last executing test programs: 43.827957196s ago: executing program 4 (id=500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 43.822889416s ago: executing program 4 (id=502): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) getitimer(0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x230, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x9c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x0, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffbfffc, 0x2}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x81}}, @TCA_HTB_DIRECT_QLEN={0x0, 0x5, 0x4c39318c}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0xfffffffffffffccd, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}, @TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0xa, 0xb8, 0x1, 0x8001, 0x8001, 0x6}}, {0x10, 0x2, [0x3, 0x4, 0xd, 0x681, 0x1, 0x8001]}}, {{0x1c, 0x1, {0x4, 0xc6, 0x5, 0xc, 0x2, 0x800, 0x5, 0x2}}, {0x8, 0x2, [0x8001, 0x2]}}, {{0x1c, 0x1, {0x6, 0x8, 0x2, 0x2, 0x1, 0xf, 0xffff, 0x2}}, {0x8, 0x2, [0x6, 0x7]}}, {{0x1c, 0x1, {0x4, 0x32, 0x7, 0x2, 0x1, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0x4, 0x2, 0x522]}}, {{0x1c, 0x1, {0x7, 0x0, 0x37b5, 0x1, 0x1, 0x8, 0x970, 0x3}}, {0xa, 0x2, [0x8, 0xf, 0xa]}}, {{0x1c, 0x1, {0xb, 0x7, 0xfffc, 0xa, 0x1, 0x1, 0xfffffff0, 0x7}}, {0x12, 0x2, [0x1, 0x1, 0x2, 0x2, 0x2, 0x800, 0xe]}}, {{0x1c, 0x1, {0x66, 0x0, 0x3, 0x6, 0x0, 0x7f, 0xda18, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x3, 0x5, 0x1000, 0x4, 0x2, 0x4, 0x8, 0x4}}, {0xc, 0x2, [0x2, 0xe4f, 0x6, 0x6]}}]}]}, 0x230}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) 43.437236141s ago: executing program 4 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000180)='leases_conflict\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 43.413334852s ago: executing program 4 (id=512): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (fail_nth: 4) 43.115955966s ago: executing program 4 (id=515): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 42.786088281s ago: executing program 4 (id=529): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_open_procfs(0x0, &(0x7f00000012c0)='fdinfo/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100"], 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) fgetxattr(r1, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/113, 0x71) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1024000, &(0x7f0000000580)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="48fed4d7f5b8976a72325a7a4475518c8d8a9629deb06c4e680f4ea7e455be0095b78419dc32be7a7a984436b376363cdb37f958fd03f67af3ed1d5bb35f216485b41cdcbf53694e0687154e6aff974b9a4a09eae36b3fc668d251214c5c55f89b8d7da9a6384351758802bf51495393dc6788aa2f3a5fe2ca65e943cc864c99e74acf06ce962859b644646dd81a4f6c7951f40ce7172bfd3307720a3a7d80c4", @ANYRESOCT, @ANYRESDEC], 0xfe, 0xa37, &(0x7f00000018c0)="$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") 42.741455322s ago: executing program 32 (id=529): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_open_procfs(0x0, &(0x7f00000012c0)='fdinfo/3\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100"], 0x20}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) fgetxattr(r1, &(0x7f0000000080)=@known='user.incfs.id\x00', &(0x7f0000000180)=""/113, 0x71) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='sit0\x00'}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x1024000, &(0x7f0000000580)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYBLOB="48fed4d7f5b8976a72325a7a4475518c8d8a9629deb06c4e680f4ea7e455be0095b78419dc32be7a7a984436b376363cdb37f958fd03f67af3ed1d5bb35f216485b41cdcbf53694e0687154e6aff974b9a4a09eae36b3fc668d251214c5c55f89b8d7da9a6384351758802bf51495393dc6788aa2f3a5fe2ca65e943cc864c99e74acf06ce962859b644646dd81a4f6c7951f40ce7172bfd3307720a3a7d80c4", @ANYRESOCT, @ANYRESDEC], 0xfe, 0xa37, &(0x7f00000018c0)="$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") 41.352673173s ago: executing program 2 (id=545): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='%-\'$]\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x1e, 0x0, &(0x7f0000004780)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000380)=0x5) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 41.290528843s ago: executing program 2 (id=546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 41.289989583s ago: executing program 2 (id=547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 39.818168865s ago: executing program 2 (id=562): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpriority(0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='cpu&00\t||') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r6, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 39.027281697s ago: executing program 2 (id=583): r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f616400000000090001"], 0x110}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$evdev(0x0, 0x0, 0x480) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_usb_disconnect(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(r6) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xb, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x10001}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) setreuid(0xee00, 0x0) r10 = syz_pidfd_open(r0, 0x0) setns(r10, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 38.519373535s ago: executing program 2 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 38.481786556s ago: executing program 33 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 2.070280529s ago: executing program 3 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000001200), 0x10) close(r2) 2.048291449s ago: executing program 3 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_clone3(&(0x7f0000000040)={0x100002000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0xb}, 0x0, 0x0, &(0x7f00000000c0)=""/261, &(0x7f0000000840)=[0x0, 0x0], 0x2}, 0x58) 2.00326945s ago: executing program 3 (id=1424): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/237, 0xed}], 0x1}, 0x40010022) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) 1.164998862s ago: executing program 5 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.135060063s ago: executing program 5 (id=1444): socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x80, 0x0, 0x0, 0x42001, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1902, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) sendto$inet(r0, 0x0, 0x0, 0x6000c804, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) iopl(0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="190000000400000008000000", @ANYRES16], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) 1.018854664s ago: executing program 3 (id=1447): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, &(0x7f0000000340)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) 928.125896ms ago: executing program 3 (id=1452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x100a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff00ebffffff0086dd60002000001832ff00000000000000000000ffff0a010100fe8000000000000000000000000000aa"], 0x0) 853.543027ms ago: executing program 0 (id=1456): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept(r0, &(0x7f0000000180)=@l2, &(0x7f0000000000)=0x80) bind(r2, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7f, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) 790.517958ms ago: executing program 3 (id=1457): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/237, 0xed}], 0x1}, 0x40010022) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) 772.030078ms ago: executing program 0 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) syz_clone3(&(0x7f0000000040)={0x100002000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0xb}, 0x0, 0x0, &(0x7f00000000c0)=""/261, &(0x7f0000000840)=[0x0, 0x0], 0x2}, 0x58) 646.75131ms ago: executing program 0 (id=1464): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x4, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001e110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffffffffffff, 0x578, 0xa50d, 0x99, 0x8001], 0x3, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r5 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xc9dc, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000f80), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) 505.154432ms ago: executing program 0 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x8}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 450.343463ms ago: executing program 0 (id=1469): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2400000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='mm_page_alloc\x00', r1, 0x0, 0x45}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) 445.128163ms ago: executing program 6 (id=1470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r1, 0x0, 0x0) setrlimit(0x40000000000008, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x210c, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaee}, 0x12345, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = mq_open(0x0, 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 313.234255ms ago: executing program 1 (id=1473): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x4, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001e110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffffffffffff, 0x578, 0xa50d, 0x99, 0x8001], 0x3, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) 262.804626ms ago: executing program 6 (id=1474): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90124fc60100c03", 0x17}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) sched_getaffinity(0x0, 0x8, &(0x7f0000000200)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x10, 0x190, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x128, 0x190, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r'}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 205.100317ms ago: executing program 1 (id=1475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x362a, &(0x7f0000000040)={0x0, 0xb0da, 0x2, 0x2, 0x2f7}, &(0x7f0000000140), &(0x7f0000000180)) 194.013637ms ago: executing program 1 (id=1476): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)) setpriority(0x1, 0x0, 0x2000007) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x6040480) 192.732267ms ago: executing program 5 (id=1477): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x4, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001e110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffffffffffff, 0x578, 0xa50d, 0x99, 0x8001], 0x3, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r5 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xc9dc, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000f80), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) 163.869827ms ago: executing program 5 (id=1478): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000383a00fe8000000000000000000000000000bbff02"], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0xfff2, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xb, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0xfffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) 158.187698ms ago: executing program 6 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1, 0x0, 0x8}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000000000000019000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) 142.947668ms ago: executing program 1 (id=1480): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r0) 142.285908ms ago: executing program 6 (id=1481): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f0000000640), 0x8, 0xdd, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100004ed9c2ace905007800000a40000000060a0b0400000000000000000200000014000480100001800a00010072656469720000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r9, 0x0, 0x0) sendto$packet(r9, &(0x7f00000002c0)="c9f59ac109b3e5d3e56532adb0245bf0d0d9d191b0b0ec4dbe39c5bb8bb06b0dc2b469de92f6a50bcc83720c8d2e4da33b4352682d2f5d24f6f19c462b4a4dd49f6a4af6a159f579b53843306a3c431a714d4f068b245ae0951f5e820af47d7c7576e8593e18ae1085602014272392479d35157cbc5728c47ff687c34cea6cc28046e58b319cb63d73600be192cac7e71c97a0445b432070c8953e7f3f8351d28690c3aab338a310490a23bf4dc989c3d5c8346ad12f3b08580004835a8bcc5c892246076e3d8f432391051f8d3f16ac74157fb1d83cf49c833ebc3221ffcf785a49c88df2bb98cca9913826945937b1e78ee2", 0xf3, 0x20000040, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8042, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) copy_file_range(r11, 0x0, r10, 0x0, 0xe6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53df2b456239aaaaaaaaaabb08004500002800000000008890780000000800ffffff0e00907800041000"/54], 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 104.804838ms ago: executing program 1 (id=1482): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001200), 0x10) close(r1) 75.021369ms ago: executing program 5 (id=1483): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 74.569998ms ago: executing program 6 (id=1484): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept(r0, &(0x7f0000000180)=@l2, &(0x7f0000000000)=0x80) bind(r2, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7f, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r5], 0x50) 74.228138ms ago: executing program 1 (id=1485): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r3, 0x0, 0x8bd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x4000000) r6 = socket(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306012400000000000000000a00000505000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 48.013329ms ago: executing program 5 (id=1486): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffed3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = syz_io_uring_setup(0x5d31, &(0x7f0000000300)={0x0, 0xc9f0, 0x2000, 0x1, 0x2af}, &(0x7f0000000080), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000003c0)=[0xfffffffa, 0xff], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}]}}) 39.858809ms ago: executing program 6 (id=1487): socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x80, 0x0, 0x0, 0x42001, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x1902, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) sendto$inet(r0, 0x0, 0x0, 0x6000c804, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) iopl(0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="abbcac6617cb4e4f2ba4216a58208a27b3e67a3d4471156c144ee24c155e88425402e6c8147eb17b37c0a6361afdc6a4d423784b08317eea143513f19c051c1b5a199316ca8938d4dac178ce98e869df5a72fb1f14bccc25abae51617c0304afeeb7b1ff3f3cd7278626d6235e68a0e84e10d4c2eec43b6900008288757d724fee20e5b3c3440939bc1bd0abcba8588140f733fc9a0d8de67754f55639e54f5b7f3f86bced0a6cfaef8337ffb6c5c0719625b32077f36ba2ebbcd5ea982a5342d0fabc9379161d0d27f5e05dc7c30ed0bb9392a817325b95b2706af337ba4d39df6b076c96bb725d3fa8880e5c8fe76f2236f370bb853a10bd8f302f4cf1d00233cd076de7dc946e274783e577a5307fe99febebde62e7dd35682948a8bc4490c26e9fa65167d1dca5616443f635ab9a89f4fed5ef142ac96f9cd7a0eb49bd8dade2b123c51dae2ee75c66aee74f21f160c2c98cbe8e70c95920eaeaccb08874608f670970dbf750e5a42ac18db58fac4aa556a62e404b1ed1bee75a8760ef18954fad4afed04621530374344e573d4796cf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="190000000400000008000000", @ANYRES16], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10) sendfile(r1, r1, 0x0, 0x800000009) 0s ago: executing program 0 (id=1488): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x4, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001e110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001080)={'broute\x00', 0x0, 0x0, 0x0, [0x7fffffffffffffff, 0x578, 0xa50d, 0x99, 0x8001], 0x3, &(0x7f00000002c0)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) r5 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xc9dc, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000f80), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000280)) kernel console output (not intermixed with test programs): op3: detected capacity change from 0 to 512 [ 59.685436][ T4956] EXT4-fs: quotafile must be on filesystem root [ 59.767440][ T96] hsr_slave_0: left promiscuous mode [ 59.773147][ T96] hsr_slave_1: left promiscuous mode [ 59.778956][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.786755][ T96] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.794407][ T96] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.801810][ T96] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.811606][ T96] veth1_macvtap: left promiscuous mode [ 59.824312][ T96] veth0_macvtap: left promiscuous mode [ 59.829901][ T96] veth1_vlan: left promiscuous mode [ 59.836643][ T96] veth0_vlan: left promiscuous mode [ 59.948628][ T96] team0 (unregistering): Port device team_slave_1 removed [ 59.970076][ T96] team0 (unregistering): Port device team_slave_0 removed [ 60.060185][ T4919] chnl_net:caif_netlink_parms(): no params data found [ 60.217231][ T5025] dns_resolver: Unsupported server list version (0) [ 60.224212][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.231279][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.240012][ T4919] bridge_slave_0: entered allmulticast mode [ 60.249700][ T4919] bridge_slave_0: entered promiscuous mode [ 60.261109][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.268312][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.286431][ T4919] bridge_slave_1: entered allmulticast mode [ 60.299012][ T4919] bridge_slave_1: entered promiscuous mode [ 60.340228][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.362562][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.416597][ T4919] team0: Port device team_slave_0 added [ 60.433727][ T4919] team0: Port device team_slave_1 added [ 60.467920][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.474974][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.501088][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.578290][ T5025] __nla_validate_parse: 5 callbacks suppressed [ 60.578304][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 60.581084][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.584551][ T5025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 60.593314][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.635111][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.671646][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 60.697254][ T4919] hsr_slave_0: entered promiscuous mode [ 60.703832][ T4919] hsr_slave_1: entered