryption not supported [ 446.002554][T22290] vhci_hcd: default hub control req: 8014 v02fe i0000 l0 [ 446.030592][T22288] EXT4-fs: Ignoring removed orlov option [ 446.036324][T22288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.106936][T22288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.154229][T22292] syzkaller0: entered promiscuous mode [ 446.159830][T22292] syzkaller0: entered allmulticast mode [ 446.226561][T13353] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.316930][T22305] syzkaller0: entered promiscuous mode [ 446.322477][T22305] syzkaller0: entered allmulticast mode [ 446.702994][T22325] loop0: detected capacity change from 0 to 512 [ 446.710399][T22325] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 446.736190][T22325] EXT4-fs (loop0): failed to open journal device unknown-block(11,127) -6 [ 446.867682][T22335] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5975'. [ 446.884445][T22335] 1ªX¹¦À: renamed from 60ªX¹¦À [ 446.893586][T22335] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 447.277986][T22357] syzkaller0: entered promiscuous mode [ 447.283581][T22357] syzkaller0: entered allmulticast mode [ 448.001344][T22413] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6008'. [ 448.010682][T22413] 0ªX¹¦À: renamed from 61ªX¹¦À [ 448.018228][T22413] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 448.066255][T22416] serio: Serial port ptm3 [ 448.117265][T22425] FAULT_INJECTION: forcing a failure. [ 448.117265][T22425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.130548][T22425] CPU: 0 UID: 0 PID: 22425 Comm: syz.2.6013 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 448.130583][T22425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.130600][T22425] Call Trace: [ 448.130684][T22425] [ 448.130694][T22425] dump_stack_lvl+0xf2/0x150 [ 448.130724][T22425] dump_stack+0x15/0x20 [ 448.130742][T22425] should_fail_ex+0x223/0x230 [ 448.130814][T22425] should_fail+0xb/0x10 [ 448.130872][T22425] should_fail_usercopy+0x1a/0x20 [ 448.130914][T22425] _copy_to_user+0x20/0xa0 [ 448.131013][T22425] simple_read_from_buffer+0xa0/0x110 [ 448.131088][T22425] proc_fail_nth_read+0xf9/0x140 [ 448.131142][T22425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.131192][T22425] vfs_read+0x1a2/0x700 [ 448.205231][T22425] ? __rcu_read_unlock+0x4e/0x70 [ 448.205269][T22425] ? __fget_files+0x17c/0x1c0 [ 448.205299][T22425] ksys_read+0xe8/0x1b0 [ 448.205346][T22425] __x64_sys_read+0x42/0x50 [ 448.205379][T22425] x64_sys_call+0x2874/0x2dc0 [ 448.205453][T22425] do_syscall_64+0xc9/0x1c0 [ 448.205473][T22425] ? clear_bhb_loop+0x55/0xb0 [ 448.205547][T22425] ? clear_bhb_loop+0x55/0xb0 [ 448.205566][T22425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.205601][T22425] RIP: 0033:0x7fddce65f21c [ 448.205618][T22425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 448.205715][T22425] RSP: 002b:00007fddcccd7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.205736][T22425] RAX: ffffffffffffffda RBX: 00007fddce825fa0 RCX: 00007fddce65f21c [ 448.205750][T22425] RDX: 000000000000000f RSI: 00007fddcccd70b0 RDI: 0000000000000006 [ 448.205764][T22425] RBP: 00007fddcccd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 448.205777][T22425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.205840][T22425] R13: 0000000000000000 R14: 00007fddce825fa0 R15: 00007ffffe6665a8 [ 448.205860][T22425] [ 448.228155][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6017'. [ 448.345843][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'. [ 448.360995][T22434] wireguard0: entered promiscuous mode [ 448.366594][T22434] wireguard0: entered allmulticast mode [ 448.547614][T22458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6024'. [ 448.576748][T22458] serio: Serial port ptm0 [ 448.806607][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 448.806687][ T29] audit: type=1326 audit(1732789940.091:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25352377a7 code=0x7ffc0000 [ 448.836413][ T29] audit: type=1326 audit(1732789940.091:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25351dc149 code=0x7ffc0000 [ 448.849815][T22490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6039'. [ 448.861357][ T29] audit: type=1326 audit(1732789940.091:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 448.893346][ T29] audit: type=1326 audit(1732789940.181:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25352377a7 code=0x7ffc0000 [ 448.916849][ T29] audit: type=1326 audit(1732789940.181:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25351dc149 code=0x7ffc0000 [ 448.940521][ T29] audit: type=1326 audit(1732789940.181:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 448.966157][T22490] serio: Serial port ptm0 [ 448.966518][ T29] audit: type=1326 audit(1732789940.251:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25352377a7 code=0x7ffc0000 [ 448.993984][ T29] audit: type=1326 audit(1732789940.251:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25351dc149 code=0x7ffc0000 [ 449.017524][ T29] audit: type=1326 audit(1732789940.251:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 449.019672][ T29] audit: type=1326 audit(1732789940.311:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22478 comm="syz.1.6034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25352377a7 code=0x7ffc0000 [ 449.271108][T22526] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6053'. [ 449.305844][T22526] serio: Serial port ptm1 [ 449.453865][T22528] chnl_net:caif_netlink_parms(): no params data found [ 449.490672][T22528] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.497848][T22528] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.505565][T22528] bridge_slave_0: entered allmulticast mode [ 449.512184][T22528] bridge_slave_0: entered promiscuous mode [ 449.522530][T22528] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.529665][T22528] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.536903][T22528] bridge_slave_1: entered allmulticast mode [ 449.543840][T22528] bridge_slave_1: entered promiscuous mode [ 449.569965][T22528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.587728][T22528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.639230][T22528] team0: Port device team_slave_0 added [ 449.652944][T22528] team0: Port device team_slave_1 added [ 449.691653][T22569] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 449.701270][T22528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.708391][T22528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.734449][T22528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.758435][T22528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.765470][T22528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.791442][T22528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.813653][T22569] No such timeout policy "syz1" [ 449.831064][T22528] hsr_slave_0: entered promiscuous mode [ 449.838823][T22528] hsr_slave_1: entered promiscuous mode [ 449.849412][T22528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.857175][T22528] Cannot create hsr debugfs directory [ 450.002828][T22586] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.057236][T22528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.140698][T22528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.203716][T22528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.297182][T22528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.844289][T22528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.901123][T22528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.924286][T22528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.938542][T22528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 451.071895][T22528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.079825][T22528] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.095923][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.095959][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.120445][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.120547][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.309522][T22528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.647331][T22528] veth0_vlan: entered promiscuous mode [ 451.832760][T22666] syzkaller0: entered promiscuous mode [ 451.838447][T22666] syzkaller0: entered allmulticast mode [ 451.904010][T22528] veth1_vlan: entered promiscuous mode [ 451.995910][T22528] veth0_macvtap: entered promiscuous mode [ 452.028228][T22528] veth1_macvtap: entered promiscuous mode [ 452.088591][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.099220][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.109262][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.119725][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.129665][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.140224][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.150078][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.160623][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.170491][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.181030][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.190892][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.201449][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.211333][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.221831][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.231718][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.242173][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.252046][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.262545][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.272406][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.282853][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.292732][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.303277][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.313226][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.323720][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.347312][T22528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.429973][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.440545][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.450432][T22528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.460912][T22528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.497692][T22528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.525967][T22528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.534983][T22528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.544734][T22528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.554460][T22528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.662851][T22692] serio: Serial port ptm0 [ 452.672375][T22695] tc_dump_action: action bad kind [ 452.756267][T22702] tmpfs: Bad value for 'huge' [ 452.873507][T22707] syzkaller0: entered promiscuous mode [ 452.879195][T22707] syzkaller0: entered allmulticast mode [ 452.894651][T22717] tmpfs: Bad value for 'huge' [ 452.910717][T22717] FAULT_INJECTION: forcing a failure. [ 452.910717][T22717] name failslab, interval 1, probability 0, space 0, times 0 [ 452.923528][T22717] CPU: 0 UID: 0 PID: 22717 Comm: syz.1.6107 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 452.934033][T22717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 452.944197][T22717] Call Trace: [ 452.947480][T22717] [ 452.950416][T22717] dump_stack_lvl+0xf2/0x150 [ 452.955062][T22717] dump_stack+0x15/0x20 [ 452.959290][T22717] should_fail_ex+0x223/0x230 [ 452.964033][T22717] should_failslab+0x8f/0xb0 [ 452.968698][T22717] kmem_cache_alloc_node_noprof+0x59/0x320 [ 452.974685][T22717] ? __alloc_skb+0x10b/0x310 [ 452.979281][T22717] __alloc_skb+0x10b/0x310 [ 452.983737][T22717] ? audit_log_start+0x34c/0x6b0 [ 452.988783][T22717] audit_log_start+0x368/0x6b0 [ 452.993569][T22717] audit_seccomp+0x4b/0x130 [ 452.998086][T22717] __seccomp_filter+0x6fa/0x1180 [ 453.003031][T22717] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.008705][T22717] ? vfs_write+0x596/0x920 [ 453.013220][T22717] ? putname+0xcf/0xf0 [ 453.017303][T22717] __secure_computing+0x9f/0x1c0 [ 453.022291][T22717] syscall_trace_enter+0xd1/0x1f0 [ 453.027443][T22717] ? fpregs_assert_state_consistent+0x83/0xa0 [ 453.033594][T22717] do_syscall_64+0xaa/0x1c0 [ 453.038132][T22717] ? clear_bhb_loop+0x55/0xb0 [ 453.042813][T22717] ? clear_bhb_loop+0x55/0xb0 [ 453.047644][T22717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.053557][T22717] RIP: 0033:0x7f2535240809 [ 453.058058][T22717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.077757][T22717] RSP: 002b:00007f25338b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 453.086242][T22717] RAX: ffffffffffffffda RBX: 00007f2535405fa0 RCX: 00007f2535240809 [ 453.094248][T22717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 453.102224][T22717] RBP: 00007f25338b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 453.110234][T22717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.118224][T22717] R13: 0000000000000000 R14: 00007f2535405fa0 R15: 00007ffc3f3926b8 [ 453.126208][T22717] [ 453.322335][T22726] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 453.402761][T22739] FAULT_INJECTION: forcing a failure. [ 453.402761][T22739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.415998][T22739] CPU: 0 UID: 0 PID: 22739 Comm: syz.2.6113 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 453.426431][T22739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 453.436531][T22739] Call Trace: [ 453.439818][T22739] [ 453.442752][T22739] dump_stack_lvl+0xf2/0x150 [ 453.447394][T22739] dump_stack+0x15/0x20 [ 453.451608][T22739] should_fail_ex+0x223/0x230 [ 453.456308][T22739] should_fail+0xb/0x10 [ 453.460509][T22739] should_fail_usercopy+0x1a/0x20 [ 453.465620][T22739] _copy_from_user+0x1e/0xb0 [ 453.470305][T22739] copy_msghdr_from_user+0x54/0x2a0 [ 453.475605][T22739] ? __fget_files+0x17c/0x1c0 [ 453.480311][T22739] __sys_sendmsg+0x13e/0x230 [ 453.484925][T22739] __x64_sys_sendmsg+0x46/0x50 [ 453.489701][T22739] x64_sys_call+0x2734/0x2dc0 [ 453.494469][T22739] do_syscall_64+0xc9/0x1c0 [ 453.499088][T22739] ? clear_bhb_loop+0x55/0xb0 [ 453.503774][T22739] ? clear_bhb_loop+0x55/0xb0 [ 453.508542][T22739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.514460][T22739] RIP: 0033:0x7fddce660809 [ 453.518942][T22739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.538633][T22739] RSP: 002b:00007fddcccd7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.547058][T22739] RAX: ffffffffffffffda RBX: 00007fddce825fa0 RCX: 00007fddce660809 [ 453.555132][T22739] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 453.563129][T22739] RBP: 00007fddcccd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 453.571115][T22739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.579198][T22739] R13: 0000000000000000 R14: 00007fddce825fa0 R15: 00007ffffe6665a8 [ 453.587272][T22739] [ 453.680077][T22745] serio: Serial port ptm1 [ 453.731216][T22753] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 453.743457][T22727] chnl_net:caif_netlink_parms(): no params data found [ 453.793043][T22758] 9pnet_fd: Insufficient options for proto=fd [ 453.817077][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 453.817095][ T29] audit: type=1326 audit(1732789945.101:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22766 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 453.865345][T22727] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.872579][T22727] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.878847][ T29] audit: type=1326 audit(1732789945.111:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22766 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 453.888580][T22727] bridge_slave_0: entered allmulticast mode [ 453.903127][ T29] audit: type=1326 audit(1732789945.141:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22766 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 453.932579][ T29] audit: type=1326 audit(1732789945.141:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22766 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 453.956086][ T29] audit: type=1326 audit(1732789945.141:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22766 comm="syz.3.6124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 453.979651][ T29] audit: type=1326 audit(1732789945.141:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22770 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 454.003203][ T29] audit: type=1326 audit(1732789945.141:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22770 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 454.026777][ T29] audit: type=1326 audit(1732789945.141:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22770 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 454.050292][ T29] audit: type=1326 audit(1732789945.141:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22770 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 454.074215][ T29] audit: type=1326 audit(1732789945.141:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22770 comm="syz.1.6126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2535240809 code=0x7ffc0000 [ 454.097979][T22727] bridge_slave_0: entered promiscuous mode [ 454.110006][T22727] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.117105][T22727] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.124874][T22727] bridge_slave_1: entered allmulticast mode [ 454.131692][T22727] bridge_slave_1: entered promiscuous mode [ 454.158262][T22727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.168965][T22727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.189804][T22727] team0: Port device team_slave_0 added [ 454.196761][T22727] team0: Port device team_slave_1 added [ 454.235360][T22727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.235375][T22727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.235410][T22727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.237554][T22727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.237616][T22727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.237722][T22727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.286842][T22783] syzkaller0: entered promiscuous mode [ 454.304582][T22794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6132'. [ 454.306105][T22783] syzkaller0: entered allmulticast mode [ 454.397671][T22727] hsr_slave_0: entered promiscuous mode [ 454.398022][T22799] 9pnet_fd: Insufficient options for proto=fd [ 454.421876][T22727] hsr_slave_1: entered promiscuous mode [ 454.430090][T22727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.437685][T22727] Cannot create hsr debugfs directory [ 454.499057][T22804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6137'. [ 454.508229][T22804] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 454.574456][T22727] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.615360][T22727] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.691675][T22727] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.702954][ T4340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.713673][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.810095][T22727] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.913200][T22727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.924259][T22829] 9pnet_fd: Insufficient options for proto=fd [ 454.924589][T22727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.952537][T22727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.980267][T22727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.027650][T22833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6146'. [ 455.179001][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.289763][T22848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6148'. [ 455.343217][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.347769][T22727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.369471][T22848] 1ªX¹¦À: renamed from 60ªX¹¦À [ 455.396693][T22848] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 455.427849][T22727] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.440803][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.446220][T22854] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6151'. [ 455.447894][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.466966][T22854] 0ªX¹¦À: renamed from caif0 [ 455.474364][T22854] 0ªX¹¦À: entered allmulticast mode [ 455.479791][T22854] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 455.506047][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.513297][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.620705][T22727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.762081][T22727] veth0_vlan: entered promiscuous mode [ 455.770399][T22727] veth1_vlan: entered promiscuous mode [ 455.785503][T22727] veth0_macvtap: entered promiscuous mode [ 455.792873][T22727] veth1_macvtap: entered promiscuous mode [ 455.802865][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.813438][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.823494][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.833982][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.843880][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.854321][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.864163][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.874644][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.884497][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.895095][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.905907][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.916377][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.926225][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.936687][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.946684][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.957157][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.967014][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.977473][T22878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.977635][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.985813][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.003920][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.014383][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.024242][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.027706][T22880] 9pnet_fd: Insufficient options for proto=fd [ 456.034751][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.034777][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.034797][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.034814][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.034830][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.046210][T22727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.100468][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.111002][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.120903][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.131498][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.141406][T22727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.151922][T22727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.162639][T22727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.176995][T22727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.185781][T22727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.194536][T22727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.203316][T22727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.219832][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.340795][T22885] syzkaller0: entered promiscuous mode [ 456.346388][T22885] syzkaller0: entered allmulticast mode [ 456.563523][T22914] 9pnet_fd: Insufficient options for proto=fd [ 456.912989][T22930] bond1: entered promiscuous mode [ 456.918103][T22930] bond1: entered allmulticast mode [ 456.923752][T22930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.937052][T22930] bond1 (unregistering): Released all slaves [ 457.012639][T22933] FAULT_INJECTION: forcing a failure. [ 457.012639][T22933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.025793][T22933] CPU: 0 UID: 0 PID: 22933 Comm: syz.2.6172 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 457.036320][T22933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 457.046467][T22933] Call Trace: [ 457.049757][T22933] [ 457.052728][T22933] dump_stack_lvl+0xf2/0x150 [ 457.057382][T22933] dump_stack+0x15/0x20 [ 457.061765][T22933] should_fail_ex+0x223/0x230 [ 457.066485][T22933] should_fail+0xb/0x10 [ 457.070711][T22933] should_fail_usercopy+0x1a/0x20 [ 457.076139][T22933] _copy_from_user+0x1e/0xb0 [ 457.080742][T22933] copy_msghdr_from_user+0x54/0x2a0 [ 457.086066][T22933] ? __fget_files+0x17c/0x1c0 [ 457.090765][T22933] __sys_sendmsg+0x13e/0x230 [ 457.095418][T22933] __x64_sys_sendmsg+0x46/0x50 [ 457.100261][T22933] x64_sys_call+0x2734/0x2dc0 [ 457.104956][T22933] do_syscall_64+0xc9/0x1c0 [ 457.109882][T22933] ? clear_bhb_loop+0x55/0xb0 [ 457.114571][T22933] ? clear_bhb_loop+0x55/0xb0 [ 457.119264][T22933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.125290][T22933] RIP: 0033:0x7fddce660809 [ 457.129727][T22933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.149361][T22933] RSP: 002b:00007fddcccd7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.157782][T22933] RAX: ffffffffffffffda RBX: 00007fddce825fa0 RCX: 00007fddce660809 [ 457.165796][T22933] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 457.173877][T22933] RBP: 00007fddcccd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 457.181852][T22933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.189830][T22933] R13: 0000000000000000 R14: 00007fddce825fa0 R15: 00007ffffe6665a8 [ 457.197814][T22933] [ 457.340410][T22943] 9pnet_fd: Insufficient options for proto=fd [ 457.454542][T22950] serio: Serial port ptm0 [ 457.649537][T22962] syz.0.6185 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 457.792663][T22973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6185'. [ 457.926482][T22987] serio: Serial port ptm1 [ 458.847705][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 458.847723][ T29] audit: type=1326 audit(1732789950.131:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 458.912511][T23037] SELinux: failed to load policy [ 458.936800][ T29] audit: type=1326 audit(1732789950.131:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 458.960663][ T29] audit: type=1326 audit(1732789950.141:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 458.984338][ T29] audit: type=1326 audit(1732789950.141:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.007939][ T29] audit: type=1326 audit(1732789950.141:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.031565][ T29] audit: type=1326 audit(1732789950.141:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.032931][T23039] serio: Serial port ptm0 [ 459.055238][ T29] audit: type=1326 audit(1732789950.141:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.083143][ T29] audit: type=1326 audit(1732789950.141:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.106705][ T29] audit: type=1326 audit(1732789950.141:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.130495][ T29] audit: type=1326 audit(1732789950.141:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23034 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 459.338774][ T3399] net_ratelimit: 6 callbacks suppressed [ 459.338808][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.481538][T23085] team0: Device gtp0 is of different type [ 459.627749][T23085] serio: Serial port ptm1 [ 460.110256][T23132] bond1: entered promiscuous mode [ 460.110275][T23132] bond1: entered allmulticast mode [ 460.110407][T23132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.136310][T23139] serio: Serial port ptm0 [ 460.144431][T23132] bond1 (unregistering): Released all slaves [ 460.402182][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.923152][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.128797][T23184] bond1: entered promiscuous mode [ 461.133888][T23184] bond1: entered allmulticast mode [ 461.152012][T23184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.170630][T23184] bond1 (unregistering): Released all slaves [ 461.419244][ T4066] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.934403][T23229] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 462.391097][T23239] chnl_net:caif_netlink_parms(): no params data found [ 462.458443][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.496906][T23239] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.504055][T23239] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.526340][T23239] bridge_slave_0: entered allmulticast mode [ 462.535651][T23239] bridge_slave_0: entered promiscuous mode [ 462.588558][T23239] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.595665][T23239] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.611134][T23239] bridge_slave_1: entered allmulticast mode [ 462.619641][T23239] bridge_slave_1: entered promiscuous mode [ 462.643044][T23267] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 462.662420][T23239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.681544][T23239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.741019][T23239] team0: Port device team_slave_0 added [ 462.755014][T23239] team0: Port device team_slave_1 added [ 462.792516][T23239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.799526][T23239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.825563][T23239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.843759][T23239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.850777][T23239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.876771][T23239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.962458][T23276] bond1: entered promiscuous mode [ 462.967629][T23276] bond1: entered allmulticast mode [ 462.993417][T23276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.026824][T23276] bond1 (unregistering): Released all slaves [ 463.057176][T23285] FAULT_INJECTION: forcing a failure. [ 463.057176][T23285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.070353][T23285] CPU: 1 UID: 0 PID: 23285 Comm: syz.2.6310 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 463.080791][T23285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 463.090965][T23285] Call Trace: [ 463.094400][T23285] [ 463.097344][T23285] dump_stack_lvl+0xf2/0x150 [ 463.101940][T23285] dump_stack+0x15/0x20 [ 463.106170][T23285] should_fail_ex+0x223/0x230 [ 463.110929][T23285] should_fail+0xb/0x10 [ 463.115152][T23285] should_fail_usercopy+0x1a/0x20 [ 463.120269][T23285] _copy_from_user+0x1e/0xb0 [ 463.124857][T23285] copy_msghdr_from_user+0x54/0x2a0 [ 463.130149][T23285] ? __fget_files+0x17c/0x1c0 [ 463.134969][T23285] __sys_sendmsg+0x13e/0x230 [ 463.139610][T23285] __x64_sys_sendmsg+0x46/0x50 [ 463.144455][T23285] x64_sys_call+0x2734/0x2dc0 [ 463.149167][T23285] do_syscall_64+0xc9/0x1c0 [ 463.153691][T23285] ? clear_bhb_loop+0x55/0xb0 [ 463.158440][T23285] ? clear_bhb_loop+0x55/0xb0 [ 463.163174][T23285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.169170][T23285] RIP: 0033:0x7fddce660809 [ 463.173582][T23285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.193201][T23285] RSP: 002b:00007fddcccd7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.201628][T23285] RAX: ffffffffffffffda RBX: 00007fddce825fa0 RCX: 00007fddce660809 [ 463.209727][T23285] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000006 [ 463.217714][T23285] RBP: 00007fddcccd70a0 R08: 0000000000000000 R09: 0000000000000000 [ 463.225755][T23285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.233775][T23285] R13: 0000000000000000 R14: 00007fddce825fa0 R15: 00007ffffe6665a8 [ 463.241840][T23285] [ 463.260940][T23239] hsr_slave_0: entered promiscuous mode [ 463.288607][T23239] hsr_slave_1: entered promiscuous mode [ 463.305662][T23239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.318453][T23239] Cannot create hsr debugfs directory [ 463.437373][T23301] serio: Serial port ptm1 [ 463.454633][T23239] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.493626][T23239] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.504332][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.543389][T23239] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.642065][T23239] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.706248][T23239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 463.716925][T23239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 463.753588][T23239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 463.764803][T23239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 463.812986][T23332] serio: Serial port ptm2 [ 463.830069][T23239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.844106][T23239] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.853744][ T4203] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.860845][ T4203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.877153][T23336] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6330'. [ 463.886599][T23336] unsupported nlmsg_type 40 [ 463.909767][T23239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 463.920313][T23239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.988943][ T4203] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.996101][ T4203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.033126][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 464.033141][ T29] audit: type=1326 audit(1732789955.321:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23342 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.125726][ T29] audit: type=1326 audit(1732789955.361:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23342 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.149403][ T29] audit: type=1326 audit(1732789955.361:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23342 comm="syz.0.6332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.178177][ T4340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.365280][ T29] audit: type=1326 audit(1732789955.651:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.485508][ T29] audit: type=1326 audit(1732789955.711:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.509620][ T29] audit: type=1326 audit(1732789955.711:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.533328][ T29] audit: type=1326 audit(1732789955.711:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.557133][ T29] audit: type=1326 audit(1732789955.711:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.580842][ T29] audit: type=1326 audit(1732789955.711:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.604602][ T29] audit: type=1326 audit(1732789955.711:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23348 comm="syz.0.6334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff23c0809 code=0x7ffc0000 [ 464.633280][ T6034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.817297][T23239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.946563][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.954813][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.152192][T23239] veth0_vlan: entered promiscuous mode [ 465.154460][T23239] veth1_vlan: entered promiscuous mode [ 465.194950][T23391] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6350'. [ 465.227330][T23239] veth0_macvtap: entered promiscuous mode [ 465.233240][T23239] veth1_macvtap: entered promiscuous mode [ 465.237188][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237209][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237219][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237234][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237244][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237258][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237386][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237401][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237412][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237427][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237479][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237494][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237575][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237645][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237657][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237672][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237683][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237750][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237764][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237779][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237790][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237804][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237816][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237830][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237843][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237860][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.237922][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.237939][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.243972][T23239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.247149][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.247173][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.247190][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.247242][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.247257][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.247272][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.247283][T23239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 465.247297][T23239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.247816][T23239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.250136][T23239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.250181][T23239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.250277][T23239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.250316][T23239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.596138][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.658628][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.680880][T23418] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6360'. [ 466.046255][T23432] syzkaller0: entered promiscuous mode [ 466.199067][T23432] syzkaller0: entered allmulticast mode [ 466.231602][T23439] team0: Device gtp0 is of different type [ 466.310784][T23439] serio: Serial port ptm1 [ 466.425436][T23460] bond1: entered promiscuous mode [ 466.430713][T23460] bond1: entered allmulticast mode [ 466.436640][T23460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.479670][T23460] bond1 (unregistering): Released all slaves [ 466.684306][T23476] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6379'. [ 466.693459][T23476] 0ªX¹¦À: renamed from caif0 [ 466.702338][T23476] 0ªX¹¦À: entered allmulticast mode [ 466.707620][T23476] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 467.436750][T23504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6394'. [ 467.596401][T23515] 9pnet_fd: Insufficient options for proto=fd [ 467.693922][T23521] bond1: entered promiscuous mode [ 467.699098][T23521] bond1: entered allmulticast mode [ 467.710533][T23521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 467.723924][T23521] bond1 (unregistering): Released all slaves [ 467.816993][T23533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6406'. [ 467.874486][T23537] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6404'. [ 467.895537][T23537] 1ªX¹¦À: renamed from 60ªX¹¦À [ 467.910561][T23537] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 467.933864][T23545] 9pnet_fd: Insufficient options for proto=fd [ 468.098456][T23557] loop0: detected capacity change from 0 to 128 [ 468.203683][T23557] syz.0.6415: attempt to access beyond end of device [ 468.203683][T23557] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 468.294313][T23557] syz.0.6415: attempt to access beyond end of device [ 468.294313][T23557] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 468.342166][T23557] syz.0.6415: attempt to access beyond end of device [ 468.342166][T23557] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 468.378981][T23557] syz.0.6415: attempt to access beyond end of device [ 468.378981][T23557] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 468.628156][T23576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6424'. [ 468.649370][T23577] 9pnet_fd: Insufficient options for proto=fd [ 468.969932][T23603] wireguard0: entered promiscuous mode [ 468.975507][T23603] wireguard0: entered allmulticast mode [ 469.018049][T23612] 9pnet_fd: Insufficient options for proto=fd [ 469.071554][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 469.071572][ T29] audit: type=1326 audit(1732789960.361:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.132635][ T29] audit: type=1326 audit(1732789960.361:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.156488][ T29] audit: type=1326 audit(1732789960.361:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.180401][ T29] audit: type=1326 audit(1732789960.361:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.204112][ T29] audit: type=1326 audit(1732789960.361:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.227892][ T29] audit: type=1326 audit(1732789960.361:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.251737][ T29] audit: type=1326 audit(1732789960.361:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.275535][ T29] audit: type=1326 audit(1732789960.361:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f552c090809 code=0x7ffc0000 [ 469.292530][T23625] team0: Device gtp0 is of different type [ 469.299423][ T29] audit: type=1326 audit(1732789960.361:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f552c08f170 code=0x7ffc0000 [ 469.328736][ T29] audit: type=1326 audit(1732789960.361:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23615 comm="syz.1.6438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f552c08f170 code=0x7ffc0000 [ 469.385727][T23626] serio: Serial port ptm1 [ 469.437175][T23631] bond1: entered promiscuous mode [ 469.442526][T23631] bond1: entered allmulticast mode [ 469.448032][T23631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.459074][T23631] bond1 (unregistering): Released all slaves [ 469.761586][T23656] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6452'. [ 470.056673][T23666] bond1: entered promiscuous mode [ 470.062812][T23666] bond1: entered allmulticast mode [ 470.080107][T23666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.097882][T23662] loop0: detected capacity change from 0 to 8192 [ 470.175758][T23666] bond1 (unregistering): Released all slaves [ 470.347064][T23679] syzkaller0: entered promiscuous mode [ 470.352662][T23679] syzkaller0: entered allmulticast mode [ 470.538849][T23704] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6472'. [ 470.555394][T23700] bond1: entered promiscuous mode [ 470.560645][T23700] bond1: entered allmulticast mode [ 470.566138][T23700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.682107][T23700] bond1 (unregistering): Released all slaves [ 470.717028][T23708] bond1: entered promiscuous mode [ 470.722285][T23708] bond1: entered allmulticast mode [ 470.760154][T23708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.795713][T23708] bond1 (unregistering): Released all slaves [ 471.421879][T23718] bond1: entered promiscuous mode [ 471.426975][T23718] bond1: entered allmulticast mode [ 471.458590][T23718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 471.472156][T23718] bond1 (unregistering): Released all slaves [ 471.567652][T23731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6483'. [ 471.626499][T23733] loop0: detected capacity change from 0 to 128 [ 471.804601][T23733] syz.0.6484: attempt to access beyond end of device [ 471.804601][T23733] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 471.888177][T23733] syz.0.6484: attempt to access beyond end of device [ 471.888177][T23733] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 471.918980][T23733] syz.0.6484: attempt to access beyond end of device [ 471.918980][T23733] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 471.938265][T23739] serio: Serial port ptm0 [ 471.966398][T23733] syz.0.6484: attempt to access beyond end of device [ 471.966398][T23733] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 471.999370][T23746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6490'. [ 472.050206][T23751] wireguard1: entered promiscuous mode [ 472.055738][T23751] wireguard1: entered allmulticast mode [ 472.214011][T23773] loop0: detected capacity change from 0 to 1024 [ 472.228935][T23773] EXT4-fs: Ignoring removed oldalloc option [ 472.236314][T23773] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 472.317765][T23773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.427552][T23788] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6504'. [ 472.611013][T23798] wireguard1: entered promiscuous mode [ 472.616547][T23798] wireguard1: entered allmulticast mode [ 472.651433][T22528] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.807640][T23814] bond1: entered promiscuous mode [ 472.812821][T23814] bond1: entered allmulticast mode [ 472.819188][T23814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.834687][T23814] bond1 (unregistering): Released all slaves [ 472.904211][T23820] serio: Serial port ptm1 [ 473.156308][T23849] bond1: entered promiscuous mode [ 473.161445][T23849] bond1: entered allmulticast mode [ 473.167628][T23849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.179840][T23854] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6525'. [ 473.191141][T23849] bond1 (unregistering): Released all slaves [ 473.211217][T23854] 0ªX¹¦À: renamed from caif0 [ 473.218028][T23854] 0ªX¹¦À: entered allmulticast mode [ 473.223368][T23854] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 473.354246][T23867] FAULT_INJECTION: forcing a failure. [ 473.354246][T23867] name failslab, interval 1, probability 0, space 0, times 0 [ 473.367059][T23867] CPU: 0 UID: 0 PID: 23867 Comm: syz.0.6534 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 473.377537][T23867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.387630][T23867] Call Trace: [ 473.390926][T23867] [ 473.393923][T23867] dump_stack_lvl+0xf2/0x150 [ 473.398598][T23867] dump_stack+0x15/0x20 [ 473.402874][T23867] should_fail_ex+0x223/0x230 [ 473.407641][T23867] should_failslab+0x8f/0xb0 [ 473.412478][T23867] kmem_cache_alloc_noprof+0x52/0x320 [ 473.417883][T23867] ? vm_area_dup+0x2c/0x130 [ 473.422469][T23867] vm_area_dup+0x2c/0x130 [ 473.426869][T23867] __split_vma+0xf7/0x6a0 [ 473.431331][T23867] vma_modify+0xd3/0x1e0 [ 473.435592][T23867] vma_modify_policy+0xeb/0x120 [ 473.440565][T23867] mbind_range+0x1d8/0x490 [ 473.445007][T23867] __se_sys_mbind+0x915/0x1160 [ 473.449795][T23867] __x64_sys_mbind+0x78/0x90 [ 473.454428][T23867] x64_sys_call+0x2662/0x2dc0 [ 473.459202][T23867] do_syscall_64+0xc9/0x1c0 [ 473.463715][T23867] ? clear_bhb_loop+0x55/0xb0 [ 473.468458][T23867] ? clear_bhb_loop+0x55/0xb0 [ 473.473248][T23867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.479166][T23867] RIP: 0033:0x7f0ff23c0809 [ 473.483596][T23867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.503340][T23867] RSP: 002b:00007f0ff0a37058 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 473.511769][T23867] RAX: ffffffffffffffda RBX: 00007f0ff2585fa0 RCX: 00007f0ff23c0809 [ 473.519808][T23867] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000000020001000 [ 473.527789][T23867] RBP: 00007f0ff0a370a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.535766][T23867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.543747][T23867] R13: 0000000000000000 R14: 00007f0ff2585fa0 R15: 00007ffdb0e88ab8 [ 473.551733][T23867] [ 473.831070][T23890] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6541'. [ 474.361491][T23900] bond1: entered promiscuous mode [ 474.366591][T23900] bond1: entered allmulticast mode [ 