last executing test programs: 27.109669903s ago: executing program 3 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 27.040073362s ago: executing program 3 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.692375802s ago: executing program 3 (id=2248): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x8040, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000580)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0xffffffff, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r7, 0x4}}]}, 0x144}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x6, 0x80}, {0x5, 0x5}]}]}, {0x0, [0x5f, 0x13da398e2ba6fa20, 0x5f, 0x2e, 0x71, 0x30, 0x30, 0x5f, 0x30]}}, &(0x7f0000000040), 0x47, 0x0, 0x0, 0x2, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x1, 0x4, 0xa9a1, 0xffffffffffffffff, 0x6, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @value=r8, @void, @void, @value}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x400000}]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r3, &(0x7f0000000500)={0x80000000}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 26.646642682s ago: executing program 3 (id=2249): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1, @ANYRES64=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000001"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000002640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x20000000}}], 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) pwritev(r8, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0xa, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="34bbe0b990b2751443bbaea9300a317c6bb7a91c4768e59a79e0dc5a950f623a1d8814a22b806e78937f18f18c9eab0e609b7912d207cf35ef3b51753954824ac83baa9c53cd1e1f575fd83a7a671d237cebed6bf94e954e860950a2994e7d900867633a652af833"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000480)={0x1d, r13}, 0x10) close(r12) 26.534209111s ago: executing program 3 (id=2251): ioperm(0x1, 0x5a, 0x1000) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x700, 0x3, 0x2, {{0x1e, 0x4, 0x1, 0x9, 0x78, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@private=0xa010100, 0x10001}, {@rand_addr=0x64010102, 0x6f4}, {@broadcast, 0x2}]}, @lsrr={0x83, 0xb, 0x86, [@loopback, @local]}, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x4, [{@private=0xa010101, 0xfffffff9}, {@local, 0x10000}]}, @timestamp={0x44, 0x1c, 0x36, 0x0, 0x1, [0x45, 0x401, 0x9f, 0x3, 0x4, 0x3]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x2f, 0x91, 0x2, 0x1, 0x9, @private0, @empty, 0x7, 0x20, 0x68, 0x81}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x7800, 0x40, 0x7f, 0x101, {{0x16, 0x4, 0x3, 0x9, 0x58, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0x17, 0xca, [@loopback, @multicast1, @remote, @local, @broadcast]}, @timestamp={0x44, 0xc, 0xec, 0x0, 0xf, [0x3ff, 0x9]}, @lsrr={0x83, 0xf, 0xfa, [@empty, @multicast2, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x43, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ra={0x94, 0x4}, @end]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r11, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xe}, {}, {0x0, 0xfffe}}}, 0x24}}, 0x4045014) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x80, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x4004050) 26.434743441s ago: executing program 3 (id=2253): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7934, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1, 0x1, 0xf, 0x8000}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000ae9a7f2b", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000280)={0x1d, r8, 0x0, {0x1, 0xf0, 0x1}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0xd06, &(0x7f0000000f40)=ANY=[], 0x0) 11.371735462s ago: executing program 32 (id=2253): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x7934, 0x0, &(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1, 0x1, 0xf, 0x8000}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000ae9a7f2b", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, 0x0) write(r4, 0x0, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000280)={0x1d, r8, 0x0, {0x1, 0xf0, 0x1}}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r10, {0xfff2, 0x4}, {0x0, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0xd06, &(0x7f0000000f40)=ANY=[], 0x0) 3.754942051s ago: executing program 5 (id=2564): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) chdir(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) clock_gettime(0x0, &(0x7f0000005840)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r6, 0x0, 0xfffffffffffffffe}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r7, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.793399208s ago: executing program 5 (id=2578): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000002000000010000000b00000000000000", @ANYRES32, @ANYBLOB="f6cef5c53d60d597ff000000000000feff70de6601bd8be66df3ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000b7c00d84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000001000000000000000000000000000000000000000f0bb3726debec836c3ef98911ec9e7eae85cbbc"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 2.388114107s ago: executing program 4 (id=2586): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) 2.383568697s ago: executing program 4 (id=2588): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) chdir(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) clock_gettime(0x0, &(0x7f0000005840)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r6, 0x0, 0xfffffffffffffffe}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r7, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.907578815s ago: executing program 5 (id=2589): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000cda000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000da5000/0x4000)=nil) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x1407, 0x300, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000b37000/0x4000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000090040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x29, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) r8 = memfd_create(&(0x7f0000000080), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) ioctl$BTRFS_IOC_RM_DEV(r10, 0x5000940b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00'}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) splice(r6, 0x0, r8, 0x0, 0x408cd, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff0000000000000000850000001800000085000000230000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1.787040815s ago: executing program 2 (id=2592): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095c93f66045a305f77149de267fcaca27ac99c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.575391245s ago: executing program 2 (id=2594): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0bffffff060000000805000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES8=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x1, 0x1088f109, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000002000)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x4e23}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x579}, {}, {}, 0x70bd27, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r8, 0x567, 0x60, 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) 1.568815125s ago: executing program 1 (id=2595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100000000be84be7278953da500", @ANYRES32=r2, @ANYBLOB="004100000000000034002b800800", @ANYBLOB='\b'], 0x54}}, 0x0) 1.525701025s ago: executing program 1 (id=2596): unshare(0x62020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) 1.452253925s ago: executing program 4 (id=2598): unshare(0x62020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) 1.434592264s ago: executing program 0 (id=2599): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000002000000010000000b00000000000000", @ANYRES32, @ANYBLOB="f6cef5c53d60d597ff000000000000feff70de6601bd8be66df3ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000b7c00d84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000001000000000000000000000000000000000000000f0bb3726debec836c3ef98911ec9e7eae85cbbc"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 1.207943254s ago: executing program 2 (id=2600): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010000, 0x0, @perf_bp={&(0x7f0000000200), 0x3}, 0xc00, 0x152, 0x6, 0x6, 0xcea, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007c07010010000000"], &(0x7f0000000580)='GPL\x00', 0x400000, 0x81, &(0x7f00000005c0)=""/129, 0x41100, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xa, 0x40000}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x3, 0x5, 0x6, 0x3}, {0x2, 0x1, 0x3, 0x7}], 0x10, 0xa0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x2c, 0x11, 0x839, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r1, {0xc}, {0xfff3}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x2}]}, 0x2c}}, 0x20040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.132196893s ago: executing program 1 (id=2601): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) flock(r1, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000800000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}}, 0x0) 1.116246414s ago: executing program 0 (id=2602): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100000000be84be7278953da500", @ANYRES32=r2, @ANYBLOB="004100000000000034002b8008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r3], 0x54}}, 0x0) 1.050554094s ago: executing program 0 (id=2603): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000f14010027bd0ef75bbc556579f41590b96a000000df25080045006d6164b1da1ae088a700"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = gettid() lsetxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0xfff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r8 = socket$inet_sctp(0x2, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb447}}, 0x9, 0x7f, 0x1, 0x0, 0x7fff}, &(0x7f00000000c0)=0x98) 1.025728024s ago: executing program 1 (id=2604): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095c93f66045a305f77149de267fcaca27ac99c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.006163244s ago: executing program 5 (id=2605): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) creat(0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) accept4(r3, 0x0, 0x0, 0x0) 955.624813ms ago: executing program 4 (id=2606): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x20010844) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, 0x0, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000207, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) r10 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3c, 0x1, 0x9, 0x0, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x95, 0x3}, 0x8800, 0xdfffffff, 0x0, 0x6, 0x0, 0x268, 0xfff9, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_rxnfc={0x1c, 0x9, 0x3, {0xe, @ah_ip4_spec={@loopback, @multicast1, 0x5, 0xff}, {0x0, @remote, 0x9, 0x3, [0xd, 0x1]}, @udp_ip4_spec={@multicast2, @remote, 0x4e20, 0x4e23, 0x4}, {0x0, @broadcast, 0x7, 0xffff, [0x9, 0x81]}, 0x5, 0x80000001}, 0x2, [0x100, 0xaf87e97a]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r12, 0x0) 915.102783ms ago: executing program 4 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100000000be84be7278953da500", @ANYRES32=r2, @ANYBLOB="004100000000000034002b800800", @ANYBLOB='\b'], 0x54}}, 0x0) 880.605003ms ago: executing program 4 (id=2608): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) chdir(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) lchown(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) clock_gettime(0x0, &(0x7f0000005840)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r6, 0x0, 0xfffffffffffffffe}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r7, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 742.084222ms ago: executing program 1 (id=2609): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x8040, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000580)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0xffffffff, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200019, {{@in6=@dev={0xfe, 0x80, '\x00', 0xfd}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r7, 0x4}}]}, 0x144}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0x7, 0x2, 0x0, 0x5, 0x1, 0xfffffffc, [{0x9, 0x1, 0x6}, {0xc, 0x1, 0x5}]}, @enum={0xf, 0x3, 0x0, 0x6, 0x4, [{0x7, 0x1}, {0x6, 0x80}, {0x5, 0x5}]}]}, {0x0, [0x13da398e2ba6fa20, 0x5f, 0x2e, 0x71, 0x30, 0x30, 0x5f, 0x30]}}, &(0x7f0000000040), 0x6a, 0x0, 0x0, 0x2, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x1, 0x4, 0xa9a1, 0xffffffffffffffff, 0x6, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x0, @value=r8, @void, @void, @value}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x400000}]}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r3, &(0x7f0000000500)={0x80000000}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0x9}, {0x1}}}, 0x24}}, 0x40044) 680.265292ms ago: executing program 1 (id=2610): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000063740e6a6f76d124000000000000000027000000cfd8ca9d16ad89363ebea59ca47b726622e90e968652f9e57436113680178372c9d204007e63c86fc364ded89f154fa7ea7722dcfe41439ecb4ac6a61c5d565f37942b821fb03a179d7efd3c5c88da3b3bd5b596548f87d5b944eb659182e1fcfacfead15b5b67c1d53d9deec21dfeade59c6c4ebc7e80e0e8b1669af8e2c05a111c48d111c046da1579401318d51af2fb8233b2bc23a58aa68f16d28b13b4ffe608a5708d43e0a5e8c80a45328491a05174cb1b21ed5480790e4a98d7c99a"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0x9}, &(0x7f0000000380)=0x8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd']) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000e279ffe21fb53557b5243aa98700000400cdd5590f0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0xfc}]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11320, 0x2ee7, 0x3, 0x4, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x200000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) close_range(r7, r7, 0x0) write$binfmt_misc(r6, &(0x7f0000001280), 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x3a) 394.915712ms ago: executing program 2 (id=2611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0xa, 0x7, 0x0) r1 = creat(&(0x7f0000000280)='./file0/../file0\x00', 0xd49d94c6ecb1e713) sendmsg$kcm(r0, 0x0, 0xc0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8c) mkdir(0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x5e5, &(0x7f00000003c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) io_cancel(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x40, r4, &(0x7f00000004c0)="45bc25376ba924b3297f953b865636e229c592552ef1ecea9fdb95e24378176129491961821c0f0614d0c7ea40ff1f2060024e8b43755ef5e824808bdeb647602c5e8b016c2eb56ffb94c2e89d403c96023dd3", 0x53, 0x80000000, 0x0, 0x1, r1}, &(0x7f0000000640)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a82758a8e274acf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 286.687442ms ago: executing program 2 (id=2612): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xbe69ae51be7b2c52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000002000000010000000b00000000000000", @ANYRES32, @ANYBLOB="f6cef5c53d60d597ff000000000000feff70de6601bd8be66df3ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000b7c00d84", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000001000000000000000000000000000000000000000f0bb3726debec836c3ef98911ec9e7eae85cbbc"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x80000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 173.103071ms ago: executing program 0 (id=2613): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100000000be84be7278953da500", @ANYRES32=r2, @ANYBLOB="004100000000000034002b8008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r3], 0x54}}, 0x0) 153.630051ms ago: executing program 0 (id=2614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) flock(r1, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000800000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}}, 0x0) 138.732151ms ago: executing program 5 (id=2615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x828c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5, 0x0, 0x8000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 108.903131ms ago: executing program 0 (id=2616): unshare(0x62020600) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00', 0x1}, 0x18) 63.905921ms ago: executing program 2 (id=2617): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x8957) r5 = socket$inet_dccp(0x2, 0x6, 0x0) creat(0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) r6 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=2618): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x20010844) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, 0x0, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000207, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) r10 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3c, 0x1, 0x9, 0x0, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x95, 0x3}, 0x8800, 0xdfffffff, 0x0, 0x6, 0x0, 0x268, 0xfff9, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_rxnfc={0x1c, 0x9, 0x3, {0xe, @ah_ip4_spec={@loopback, @multicast1, 0x5, 0xff}, {0x0, @remote, 0x9, 0x3, [0xd, 0x1]}, @udp_ip4_spec={@multicast2, @remote, 0x4e20, 0x4e23, 0x4}, {0x0, @broadcast, 0x7, 0xffff, [0x9, 0x81]}, 0x5, 0x80000001}, 0x2, [0x100, 0xaf87e97a]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r12, 0x0) kernel console output (not intermixed with test programs): sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.829677][ T29] audit: type=1326 audit(1740569281.900:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.853576][ T29] audit: type=1326 audit(1740569281.900:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.877147][ T29] audit: type=1326 audit(1740569281.900:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.901602][ T29] audit: type=1326 audit(1740569281.900:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.925242][ T29] audit: type=1326 audit(1740569281.900:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.925272][ T29] audit: type=1326 audit(1740569281.900:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.925314][ T29] audit: type=1326 audit(1740569281.900:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.1.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 105.983740][ T7699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7699 comm=syz.0.1669 [ 106.092227][ T7718] tipc: Enabling of bearer rejected, failed to enable media [ 106.102097][ T7721] tipc: Enabling of bearer rejected, failed to enable media [ 106.178661][ T7725] IPVS: You probably need to specify IP address on multicast interface. [ 106.187392][ T7725] IPVS: Error connecting to the multicast addr [ 106.238116][ T7732] __nla_validate_parse: 15 callbacks suppressed [ 106.238161][ T7732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 106.298671][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 106.326651][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1685'. [ 106.376210][ T7738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 106.388979][ T7738] bridge0: port 3(batadv0) entered blocking state [ 106.395594][ T7738] bridge0: port 3(batadv0) entered disabled state [ 106.406132][ T7738] batadv0: entered allmulticast mode [ 106.411994][ T7738] batadv0: entered promiscuous mode [ 106.630042][ T7749] netlink: 'syz.1.1690': attribute type 39 has an invalid length. [ 106.669548][ T7754] IPVS: You probably need to specify IP address on multicast interface. [ 106.680618][ T7754] IPVS: Error connecting to the multicast addr [ 106.733222][ T7764] lo: entered allmulticast mode [ 106.740946][ T7766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1696'. [ 106.741411][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 106.773798][ T7763] lo: left allmulticast mode [ 106.783058][ T7768] tipc: Enabled bearer , priority 0 [ 106.791243][ T7768] +: renamed from syzkaller0 [ 106.800551][ T7768] tipc: Disabling bearer [ 106.806235][ T7770] block device autoloading is deprecated and will be removed. [ 106.895422][ T1094] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 106.904824][ T1094] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 106.915323][ T7775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7775 comm=syz.1.1701 [ 106.976661][ T7779] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7779 comm=syz.1.1701 [ 107.037321][ T7780] netlink: 'syz.4.1702': attribute type 16 has an invalid length. [ 107.045208][ T7780] netlink: 'syz.4.1702': attribute type 3 has an invalid length. [ 107.053026][ T7780] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 107.060854][ T7780] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 107.068601][ T7780] netlink: 'syz.4.1702': attribute type 2 has an invalid length. [ 107.076342][ T7780] netlink: 64006 bytes leftover after parsing attributes in process `syz.4.1702'. [ 107.151042][ T7785] IPVS: You probably need to specify IP address on multicast interface. [ 107.159587][ T7785] IPVS: Error connecting to the multicast addr [ 107.183141][ T7787] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 107.249602][ T7793] tipc: Enabling of bearer rejected, failed to enable media [ 107.259116][ T7795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1707'. [ 107.298639][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 107.340627][ T7805] lo: entered allmulticast mode [ 107.346913][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'. [ 107.356318][ T7804] lo: left allmulticast mode [ 107.411036][ T7810] tipc: Enabled bearer , priority 0 [ 107.425503][ T7810] +: renamed from syzkaller0 [ 107.431830][ T7810] tipc: Disabling bearer [ 107.608305][ T7816] tipc: Enabled bearer , priority 0 [ 107.616302][ T7816] +: renamed from syzkaller0 [ 107.622366][ T7816] tipc: Disabling bearer [ 108.117822][ T7836] loop3: detected capacity change from 0 to 256 [ 108.337353][ T7857] lo: entered allmulticast mode [ 108.354606][ T7844] netlink: 'syz.3.1730': attribute type 39 has an invalid length. [ 108.371365][ T7856] lo: left allmulticast mode [ 108.417386][ T7855] IPVS: You probably need to specify IP address on multicast interface. [ 108.431028][ T7867] sd 0:0:1:0: device reset [ 108.448098][ T7855] IPVS: Error connecting to the multicast addr [ 108.566635][ T7877] block device autoloading is deprecated and will be removed. [ 109.158960][ T7903] IPVS: You probably need to specify IP address on multicast interface. [ 109.180168][ T7903] IPVS: Error connecting to the multicast addr [ 109.398460][ T7905] netlink: 'syz.1.1754': attribute type 39 has an invalid length. [ 109.736040][ T7924] lo: entered allmulticast mode [ 109.769819][ T7923] lo: left allmulticast mode [ 109.820661][ T7932] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7932 comm=syz.3.1764 [ 109.867776][ T7939] batadv0 (unregistering): left allmulticast mode [ 109.874426][ T7939] batadv0 (unregistering): left promiscuous mode [ 109.880863][ T7939] bridge0: port 3(batadv0) entered disabled state [ 109.890922][ T7940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7940 comm=syz.3.1764 [ 109.914676][ T7942] batadv0 (unregistering): left allmulticast mode [ 109.921146][ T7942] batadv0 (unregistering): left promiscuous mode [ 109.927603][ T7942] bridge0: port 3(batadv0) entered disabled state [ 110.753760][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 110.753784][ T29] audit: type=1326 audit(1740569286.920:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.2.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 110.794246][ T7962] loop3: detected capacity change from 0 to 128 [ 110.806489][ T7965] lo: entered allmulticast mode [ 110.812982][ T7964] lo: left allmulticast mode [ 110.874921][ T7962] bio_check_eod: 7760 callbacks suppressed [ 110.875037][ T7962] syz.3.1771: attempt to access beyond end of device [ 110.875037][ T7962] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 110.970555][ T7962] syz.3.1771: attempt to access beyond end of device [ 110.970555][ T7962] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 110.998724][ T7962] syz.3.1771: attempt to access beyond end of device [ 110.998724][ T7962] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.034713][ T7977] syz.3.1771: attempt to access beyond end of device [ 111.034713][ T7977] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.061067][ T7979] tipc: Enabling of bearer rejected, failed to enable media [ 111.091504][ T7977] syz.3.1771: attempt to access beyond end of device [ 111.091504][ T7977] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.148559][ T29] audit: type=1326 audit(1740569287.310:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.158208][ T7962] syz.3.1771: attempt to access beyond end of device [ 111.158208][ T7962] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.213902][ T29] audit: type=1326 audit(1740569287.310:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.237324][ T29] audit: type=1326 audit(1740569287.310:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.260764][ T29] audit: type=1326 audit(1740569287.310:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.281759][ T7953] netlink: 'syz.4.1768': attribute type 39 has an invalid length. [ 111.284224][ T29] audit: type=1326 audit(1740569287.310:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.315461][ T29] audit: type=1326 audit(1740569287.310:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.319681][ T7977] syz.3.1771: attempt to access beyond end of device [ 111.319681][ T7977] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.338833][ T29] audit: type=1326 audit(1740569287.310:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.338906][ T29] audit: type=1326 audit(1740569287.310:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.357720][ T7977] syz.3.1771: attempt to access beyond end of device [ 111.357720][ T7977] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.375416][ T29] audit: type=1326 audit(1740569287.310:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7982 comm="syz.2.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 111.477554][ T7962] syz.3.1771: attempt to access beyond end of device [ 111.477554][ T7962] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.509502][ T7962] syz.3.1771: attempt to access beyond end of device [ 111.509502][ T7962] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 111.647629][ T7990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7990 comm=syz.4.1780 [ 111.700223][ T7991] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7991 comm=syz.4.1780 [ 111.737286][ T7986] IPVS: You probably need to specify IP address on multicast interface. [ 111.753570][ T7986] IPVS: Error connecting to the multicast addr [ 111.865397][ T7998] __nla_validate_parse: 15 callbacks suppressed [ 111.865419][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1781'. [ 111.903239][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 112.525694][ T8018] tipc: Enabling of bearer rejected, failed to enable media [ 112.556095][ T8022] dns_resolver: Unsupported content type (2) [ 112.682245][ T8031] sd 0:0:1:0: device reset [ 112.708569][ T8034] +: renamed from syzkaller0 [ 112.718526][ T8037] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8037 comm=syz.3.1797 [ 112.796490][ T8041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8041 comm=syz.3.1797 [ 112.871436][ T8029] IPVS: You probably need to specify IP address on multicast interface. [ 112.883393][ T8029] IPVS: Error connecting to the multicast addr [ 112.893312][ T8046] tipc: Enabling of bearer rejected, failed to enable media [ 113.105704][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 113.190565][ T8035] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 113.203913][ T8035] syz.1.1796 (8035) used greatest stack depth: 10472 bytes left [ 113.619326][ T8079] tipc: Enabling of bearer rejected, failed to enable media [ 113.701997][ T8077] netlink: 'syz.3.1810': attribute type 39 has an invalid length. [ 113.753919][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1815'. [ 113.797333][ T8092] block device autoloading is deprecated and will be removed. [ 113.873156][ T8094] IPVS: You probably need to specify IP address on multicast interface. [ 113.881852][ T8094] IPVS: Error connecting to the multicast addr [ 113.897729][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'. [ 113.924142][ T8098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8098 comm=syz.3.1820 [ 113.925987][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 113.970484][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1823'. [ 113.979570][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 113.990014][ T8105] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8105 comm=syz.3.1820 [ 114.019987][ T8107] +: renamed from syzkaller0 [ 114.148485][ T8111] netlink: 'syz.2.1826': attribute type 39 has an invalid length. [ 114.258271][ T8121] tipc: Enabling of bearer rejected, failed to enable media [ 114.684640][ T8131] tipc: Enabled bearer , priority 0 [ 114.692226][ T8131] +: renamed from syzkaller0 [ 114.698603][ T8131] tipc: Disabling bearer [ 114.825212][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 114.910165][ T8142] IPVS: You probably need to specify IP address on multicast interface. [ 114.918801][ T8142] IPVS: Error connecting to the multicast addr [ 115.457421][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 115.461115][ T8151] netlink: 'syz.2.1840': attribute type 39 has an invalid length. [ 115.518278][ T8158] block device autoloading is deprecated and will be removed. [ 115.610356][ T8170] lo: entered allmulticast mode [ 115.617657][ T8169] lo: left allmulticast mode [ 116.104881][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 116.104896][ T29] audit: type=1326 audit(1740569292.270:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.134574][ T29] audit: type=1326 audit(1740569292.270:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.158036][ T29] audit: type=1326 audit(1740569292.270:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.181643][ T29] audit: type=1326 audit(1740569292.270:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.194790][ T8191] block device autoloading is deprecated and will be removed. [ 116.205200][ T29] audit: type=1326 audit(1740569292.270:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.236202][ T29] audit: type=1326 audit(1740569292.270:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.259946][ T29] audit: type=1326 audit(1740569292.270:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.283822][ T29] audit: type=1326 audit(1740569292.270:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.307575][ T29] audit: type=1326 audit(1740569292.270:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.331039][ T29] audit: type=1326 audit(1740569292.270:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8188 comm="syz.4.