promiscuous mode [ 60.714798][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.732714][ T4919] Cannot create hsr debugfs directory [ 60.831953][ T5055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 60.853078][ T4919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 60.876312][ T5055] bridge_slave_0: left promiscuous mode [ 60.882001][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.891200][ T5055] bridge_slave_1: left allmulticast mode [ 60.896918][ T5055] bridge_slave_1: left promiscuous mode [ 60.902659][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.916061][ T5055] bond0: (slave bond_slave_0): Releasing backup interface [ 60.949726][ T5055] bond0: (slave bond_slave_1): Releasing backup interface [ 60.961166][ T5055] team0: Port device team_slave_0 removed [ 60.970533][ T5055] team0: Port device team_slave_1 removed [ 60.977438][ T5055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.984879][ T5055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.000424][ T5060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 61.015184][ T4919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.031152][ T4919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.088818][ T3443] syz1: Port: 1 Link DOWN [ 61.110184][ T4919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.132163][ T5072] loop2: detected capacity change from 0 to 256 [ 61.171649][ T5070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.561'. [ 61.207632][ T5078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 61.262091][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.312865][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.348926][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.356087][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.397663][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.404837][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.472491][ T5106] loop0: detected capacity change from 0 to 512 [ 61.486891][ T5106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.529165][ T5106] EXT4-fs (loop0): 1 truncate cleaned up [ 61.538333][ T5106] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.583921][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.681489][ T4919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.697852][ T5122] 9pnet: Unknown protocol version ;p2000.u [ 61.803682][ T5141] loop3: detected capacity change from 0 to 512 [ 61.834800][ T5141] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 61.861736][ T3304] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 61.869373][ T3304] FAT-fs (loop2): Filesystem has been set read-only [ 61.886806][ T3304] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 61.943413][ T5163] dns_resolver: Unsupported server list version (0) [ 61.952603][ T5165] FAULT_INJECTION: forcing a failure. [ 61.952603][ T5165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.965816][ T5165] CPU: 1 UID: 0 PID: 5165 Comm: syz.3.585 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 61.965895][ T5165] Tainted: [W]=WARN [ 61.965902][ T5165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.965915][ T5165] Call Trace: [ 61.965922][ T5165] [ 61.965928][ T5165] dump_stack_lvl+0xf6/0x150 [ 61.965981][ T5165] dump_stack+0x15/0x1a [ 61.966000][ T5165] should_fail_ex+0x261/0x270 [ 61.966030][ T5165] should_fail+0xb/0x10 [ 61.966051][ T5165] should_fail_usercopy+0x1a/0x20 [ 61.966161][ T5165] _copy_from_user+0x1c/0xa0 [ 61.966252][ T5165] snd_seq_write+0x1db/0x530 [ 61.966286][ T5165] ? __pfx_snd_seq_write+0x10/0x10 [ 61.966317][ T5165] vfs_write+0x295/0x950 [ 61.966392][ T5165] ? putname+0xe1/0x100 [ 61.966426][ T5165] ? __fget_files+0x186/0x1c0 [ 61.966549][ T5165] ksys_write+0xeb/0x1b0 [ 61.966575][ T5165] __x64_sys_write+0x42/0x50 [ 61.966603][ T5165] x64_sys_call+0x2a45/0x2e10 [ 61.966625][ T5165] do_syscall_64+0xc9/0x1c0 [ 61.966658][ T5165] ? clear_bhb_loop+0x25/0x80 [ 61.966690][ T5165] ? clear_bhb_loop+0x25/0x80 [ 61.966752][ T5165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.966778][ T5165] RIP: 0033:0x7f0d7875d169 [ 61.966794][ T5165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.966814][ T5165] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.966833][ T5165] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 61.966870][ T5165] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000005 [ 61.966884][ T5165] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 61.966896][ T5165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.966909][ T5165] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 61.966935][ T5165] [ 62.194493][ T5176] xt_hashlimit: max too large, truncated to 1048576 [ 62.247940][ T4919] veth0_vlan: entered promiscuous mode [ 62.262080][ T4919] veth1_vlan: entered promiscuous mode [ 62.291647][ T4919] veth0_macvtap: entered promiscuous mode [ 62.299625][ T4919] veth1_macvtap: entered promiscuous mode [ 62.309973][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.320516][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.330426][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.340922][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.351382][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.362183][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.384241][ T5183] siw: device registration error -23 [ 62.425179][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.456032][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.466628][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.475873][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 62.476450][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.476463][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.476471][ T4919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.476481][ T4919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.506857][ T4919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.516122][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 62.548385][ T4919] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.557142][ T4919] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.565916][ T4919] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.574634][ T4919] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.618664][ T5163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 62.788459][ T5190] chnl_net:caif_netlink_parms(): no params data found [ 62.846171][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.853290][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.861734][ T5190] bridge_slave_0: entered allmulticast mode [ 62.868429][ T5190] bridge_slave_0: entered promiscuous mode [ 62.876137][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.883290][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.892783][ T5190] bridge_slave_1: entered allmulticast mode [ 62.900539][ T5190] bridge_slave_1: entered promiscuous mode [ 62.905010][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 62.905023][ T29] audit: type=1400 audit(1743559810.711:1814): avc: denied { create } for pid=5233 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 62.942868][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.955845][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.980739][ T5190] team0: Port device team_slave_0 added [ 62.989492][ T5190] team0: Port device team_slave_1 added [ 63.011501][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.018522][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.044590][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.101532][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.108631][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.134564][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.214514][ T5261] dns_resolver: Unsupported server list version (0) [ 63.223829][ T5190] hsr_slave_0: entered promiscuous mode [ 63.233012][ T5190] hsr_slave_1: entered promiscuous mode [ 63.239448][ T5190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.248722][ T5190] Cannot create hsr debugfs directory [ 63.421457][ T5190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.430817][ T5190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.443281][ T5190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.460295][ T5190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.543696][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.581137][ T5190] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.602221][ T29] audit: type=1400 audit(1743559811.401:1815): avc: denied { setopt } for pid=5292 comm="syz.3.