474.372328][T23900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.384881][T23900] bond1 (unregistering): Released all slaves [ 474.484628][ T29] kauditd_printk_skb: 709 callbacks suppressed [ 474.484679][ T29] audit: type=1326 audit(1732789965.771:11674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.514654][ T29] audit: type=1326 audit(1732789965.771:11675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.534695][T23916] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6545'. [ 474.538541][ T29] audit: type=1326 audit(1732789965.771:11676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.571067][ T29] audit: type=1326 audit(1732789965.771:11677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.594870][ T29] audit: type=1326 audit(1732789965.771:11678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.618478][ T29] audit: type=1326 audit(1732789965.771:11679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.643684][ T29] audit: type=1326 audit(1732789965.771:11680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.677317][ T29] audit: type=1326 audit(1732789965.771:11681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.701019][ T29] audit: type=1326 audit(1732789965.771:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.724663][ T29] audit: type=1326 audit(1732789965.771:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.2.6548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddce660809 code=0x7ffc0000 [ 474.755190][T23918] bond1: entered promiscuous mode [ 474.760320][T23918] bond1: entered allmulticast mode [ 474.765749][T23918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.777361][T23918] bond1 (unregistering): Released all slaves [ 474.787663][T23916] 1ªX¹¦À: renamed from 60ªX¹¦À [ 474.794868][T23916] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 474.875555][T23937] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6552'. [ 474.884608][T23937] 0ªX¹¦À: renamed from 61ªX¹¦À [ 474.894700][T23937] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 475.975629][T23978] bond1: entered promiscuous mode [ 475.980833][T23978] bond1: entered allmulticast mode [ 476.017230][T23978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.027515][T23981] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6565'. [ 476.041014][T23978] bond1 (unregistering): Released all slaves [ 477.026463][T23993] 9pnet: Could not find request transport: f [ 477.054969][T24003] loop0: detected capacity change from 0 to 128 [ 477.099237][T24007] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6572'. [ 477.126591][T24007] 0ªX¹¦À: renamed from 61ªX¹¦À [ 477.139275][T24007] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 477.141406][T24003] syz.0.6571: attempt to access beyond end of device [ 477.141406][T24003] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 477.253918][T23998] syz.0.6571: attempt to access beyond end of device [ 477.253918][T23998] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 477.287715][T24003] syz.0.6571: attempt to access beyond end of device [ 477.287715][T24003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 477.304810][T24003] syz.0.6571: attempt to access beyond end of device [ 477.304810][T24003] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 477.369922][T24023] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6579'. [ 478.187392][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6582'. [ 478.288841][T24033] wireguard0: entered promiscuous mode [ 478.294441][T24033] wireguard0: entered allmulticast mode [ 478.330031][T24041] C: renamed from team_slave_0 (while UP) [ 478.355737][T24041] netlink: 'syz.3.6585': attribute type 1 has an invalid length. [ 478.363539][T24041] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 478.416853][T24045] team0: Device gtp0 is of different type [ 478.533313][T24054] serio: Serial port ptm0 [ 479.456420][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6604'. [ 479.528400][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 479.528425][ T29] audit: type=1326 audit(1732789970.811:11793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.611847][ T29] audit: type=1326 audit(1732789970.821:11794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.635618][ T29] audit: type=1326 audit(1732789970.821:11795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.659282][ T29] audit: type=1326 audit(1732789970.821:11796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.683561][ T29] audit: type=1326 audit(1732789970.821:11797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.707541][ T29] audit: type=1326 audit(1732789970.821:11798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.731261][ T29] audit: type=1326 audit(1732789970.821:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.754985][ T29] audit: type=1326 audit(1732789970.821:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.778690][ T29] audit: type=1326 audit(1732789970.821:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 479.802438][ T29] audit: type=1326 audit(1732789970.821:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24109 comm="syz.3.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f551d1a0809 code=0x7ffc0000 [ 480.292680][T24156] ================================================================== [ 480.300810][T24156] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 480.307675][T24156] [ 480.309991][T24156] write to 0xffff8881033fba08 of 8 bytes by task 24157 on cpu 0: [ 480.317702][T24156] call_rcu+0x47/0x430 [ 480.321777][T24156] mas_wmb_replace+0xfbd/0x14d0 [ 480.326634][T24156] mas_wr_store_entry+0x1681/0x2d10 [ 480.331832][T24156] mas_store_prealloc+0x6bf/0x960 [ 480.336882][T24156] __mmap_region+0xdca/0x13f0 [ 480.341564][T24156] mmap_region+0x164/0x1e0 [ 480.345978][T24156] do_mmap+0x718/0xb60 [ 480.350049][T24156] vm_mmap_pgoff+0x133/0x290 [ 480.354760][T24156] ksys_mmap_pgoff+0xd0/0x330 [ 480.359439][T24156] x64_sys_call+0x1940/0x2dc0 [ 480.364117][T24156] do_syscall_64+0xc9/0x1c0 [ 480.368616][T24156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.374643][T24156] [ 480.376965][T24156] read to 0xffff8881033fba08 of 8 bytes by task 24156 on cpu 1: [ 480.384604][T24156] mtree_range_walk+0x140/0x460 [ 480.389459][T24156] mas_walk+0x16e/0x320 [ 480.393611][T24156] lock_vma_under_rcu+0x95/0x260 [ 480.398581][T24156] exc_page_fault+0x150/0x650 [ 480.403289][T24156] asm_exc_page_fault+0x26/0x30 [ 480.408148][T24156] [ 480.410465][T24156] value changed: 0x000000001fffefff -> 0xffff8881033fbc08 [ 480.417578][T24156] [ 480.419905][T24156] Reported by Kernel Concurrency Sanitizer on: [ 480.426051][T24156] CPU: 1 UID: 0 PID: 24156 Comm: syz.1.6622 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 480.436500][T24156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 480.446560][T24156] ==================================================================