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 116.455675][ T8193] netlink: 'syz.4.1856': attribute type 39 has an invalid length. [ 116.469499][ T8203] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8203 comm=syz.2.1859 [ 116.509985][ T8205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8205 comm=syz.0.1860 [ 116.524980][ T8206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8206 comm=syz.2.1859 [ 116.567961][ T8210] block device autoloading is deprecated and will be removed. [ 116.591538][ T8213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8213 comm=syz.0.1860 [ 116.645743][ T8219] loop3: detected capacity change from 0 to 512 [ 116.654375][ T8219] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1866: corrupted in-inode xattr: invalid ea_ino [ 116.667902][ T8219] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.1866: couldn't read orphan inode 15 (err -117) [ 116.680438][ T8219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.709356][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.251943][ T8227] __nla_validate_parse: 5 callbacks suppressed [ 117.251956][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 117.469419][ T8231] netlink: 'syz.1.1871': attribute type 39 has an invalid length. [ 117.565227][ T8242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1874'. [ 117.603038][ T8249] tipc: Enabling of bearer rejected, failed to enable media [ 117.641615][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 117.651630][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'. [ 117.700836][ T8263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8263 comm=syz.4.1883 [ 117.702006][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 117.728170][ T8256] IPVS: You probably need to specify IP address on multicast interface. [ 117.736774][ T8256] IPVS: Error connecting to the multicast addr [ 117.762895][ T8267] +: renamed from syzkaller0 [ 118.260011][ T8273] IPVS: You probably need to specify IP address on multicast interface. [ 118.268458][ T8273] IPVS: Error connecting to the multicast addr [ 118.305645][ T8277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1889'. [ 118.440636][ T8281] block device autoloading is deprecated and will be removed. [ 118.669390][ T8285] netlink: 'syz.1.1893': attribute type 39 has an invalid length. [ 119.030192][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1901'. [ 119.133433][ T8300] netlink: 'syz.3.1900': attribute type 39 has an invalid length. [ 119.326438][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1903'. [ 119.428926][ T8324] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8324 comm=syz.2.1906 [ 119.431308][ T8326] tipc: Enabling of bearer rejected, failed to enable media [ 119.468931][ T8328] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1908'. [ 119.728410][ T8339] block device autoloading is deprecated and will be removed. [ 120.276341][ T8352] tipc: Enabling of bearer rejected, failed to enable media [ 120.311447][ T8354] tipc: Enabling of bearer rejected, failed to enable media [ 120.444424][ T8356] IPVS: You probably need to specify IP address on multicast interface. [ 120.452803][ T8356] IPVS: Error connecting to the multicast addr [ 120.579996][ T8358] IPVS: You probably need to specify IP address on multicast interface. [ 120.609615][ T8358] IPVS: Error connecting to the multicast addr [ 120.721367][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 120.782608][ T8369] IPVS: You probably need to specify IP address on multicast interface. [ 120.803644][ T8369] IPVS: Error connecting to the multicast addr [ 120.824915][ T8380] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8380 comm=syz.3.1928 [ 120.829757][ T8360] netlink: 'syz.0.1922': attribute type 39 has an invalid length. [ 120.878491][ T8384] tipc: Enabling of bearer rejected, failed to enable media [ 121.398135][ T8405] +: renamed from syzkaller0 [ 121.519242][ T8419] lo: entered allmulticast mode [ 121.529954][ T8418] lo: left allmulticast mode [ 121.589274][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 121.589291][ T29] audit: type=1326 audit(1740569297.750:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.4.1944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x0 [ 121.797331][ T8417] netlink: 'syz.2.1942': attribute type 39 has an invalid length. [ 121.883052][ T29] audit: type=1326 audit(1740569298.040:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 121.932400][ T29] audit: type=1326 audit(1740569298.070:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 121.934527][ T8423] netlink: 'syz.1.1945': attribute type 39 has an invalid length. [ 121.955961][ T29] audit: type=1326 audit(1740569298.070:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 121.987232][ T29] audit: type=1326 audit(1740569298.070:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 122.010704][ T29] audit: type=1326 audit(1740569298.070:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 122.034340][ T29] audit: type=1326 audit(1740569298.070:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 122.057876][ T29] audit: type=1326 audit(1740569298.090:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8436 comm="syz.2.1949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 122.239769][ T8455] +: renamed from syzkaller0 [ 122.260506][ T8456] __nla_validate_parse: 7 callbacks suppressed [ 122.260523][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 122.326746][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1955'. [ 122.380228][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1956'. [ 122.438365][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 122.465819][ T29] audit: type=1326 audit(1740569298.630:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.4.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 122.489457][ T29] audit: type=1326 audit(1740569298.630:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.4.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbbfedd169 code=0x7ffc0000 [ 122.557485][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 122.589148][ T8479] +: renamed from syzkaller0 [ 122.629930][ T8481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1966'. [ 122.698041][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1970'. [ 122.813358][ T8497] IPVS: You probably need to specify IP address on multicast interface. [ 122.819142][ T8500] FAULT_INJECTION: forcing a failure. [ 122.819142][ T8500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.822887][ T8497] IPVS: Error connecting to the multicast addr [ 122.834963][ T8500] CPU: 0 UID: 0 PID: 8500 Comm: syz.3.1975 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 122.834997][ T8500] Tainted: [W]=WARN [ 122.835005][ T8500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.835020][ T8500] Call Trace: [ 122.835037][ T8500] [ 122.835045][ T8500] dump_stack_lvl+0xf2/0x150 [ 122.835080][ T8500] dump_stack+0x15/0x1a [ 122.835108][ T8500] should_fail_ex+0x24a/0x260 [ 122.835213][ T8500] should_fail_alloc_page+0xfd/0x110 [ 122.835251][ T8500] alloc_pages_bulk_noprof+0xfd/0x570 [ 122.835364][ T8500] copy_splice_read+0xe5/0x5b0 [ 122.835393][ T8500] ? __kmalloc_noprof+0x284/0x3f0 [ 122.835451][ T8500] ? alloc_pipe_info+0x1cb/0x360 [ 122.835497][ T8500] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 122.835529][ T8500] splice_direct_to_actor+0x28b/0x670 [ 122.835569][ T8500] ? __pfx_direct_splice_actor+0x10/0x10 [ 122.835605][ T8500] do_splice_direct+0xd7/0x150 [ 122.835645][ T8500] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 122.835742][ T8500] do_sendfile+0x398/0x660 [ 122.835767][ T8500] __x64_sys_sendfile64+0x110/0x150 [ 122.835806][ T8500] x64_sys_call+0xfbd/0x2dc0 [ 122.835871][ T8500] do_syscall_64+0xc9/0x1c0 [ 122.835977][ T8500] ? clear_bhb_loop+0x55/0xb0 [ 122.836008][ T8500] ? clear_bhb_loop+0x55/0xb0 [ 122.836038][ T8500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.836132][ T8500] RIP: 0033:0x7f21ecf1d169 [ 122.836170][ T8500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.836211][ T8500] RSP: 002b:00007f21eb566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 122.836232][ T8500] RAX: ffffffffffffffda RBX: 00007f21ed136080 RCX: 00007f21ecf1d169 [ 122.836242][ T8500] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 122.836254][ T8500] RBP: 00007f21eb566090 R08: 0000000000000000 R09: 0000000000000000 [ 122.836266][ T8500] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.836279][ T8500] R13: 0000000000000000 R14: 00007f21ed136080 R15: 00007ffd55e45d68 [ 122.836299][ T8500] [ 123.015604][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 123.080515][ T8504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1977'. [ 123.091536][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1978'. [ 123.129487][ T8508] +: renamed from syzkaller0 [ 123.335683][ T8549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.342729][ T8549] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 123.353846][ T8549] bond0: (slave sit0): Error -95 calling set_mac_address [ 123.379899][ T8551] lo: entered allmulticast mode [ 123.394491][ T8550] lo: left allmulticast mode [ 123.417495][ T8555] +: renamed from syzkaller0 [ 123.527027][ T8567] block device autoloading is deprecated and will be removed. [ 123.613785][ T8569] ALSA: seq fatal error: cannot create timer (-19) [ 123.905692][ T8601] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 124.095665][ T8615] IPv6: Can't replace route, no match found [ 124.258610][ T8640] FAULT_INJECTION: forcing a failure. [ 124.258610][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.271738][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.0.2033 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 124.271774][ T8640] Tainted: [W]=WARN [ 124.271782][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.271797][ T8640] Call Trace: [ 124.271804][ T8640] [ 124.271812][ T8640] dump_stack_lvl+0xf2/0x150 [ 124.271845][ T8640] dump_stack+0x15/0x1a [ 124.271898][ T8640] should_fail_ex+0x24a/0x260 [ 124.271943][ T8640] should_fail+0xb/0x10 [ 124.271971][ T8640] should_fail_usercopy+0x1a/0x20 [ 124.272048][ T8640] _copy_from_iter+0xd5/0xd00 [ 124.272082][ T8640] ? kmalloc_reserve+0x16e/0x190 [ 124.272104][ T8640] ? __build_skb_around+0x196/0x1f0 [ 124.272151][ T8640] ? __alloc_skb+0x21f/0x310 [ 124.272195][ T8640] ? __virt_addr_valid+0x1ed/0x250 [ 124.272216][ T8640] ? __check_object_size+0x364/0x520 [ 124.272239][ T8640] netlink_sendmsg+0x460/0x6e0 [ 124.272275][ T8640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.272308][ T8640] __sock_sendmsg+0x140/0x180 [ 124.272335][ T8640] ____sys_sendmsg+0x326/0x4b0 [ 124.272359][ T8640] __sys_sendmsg+0x19d/0x230 [ 124.272544][ T8640] __x64_sys_sendmsg+0x46/0x50 [ 124.272571][ T8640] x64_sys_call+0x2734/0x2dc0 [ 124.272601][ T8640] do_syscall_64+0xc9/0x1c0 [ 124.272628][ T8640] ? clear_bhb_loop+0x55/0xb0 [ 124.272702][ T8640] ? clear_bhb_loop+0x55/0xb0 [ 124.272732][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.272800][ T8640] RIP: 0033:0x7f5e10edd169 [ 124.272817][ T8640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.272838][ T8640] RSP: 002b:00007f5e0f547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.272858][ T8640] RAX: ffffffffffffffda RBX: 00007f5e110f5fa0 RCX: 00007f5e10edd169 [ 124.272873][ T8640] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000000000000003 [ 124.272886][ T8640] RBP: 00007f5e0f547090 R08: 0000000000000000 R09: 0000000000000000 [ 124.272900][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.272955][ T8640] R13: 0000000000000000 R14: 00007f5e110f5fa0 R15: 00007fff93e14288 [ 124.272975][ T8640] [ 124.514087][ T8646] block device autoloading is deprecated and will be removed. [ 124.757136][ T8656] netlink: 'syz.0.2039': attribute type 39 has an invalid length. [ 124.920230][ T8682] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 124.926897][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 124.934807][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 124.946758][ T8682] 9pnet_fd: Insufficient options for proto=fd [ 124.953116][ T8683] vhci_hcd: connection closed [ 124.954761][ T50] vhci_hcd: stop threads [ 124.956478][ T8686] block device autoloading is deprecated and will be removed. [ 124.959453][ T50] vhci_hcd: release socket [ 124.959464][ T50] vhci_hcd: disconnect device [ 125.010091][ T8689] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.029530][ T8689] FAULT_INJECTION: forcing a failure. [ 125.029530][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 125.042245][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.2.2051 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 125.042296][ T8689] Tainted: [W]=WARN [ 125.042304][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.042318][ T8689] Call Trace: [ 125.042331][ T8689] [ 125.042339][ T8689] dump_stack_lvl+0xf2/0x150 [ 125.042373][ T8689] dump_stack+0x15/0x1a [ 125.042398][ T8689] should_fail_ex+0x24a/0x260 [ 125.042495][ T8689] should_failslab+0x8f/0xb0 [ 125.042560][ T8689] kmem_cache_alloc_noprof+0x52/0x320 [ 125.042586][ T8689] ? security_inode_alloc+0x37/0x100 [ 125.042614][ T8689] security_inode_alloc+0x37/0x100 [ 125.042640][ T8689] inode_init_always_gfp+0x4a2/0x4f0 [ 125.042679][ T8689] ? __pfx_sock_alloc_inode+0x10/0x10 [ 125.042745][ T8689] alloc_inode+0x82/0x160 [ 125.042782][ T8689] new_inode_pseudo+0x15/0x20 [ 125.042860][ T8689] __sock_create+0x12b/0x5a0 [ 125.042897][ T8689] ? terminate_walk+0x260/0x280 [ 125.042933][ T8689] sock_create_kern+0x38/0x50 [ 125.043010][ T8689] mptcp_subflow_create_socket+0x84/0x710 [ 125.043057][ T8689] ? avc_has_perm_noaudit+0x1cc/0x210 [ 125.043118][ T8689] __mptcp_nmpc_sk+0xb4/0x3c0 [ 125.043147][ T8689] mptcp_connect+0x59/0x760 [ 125.043178][ T8689] __inet_stream_connect+0x162/0x790 [ 125.043208][ T8689] ? _raw_spin_unlock_bh+0x36/0x40 [ 125.043282][ T8689] ? release_sock+0x117/0x150 [ 125.043332][ T8689] ? _raw_spin_unlock_bh+0x36/0x40 [ 125.043351][ T8689] ? lock_sock_nested+0x10f/0x140 [ 125.043386][ T8689] ? selinux_netlbl_socket_connect+0x113/0x130 [ 125.043422][ T8689] inet_stream_connect+0x48/0x70 [ 125.043457][ T8689] ? __pfx_inet_stream_connect+0x10/0x10 [ 125.043565][ T8689] __sys_connect+0x18f/0x1b0 [ 125.043594][ T8689] __x64_sys_connect+0x41/0x50 [ 125.043618][ T8689] x64_sys_call+0x22a7/0x2dc0 [ 125.043645][ T8689] do_syscall_64+0xc9/0x1c0 [ 125.043733][ T8689] ? clear_bhb_loop+0x55/0xb0 [ 125.043767][ T8689] ? clear_bhb_loop+0x55/0xb0 [ 125.043800][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.043825][ T8689] RIP: 0033:0x7f472cb4d169 [ 125.043842][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.043903][ T8689] RSP: 002b:00007f472b1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 125.043921][ T8689] RAX: ffffffffffffffda RBX: 00007f472cd65fa0 RCX: 00007f472cb4d169 [ 125.043933][ T8689] RDX: 000000000000001c RSI: 0000400000000180 RDI: 0000000000000007 [ 125.043967][ T8689] RBP: 00007f472b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.044016][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.044030][ T8689] R13: 0000000000000000 R14: 00007f472cd65fa0 R15: 00007ffcfe547978 [ 125.044051][ T8689] [ 125.314850][ T8689] socket: no more sockets [ 125.636083][ T8718] block device autoloading is deprecated and will be removed. [ 125.640122][ T8698] netlink: 'syz.2.2055': attribute type 39 has an invalid length. [ 125.667443][ T8721] loop1: detected capacity change from 0 to 256 [ 125.673676][ T8719] loop3: detected capacity change from 0 to 512 [ 125.685562][ T8719] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 125.696342][ T8719] EXT4-fs (loop3): invalid journal inode [ 125.788848][ T8735] vhci_hcd: default hub control req: 800c v0000 i0000 l0 [ 125.842743][ T8737] loop1: detected capacity change from 0 to 2048 [ 125.890019][ T8745] Alternate GPT is invalid, using primary GPT. [ 125.896583][ T8745] loop1: p2 p3 p7 [ 125.907655][ T8737] Alternate GPT is invalid, using primary GPT. [ 125.914114][ T8737] loop1: p2 p3 p7 [ 126.000210][ T8754] loop1: detected capacity change from 0 to 256 [ 126.126889][ T8767] +: renamed from syzkaller0 [ 126.161387][ T8769] veth1_macvtap: left promiscuous mode [ 126.220416][ T8777] FAULT_INJECTION: forcing a failure. [ 126.220416][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.233567][ T8777] CPU: 0 UID: 0 PID: 8777 Comm: syz.4.2085 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 126.233604][ T8777] Tainted: [W]=WARN [ 126.233676][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.233761][ T8777] Call Trace: [ 126.233769][ T8777] [ 126.233777][ T8777] dump_stack_lvl+0xf2/0x150 [ 126.233812][ T8777] dump_stack+0x15/0x1a [ 126.233838][ T8777] should_fail_ex+0x24a/0x260 [ 126.234009][ T8777] should_fail+0xb/0x10 [ 126.234037][ T8777] should_fail_usercopy+0x1a/0x20 [ 126.234067][ T8777] _copy_to_user+0x20/0xa0 [ 126.234134][ T8777] simple_read_from_buffer+0xa0/0x110 [ 126.234168][ T8777] proc_fail_nth_read+0xf9/0x140 [ 126.234204][ T8777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.234234][ T8777] vfs_read+0x19b/0x6f0 [ 126.234285][ T8777] ? __rcu_read_unlock+0x4e/0x70 [ 126.234312][ T8777] ? __rcu_read_unlock+0x4e/0x70 [ 126.234338][ T8777] ? __fget_files+0x17c/0x1c0 [ 126.234377][ T8777] ksys_read+0xe8/0x1b0 [ 126.234420][ T8777] __x64_sys_read+0x42/0x50 [ 126.234451][ T8777] x64_sys_call+0x2874/0x2dc0 [ 126.234484][ T8777] do_syscall_64+0xc9/0x1c0 [ 126.234579][ T8777] ? clear_bhb_loop+0x55/0xb0 [ 126.234615][ T8777] ? clear_bhb_loop+0x55/0xb0 [ 126.234707][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.234741][ T8777] RIP: 0033:0x7fcbbfedbb7c [ 126.234759][ T8777] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.234777][ T8777] RSP: 002b:00007fcbbe541030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.234798][ T8777] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedbb7c [ 126.234813][ T8777] RDX: 000000000000000f RSI: 00007fcbbe5410a0 RDI: 0000000000000007 [ 126.234829][ T8777] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 126.234843][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.234891][ T8777] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 126.234914][ T8777] [ 126.490411][ T8785] FAULT_INJECTION: forcing a failure. [ 126.490411][ T8785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.503706][ T8785] CPU: 0 UID: 0 PID: 8785 Comm: syz.2.2089 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 126.503735][ T8785] Tainted: [W]=WARN [ 126.503741][ T8785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.503753][ T8785] Call Trace: [ 126.503824][ T8785] [ 126.503831][ T8785] dump_stack_lvl+0xf2/0x150 [ 126.503861][ T8785] dump_stack+0x15/0x1a [ 126.503886][ T8785] should_fail_ex+0x24a/0x260 [ 126.503935][ T8785] should_fail+0xb/0x10 [ 126.503966][ T8785] should_fail_usercopy+0x1a/0x20 [ 126.503998][ T8785] _copy_from_user+0x1c/0xa0 [ 126.504042][ T8785] copy_msghdr_from_user+0x54/0x2a0 [ 126.504080][ T8785] ? __fget_files+0x17c/0x1c0 [ 126.504121][ T8785] __sys_sendmsg+0x13e/0x230 [ 126.504187][ T8785] __x64_sys_sendmsg+0x46/0x50 [ 126.504214][ T8785] x64_sys_call+0x2734/0x2dc0 [ 126.504251][ T8785] do_syscall_64+0xc9/0x1c0 [ 126.504291][ T8785] ? clear_bhb_loop+0x55/0xb0 [ 126.504410][ T8785] ? clear_bhb_loop+0x55/0xb0 [ 126.504504][ T8785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.504536][ T8785] RIP: 0033:0x7f472cb4d169 [ 126.504550][ T8785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.504578][ T8785] RSP: 002b:00007f472b1b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.504594][ T8785] RAX: ffffffffffffffda RBX: 00007f472cd65fa0 RCX: 00007f472cb4d169 [ 126.504608][ T8785] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000003 [ 126.504654][ T8785] RBP: 00007f472b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 126.504665][ T8785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.504677][ T8785] R13: 0000000000000000 R14: 00007f472cd65fa0 R15: 00007ffcfe547978 [ 126.504697][ T8785] [ 126.717626][ T8782] IPVS: You probably need to specify IP address on multicast interface. [ 126.726079][ T8782] IPVS: Error connecting to the multicast addr [ 126.763206][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 126.763223][ T29] audit: type=1326 audit(1740569302.920:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.793223][ T29] audit: type=1326 audit(1740569302.920:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.816989][ T29] audit: type=1326 audit(1740569302.920:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.840748][ T29] audit: type=1326 audit(1740569302.920:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.854579][ T8795] loop3: detected capacity change from 0 to 128 [ 126.864418][ T29] audit: type=1326 audit(1740569302.920:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.893989][ T29] audit: type=1326 audit(1740569302.920:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.917471][ T29] audit: type=1326 audit(1740569302.920:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.941037][ T29] audit: type=1326 audit(1740569302.920:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.964500][ T29] audit: type=1326 audit(1740569302.920:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 126.991467][ T8796] bio_check_eod: 1173 callbacks suppressed [ 126.991486][ T8796] syz.3.2094: attempt to access beyond end of device [ 126.991486][ T8796] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 127.019169][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.019169][ T8796] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 127.037126][ T29] audit: type=1326 audit(1740569302.960:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8790 comm="syz.3.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 127.061465][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.061465][ T8796] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.074792][ T8795] syz.3.2094: attempt to access beyond end of device [ 127.074792][ T8795] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.093784][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.093784][ T8796] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.107280][ T8795] syz.3.2094: attempt to access beyond end of device [ 127.107280][ T8795] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.123979][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.123979][ T8796] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.139339][ T8795] syz.3.2094: attempt to access beyond end of device [ 127.139339][ T8795] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.158959][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.158959][ T8796] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.172605][ T8796] syz.3.2094: attempt to access beyond end of device [ 127.172605][ T8796] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.264569][ T8812] tipc: Enabling of bearer rejected, failed to enable media [ 127.273330][ T8812] +: renamed from syzkaller0 [ 127.302885][ T8813] __nla_validate_parse: 24 callbacks suppressed [ 127.302903][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 127.358583][ T8817] loop1: detected capacity change from 0 to 512 [ 127.368601][ T8817] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.437635][ T8817] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2103: Failed to acquire dquot type 0 [ 127.451400][ T8817] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 127.474718][ T8817] EXT4-fs (loop1): 1 truncate cleaned up [ 127.483972][ T8817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.647958][ T8817] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 127.661062][ T8817] FAULT_INJECTION: forcing a failure. [ 127.661062][ T8817] name failslab, interval 1, probability 0, space 0, times 0 [ 127.673840][ T8817] CPU: 0 UID: 0 PID: 8817 Comm: syz.1.2103 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 127.673948][ T8817] Tainted: [W]=WARN [ 127.673957][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.673973][ T8817] Call Trace: [ 127.673980][ T8817] [ 127.673988][ T8817] dump_stack_lvl+0xf2/0x150 [ 127.674023][ T8817] dump_stack+0x15/0x1a [ 127.674050][ T8817] should_fail_ex+0x24a/0x260 [ 127.674147][ T8817] should_failslab+0x8f/0xb0 [ 127.674222][ T8817] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 127.674294][ T8817] ? sidtab_sid2str_get+0xb8/0x140 [ 127.674375][ T8817] kmemdup_noprof+0x2b/0x70 [ 127.674408][ T8817] sidtab_sid2str_get+0xb8/0x140 [ 127.674446][ T8817] security_sid_to_context_core+0x1eb/0x2f0 [ 127.674484][ T8817] security_sid_to_context+0x27/0x30 [ 127.674518][ T8817] selinux_lsmprop_to_secctx+0x68/0xf0 [ 127.674556][ T8817] security_lsmprop_to_secctx+0x40/0x80 [ 127.674661][ T8817] audit_log_task_context+0x76/0x180 [ 127.674735][ T8817] audit_log_task+0xf9/0x250 [ 127.674844][ T8817] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 127.674873][ T8817] audit_seccomp+0x68/0x130 [ 127.674918][ T8817] __seccomp_filter+0x6fa/0x1180 [ 127.674956][ T8817] ? save_fpregs_to_fpstate+0x102/0x160 [ 127.675038][ T8817] ? __rcu_read_unlock+0x4e/0x70 [ 127.675069][ T8817] __secure_computing+0x9f/0x1c0 [ 127.675095][ T8817] syscall_trace_enter+0xd1/0x1f0 [ 127.675126][ T8817] do_syscall_64+0xaa/0x1c0 [ 127.675231][ T8817] ? clear_bhb_loop+0x55/0xb0 [ 127.675261][ T8817] ? clear_bhb_loop+0x55/0xb0 [ 127.675292][ T8817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.675390][ T8817] RIP: 0033:0x7f6f7e22bb7c [ 127.675404][ T8817] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 127.675423][ T8817] RSP: 002b:00007f6f7c897030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.675444][ T8817] RAX: ffffffffffffffda RBX: 00007f6f7e445fa0 RCX: 00007f6f7e22bb7c [ 127.675458][ T8817] RDX: 000000000000000f RSI: 00007f6f7c8970a0 RDI: 000000000000000a [ 127.675538][ T8817] RBP: 00007f6f7c897090 R08: 0000000000000000 R09: 0000000000000000 [ 127.675552][ T8817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.675565][ T8817] R13: 0000000000000000 R14: 00007f6f7e445fa0 R15: 00007ffd42277038 [ 127.675585][ T8817] [ 128.420181][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.499012][ T8841] loop1: detected capacity change from 0 to 128 [ 128.519413][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 128.626811][ T8857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2114'. [ 128.747642][ T8833] netlink: 'syz.0.2106': attribute type 39 has an invalid length. [ 128.766100][ T8855] IPVS: You probably need to specify IP address on multicast interface. [ 128.786328][ T8855] IPVS: Error connecting to the multicast addr [ 128.811539][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2117'. [ 128.866880][ T8876] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2119'. [ 128.882988][ T8876] vhci_hcd: invalid port number 13 [ 128.900319][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 128.928972][ T8875] +: renamed from syzkaller0 [ 128.995188][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2124'. [ 129.432404][ T8896] IPVS: You probably need to specify IP address on multicast interface. [ 129.440997][ T8896] IPVS: Error connecting to the multicast addr [ 129.470149][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 129.499790][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2131'. [ 129.797660][ T8906] netlink: 'syz.4.2132': attribute type 39 has an invalid length. [ 129.983381][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 130.006135][ T8937] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8937 comm=syz.2.2142 [ 130.033002][ T8927] IPVS: You probably need to specify IP address on multicast interface. [ 130.046599][ T8927] IPVS: Error connecting to the multicast addr [ 130.144446][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 130.169735][ T8947] loop3: detected capacity change from 0 to 512 [ 130.178894][ T8947] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 130.190502][ T8947] EXT4-fs (loop3): invalid journal inode [ 130.198334][ T8947] EXT4-fs (loop3): can't get journal size [ 130.206876][ T8947] EXT4-fs (loop3): 1 truncate cleaned up [ 130.212984][ T8947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.244687][ T8953] Invalid ELF header magic: != ELF [ 130.260925][ T8953] netlink: 'syz.4.2147': attribute type 3 has an invalid length. [ 130.273124][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.576730][ T8957] netlink: 'syz.3.2149': attribute type 39 has an invalid length. [ 130.624861][ T8970] tipc: Enabling of bearer rejected, failed to enable media [ 130.634220][ T8970] +: renamed from syzkaller0 [ 130.727248][ T8976] IPVS: You probably need to specify IP address on multicast interface. [ 130.735723][ T8976] IPVS: Error connecting to the multicast addr [ 130.916822][ T8993] lo speed is unknown, defaulting to 1000 [ 130.934873][ T8993] lo speed is unknown, defaulting to 1000 [ 130.943180][ T8993] lo speed is unknown, defaulting to 1000 [ 131.091371][ T8993] infiniband sz1: set active [ 131.096118][ T8993] infiniband sz1: added lo [ 131.102322][ T3376] lo speed is unknown, defaulting to 1000 [ 131.295627][ T8993] RDS/IB: sz1: added [ 131.299656][ T8993] smc: adding ib device sz1 with port count 1 [ 131.349766][ T8993] smc: ib device sz1 port 1 has pnetid [ 131.390104][ T9014] FAULT_INJECTION: forcing a failure. [ 131.390104][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 131.402807][ T9014] CPU: 1 UID: 0 PID: 9014 Comm: syz.4.2170 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 131.402836][ T9014] Tainted: [W]=WARN [ 131.402843][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.402881][ T9014] Call Trace: [ 131.402888][ T9014] [ 131.402897][ T9014] dump_stack_lvl+0xf2/0x150 [ 131.402926][ T9014] dump_stack+0x15/0x1a [ 131.402951][ T9014] should_fail_ex+0x24a/0x260 [ 131.403017][ T9014] ? sysfs_init_fs_context+0x80/0x260 [ 131.403048][ T9014] should_failslab+0x8f/0xb0 [ 131.403083][ T9014] __kmalloc_cache_noprof+0x4e/0x320 [ 131.403181][ T9014] sysfs_init_fs_context+0x80/0x260 [ 131.403205][ T9014] alloc_fs_context+0x3fb/0x4e0 [ 131.403237][ T9014] fs_context_for_mount+0x21/0x30 [ 131.403291][ T9014] do_new_mount+0xf3/0x690 [ 131.403327][ T9014] path_mount+0x49b/0xb30 [ 131.403358][ T9014] __se_sys_mount+0x27f/0x2d0 [ 131.403408][ T9014] ? fput+0x1c4/0x200 [ 131.403428][ T9014] __x64_sys_mount+0x67/0x80 [ 131.403456][ T9014] x64_sys_call+0x2c84/0x2dc0 [ 131.403486][ T9014] do_syscall_64+0xc9/0x1c0 [ 131.403596][ T9014] ? clear_bhb_loop+0x55/0xb0 [ 131.403637][ T9014] ? clear_bhb_loop+0x55/0xb0 [ 131.403658][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.403729][ T9014] RIP: 0033:0x7fcbbfedd169 [ 131.403744][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.403763][ T9014] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.403780][ T9014] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 131.403850][ T9014] RDX: 0000400000000100 RSI: 0000400000000140 RDI: 0000000000000000 [ 131.403863][ T9014] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 131.403875][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.403911][ T9014] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 131.403926][ T9014] [ 131.657954][ T9012] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 131.712158][ T3447] lo speed is unknown, defaulting to 1000 [ 131.718641][ T8993] lo speed is unknown, defaulting to 1000 [ 131.746581][ T9019] xt_TCPMSS: Only works on TCP SYN packets [ 131.755593][ T8993] lo speed is unknown, defaulting to 1000 [ 131.766542][ T9000] netlink: 'syz.0.2166': attribute type 39 has an invalid length. [ 131.778452][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 131.778465][ T29] audit: type=1400 audit(1740569307.920:3837): avc: denied { cpu } for pid=9018 comm="syz.4.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.794678][ T9008] lo speed is unknown, defaulting to 1000 [ 131.804022][ T29] audit: type=1400 audit(1740569307.950:3838): avc: denied { setattr } for pid=9016 comm="syz.3.2171" name="RXRPC" dev="sockfs" ino=25228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.861490][ T9009] lo speed is unknown, defaulting to 1000 [ 131.886823][ T29] audit: type=1326 audit(1740569308.050:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 131.910320][ T29] audit: type=1326 audit(1740569308.050:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 131.933775][ T29] audit: type=1326 audit(1740569308.050:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 131.957440][ T29] audit: type=1326 audit(1740569308.050:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 131.980989][ T29] audit: type=1326 audit(1740569308.050:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 131.985344][ T8993] lo speed is unknown, defaulting to 1000 [ 132.004396][ T29] audit: type=1326 audit(1740569308.050:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 132.033663][ T29] audit: type=1326 audit(1740569308.050:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 132.057095][ T29] audit: type=1326 audit(1740569308.050:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ecf1d169 code=0x7ffc0000 [ 132.133366][ T8993] lo speed is unknown, defaulting to 1000 [ 132.188857][ T8993] lo speed is unknown, defaulting to 1000 [ 132.395487][ T9055] __nla_validate_parse: 7 callbacks suppressed [ 132.395508][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2183'. [ 132.637895][ T9065] lo speed is unknown, defaulting to 1000 [ 132.931252][ T9069] netlink: 'syz.4.2188': attribute type 39 has an invalid length. [ 133.040121][ T9073] FAULT_INJECTION: forcing a failure. [ 133.040121][ T9073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.053240][ T9073] CPU: 1 UID: 0 PID: 9073 Comm: syz.2.2189 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 133.053282][ T9073] Tainted: [W]=WARN [ 133.053290][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.053306][ T9073] Call Trace: [ 133.053313][ T9073] [ 133.053321][ T9073] dump_stack_lvl+0xf2/0x150 [ 133.053356][ T9073] dump_stack+0x15/0x1a [ 133.053379][ T9073] should_fail_ex+0x24a/0x260 [ 133.053416][ T9073] should_fail+0xb/0x10 [ 133.053493][ T9073] should_fail_usercopy+0x1a/0x20 [ 133.053542][ T9073] _copy_from_user+0x1c/0xa0 [ 133.053651][ T9073] __sys_bpf+0x14e/0x7a0 [ 133.053764][ T9073] __x64_sys_bpf+0x43/0x50 [ 133.053794][ T9073] x64_sys_call+0x2914/0x2dc0 [ 133.053826][ T9073] do_syscall_64+0xc9/0x1c0 [ 133.053913][ T9073] ? clear_bhb_loop+0x55/0xb0 [ 133.053962][ T9073] ? clear_bhb_loop+0x55/0xb0 [ 133.053988][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.054025][ T9073] RIP: 0033:0x7f472cb4d169 [ 133.054042][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.054064][ T9073] RSP: 002b:00007f472b1b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.054087][ T9073] RAX: ffffffffffffffda RBX: 00007f472cd65fa0 RCX: 00007f472cb4d169 [ 133.054102][ T9073] RDX: 0000000000000020 RSI: 0000400000001600 RDI: 0000000000000004 [ 133.054116][ T9073] RBP: 00007f472b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.054131][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.054208][ T9073] R13: 0000000000000000 R14: 00007f472cd65fa0 R15: 00007ffcfe547978 [ 133.054230][ T9073] [ 133.230956][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2190'. [ 133.327703][ T9090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2198'. [ 133.343150][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 133.363389][ T9096] tipc: Enabling of bearer rejected, failed to enable media [ 133.384269][ T9096] +: renamed from syzkaller0 [ 133.478209][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 133.495483][ T9107] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.509913][ T9107] syz.1.2204 (9107) used greatest stack depth: 10296 bytes left [ 133.541699][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 133.600104][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 133.671542][ T9098] netlink: 'syz.3.2201': attribute type 39 has an invalid length. [ 133.961126][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2211'. [ 134.048666][ T9131] lo speed is unknown, defaulting to 1000 [ 134.091053][ T9128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2212'. [ 134.257617][ T9136] lo speed is unknown, defaulting to 1000 [ 134.322356][ T9136] IPVS: You probably need to specify IP address on multicast interface. [ 134.331476][ T9136] IPVS: Error connecting to the multicast addr [ 134.350847][ T9128] tmpfs: Bad value for 'mpol' [ 134.416695][ T9151] +: renamed from syzkaller0 [ 134.454162][ T9156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2222'. [ 134.957978][ T9176] lo speed is unknown, defaulting to 1000 [ 135.040300][ T9182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21184 sclass=netlink_route_socket pid=9182 comm=syz.3.2231 [ 135.067743][ T9182] netlink: 'syz.3.2231': attribute type 10 has an invalid length. [ 135.078503][ T9182] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 135.103984][ T9186] FAULT_INJECTION: forcing a failure. [ 135.103984][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 135.116750][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.3.2232 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 135.116819][ T9186] Tainted: [W]=WARN [ 135.116827][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.116842][ T9186] Call Trace: [ 135.116849][ T9186] [ 135.116857][ T9186] dump_stack_lvl+0xf2/0x150 [ 135.116890][ T9186] dump_stack+0x15/0x1a [ 135.116909][ T9186] should_fail_ex+0x24a/0x260 [ 135.117088][ T9186] ? __se_sys_mount+0xf2/0x2d0 [ 135.117175][ T9186] should_failslab+0x8f/0xb0 [ 135.117279][ T9186] __kmalloc_cache_noprof+0x4e/0x320 [ 135.117304][ T9186] ? memdup_user+0x9f/0xc0 [ 135.117406][ T9186] __se_sys_mount+0xf2/0x2d0 [ 135.117431][ T9186] ? fput+0x1c4/0x200 [ 135.117446][ T9186] ? ksys_write+0x176/0x1b0 [ 135.117469][ T9186] __x64_sys_mount+0x67/0x80 [ 135.117530][ T9186] x64_sys_call+0x2c84/0x2dc0 [ 135.117553][ T9186] do_syscall_64+0xc9/0x1c0 [ 135.117585][ T9186] ? clear_bhb_loop+0x55/0xb0 [ 135.117609][ T9186] ? clear_bhb_loop+0x55/0xb0 [ 135.117632][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.117722][ T9186] RIP: 0033:0x7f21ecf1d169 [ 135.117740][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.117761][ T9186] RSP: 002b:00007f21eb587038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 135.117777][ T9186] RAX: ffffffffffffffda RBX: 00007f21ed135fa0 RCX: 00007f21ecf1d169 [ 135.117787][ T9186] RDX: 0000400000000b80 RSI: 0000400000000040 RDI: 0000000000000000 [ 135.117797][ T9186] RBP: 00007f21eb587090 R08: 00004000000004c0 R09: 0000000000000000 [ 135.117807][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.117880][ T9186] R13: 0000000000000000 R14: 00007f21ed135fa0 R15: 00007ffd55e45d68 [ 135.117903][ T9186] [ 135.367742][ T9196] FAULT_INJECTION: forcing a failure. [ 135.367742][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.380950][ T9196] CPU: 1 UID: 0 PID: 9196 Comm: syz.3.2237 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 135.381046][ T9196] Tainted: [W]=WARN [ 135.381052][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.381063][ T9196] Call Trace: [ 135.381069][ T9196] [ 135.381075][ T9196] dump_stack_lvl+0xf2/0x150 [ 135.381101][ T9196] dump_stack+0x15/0x1a [ 135.381124][ T9196] should_fail_ex+0x24a/0x260 [ 135.381181][ T9196] should_fail+0xb/0x10 [ 135.381236][ T9196] should_fail_usercopy+0x1a/0x20 [ 135.381265][ T9196] _copy_from_user+0x1c/0xa0 [ 135.381413][ T9196] kstrtouint_from_user+0x76/0xe0 [ 135.381497][ T9196] ? 0xffffffff81000000 [ 135.381509][ T9196] ? selinux_file_permission+0x22a/0x360 [ 135.381557][ T9196] proc_fail_nth_write+0x4f/0x150 [ 135.381586][ T9196] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.381611][ T9196] vfs_write+0x27d/0x920 [ 135.381716][ T9196] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.381793][ T9196] ? __fget_files+0x17c/0x1c0 [ 135.381822][ T9196] ksys_write+0xe8/0x1b0 [ 135.381845][ T9196] __x64_sys_write+0x42/0x50 [ 135.381892][ T9196] x64_sys_call+0x287e/0x2dc0 [ 135.381914][ T9196] do_syscall_64+0xc9/0x1c0 [ 135.381939][ T9196] ? clear_bhb_loop+0x55/0xb0 [ 135.381962][ T9196] ? clear_bhb_loop+0x55/0xb0 [ 135.382032][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.382054][ T9196] RIP: 0033:0x7f21ecf1bc1f [ 135.382066][ T9196] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 135.382119][ T9196] RSP: 002b:00007f21eb587030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 135.382135][ T9196] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ecf1bc1f [ 135.382146][ T9196] RDX: 0000000000000001 RSI: 00007f21eb5870a0 RDI: 0000000000000009 [ 135.382156][ T9196] RBP: 00007f21eb587090 R08: 0000000000000000 R09: 0000000000000000 [ 135.382165][ T9196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 135.382175][ T9196] R13: 0000000000000000 R14: 00007f21ed135fa0 R15: 00007ffd55e45d68 [ 135.382191][ T9196] [ 135.674348][ T9203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=9203 comm=syz.3.2240 [ 135.695454][ T9205] lo speed is unknown, defaulting to 1000 [ 135.784972][ T9211] +: renamed from syzkaller0 [ 135.883717][ T9219] FAULT_INJECTION: forcing a failure. [ 135.883717][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 135.896526][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.4.2246 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 135.896563][ T9219] Tainted: [W]=WARN [ 135.896572][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.896587][ T9219] Call Trace: [ 135.896593][ T9219] [ 135.896676][ T9219] dump_stack_lvl+0xf2/0x150 [ 135.896703][ T9219] dump_stack+0x15/0x1a [ 135.896729][ T9219] should_fail_ex+0x24a/0x260 [ 135.896821][ T9219] should_failslab+0x8f/0xb0 [ 135.896877][ T9219] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 135.896905][ T9219] ? alloc_inode+0x6a/0x160 [ 135.896945][ T9219] alloc_inode+0x6a/0x160 [ 135.897020][ T9219] new_inode_pseudo+0x15/0x20 [ 135.897058][ T9219] create_pipe_files+0x42/0x400 [ 135.897116][ T9219] __do_pipe_flags+0x46/0x190 [ 135.897220][ T9219] do_pipe2+0x64/0x130 [ 135.897255][ T9219] __x64_sys_pipe2+0x30/0x40 [ 135.897300][ T9219] x64_sys_call+0x28a6/0x2dc0 [ 135.897393][ T9219] do_syscall_64+0xc9/0x1c0 [ 135.897426][ T9219] ? clear_bhb_loop+0x55/0xb0 [ 135.897452][ T9219] ? clear_bhb_loop+0x55/0xb0 [ 135.897541][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.897575][ T9219] RIP: 0033:0x7fcbbfedd169 [ 135.897593][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.897653][ T9219] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 135.897675][ T9219] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 135.897690][ T9219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000040 [ 135.897704][ T9219] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 135.897771][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.897784][ T9219] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 135.897801][ T9219] [ 136.309369][ T9236] hsr0: entered promiscuous mode [ 136.333586][ T9236] hsr_slave_0: left promiscuous mode [ 136.339834][ T9236] hsr_slave_1: left promiscuous mode [ 136.348570][ T9236] hsr0 (unregistering): left promiscuous mode [ 136.483778][ T9251] lo speed is unknown, defaulting to 1000 [ 136.578390][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.587635][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.692549][ T9263] +: renamed from syzkaller0 [ 137.092621][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 137.092672][ T29] audit: type=1326 audit(1740569313.250:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.135927][ T29] audit: type=1326 audit(1740569313.290:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.159455][ T29] audit: type=1326 audit(1740569313.290:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.182974][ T29] audit: type=1326 audit(1740569313.290:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.206509][ T29] audit: type=1326 audit(1740569313.290:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.229971][ T29] audit: type=1326 audit(1740569313.290:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.253468][ T29] audit: type=1326 audit(1740569313.290:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.277188][ T29] audit: type=1326 audit(1740569313.290:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.300716][ T29] audit: type=1326 audit(1740569313.290:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9279 comm="syz.0.