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.627396][ T5294] netlink: 'syz.3.612': attribute type 30 has an invalid length. [ 63.639533][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.646612][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.654210][ T29] audit: type=1400 audit(1743559811.431:1816): avc: denied { ioctl } for pid=5292 comm="syz.3.612" path="socket:[10785]" dev="sockfs" ino=10785 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.680721][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.687791][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.737485][ T5303] futex_wake_op: syz.5.615 tries to shift op by -1; fix this program [ 63.746461][ T29] audit: type=1400 audit(1743559811.541:1817): avc: denied { read } for pid=5301 comm="syz.5.615" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.769790][ T29] audit: type=1400 audit(1743559811.541:1818): avc: denied { open } for pid=5301 comm="syz.5.615" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.813436][ T29] audit: type=1400 audit(1743559811.611:1819): avc: denied { ioctl } for pid=5301 comm="syz.5.615" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 63.873449][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.894156][ T29] audit: type=1400 audit(1743559811.691:1820): avc: denied { setopt } for pid=5318 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.931893][ T29] audit: type=1400 audit(1743559811.721:1821): avc: denied { ioctl } for pid=5318 comm="syz.3.618" path="socket:[10842]" dev="sockfs" ino=10842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.956511][ T29] audit: type=1400 audit(1743559811.721:1822): avc: denied { bind } for pid=5318 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.133323][ T5190] veth0_vlan: entered promiscuous mode [ 64.173607][ T5190] veth1_vlan: entered promiscuous mode [ 64.224627][ T5190] veth0_macvtap: entered promiscuous mode [ 64.408602][ T5354] netlink: 'syz.3.626': attribute type 7 has an invalid length. [ 64.503704][ T5190] veth1_macvtap: entered promiscuous mode [ 64.581484][ T5360] loop5: detected capacity change from 0 to 512 [ 64.582872][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.598412][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.608320][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.618858][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.628709][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.639152][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.649104][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.659664][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.676897][ T5360] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 64.684152][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.694206][ T5360] EXT4-fs (loop5): orphan cleanup on readonly fs [ 64.694780][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.711018][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.711191][ T5360] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.630: bg 0: block 18: invalid block bitmap [ 64.720831][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.743518][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.753500][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.763952][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.773801][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.784443][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.788019][ T5360] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 64.806255][ T5364] dns_resolver: Unsupported server list version (0) [ 64.823830][ T5360] EXT4-fs (loop5): 1 truncate cleaned up [ 64.846309][ T5360] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.864638][ T5367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.880922][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.905411][ T5367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.925772][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.937361][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.953878][ T29] audit: type=1400 audit(1743559812.751:1823): avc: denied { map } for pid=5359 comm="syz.5.630" path="/5/file0" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.997702][ T5375] loop3: detected capacity change from 0 to 2048 [ 65.007252][ T5190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.016156][ T5190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.024953][ T5190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.033641][ T5190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.061557][ T5375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.067753][ T5367] EXT4-fs error (device loop5): ext4_map_blocks:672: inode #2: block 3: comm syz.5.630: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.097187][ T5380] dns_resolver: Unsupported server list version (0) [ 65.104249][ T5360] EXT4-fs error (device loop5): ext4_map_blocks:672: inode #2: block 3: comm syz.5.630: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.127589][ T5364] usb usb1: usbfs: process 5364 (syz.0.631) did not claim interface 0 before use [ 65.139053][ T5360] EXT4-fs error (device loop5): ext4_map_blocks:672: inode #2: block 3: comm syz.5.630: lblock 0 mapped to illegal pblock 3 (length 1) [ 65.221607][ T5384] loop6: detected capacity change from 0 to 1024 [ 65.244896][ T5384] EXT4-fs: Ignoring removed oldalloc option [ 65.282720][ T5384] EXT4-fs: Ignoring removed orlov option [ 65.305816][ T5384] EXT4-fs (loop6): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 65.367544][ T5384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.388611][ T5383] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 65.405345][ T5383] EXT4-fs (loop6): Remounting filesystem read-only [ 65.488716][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.602354][ T5401] __nla_validate_parse: 12 callbacks suppressed [ 65.602371][ T5401] netlink: 360 bytes leftover after parsing attributes in process `syz.6.640'. [ 65.618108][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.640'. [ 65.634573][ T5401] IPv6: Can't replace route, no match found [ 65.765311][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.848986][ T5411] netlink: 360 bytes leftover after parsing attributes in process `syz.6.645'. [ 65.878950][ T5411] IPv6: Can't replace route, no match found [ 65.950887][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.119875][ T5437] FAULT_INJECTION: forcing a failure. [ 66.119875][ T5437] name failslab, interval 1, probability 0, space 0, times 0 [ 66.132701][ T5437] CPU: 0 UID: 0 PID: 5437 Comm: syz.6.656 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 66.132732][ T5437] Tainted: [W]=WARN [ 66.132740][ T5437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.132754][ T5437] Call Trace: [ 66.132761][ T5437] [ 66.132769][ T5437] dump_stack_lvl+0xf6/0x150 [ 66.132796][ T5437] dump_stack+0x15/0x1a [ 66.132864][ T5437] should_fail_ex+0x261/0x270 [ 66.132885][ T5437] should_failslab+0x8f/0xb0 [ 66.132911][ T5437] kmem_cache_alloc_noprof+0x59/0x340 [ 66.132940][ T5437] ? __rds_conn_create+0x3d5/0x1080 [ 66.133045][ T5437] __rds_conn_create+0x3d5/0x1080 [ 66.133089][ T5437] rds_conn_create_outgoing+0x43/0x60 [ 66.133122][ T5437] rds_sendmsg+0xb9c/0x14a0 [ 66.133150][ T5437] ? __pfx_rds_sendmsg+0x10/0x10 [ 66.133253][ T5437] __sock_sendmsg+0x140/0x180 [ 66.133279][ T5437] ____sys_sendmsg+0x350/0x4e0 [ 66.133312][ T5437] __sys_sendmsg+0x1a0/0x240 [ 66.133356][ T5437] __x64_sys_sendmsg+0x46/0x50 [ 66.133393][ T5437] x64_sys_call+0x26f3/0x2e10 [ 66.133420][ T5437] do_syscall_64+0xc9/0x1c0 [ 66.133444][ T5437] ? clear_bhb_loop+0x25/0x80 [ 66.133466][ T5437] ? clear_bhb_loop+0x25/0x80 [ 66.133492][ T5437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.133547][ T5437] RIP: 0033:0x7f14c4b3d169 [ 66.133560][ T5437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.133581][ T5437] RSP: 002b:00007f14c31a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.133604][ T5437] RAX: ffffffffffffffda RBX: 00007f14c4d55fa0 RCX: 00007f14c4b3d169 [ 66.133658][ T5437] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.133670][ T5437] RBP: 00007f14c31a7090 R08: 0000000000000000 R09: 0000000000000000 [ 66.133681][ T5437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.133756][ T5437] R13: 0000000000000000 R14: 00007f14c4d55fa0 R15: 00007ffc8bb71288 [ 66.133776][ T5437] [ 66.430572][ T5447] loop0: detected capacity change from 0 to 512 [ 66.458729][ T5451] IPVS: sync thread started: state = MASTER, mcast_ifn = tunl0, syncid = 262145, id = 0 [ 66.465456][ T5447] EXT4-fs: Invalid want_extra_isize 32872 [ 66.494764][ T5448] loop3: detected capacity change from 0 to 1024 [ 66.527285][ T5448] EXT4-fs: Ignoring removed bh option [ 66.537103][ T5448] EXT4-fs: inline encryption not supported [ 66.543054][ T5448] EXT4-fs: Ignoring removed i_version option [ 66.550571][ T5448] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.568031][ T5448] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #3: block 2: comm syz.3.661: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.583518][ T5448] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #3: block 48: comm syz.3.661: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.600992][ T5448] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.661: Failed to acquire dquot type 0 [ 66.612497][ T5448] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 66.623693][ T5448] EXT4-fs error (device loop3): ext4_evict_inode:257: inode #11: comm syz.3.661: mark_inode_dirty error [ 66.635446][ T5448] EXT4-fs warning (device loop3): ext4_evict_inode:260: couldn't mark inode dirty (err -117) [ 66.646055][ T5448] EXT4-fs (loop3): 1 orphan inode deleted [ 66.652634][ T5448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.675552][ T3394] EXT4-fs error (device loop3): ext4_map_blocks:672: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.696299][ T3394] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 66.715288][ T5448] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.745034][ T5448] EXT4-fs error (device loop3): __ext4_get_inode_loc:4461: comm syz.3.661: Invalid inode table block 1 in block_group 0 [ 66.761744][ T5448] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 66.771400][ T5448] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.661: mark_inode_dirty error [ 66.991653][ T5484] dns_resolver: Unsupported server list version (0) [ 67.123728][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 67.123750][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 67.252512][ T5500] netlink: 24 bytes leftover after parsing attributes in process `syz.6.677'. [ 67.567795][ T5526] SELinux: ebitmap: truncated map [ 67.578514][ T5526] SELinux: failed to load policy [ 67.703144][ T5531] loop6: detected capacity change from 0 to 2048 [ 67.756991][ T5531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.779361][ T5531] binfmt_misc: register: failed to install interpreter file ./file0 [ 67.884050][ T5539] loop3: detected capacity change from 0 to 2048 [ 67.915104][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 67.915116][ T29] audit: type=1326 audit(2000000001.230:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d7875bdca code=0x7ffc0000 [ 67.943944][ T29] audit: type=1326 audit(2000000001.230:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0d7875bdca code=0x7ffc0000 [ 67.979216][ T29] audit: type=1326 audit(2000000001.230:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0d7875b9d7 code=0x7ffc0000 [ 68.002125][ T29] audit: type=1326 audit(2000000001.230:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0d7875e90a code=0x7ffc0000 [ 68.052073][ T5539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.102230][ T29] audit: type=1326 audit(2000000001.410:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7875bad0 code=0x7ffc0000 [ 68.126692][ T29] audit: type=1326 audit(2000000001.410:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0d7875beb7 code=0x7ffc0000 [ 68.149427][ T29] audit: type=1326 audit(2000000001.410:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d7875bad0 code=0x7ffc0000 [ 68.172220][ T29] audit: type=1326 audit(2000000001.410:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 68.195044][ T29] audit: type=1326 audit(2000000001.410:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 68.218034][ T29] audit: type=1326 audit(2000000001.410:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5538 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 68.276369][ T5557] netlink: 360 bytes leftover after parsing attributes in process `syz.5.699'. [ 68.285964][ T5557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.699'. [ 68.296815][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.325707][ T5557] IPv6: Can't replace route, no match found [ 68.381285][ T5568] dns_resolver: Unsupported server list version (0) [ 68.548909][ T5576] loop0: detected capacity change from 0 to 8192 [ 68.570357][ T5568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 68.579263][ T5568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 68.598574][ T5581] netlink: 'syz.5.707': attribute type 1 has an invalid length. [ 68.616167][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.819624][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.828809][ T5601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.829371][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.838754][ T5601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.861917][ T5599] loop5: detected capacity change from 0 to 2048 [ 68.876603][ T5599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.889010][ T5599] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.106573][ T5607] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.715: bg 0: block 345: padding at end of block bitmap is not set [ 69.121093][ T5607] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 69.133613][ T5607] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.133613][ T5607] [ 69.252851][ T3337] bond0: (slave bond_slave_0): interface is now down [ 69.254778][ T5612] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 69.259704][ T3337] bond0: (slave bond_slave_1): interface is now down [ 69.274217][ T3337] bond0: (slave geneve1): interface is now down [ 69.283489][ T5612] bridge0: port 3(syz_tun) entered disabled state [ 69.290981][ T5612] syz_tun: left allmulticast mode [ 69.296226][ T5612] bridge0: port 3(syz_tun) entered disabled state [ 69.304742][ T56] bond0: (slave bond_slave_0): interface is now down [ 69.305132][ T5612] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 69.311427][ T56] bond0: (slave bond_slave_1): interface is now down [ 69.326823][ T56] bond0: (slave geneve1): interface is now down [ 69.333066][ T56] bond0: (slave syz_tun): interface is now down [ 69.340619][ T56] bond0: now running without any active interface! [ 69.621650][ T5628] FAULT_INJECTION: forcing a failure. [ 69.621650][ T5628] name failslab, interval 1, probability 0, space 0, times 0 [ 69.634497][ T5628] CPU: 0 UID: 0 PID: 5628 Comm: syz.0.722 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 69.634527][ T5628] Tainted: [W]=WARN [ 69.634533][ T5628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.634544][ T5628] Call Trace: [ 69.634549][ T5628] [ 69.634556][ T5628] dump_stack_lvl+0xf6/0x150 [ 69.634582][ T5628] dump_stack+0x15/0x1a [ 69.634668][ T5628] should_fail_ex+0x261/0x270 [ 69.634689][ T5628] should_failslab+0x8f/0xb0 [ 69.634794][ T5628] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 69.634828][ T5628] ? __alloc_skb+0x10d/0x320 [ 69.634857][ T5628] __alloc_skb+0x10d/0x320 [ 69.634894][ T5628] netlink_ack+0xf1/0x4f0 [ 69.634950][ T5628] netlink_rcv_skb+0x19f/0x230 [ 69.634984][ T5628] ? __pfx_genl_rcv_msg+0x10/0x10 [ 69.635020][ T5628] genl_rcv+0x28/0x40 [ 69.635082][ T5628] netlink_unicast+0x605/0x6c0 [ 69.635110][ T5628] netlink_sendmsg+0x609/0x720 [ 69.635128][ T5628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.635147][ T5628] __sock_sendmsg+0x140/0x180 [ 69.635185][ T5628] ____sys_sendmsg+0x350/0x4e0 [ 69.635239][ T5628] __sys_sendmsg+0x1a0/0x240 [ 69.635272][ T5628] __x64_sys_sendmsg+0x46/0x50 [ 69.635292][ T5628] x64_sys_call+0x26f3/0x2e10 [ 69.635326][ T5628] do_syscall_64+0xc9/0x1c0 [ 69.635348][ T5628] ? clear_bhb_loop+0x25/0x80 [ 69.635372][ T5628] ? clear_bhb_loop+0x25/0x80 [ 69.635431][ T5628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.635542][ T5628] RIP: 0033:0x7f72a5ffd169 [ 69.635555][ T5628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.635571][ T5628] RSP: 002b:00007f72a4667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.635586][ T5628] RAX: ffffffffffffffda RBX: 00007f72a6215fa0 RCX: 00007f72a5ffd169 [ 69.635599][ T5628] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 69.635612][ T5628] RBP: 00007f72a4667090 R08: 0000000000000000 R09: 0000000000000000 [ 69.635625][ T5628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.635638][ T5628] R13: 0000000000000000 R14: 00007f72a6215fa0 R15: 00007ffcf718ba78 [ 69.635692][ T5628] [ 69.864669][ T5607] syz.5.715 (5607) used greatest stack depth: 9136 bytes left [ 69.881578][ T3337] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 69.893167][ T5630] loop0: detected capacity change from 0 to 512 [ 69.894376][ T3337] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.894376][ T3337] [ 69.900840][ T5630] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 69.962187][ T56] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 69.975085][ T56] EXT4-fs (loop5): This should not happen!! Data will be lost [ 69.975085][ T56] [ 69.985003][ T56] EXT4-fs (loop5): Total free blocks count 0 [ 69.991294][ T56] EXT4-fs (loop5): Free/Dirty block details [ 69.997245][ T56] EXT4-fs (loop5): free_blocks=0 [ 70.234867][ T5656] veth1_to_bridge: entered allmulticast mode [ 70.241161][ T5656] veth1_to_bridge: left allmulticast mode [ 70.317506][ T5665] vlan2: entered allmulticast mode [ 70.353282][ T5674] FAULT_INJECTION: forcing a failure. [ 70.353282][ T5674] name failslab, interval 1, probability 0, space 0, times 0 [ 70.365963][ T5674] CPU: 1 UID: 0 PID: 5674 Comm: syz.3.743 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 70.366159][ T5674] Tainted: [W]=WARN [ 70.366167][ T5674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.366179][ T5674] Call Trace: [ 70.366185][ T5674] [ 70.366190][ T5674] dump_stack_lvl+0xf6/0x150 [ 70.366211][ T5674] dump_stack+0x15/0x1a [ 70.366313][ T5674] should_fail_ex+0x261/0x270 [ 70.366336][ T5674] should_failslab+0x8f/0xb0 [ 70.366360][ T5674] __kmalloc_cache_noprof+0x55/0x320 [ 70.366387][ T5674] ? io_provide_buffers+0x128/0x400 [ 70.366441][ T5674] io_provide_buffers+0x128/0x400 [ 70.366467][ T5674] io_issue_sqe+0x15f/0xaf0 [ 70.366484][ T5674] ? io_provide_buffers_prep+0x1a8/0x1d0 [ 70.366594][ T5674] io_submit_sqes+0x67f/0x1050 [ 70.366624][ T5674] __se_sys_io_uring_enter+0x1ce/0x1c00 [ 70.366700][ T5674] ? 