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e10edd169 code=0x7ffc0000 [ 137.337366][ T29] audit: type=1400 audit(1740569313.400:4133): avc: denied { write } for pid=9282 comm="syz.0.2268" name="net" dev="proc" ino=26499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 137.389720][ T9278] netlink: 'syz.4.2266': attribute type 39 has an invalid length. [ 137.458525][ T9295] __nla_validate_parse: 13 callbacks suppressed [ 137.458559][ T9295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2271'. [ 137.479915][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 137.506544][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2272'. [ 137.557882][ T9303] tipc: Enabling of bearer rejected, failed to enable media [ 137.578446][ T9305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=9305 comm=syz.0.2276 [ 137.854014][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 137.870915][ T9327] sch_tbf: burst 9895 is lower than device lo mtu (65550) ! [ 137.905169][ T9324] netlink: 'syz.4.2284': attribute type 39 has an invalid length. [ 137.915121][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 137.971995][ T9335] tipc: Enabling of bearer rejected, failed to enable media [ 137.983648][ T9337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=9337 comm=syz.4.2288 [ 138.179857][ T9350] syz.4.2293 uses obsolete (PF_INET,SOCK_PACKET) [ 138.212934][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 138.319566][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2298'. [ 138.407330][ T9369] tipc: Enabling of bearer rejected, failed to enable media [ 138.451861][ T9371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16640 sclass=netlink_route_socket pid=9371 comm=syz.4.2300 [ 138.661718][ T9378] lo speed is unknown, defaulting to 1000 [ 138.729206][ T9379] lo speed is unknown, defaulting to 1000 [ 138.732753][ T9373] netlink: 'syz.4.2301': attribute type 39 has an invalid length. [ 138.763379][ T9378] IPVS: You probably need to specify IP address on multicast interface. [ 138.771927][ T9378] IPVS: Error connecting to the multicast addr [ 138.889345][ T9387] lo speed is unknown, defaulting to 1000 [ 138.898251][ T9391] FAULT_INJECTION: forcing a failure. [ 138.898251][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 138.910949][ T9391] CPU: 1 UID: 0 PID: 9391 Comm: syz.1.2308 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 138.910985][ T9391] Tainted: [W]=WARN [ 138.910993][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.911008][ T9391] Call Trace: [ 138.911015][ T9391] [ 138.911022][ T9391] dump_stack_lvl+0xf2/0x150 [ 138.911051][ T9391] dump_stack+0x15/0x1a [ 138.911076][ T9391] should_fail_ex+0x24a/0x260 [ 138.911105][ T9391] should_failslab+0x8f/0xb0 [ 138.911135][ T9391] kmem_cache_alloc_noprof+0x52/0x320 [ 138.911157][ T9391] ? vm_area_alloc+0xac/0x130 [ 138.911187][ T9391] vm_area_alloc+0xac/0x130 [ 138.911214][ T9391] mmap_region+0x819/0x1620 [ 138.911263][ T9391] do_mmap+0x98a/0xc30 [ 138.911293][ T9391] vm_mmap_pgoff+0x16d/0x2d0 [ 138.911330][ T9391] ksys_mmap_pgoff+0xd0/0x330 [ 138.911362][ T9391] ? fpregs_assert_state_consistent+0x83/0xa0 [ 138.911386][ T9391] x64_sys_call+0x1940/0x2dc0 [ 138.911410][ T9391] do_syscall_64+0xc9/0x1c0 [ 138.911437][ T9391] ? clear_bhb_loop+0x55/0xb0 [ 138.911465][ T9391] ? clear_bhb_loop+0x55/0xb0 [ 138.911497][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.911528][ T9391] RIP: 0033:0x7f6f7e22d1a3 [ 138.911545][ T9391] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 138.911565][ T9391] RSP: 002b:00007f6f7c896d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 138.911584][ T9391] RAX: ffffffffffffffda RBX: 000000000000062e RCX: 00007f6f7e22d1a3 [ 138.911596][ T9391] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 138.911607][ T9391] RBP: 0000400000000002 R08: 00000000ffffffff R09: 0000000000000000 [ 138.911618][ T9391] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 138.911629][ T9391] R13: 00007f6f7c896dec R14: 00007f6f7c896df0 R15: 00007ffd42277038 [ 138.911651][ T9391] [ 139.124369][ T9392] netlink: 'syz.0.2306': attribute type 27 has an invalid length. [ 139.166913][ T9396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 139.208437][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.215761][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.235568][ T9392] 0ªX¹¦À: left allmulticast mode [ 139.310599][ T9392] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.321091][ T9392] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.330115][ T9392] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.339198][ T9392] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.349634][ T9392] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 139.378439][ T9398] tipc: Enabling of bearer rejected, failed to enable media [ 139.417221][ T9402] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2311'. [ 139.449572][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2312'. [ 140.237137][ T9416] netlink: 'syz.2.2317': attribute type 39 has an invalid length. [ 140.832562][ T9441] tipc: Enabling of bearer rejected, failed to enable media [ 140.921223][ T9448] lo speed is unknown, defaulting to 1000 [ 140.992135][ T9452] lo speed is unknown, defaulting to 1000 [ 141.044896][ T9460] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 141.778853][ T9472] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.802329][ T9474] tipc: Enabling of bearer rejected, failed to enable media [ 141.837224][ T9476] lo speed is unknown, defaulting to 1000 [ 141.884652][ T9477] bridge0: port 3(hsr0) entered blocking state [ 141.890999][ T9477] bridge0: port 3(hsr0) entered disabled state [ 141.897402][ T9477] hsr0: entered allmulticast mode [ 141.902462][ T9477] hsr_slave_0: entered allmulticast mode [ 141.908406][ T9477] hsr_slave_1: entered allmulticast mode [ 141.918531][ T9477] hsr0: entered promiscuous mode [ 141.944110][ T9479] lo: entered allmulticast mode [ 141.960883][ T9478] lo: left allmulticast mode [ 141.979659][ T9483] lo speed is unknown, defaulting to 1000 [ 142.065481][ T9488] lo speed is unknown, defaulting to 1000 [ 142.085313][ T9492] +: renamed from syzkaller0 [ 142.195338][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 142.195353][ T29] audit: type=1326 audit(1740569318.360:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.275034][ T29] audit: type=1326 audit(1740569318.390:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.298542][ T29] audit: type=1326 audit(1740569318.390:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.322489][ T29] audit: type=1326 audit(1740569318.390:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.345883][ T29] audit: type=1326 audit(1740569318.390:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.369347][ T29] audit: type=1326 audit(1740569318.390:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.392774][ T29] audit: type=1326 audit(1740569318.390:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.416241][ T29] audit: type=1326 audit(1740569318.390:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.439690][ T29] audit: type=1326 audit(1740569318.390:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.463106][ T29] audit: type=1326 audit(1740569318.390:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9501 comm="syz.2.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 142.539506][ T9515] __nla_validate_parse: 11 callbacks suppressed [ 142.539569][ T9515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2356'. [ 142.681518][ T9509] netlink: 'syz.0.2354': attribute type 39 has an invalid length. [ 142.717740][ T9524] SELinux: syz.1.2359 (9524) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 142.769239][ T9527] FAULT_INJECTION: forcing a failure. [ 142.769239][ T9527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.782432][ T9527] CPU: 1 UID: 0 PID: 9527 Comm: syz.1.2360 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 142.782514][ T9527] Tainted: [W]=WARN [ 142.782523][ T9527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.782539][ T9527] Call Trace: [ 142.782586][ T9527] [ 142.782593][ T9527] dump_stack_lvl+0xf2/0x150 [ 142.782624][ T9527] dump_stack+0x15/0x1a [ 142.782648][ T9527] should_fail_ex+0x24a/0x260 [ 142.782677][ T9527] should_fail+0xb/0x10 [ 142.782739][ T9527] should_fail_usercopy+0x1a/0x20 [ 142.782829][ T9527] _copy_from_user+0x1c/0xa0 [ 142.782869][ T9527] get_itimerspec64+0x4d/0x230 [ 142.782892][ T9527] __x64_sys_timerfd_settime+0x89/0x140 [ 142.782920][ T9527] x64_sys_call+0x2b76/0x2dc0 [ 142.783012][ T9527] do_syscall_64+0xc9/0x1c0 [ 142.783049][ T9527] ? clear_bhb_loop+0x55/0xb0 [ 142.783078][ T9527] ? clear_bhb_loop+0x55/0xb0 [ 142.783109][ T9527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.783163][ T9527] RIP: 0033:0x7f6f7e22d169 [ 142.783186][ T9527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.783248][ T9527] RSP: 002b:00007f6f7c897038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 142.783266][ T9527] RAX: ffffffffffffffda RBX: 00007f6f7e445fa0 RCX: 00007f6f7e22d169 [ 142.783282][ T9527] RDX: 0000400000000040 RSI: 0000000000000003 RDI: 0000000000000006 [ 142.783295][ T9527] RBP: 00007f6f7c897090 R08: 0000000000000000 R09: 0000000000000000 [ 142.783307][ T9527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.783319][ T9527] R13: 0000000000000000 R14: 00007f6f7e445fa0 R15: 00007ffd42277038 [ 142.783340][ T9527] [ 143.058014][ T9539] 9pnet_fd: Insufficient options for proto=fd [ 143.118587][ T9541] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 143.247770][ T9550] +: renamed from syzkaller0 [ 143.959118][ T9559] netlink: 'syz.2.2372': attribute type 39 has an invalid length. [ 144.109661][ T9573] lo speed is unknown, defaulting to 1000 [ 144.165001][ T9574] lo speed is unknown, defaulting to 1000 [ 144.212172][ T9573] IPVS: You probably need to specify IP address on multicast interface. [ 144.220620][ T9573] IPVS: Error connecting to the multicast addr [ 144.368510][ T9589] IPVS: stopping master sync thread 7787 ... [ 144.390800][ T9592] FAULT_INJECTION: forcing a failure. [ 144.390800][ T9592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.403972][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.4.2383 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 144.404010][ T9592] Tainted: [W]=WARN [ 144.404018][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.404030][ T9592] Call Trace: [ 144.404035][ T9592] [ 144.404042][ T9592] dump_stack_lvl+0xf2/0x150 [ 144.404070][ T9592] dump_stack+0x15/0x1a [ 144.404090][ T9592] should_fail_ex+0x24a/0x260 [ 144.404125][ T9592] should_fail+0xb/0x10 [ 144.404212][ T9592] should_fail_usercopy+0x1a/0x20 [ 144.404278][ T9592] strncpy_from_user+0x25/0x210 [ 144.404306][ T9592] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 144.404333][ T9592] ? getname_flags+0x81/0x3b0 [ 144.404374][ T9592] getname_flags+0xb0/0x3b0 [ 144.404430][ T9592] __x64_sys_renameat2+0x6e/0xa0 [ 144.404464][ T9592] x64_sys_call+0x1bf1/0x2dc0 [ 144.404489][ T9592] do_syscall_64+0xc9/0x1c0 [ 144.404531][ T9592] ? clear_bhb_loop+0x55/0xb0 [ 144.404561][ T9592] ? clear_bhb_loop+0x55/0xb0 [ 144.404588][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.404698][ T9592] RIP: 0033:0x7fcbbfedd169 [ 144.404714][ T9592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.404772][ T9592] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 144.404794][ T9592] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 144.404806][ T9592] RDX: ffffffffffffffff RSI: 0000400000003540 RDI: ffffffffffffffff [ 144.404817][ T9592] RBP: 00007fcbbe541090 R08: 0000000000000006 R09: 0000000000000000 [ 144.404829][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.404908][ T9592] R13: 0000000000000001 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 144.404929][ T9592] [ 144.622404][ T9596] FAULT_INJECTION: forcing a failure. [ 144.622404][ T9596] name failslab, interval 1, probability 0, space 0, times 0 [ 144.635100][ T9596] CPU: 0 UID: 0 PID: 9596 Comm: syz.4.2385 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 144.635137][ T9596] Tainted: [W]=WARN [ 144.635146][ T9596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.635216][ T9596] Call Trace: [ 144.635223][ T9596] [ 144.635232][ T9596] dump_stack_lvl+0xf2/0x150 [ 144.635264][ T9596] dump_stack+0x15/0x1a [ 144.635289][ T9596] should_fail_ex+0x24a/0x260 [ 144.635324][ T9596] should_failslab+0x8f/0xb0 [ 144.635372][ T9596] kmem_cache_alloc_noprof+0x52/0x320 [ 144.635394][ T9596] ? audit_log_start+0x34c/0x6b0 [ 144.635500][ T9596] audit_log_start+0x34c/0x6b0 [ 144.635544][ T9596] audit_seccomp+0x4b/0x130 [ 144.635589][ T9596] __seccomp_filter+0x6fa/0x1180 [ 144.635685][ T9596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.635717][ T9596] ? vfs_write+0x644/0x920 [ 144.635751][ T9596] __secure_computing+0x9f/0x1c0 [ 144.635780][ T9596] syscall_trace_enter+0xd1/0x1f0 [ 144.635835][ T9596] ? fpregs_assert_state_consistent+0x83/0xa0 [ 144.635861][ T9596] do_syscall_64+0xaa/0x1c0 [ 144.635890][ T9596] ? clear_bhb_loop+0x55/0xb0 [ 144.635949][ T9596] ? clear_bhb_loop+0x55/0xb0 [ 144.635981][ T9596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.636014][ T9596] RIP: 0033:0x7fcbbfedd169 [ 144.636032][ T9596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.636131][ T9596] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 144.636154][ T9596] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 144.636168][ T9596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 144.636245][ T9596] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 144.636257][ T9596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.636269][ T9596] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 144.636325][ T9596] [ 144.882019][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2387'. [ 144.909256][ T9610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2391'. [ 145.040148][ T9598] netlink: 'syz.2.2386': attribute type 39 has an invalid length. [ 145.444419][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 145.885522][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2398'. [ 146.244361][ T9654] FAULT_INJECTION: forcing a failure. [ 146.244361][ T9654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.257577][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.0.2402 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 146.257609][ T9654] Tainted: [W]=WARN [ 146.257616][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.257628][ T9654] Call Trace: [ 146.257633][ T9654] [ 146.257640][ T9654] dump_stack_lvl+0xf2/0x150 [ 146.257735][ T9654] dump_stack+0x15/0x1a [ 146.257788][ T9654] should_fail_ex+0x24a/0x260 [ 146.257821][ T9654] should_fail+0xb/0x10 [ 146.257905][ T9654] should_fail_usercopy+0x1a/0x20 [ 146.257933][ T9654] _copy_from_user+0x1c/0xa0 [ 146.258033][ T9654] copy_msghdr_from_user+0x54/0x2a0 [ 146.258060][ T9654] ? __fget_files+0x17c/0x1c0 [ 146.258142][ T9654] __sys_sendmsg+0x13e/0x230 [ 146.258176][ T9654] __x64_sys_sendmsg+0x46/0x50 [ 146.258196][ T9654] x64_sys_call+0x2734/0x2dc0 [ 146.258270][ T9654] do_syscall_64+0xc9/0x1c0 [ 146.258296][ T9654] ? clear_bhb_loop+0x55/0xb0 [ 146.258368][ T9654] ? clear_bhb_loop+0x55/0xb0 [ 146.258391][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.258427][ T9654] RIP: 0033:0x7f5e10edd169 [ 146.258440][ T9654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.258456][ T9654] RSP: 002b:00007f5e0f547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.258534][ T9654] RAX: ffffffffffffffda RBX: 00007f5e110f5fa0 RCX: 00007f5e10edd169 [ 146.258545][ T9654] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000003 [ 146.258555][ T9654] RBP: 00007f5e0f547090 R08: 0000000000000000 R09: 0000000000000000 [ 146.258565][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.258576][ T9654] R13: 0000000000000000 R14: 00007f5e110f5fa0 R15: 00007fff93e14288 [ 146.258592][ T9654] [ 146.457177][ T9656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2403'. [ 146.623676][ T9658] netlink: 'syz.0.2404': attribute type 39 has an invalid length. [ 146.756804][ T9663] FAULT_INJECTION: forcing a failure. [ 146.756804][ T9663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.769946][ T9663] CPU: 1 UID: 0 PID: 9663 Comm: syz.0.2406 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 146.769976][ T9663] Tainted: [W]=WARN [ 146.769982][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.770057][ T9663] Call Trace: [ 146.770064][ T9663] [ 146.770071][ T9663] dump_stack_lvl+0xf2/0x150 [ 146.770177][ T9663] dump_stack+0x15/0x1a [ 146.770206][ T9663] should_fail_ex+0x24a/0x260 [ 146.770242][ T9663] should_fail+0xb/0x10 [ 146.770273][ T9663] should_fail_usercopy+0x1a/0x20 [ 146.770410][ T9663] _copy_from_user+0x1c/0xa0 [ 146.770440][ T9663] __sys_bpf+0x14e/0x7a0 [ 146.770471][ T9663] __x64_sys_bpf+0x43/0x50 [ 146.770492][ T9663] x64_sys_call+0x2914/0x2dc0 [ 146.770586][ T9663] do_syscall_64+0xc9/0x1c0 [ 146.770610][ T9663] ? clear_bhb_loop+0x55/0xb0 [ 146.770633][ T9663] ? clear_bhb_loop+0x55/0xb0 [ 146.770657][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.770725][ T9663] RIP: 0033:0x7f5e10edd169 [ 146.770738][ T9663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.770753][ T9663] RSP: 002b:00007f5e0f547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.770841][ T9663] RAX: ffffffffffffffda RBX: 00007f5e110f5fa0 RCX: 00007f5e10edd169 [ 146.770852][ T9663] RDX: 0000000000000020 RSI: 0000400000001600 RDI: 0000000000000004 [ 146.770862][ T9663] RBP: 00007f5e0f547090 R08: 0000000000000000 R09: 0000000000000000 [ 146.770871][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.770881][ T9663] R13: 0000000000000000 R14: 00007f5e110f5fa0 R15: 00007fff93e14288 [ 146.770897][ T9663] [ 147.216739][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2411'. [ 147.233906][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 147.233924][ T29] audit: type=1326 audit(1740569323.400:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.266336][ T29] audit: type=1326 audit(1740569323.400:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.289896][ T29] audit: type=1326 audit(1740569323.400:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.313585][ T29] audit: type=1326 audit(1740569323.400:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.337197][ T29] audit: type=1326 audit(1740569323.400:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.360683][ T29] audit: type=1326 audit(1740569323.400:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.384129][ T29] audit: type=1326 audit(1740569323.400:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.407679][ T29] audit: type=1326 audit(1740569323.400:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.431132][ T29] audit: type=1326 audit(1740569323.400:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.454495][ T29] audit: type=1326 audit(1740569323.400:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9683 comm="syz.1.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f7e22d169 code=0x7ffc0000 [ 147.494308][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2415'. [ 147.510792][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2415'. [ 147.741396][ T9695] netlink: 'syz.1.2417': attribute type 39 has an invalid length. [ 147.843294][ T9700] tipc: Enabled bearer , priority 0 [ 147.856179][ T9698] tipc: Disabling bearer [ 148.457153][ T9727] lo: entered allmulticast mode [ 148.494770][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2429'. [ 148.508889][ T9726] lo: left allmulticast mode [ 148.602264][ T9725] netlink: 'syz.4.2428': attribute type 39 has an invalid length. [ 148.778607][ T9738] tipc: Enabled bearer , priority 0 [ 148.786897][ T9737] tipc: Disabling bearer [ 148.971335][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 149.220531][ T9754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2437'. [ 149.257879][ T9756] 9pnet_fd: Insufficient options for proto=fd [ 149.292114][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 149.411416][ T9762] netlink: 'syz.1.2440': attribute type 1 has an invalid length. [ 149.436048][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 149.489632][ T9768] block device autoloading is deprecated and will be removed. [ 149.534170][ T9770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9770 comm=syz.1.2444 [ 149.617877][ T9776] tipc: Enabled bearer , priority 0 [ 149.627800][ T9775] tipc: Disabling bearer [ 149.791168][ T9783] 9pnet_fd: Insufficient options for proto=fd [ 149.900200][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2449'. [ 149.981905][ T9778] netlink: 'syz.4.2446': attribute type 39 has an invalid length. [ 150.067913][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 150.100572][ T9740] syz.0.2434 (9740) used greatest stack depth: 7144 bytes left [ 150.154170][ T9802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9802 comm=+}[@ [ 150.166277][ T9802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9802 comm=+}[@ [ 150.215433][ T9804] tipc: Enabled bearer , priority 0 [ 150.226239][ T9803] tipc: Disabling bearer [ 150.317278][ T9812] 9pnet_fd: Insufficient options for proto=fd [ 150.584902][ T9817] netlink: 'syz.1.2462': attribute type 39 has an invalid length. [ 150.678268][ T9827] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 151.486390][ T9844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9844 comm=syz.4.2472 [ 151.656027][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 151.943148][ T9845] lo speed is unknown, defaulting to 1000 [ 152.028619][ T9845] chnl_net:caif_netlink_parms(): no params data found [ 152.065665][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.072784][ T9845] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.080076][ T9845] bridge_slave_0: entered allmulticast mode [ 152.086647][ T9845] bridge_slave_0: entered promiscuous mode [ 152.093453][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.100729][ T9845] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.107949][ T9845] bridge_slave_1: entered allmulticast mode [ 152.114476][ T9845] bridge_slave_1: entered promiscuous mode [ 152.134532][ T9845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.144949][ T9845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.165540][ T9845] team0: Port device team_slave_0 added [ 152.172254][ T9845] team0: Port device team_slave_1 added [ 152.188464][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.195538][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.221608][ T9845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.232828][ T9845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.239794][ T9845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.265875][ T9845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.293352][ T9845] hsr_slave_0: entered promiscuous mode [ 152.305013][ T9845] hsr_slave_1: entered promiscuous mode [ 152.313120][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 152.313131][ T29] audit: type=1400 audit(1740569328.470:4808): avc: denied { ioctl } for pid=9882 comm="syz.0.2479" path="socket:[28924]" dev="sockfs" ino=28924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.313224][ T9883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2479'. [ 152.345219][ T9845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.366760][ T29] audit: type=1326 audit(1740569328.530:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.368870][ T9845] Cannot create hsr debugfs directory [ 152.395923][ T9883] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 152.419617][ T29] audit: type=1326 audit(1740569328.530:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.443222][ T29] audit: type=1326 audit(1740569328.530:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.466718][ T29] audit: type=1326 audit(1740569328.530:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.490139][ T29] audit: type=1326 audit(1740569328.530:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.513996][ T29] audit: type=1326 audit(1740569328.530:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.537499][ T29] audit: type=1326 audit(1740569328.530:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.560921][ T29] audit: type=1326 audit(1740569328.530:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.584417][ T29] audit: type=1326 audit(1740569328.560:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 152.720678][ T9845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.730127][ T9845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.780536][ T9845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.819401][ T9845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.878558][ T9907] block device autoloading is deprecated and will be removed. [ 152.913130][ T9845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.952174][ T9845] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.975942][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.983050][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.062616][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.069788][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.096326][ T9912] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9912 comm=syz.0.2490 [ 153.132759][ T9845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.143209][ T9845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.219754][ T9845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.392553][ T9845] veth0_vlan: entered promiscuous mode [ 153.401349][ T9845] veth1_vlan: entered promiscuous mode [ 153.428302][ T9845] veth0_macvtap: entered promiscuous mode [ 153.451962][ T9845] veth1_macvtap: entered promiscuous mode [ 153.470968][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.487199][ T9845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.500261][ T9845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.509134][ T9845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.517947][ T9845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.526684][ T9845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.617825][ T9905] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 153.849856][ T9941] __nla_validate_parse: 2 callbacks suppressed [ 153.849873][ T9941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2493'. [ 153.879884][ T9896] syz.4.2483 (9896) used greatest stack depth: 7016 bytes left [ 153.919201][ T9949] FAULT_INJECTION: forcing a failure. [ 153.919201][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 153.931907][ T9949] CPU: 0 UID: 0 PID: 9949 Comm: syz.4.2497 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 153.931944][ T9949] Tainted: [W]=WARN [ 153.931953][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.931968][ T9949] Call Trace: [ 153.931976][ T9949] [ 153.931984][ T9949] dump_stack_lvl+0xf2/0x150 [ 153.932015][ T9949] dump_stack+0x15/0x1a [ 153.932115][ T9949] should_fail_ex+0x24a/0x260 [ 153.932218][ T9949] should_failslab+0x8f/0xb0 [ 153.932248][ T9949] kmem_cache_alloc_noprof+0x52/0x320 [ 153.932274][ T9949] ? getname_flags+0x81/0x3b0 [ 153.932343][ T9949] getname_flags+0x81/0x3b0 [ 153.932383][ T9949] __x64_sys_symlinkat+0x50/0x70 [ 153.932423][ T9949] x64_sys_call+0x269e/0x2dc0 [ 153.932447][ T9949] do_syscall_64+0xc9/0x1c0 [ 153.932477][ T9949] ? clear_bhb_loop+0x55/0xb0 [ 153.932548][ T9949] ? clear_bhb_loop+0x55/0xb0 [ 153.932580][ T9949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.932611][ T9949] RIP: 0033:0x7fcbbfedd169 [ 153.932627][ T9949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.932644][ T9949] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 153.932661][ T9949] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 153.932673][ T9949] RDX: 0000400000000140 RSI: ffffffffffffffff RDI: 0000000000000000 [ 153.932690][ T9949] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 153.932702][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.932716][ T9949] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 153.932735][ T9949] [ 154.033161][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 154.217272][ T9970] syz.2.2503 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.335232][ T9975] lo speed is unknown, defaulting to 1000 [ 154.465594][ T9976] lo speed is unknown, defaulting to 1000 [ 155.120243][ T9985] netlink: 'syz.1.2508': attribute type 39 has an invalid length. [ 155.611738][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2519'. [ 155.830760][T10028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2521'. [ 155.852375][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 156.201408][T10047] FAULT_INJECTION: forcing a failure. [ 156.201408][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 156.214160][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.1.2529 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 156.214190][T10047] Tainted: [W]=WARN [ 156.214196][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.214208][T10047] Call Trace: [ 156.214214][T10047] [ 156.214221][T10047] dump_stack_lvl+0xf2/0x150 [ 156.214249][T10047] dump_stack+0x15/0x1a [ 156.214292][T10047] should_fail_ex+0x24a/0x260 [ 156.214364][T10047] ? getname_flags+0x1f4/0x3b0 [ 156.214437][T10047] should_failslab+0x8f/0xb0 [ 156.214527][T10047] __kmalloc_cache_noprof+0x4e/0x320 [ 156.214607][T10047] getname_flags+0x1f4/0x3b0 [ 156.214653][T10047] getname+0x17/0x20 [ 156.214684][T10047] __x64_sys_execve+0x40/0x70 [ 156.214765][T10047] x64_sys_call+0x1333/0x2dc0 [ 156.214792][T10047] do_syscall_64+0xc9/0x1c0 [ 156.214823][T10047] ? clear_bhb_loop+0x55/0xb0 [ 156.214855][T10047] ? clear_bhb_loop+0x55/0xb0 [ 156.214899][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.215054][T10047] RIP: 0033:0x7f6f7e22d169 [ 156.215071][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.215092][T10047] RSP: 002b:00007f6f7c897038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 156.215125][T10047] RAX: ffffffffffffffda RBX: 00007f6f7e445fa0 RCX: 00007f6f7e22d169 [ 156.215137][T10047] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000002040 [ 156.215149][T10047] RBP: 00007f6f7c897090 R08: 0000000000000000 R09: 0000000000000000 [ 156.215163][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.215176][T10047] R13: 0000000000000000 R14: 00007f6f7e445fa0 R15: 00007ffd42277038 [ 156.215198][T10047] [ 156.475673][T10049] lo speed is unknown, defaulting to 1000 [ 156.578242][T10054] lo speed is unknown, defaulting to 1000 [ 156.900437][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'. [ 156.995624][T10073] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 157.079002][T10057] netlink: 'syz.1.2532': attribute type 39 has an invalid length. [ 157.273782][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 157.305423][T10099] lo speed is unknown, defaulting to 1000 [ 157.375303][T10101] lo speed is unknown, defaulting to 1000 [ 157.420953][T10099] IPVS: You probably need to specify IP address on multicast interface. [ 157.437107][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 157.439549][T10099] IPVS: Error connecting to the multicast addr [ 157.458340][T10083] netlink: 'syz.4.2540': attribute type 39 has an invalid length. [ 157.542080][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 157.551329][T10111] FAULT_INJECTION: forcing a failure. [ 157.551329][T10111] name failslab, interval 1, probability 0, space 0, times 0 [ 157.564311][T10111] CPU: 0 UID: 0 PID: 10111 Comm: syz.4.2547 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 157.564390][T10111] Tainted: [W]=WARN [ 157.564398][T10111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.564413][T10111] Call Trace: [ 157.564419][T10111] [ 157.564427][T10111] dump_stack_lvl+0xf2/0x150 [ 157.564537][T10111] dump_stack+0x15/0x1a [ 157.564557][T10111] should_fail_ex+0x24a/0x260 [ 157.564591][T10111] ? netdevice_event+0x2b6/0x610 [ 157.564680][T10111] should_failslab+0x8f/0xb0 [ 157.564716][T10111] __kmalloc_cache_noprof+0x4e/0x320 [ 157.564739][T10111] ? netlink_has_listeners+0xe3/0x100 [ 157.564817][T10111] netdevice_event+0x2b6/0x610 [ 157.564843][T10111] ? __rcu_read_unlock+0x4e/0x70 [ 157.564866][T10111] ? __pfx_del_netdev_ips+0x10/0x10 [ 157.564886][T10111] ? __pfx_pass_all_filter+0x10/0x10 [ 157.564950][T10111] ? nh_netdev_event+0xfa/0x3d0 [ 157.564989][T10111] ? __pfx_netdevice_event+0x10/0x10 [ 157.565013][T10111] raw_notifier_call_chain+0x6f/0x1d0 [ 157.565038][T10111] ? up_write+0x30/0xf0 [ 157.565057][T10111] ? mutex_is_locked+0x12/0x30 [ 157.565139][T10111] call_netdevice_notifiers_info+0xae/0x100 [ 157.565211][T10111] unregister_netdevice_many_notify+0x98a/0x1280 [ 157.565246][T10111] unregister_netdevice_queue+0x1f4/0x220 [ 157.565271][T10111] __tun_detach+0x7db/0xae0 [ 157.565318][T10111] tun_chr_close+0x58/0xf0 [ 157.565336][T10111] ? __pfx_tun_chr_close+0x10/0x10 [ 157.565356][T10111] __fput+0x2ac/0x640 [ 157.565401][T10111] __fput_sync+0x96/0xc0 [ 157.565425][T10111] __x64_sys_close+0x55/0xe0 [ 157.565460][T10111] x64_sys_call+0x266c/0x2dc0 [ 157.565578][T10111] do_syscall_64+0xc9/0x1c0 [ 157.565606][T10111] ? clear_bhb_loop+0x55/0xb0 [ 157.565681][T10111] ? clear_bhb_loop+0x55/0xb0 [ 157.565711][T10111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.565737][T10111] RIP: 0033:0x7fcbbfedd169 [ 157.565777][T10111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.565796][T10111] RSP: 002b:00007fcbbe541038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 157.565816][T10111] RAX: ffffffffffffffda RBX: 00007fcbc00f5fa0 RCX: 00007fcbbfedd169 [ 157.565830][T10111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 157.565843][T10111] RBP: 00007fcbbe541090 R08: 0000000000000000 R09: 0000000000000000 [ 157.565856][T10111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.565869][T10111] R13: 0000000000000000 R14: 00007fcbc00f5fa0 R15: 00007ffdeafa21a8 [ 157.565889][T10111] [ 157.877601][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 157.877618][ T29] audit: type=1326 audit(1740569334.040:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 157.908090][ T29] audit: type=1326 audit(1740569334.050:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 157.931816][ T29] audit: type=1326 audit(1740569334.050:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 157.955328][ T29] audit: type=1326 audit(1740569334.050:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 157.979003][ T29] audit: type=1326 audit(1740569334.050:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 158.002510][ T29] audit: type=1326 audit(1740569334.050:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 158.026054][ T29] audit: type=1326 audit(1740569334.050:5100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 158.049700][ T29] audit: type=1326 audit(1740569334.050:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 158.073193][ T29] audit: type=1326 audit(1740569334.050:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10114 comm="syz.2.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f472cb4d169 code=0x7ffc0000 [ 158.096725][ T29] audit: type=1400 audit(1740569334.170:5103): avc: denied { execute } for pid=10114 comm="syz.2.2549" name="file0" dev="tmpfs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.131367][T10121] lo speed is unknown, defaulting to 1000 [ 158.197798][T10129] SELinux: ebitmap: truncated map [ 158.200794][T10127] lo speed is unknown, defaulting to 1000 [ 158.203465][T10129] SELinux: failed to load policy [ 158.230609][T10125] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 158.247555][T10133] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 158.256258][T10133] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2555'. [ 158.275157][T10135] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 158.298447][T10137] loop1: detected capacity change from 0 to 128 [ 158.323951][T10139] block device autoloading is deprecated and will be removed. [ 158.376951][T10137] bio_check_eod: 30909 callbacks suppressed [ 158.376969][T10137] syz.1.2556: attempt to access beyond end of device [ 158.376969][T10137] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 158.409694][T10137] syz.1.2556: attempt to access beyond end of device [ 158.409694][T10137] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 158.427488][T10137] syz.1.2556: attempt to access beyond end of device [ 158.427488][T10137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.475505][T10137] syz.1.2556: attempt to access beyond end of device [ 158.475505][T10137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.492218][T10137] syz.1.2556: attempt to access beyond end of device [ 158.492218][T10137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.509310][T10137] syz.1.2556: attempt to access beyond end of device [ 158.509310][T10137] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.522534][T10145] syz.1.2556: attempt to access beyond end of device [ 158.522534][T10145] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.557616][T10145] syz.1.2556: attempt to access beyond end of device [ 158.557616][T10145] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.571610][T10145] syz.1.2556: attempt to access beyond end of device [ 158.571610][T10145] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.585778][T10145] syz.1.2556: attempt to access beyond end of device [ 158.585778][T10145] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 158.830697][T10154] lo speed is unknown, defaulting to 1000 [ 158.883042][T10155] lo speed is unknown, defaulting to 1000 [ 159.187883][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2564'. [ 159.200926][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.208583][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.216683][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.224131][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.261699][T10173] lo speed is unknown, defaulting to 1000 [ 159.313963][T10178] lo speed is unknown, defaulting to 1000 [ 159.354150][T10173] IPVS: You probably need to specify IP address on multicast interface. [ 159.362715][T10173] IPVS: Error connecting to the multicast addr [ 159.469402][T10189] block device autoloading is deprecated and will be removed. [ 159.470592][T10187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 159.532674][T10192] geneve1: entered promiscuous mode [ 159.546238][T10192] geneve1: left promiscuous mode [ 159.583473][T10199] lo speed is unknown, defaulting to 1000 [ 159.688736][T10200] lo speed is unknown, defaulting to 1000 [ 159.742068][T10205] FAULT_INJECTION: forcing a failure. [ 159.742068][T10205] name failslab, interval 1, probability 0, space 0, times 0 [ 159.754867][T10205] CPU: 0 UID: 0 PID: 10205 Comm: syz.2.2577 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 159.754974][T10205] Tainted: [W]=WARN [ 159.754982][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.755034][T10205] Call Trace: [ 159.755041][T10205] [ 159.755047][T10205] dump_stack_lvl+0xf2/0x150 [ 159.755076][T10205] dump_stack+0x15/0x1a [ 159.755156][T10205] should_fail_ex+0x24a/0x260 [ 159.755192][T10205] should_failslab+0x8f/0xb0 [ 159.755259][T10205] kmem_cache_alloc_noprof+0x52/0x320 [ 159.755280][T10205] ? audit_log_start+0x34c/0x6b0 [ 159.755318][T10205] audit_log_start+0x34c/0x6b0 [ 159.755365][T10205] audit_seccomp+0x4b/0x130 [ 159.755399][T10205] __seccomp_filter+0x6fa/0x1180 [ 159.755489][T10205] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 159.755516][T10205] ? vfs_write+0x644/0x920 [ 159.755542][T10205] __secure_computing+0x9f/0x1c0 [ 159.755568][T10205] syscall_trace_enter+0xd1/0x1f0 [ 159.755609][T10205] ? fpregs_assert_state_consistent+0x83/0xa0 [ 159.755636][T10205] do_syscall_64+0xaa/0x1c0 [ 159.755669][T10205] ? clear_bhb_loop+0x55/0xb0 [ 159.755694][T10205] ? clear_bhb_loop+0x55/0xb0 [ 159.755764][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.755789][T10205] RIP: 0033:0x7f472cb4d169 [ 159.755803][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.755849][T10205] RSP: 002b:00007f472b1b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 159.755871][T10205] RAX: ffffffffffffffda RBX: 00007f472cd65fa0 RCX: 00007f472cb4d169 [ 159.755893][T10205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000004ec [ 159.755904][T10205] RBP: 00007f472b1b7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.755915][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.755944][T10205] R13: 0000000000000000 R14: 00007f472cd65fa0 R15: 00007ffcfe547978 [ 159.755966][T10205] [ 160.027999][T10197] netlink: 'syz.1.2574': attribute type 39 has an invalid length. [ 160.081538][T10213] lo speed is unknown, defaulting to 1000 [ 160.090689][T10211] loop5: detected capacity change from 0 to 128 [ 160.116595][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 160.192111][T10220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2584'. [ 160.259347][T10216] lo speed is unknown, defaulting to 1000 [ 160.266752][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2582'. [ 160.284180][T10228] program syz.4.2585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.595922][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 161.021585][T10247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2590'. [ 161.175385][T10249] netlink: 'syz.2.2592': attribute type 39 has an invalid length. [ 161.264425][T10261] random: crng reseeded on system resumption [ 161.276632][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2595'. [ 161.330611][T10266] lo: entered allmulticast mode [ 161.343278][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'. [ 161.355111][T10267] lo speed is unknown, defaulting to 1000 [ 161.371897][T10265] lo: left allmulticast mode [ 161.448202][T10270] lo speed is unknown, defaulting to 1000 [ 161.547106][T10271] lo speed is unknown, defaulting to 1000 [ 161.606538][T10280] lo speed is unknown, defaulting to 1000 [ 161.704406][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2600'. [ 161.751494][T10294] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 162.004210][T10298] netlink: 'syz.1.2604': attribute type 39 has an invalid length. [ 162.126864][T10317] lo: entered allmulticast mode [ 162.134406][T10316] lo: left allmulticast mode [ 162.212060][T10320] 9pnet_fd: Insufficient options for proto=fd [ 162.738371][T10335] lo speed is unknown, defaulting to 1000 [ 162.798911][T10311] ================================================================== [ 162.807028][T10311] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 162.814778][T10311] [ 162.815481][T10336] lo speed is unknown, defaulting to 1000 [ 162.817087][T10311] write to 0xffff8881067dca18 of 8 bytes by task 10312 on cpu 1: [ 162.830528][T10311] fasync_remove_entry+0xd2/0x130 [ 162.835567][T10311] fasync_helper+0x96/0xc0 [ 162.840011][T10311] sock_fasync+0x5a/0xc0 [ 162.844277][T10311] __fput+0x5d2/0x640 [ 162.848175][T10335] IPVS: You probably need to specify IP address on multicast interface. [ 162.848266][T10311] ____fput+0x1c/0x30 [ 162.860574][T10311] task_work_run+0x13a/0x1a0 [ 162.865186][T10311] syscall_exit_to_user_mode+0xa8/0x120 [ 162.870744][T10311] do_syscall_64+0xd6/0x1c0 [ 162.875261][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.881162][T10311] [ 162.883482][T10311] read to 0xffff8881067dca18 of 8 bytes by task 10311 on cpu 0: [ 162.891116][T10311] sock_wake_async+0x2a/0x120 [ 162.895807][T10311] unix_write_space+0x135/0x140 [ 162.900664][T10311] sock_wfree+0x147/0x3b0 [ 162.904996][T10311] unix_destruct_scm+0xc5/0xf0 [ 162.909754][T10311] skb_release_head_state+0xbb/0x1b0 [ 162.915036][T10311] __kfree_skb+0x16/0x150 [ 162.919368][T10311] sk_skb_reason_drop+0xba/0x290 [ 162.924311][T10311] unix_release_sock+0x603/0x750 [ 162.929271][T10311] unix_release+0x57/0x80 [ 162.933608][T10311] sock_close+0x68/0x150 [ 162.937847][T10311] __fput+0x2ac/0x640 [ 162.941823][T10311] ____fput+0x1c/0x30 [ 162.945793][T10311] task_work_run+0x13a/0x1a0 [ 162.950386][T10311] syscall_exit_to_user_mode+0xa8/0x120 [ 162.955937][T10311] do_syscall_64+0xd6/0x1c0 [ 162.960450][T10311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.966348][T10311] [ 162.968663][T10311] value changed: 0xffff8881187c4a20 -> 0x0000000000000000 [ 162.975764][T10311] [ 162.978077][T10311] Reported by Kernel Concurrency Sanitizer on: [ 162.984221][T10311] CPU: 0 UID: 0 PID: 10311 Comm: syz.4.2608 Tainted: G W 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 162.996457][T10311] Tainted: [W]=WARN [ 163.000251][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.010302][T10311] ================================================================== [ 163.031113][T10335] IPVS: Error connecting to the multicast addr