0xffffffff81000000 [ 70.366716][ T5674] ? get_pid_task+0x94/0xd0 [ 70.366741][ T5674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 70.366775][ T5674] ? vfs_write+0x669/0x950 [ 70.366820][ T5674] ? __rcu_read_unlock+0x4e/0x70 [ 70.366850][ T5674] ? bpf_trace_run2+0x12c/0x1d0 [ 70.366881][ T5674] ? __bpf_trace_sys_enter+0x10/0x30 [ 70.367008][ T5674] ? trace_sys_enter+0xcd/0x110 [ 70.367035][ T5674] __x64_sys_io_uring_enter+0x78/0x90 [ 70.367057][ T5674] x64_sys_call+0x26cb/0x2e10 [ 70.367076][ T5674] do_syscall_64+0xc9/0x1c0 [ 70.367095][ T5674] ? clear_bhb_loop+0x25/0x80 [ 70.367165][ T5674] ? clear_bhb_loop+0x25/0x80 [ 70.367183][ T5674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.367259][ T5674] RIP: 0033:0x7f0d7875d169 [ 70.367272][ T5674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.367288][ T5674] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 70.367310][ T5674] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 70.367321][ T5674] RDX: 0000000000001067 RSI: 0000000000000092 RDI: 0000000000000003 [ 70.367331][ T5674] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 70.367342][ T5674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.367353][ T5674] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 70.367422][ T5674] [ 70.369566][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 70.609842][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.713250][ T5737] __nla_validate_parse: 8 callbacks suppressed [ 71.713265][ T5737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 71.728602][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 71.963765][ T5752] loop6: detected capacity change from 0 to 128 [ 72.035962][ T5758] netlink: 'syz.3.774': attribute type 7 has an invalid length. [ 72.048325][ T5756] loop5: detected capacity change from 0 to 2048 [ 72.078710][ T5756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.110685][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.199599][ T5774] netlink: 360 bytes leftover after parsing attributes in process `syz.5.780'. [ 72.249932][ T5774] IPv6: Can't replace route, no match found [ 72.857741][ T5815] FAULT_INJECTION: forcing a failure. [ 72.857741][ T5815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.870965][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: syz.0.792 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 72.871065][ T5815] Tainted: [W]=WARN [ 72.871084][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.871162][ T5815] Call Trace: [ 72.871171][ T5815] [ 72.871178][ T5815] dump_stack_lvl+0xf6/0x150 [ 72.871199][ T5815] dump_stack+0x15/0x1a [ 72.871216][ T5815] should_fail_ex+0x261/0x270 [ 72.871324][ T5815] should_fail+0xb/0x10 [ 72.871339][ T5815] should_fail_usercopy+0x1a/0x20 [ 72.871466][ T5815] _copy_to_user+0x20/0xa0 [ 72.871492][ T5815] simple_read_from_buffer+0xb2/0x130 [ 72.871600][ T5815] proc_fail_nth_read+0x103/0x140 [ 72.871715][ T5815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.871750][ T5815] vfs_read+0x1b2/0x710 [ 72.871775][ T5815] ? __rcu_read_unlock+0x4e/0x70 [ 72.871818][ T5815] ? __fget_files+0x186/0x1c0 [ 72.871847][ T5815] ksys_read+0xeb/0x1b0 [ 72.871940][ T5815] __x64_sys_read+0x42/0x50 [ 72.871967][ T5815] x64_sys_call+0x2a3b/0x2e10 [ 72.872061][ T5815] do_syscall_64+0xc9/0x1c0 [ 72.872164][ T5815] ? clear_bhb_loop+0x25/0x80 [ 72.872191][ T5815] ? clear_bhb_loop+0x25/0x80 [ 72.872216][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.872265][ T5815] RIP: 0033:0x7f72a5ffbb7c [ 72.872282][ T5815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 72.872301][ T5815] RSP: 002b:00007f72a4667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.872317][ T5815] RAX: ffffffffffffffda RBX: 00007f72a6215fa0 RCX: 00007f72a5ffbb7c [ 72.872327][ T5815] RDX: 000000000000000f RSI: 00007f72a46670a0 RDI: 0000000000000007 [ 72.872338][ T5815] RBP: 00007f72a4667090 R08: 0000000000000000 R09: 00000000fffffdcf [ 72.872348][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.872392][ T5815] R13: 0000000000000000 R14: 00007f72a6215fa0 R15: 00007ffcf718ba78 [ 72.872414][ T5815] [ 73.075449][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 73.113966][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 73.113980][ T29] audit: type=1326 audit(2000000006.420:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.161260][ T29] audit: type=1326 audit(2000000006.460:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.184717][ T29] audit: type=1326 audit(2000000006.460:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.208133][ T29] audit: type=1326 audit(2000000006.460:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.231573][ T29] audit: type=1326 audit(2000000006.460:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.237804][ T5827] netlink: 'syz.5.797': attribute type 7 has an invalid length. [ 73.254947][ T29] audit: type=1326 audit(2000000006.460:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.285915][ T29] audit: type=1326 audit(2000000006.460:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.309247][ T29] audit: type=1326 audit(2000000006.460:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.332791][ T29] audit: type=1326 audit(2000000006.460:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.350906][ T5842] loop3: detected capacity change from 0 to 128 [ 73.356092][ T29] audit: type=1326 audit(2000000006.460:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5821 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f0d7875d169 code=0x7ffc0000 [ 73.401048][ T5837] FAULT_INJECTION: forcing a failure. [ 73.401048][ T5837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.414329][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.3.799 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 73.414367][ T5837] Tainted: [W]=WARN [ 73.414374][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.414430][ T5837] Call Trace: [ 73.414438][ T5837] [ 73.414446][ T5837] dump_stack_lvl+0xf6/0x150 [ 73.414474][ T5837] dump_stack+0x15/0x1a [ 73.414495][ T5837] should_fail_ex+0x261/0x270 [ 73.414523][ T5837] should_fail+0xb/0x10 [ 73.414625][ T5837] should_fail_usercopy+0x1a/0x20 [ 73.414653][ T5837] copy_page_from_iter_atomic+0x232/0xfa0 [ 73.414695][ T5837] ? fat_write_begin+0x51/0xe0 [ 73.414718][ T5837] ? __pfx_fat_get_block+0x10/0x10 [ 73.414750][ T5837] generic_perform_write+0x2d2/0x4b0 [ 73.414777][ T5837] __generic_file_write_iter+0xa1/0x120 [ 73.414827][ T5837] generic_file_write_iter+0x92/0x310 [ 73.414848][ T5837] ? _parse_integer_limit+0x167/0x180 [ 73.414937][ T5837] ? _parse_integer+0x27/0x30 [ 73.414955][ T5837] ? kstrtoull+0x115/0x140 [ 73.414971][ T5837] ? kstrtouint+0x7b/0xc0 [ 73.414986][ T5837] ? kstrtouint_from_user+0xbf/0x100 [ 73.415006][ T5837] ? avc_policy_seqno+0x15/0x20 [ 73.415102][ T5837] ? selinux_file_permission+0x22d/0x360 [ 73.415148][ T5837] vfs_write+0x79b/0x950 [ 73.415169][ T5837] ? __pfx_generic_file_write_iter+0x10/0x10 [ 73.415211][ T5837] ksys_write+0xeb/0x1b0 [ 73.415232][ T5837] __x64_sys_write+0x42/0x50 [ 73.415253][ T5837] x64_sys_call+0x2a45/0x2e10 [ 73.415346][ T5837] do_syscall_64+0xc9/0x1c0 [ 73.415365][ T5837] ? clear_bhb_loop+0x25/0x80 [ 73.415384][ T5837] ? clear_bhb_loop+0x25/0x80 [ 73.415482][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.415569][ T5837] RIP: 0033:0x7f0d7875d169 [ 73.415593][ T5837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.415609][ T5837] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.415625][ T5837] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 73.415635][ T5837] RDX: 000000000000fd12 RSI: 0000200000000040 RDI: 0000000000000005 [ 73.415645][ T5837] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 73.415656][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.415666][ T5837] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 73.415682][ T5837] [ 73.695438][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.695438][ T56] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 73.713418][ T5826] bond1: entered promiscuous mode [ 73.718517][ T5826] bond1: entered allmulticast mode [ 73.735774][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.735774][ T56] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 73.739969][ T5826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.757393][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.757393][ T56] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 73.772610][ T5826] bond1 (unregistering): Released all slaves [ 73.785223][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.785223][ T56] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 73.798646][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.798646][ T56] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 73.812427][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.812427][ T56] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 73.825981][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.825981][ T56] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 73.843473][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.843473][ T56] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 73.858340][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.858340][ T56] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 73.874782][ T56] kworker/u8:4: attempt to access beyond end of device [ 73.874782][ T56] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 73.906066][ T5863] dns_resolver: Unsupported server list version (0) [ 73.934828][ T5867] siw: device registration error -23 [ 74.030778][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.811'. [ 74.044040][ T5885] netlink: 156 bytes leftover after parsing attributes in process `syz.6.810'. [ 74.197567][ T5899] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 74.224481][ T1052] IPVS: starting estimator thread 0... [ 74.342026][ T5912] IPVS: using max 2304 ests per chain, 115200 per kthread [ 74.504061][ T5952] loop6: detected capacity change from 0 to 2048 [ 74.527591][ T5952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.557355][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.749613][ T5992] netlink: 156 bytes leftover after parsing attributes in process `syz.6.826'. [ 74.776376][ T5995] 9pnet_fd: Insufficient options for proto=fd [ 74.877576][ T6015] loop6: detected capacity change from 0 to 128 [ 74.899202][ T6015] EXT4-fs: Ignoring removed nobh option [ 74.938078][ T6015] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.993116][ T6015] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.026533][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 75.037136][ T6027] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 75.125119][ T6040] netlink: 156 bytes leftover after parsing attributes in process `syz.5.839'. [ 75.171737][ T6044] dns_resolver: Unsupported server list version (0) [ 75.246188][ T6051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 75.289622][ T6054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.570616][ T6082] wireguard0: entered promiscuous mode [ 75.576267][ T6082] wireguard0: entered allmulticast mode [ 75.950493][ T6091] loop0: detected capacity change from 0 to 2048 [ 75.965656][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.987107][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.021262][ T6095] loop0: detected capacity change from 0 to 2048 [ 76.047126][ T6095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.063985][ T6095] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.164890][ T6108] IPv6: Can't replace route, no match found [ 76.172732][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.223093][ T6110] sd 0:0:1:0: device reset [ 76.343416][ T6120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.359134][ T6123] FAULT_INJECTION: forcing a failure. [ 76.359134][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 76.371893][ T6123] CPU: 0 UID: 0 PID: 6123 Comm: syz.3.871 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 76.371932][ T6123] Tainted: [W]=WARN [ 76.371937][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.371950][ T6123] Call Trace: [ 76.371957][ T6123] [ 76.372001][ T6123] dump_stack_lvl+0xf6/0x150 [ 76.372026][ T6123] dump_stack+0x15/0x1a [ 76.372040][ T6123] should_fail_ex+0x261/0x270 [ 76.372111][ T6123] should_failslab+0x8f/0xb0 [ 76.372139][ T6123] __kmalloc_cache_noprof+0x55/0x320 [ 76.372177][ T6123] ? audit_log_d_path+0x8e/0x150 [ 76.372251][ T6123] audit_log_d_path+0x8e/0x150 [ 76.372271][ T6123] audit_log_d_path_exe+0x42/0x70 [ 76.372294][ T6123] audit_log_task+0x1f1/0x250 [ 76.372317][ T6123] audit_seccomp+0x68/0x130 [ 76.372339][ T6123] __seccomp_filter+0x694/0x10e0 [ 76.372387][ T6123] ? vfs_write+0x669/0x950 [ 76.372413][ T6123] ? putname+0xe1/0x100 [ 76.372457][ T6123] __secure_computing+0x7e/0x160 [ 76.372531][ T6123] syscall_trace_enter+0xcf/0x1f0 [ 76.372560][ T6123] ? fpregs_assert_state_consistent+0x83/0xa0 [ 76.372590][ T6123] do_syscall_64+0xaa/0x1c0 [ 76.372738][ T6123] ? clear_bhb_loop+0x25/0x80 [ 76.372757][ T6123] ? clear_bhb_loop+0x25/0x80 [ 76.372778][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.372801][ T6123] RIP: 0033:0x7f0d7875d169 [ 76.372860][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.372880][ T6123] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 76.372896][ T6123] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 76.372906][ T6123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 76.372916][ T6123] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 76.372926][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.372935][ T6123] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 76.372954][ T6123] [ 76.667452][ T6137] FAULT_INJECTION: forcing a failure. [ 76.667452][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.680695][ T6137] CPU: 0 UID: 0 PID: 6137 Comm: syz.5.875 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 76.680729][ T6137] Tainted: [W]=WARN [ 76.680795][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.680808][ T6137] Call Trace: [ 76.680815][ T6137] [ 76.680879][ T6137] dump_stack_lvl+0xf6/0x150 [ 76.680905][ T6137] dump_stack+0x15/0x1a [ 76.680925][ T6137] should_fail_ex+0x261/0x270 [ 76.680948][ T6137] should_fail+0xb/0x10 [ 76.680966][ T6137] should_fail_usercopy+0x1a/0x20 [ 76.681030][ T6137] _copy_from_user+0x1c/0xa0 [ 76.681060][ T6137] copy_msghdr_from_user+0x54/0x2b0 [ 76.681125][ T6137] ? __fget_files+0x186/0x1c0 [ 76.681160][ T6137] __sys_sendmsg+0x141/0x240 [ 76.681247][ T6137] __x64_sys_sendmsg+0x46/0x50 [ 76.681269][ T6137] x64_sys_call+0x26f3/0x2e10 [ 76.681376][ T6137] do_syscall_64+0xc9/0x1c0 [ 76.681400][ T6137] ? clear_bhb_loop+0x25/0x80 [ 76.681423][ T6137] ? clear_bhb_loop+0x25/0x80 [ 76.681448][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.681471][ T6137] RIP: 0033:0x7f567fe1d169 [ 76.681550][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.681569][ T6137] RSP: 002b:00007f567e487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.681621][ T6137] RAX: ffffffffffffffda RBX: 00007f5680035fa0 RCX: 00007f567fe1d169 [ 76.681635][ T6137] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 76.681649][ T6137] RBP: 00007f567e487090 R08: 0000000000000000 R09: 0000000000000000 [ 76.681662][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.681675][ T6137] R13: 0000000000000000 R14: 00007f5680035fa0 R15: 00007ffc5c835c88 [ 76.681692][ T6137] [ 76.943911][ T6150] __nla_validate_parse: 6 callbacks suppressed [ 76.943928][ T6150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.878'. [ 76.988893][ T6152] netlink: 40 bytes leftover after parsing attributes in process `syz.0.879'. [ 77.027811][ T6159] dns_resolver: Unsupported server list version (0) [ 77.036779][ T6157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.072667][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.885'. [ 77.211759][ T6178] SELinux: Context Ü is not valid (left unmapped). [ 77.221301][ T6178] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 77.273475][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 77.282373][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 77.295357][ T6187] loop5: detected capacity change from 0 to 512 [ 77.302287][ T6187] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.305634][ T6186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.892'. [ 77.326149][ T6187] EXT4-fs (loop5): 1 truncate cleaned up [ 77.332263][ T6187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.355387][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 77.387225][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.623032][ T6211] netlink: 'syz.1.902': attribute type 7 has an invalid length. [ 77.657248][ T6213] netlink: 100 bytes leftover after parsing attributes in process `syz.0.903'. [ 77.777851][ T6222] loop0: detected capacity change from 0 to 512 [ 77.810845][ T6222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 77.828248][ T6222] System zones: 0-2, 18-18, 34-34 [ 77.848719][ T6222] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.907: bg 0: block 248: padding at end of block bitmap is not set [ 77.895371][ T5190] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.935713][ T6222] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.907: Failed to acquire dquot type 1 [ 77.967317][ T6222] EXT4-fs (loop0): 1 truncate cleaned up [ 77.994974][ T6231] loop3: detected capacity change from 0 to 1024 [ 78.002200][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.908'. [ 78.030650][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.6.908'. [ 78.032217][ T6222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.054428][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.104302][ T6222] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.136045][ T6222] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.320132][ T6244] dns_resolver: Unsupported server list version (0) [ 78.477171][ T6248] FAULT_INJECTION: forcing a failure. [ 78.477171][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 78.489854][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.6.916 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 78.489888][ T6248] Tainted: [W]=WARN [ 78.489894][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.489907][ T6248] Call Trace: [ 78.489913][ T6248] [ 78.489936][ T6248] dump_stack_lvl+0xf6/0x150 [ 78.489957][ T6248] dump_stack+0x15/0x1a [ 78.489974][ T6248] should_fail_ex+0x261/0x270 [ 78.490074][ T6248] should_failslab+0x8f/0xb0 [ 78.490102][ T6248] kmem_cache_alloc_noprof+0x59/0x340 [ 78.490136][ T6248] ? alloc_empty_file+0x78/0x200 [ 78.490153][ T6248] ? _raw_spin_unlock+0x26/0x50 [ 78.490194][ T6248] alloc_empty_file+0x78/0x200 [ 78.490212][ T6248] alloc_file_pseudo+0xcb/0x160 [ 78.490230][ T6248] __shmem_file_setup+0x1bb/0x1f0 [ 78.490306][ T6248] shmem_file_setup+0x3b/0x50 [ 78.490337][ T6248] __se_sys_memfd_create+0x2e1/0x5a0 [ 78.490383][ T6248] __x64_sys_memfd_create+0x31/0x40 [ 78.490401][ T6248] x64_sys_call+0x1163/0x2e10 [ 78.490422][ T6248] do_syscall_64+0xc9/0x1c0 [ 78.490450][ T6248] ? clear_bhb_loop+0x25/0x80 [ 78.490483][ T6248] ? clear_bhb_loop+0x25/0x80 [ 78.490506][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.490582][ T6248] RIP: 0033:0x7f14c4b3d169 [ 78.490598][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.490618][ T6248] RSP: 002b:00007f14c31a6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.490688][ T6248] RAX: ffffffffffffffda RBX: 0000000000000537 RCX: 00007f14c4b3d169 [ 78.490701][ T6248] RDX: 00007f14c31a6ef0 RSI: 0000000000000000 RDI: 00007f14c4bbec3c [ 78.490714][ T6248] RBP: 0000200000000f80 R08: 00007f14c31a6bb7 R09: 00007f14c31a6e40 [ 78.490727][ T6248] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 78.490819][ T6248] R13: 00007f14c31a6ef0 R14: 00007f14c31a6eb0 R15: 0000200000000240 [ 78.490840][ T6248] [ 78.503314][ T6251] loop5: detected capacity change from 0 to 512 [ 78.709647][ T6251] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 78.749933][ T6251] EXT4-fs (loop5): 1 truncate cleaned up [ 78.770569][ T6251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.779741][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 78.779756][ T29] audit: type=1326 audit(2000000012.090:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.802974][ T6260] tipc: Started in network mode [ 78.817013][ T6260] tipc: Node identity 4, cluster identity 4711 [ 78.823204][ T6260] tipc: Node number set to 4 [ 78.828457][ T29] audit: type=1326 audit(2000000012.140:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.864140][ T29] audit: type=1326 audit(2000000012.170:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.887572][ T29] audit: type=1326 audit(2000000012.170:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.911100][ T29] audit: type=1326 audit(2000000012.170:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.934341][ T29] audit: type=1326 audit(2000000012.170:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.957836][ T29] audit: type=1326 audit(2000000012.170:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 78.981167][ T29] audit: type=1326 audit(2000000012.170:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6243 comm="syz.0.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f72a5ffd169 code=0x7ffc0000 [ 79.007421][ T29] audit: type=1400 audit(2000000012.210:2399): avc: denied { execute } for pid=6250 comm="syz.5.917" path="/79/bus/blkio.bfq.empty_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.008590][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.056250][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.154232][ T29] audit: type=1400 audit(2000000012.460:2400): avc: denied { create } for pid=6269 comm="syz.3.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.297260][ T6282] FAULT_INJECTION: forcing a failure. [ 79.297260][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.310528][ T6282] CPU: 0 UID: 0 PID: 6282 Comm: syz.3.925 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 79.310552][ T6282] Tainted: [W]=WARN [ 79.310557][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.310618][ T6282] Call Trace: [ 79.310624][ T6282] [ 79.310631][ T6282] dump_stack_lvl+0xf6/0x150 [ 79.310677][ T6282] dump_stack+0x15/0x1a [ 79.310695][ T6282] should_fail_ex+0x261/0x270 [ 79.310791][ T6282] should_fail+0xb/0x10 [ 79.310806][ T6282] should_fail_usercopy+0x1a/0x20 [ 79.310824][ T6282] _copy_from_user+0x1c/0xa0 [ 79.310850][ T6282] memdup_user+0x6b/0xd0 [ 79.310875][ T6282] strndup_user+0x68/0xa0 [ 79.310945][ T6282] __se_sys_mount+0x50/0x2e0 [ 79.310975][ T6282] ? fput+0x99/0xd0 [ 79.310993][ T6282] ? ksys_write+0x180/0x1b0 [ 79.311041][ T6282] __x64_sys_mount+0x67/0x80 [ 79.311064][ T6282] x64_sys_call+0xd11/0x2e10 [ 79.311085][ T6282] do_syscall_64+0xc9/0x1c0 [ 79.311107][ T6282] ? clear_bhb_loop+0x25/0x80 [ 79.311175][ T6282] ? clear_bhb_loop+0x25/0x80 [ 79.311198][ T6282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.311216][ T6282] RIP: 0033:0x7f0d7875d169 [ 79.311231][ T6282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.311249][ T6282] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.311267][ T6282] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 79.311298][ T6282] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 79.311308][ T6282] RBP: 00007f0d76dbf090 R08: 0000200000000140 R09: 0000000000000000 [ 79.311318][ T6282] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 79.311330][ T6282] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 79.311359][ T6282] [ 79.944515][ T3378] IPVS: starting estimator thread 0... [ 80.034228][ T6307] IPVS: using max 2736 ests per chain, 136800 per kthread [ 80.045435][ T6309] loop3: detected capacity change from 0 to 128 [ 80.053576][ T6309] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 80.230586][ T6297] loop5: detected capacity change from 0 to 512 [ 80.258549][ T6297] ext3: Unknown parameter 'silent' [ 81.174203][ T6353] IPv6: Can't replace route, no match found [ 81.207119][ T3003] udevd[3003]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 81.455696][ T6368] loop6: detected capacity change from 0 to 512 [ 81.473029][ T6368] EXT4-fs (loop6): failed to initialize system zone (-117) [ 81.481864][ T6368] EXT4-fs (loop6): mount failed [ 81.482862][ T6370] block device autoloading is deprecated and will be removed. [ 81.524581][ T6370] bio_check_eod: 4 callbacks suppressed [ 81.524594][ T6370] syz.5.960: attempt to access beyond end of device [ 81.524594][ T6370] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.804162][ T6388] IPv6: Can't replace route, no match found [ 82.035748][ T6393] loop6: detected capacity change from 0 to 1024 [ 82.070828][ T6393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.160035][ T6325] syz.0.941 (6325) used greatest stack depth: 6312 bytes left [ 82.224440][ T6411] __nla_validate_parse: 11 callbacks suppressed [ 82.224468][ T6411] netlink: 108 bytes leftover after parsing attributes in process `syz.5.972'. [ 82.239751][ T6411] netlink: 40 bytes leftover after parsing attributes in process `syz.5.972'. [ 82.436544][ T6413] tipc: Started in network mode [ 82.441484][ T6413] tipc: Node identity 822349d4a329, cluster identity 4711 [ 82.448711][ T6413] tipc: Enabled bearer , priority 0 [ 82.458583][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.481124][ T6418] siw: device registration error -23 [ 82.487857][ T6410] tipc: Resetting bearer [ 82.504749][ T6410] tipc: Disabling bearer [ 82.512147][ T6420] netlink: 'syz.1.977': attribute type 4 has an invalid length. [ 82.557965][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.978'. [ 82.580060][ T6426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12292 sclass=netlink_route_socket pid=6426 comm=syz.3.979 [ 82.653197][ T6437] netlink: 'syz.6.984': attribute type 7 has an invalid length. [ 82.711992][ T6426] FAULT_INJECTION: forcing a failure. [ 82.711992][ T6426] name failslab, interval 1, probability 0, space 0, times 0 [ 82.724782][ T6426] CPU: 0 UID: 0 PID: 6426 Comm: syz.3.979 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 82.724818][ T6426] Tainted: [W]=WARN [ 82.724825][ T6426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.724839][ T6426] Call Trace: [ 82.724881][ T6426] [ 82.724888][ T6426] dump_stack_lvl+0xf6/0x150 [ 82.724914][ T6426] dump_stack+0x15/0x1a [ 82.724932][ T6426] should_fail_ex+0x261/0x270 [ 82.724958][ T6426] should_failslab+0x8f/0xb0 [ 82.725045][ T6426] kmem_cache_alloc_noprof+0x59/0x340 [ 82.725090][ T6426] ? security_inode_alloc+0x37/0x100 [ 82.725153][ T6426] security_inode_alloc+0x37/0x100 [ 82.725173][ T6426] inode_init_always_gfp+0x4a2/0x4f0 [ 82.725198][ T6426] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 82.725274][ T6426] alloc_inode+0x86/0x170 [ 82.725296][ T6426] new_inode+0x1e/0xe0 [ 82.725321][ T6426] shmem_get_inode+0x24e/0x730 [ 82.725352][ T6426] __shmem_file_setup+0x127/0x1f0 [ 82.725390][ T6426] shmem_file_setup+0x3b/0x50 [ 82.725414][ T6426] __se_sys_memfd_create+0x2e1/0x5a0 [ 82.725434][ T6426] __x64_sys_memfd_create+0x31/0x40 [ 82.725552][ T6426] x64_sys_call+0x1163/0x2e10 [ 82.725570][ T6426] do_syscall_64+0xc9/0x1c0 [ 82.725591][ T6426] ? clear_bhb_loop+0x25/0x80 [ 82.725609][ T6426] ? clear_bhb_loop+0x25/0x80 [ 82.725626][ T6426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.725661][ T6426] RIP: 0033:0x7f0d7875d169 [ 82.725674][ T6426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.725693][ T6426] RSP: 002b:00007f0d76dbee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 82.725736][ T6426] RAX: ffffffffffffffda RBX: 000000000000048d RCX: 00007f0d7875d169 [ 82.725746][ T6426] RDX: 00007f0d76dbeef0 RSI: 0000000000000000 RDI: 00007f0d787dec3c [ 82.725757][ T6426] RBP: 00002000000045c0 R08: 00007f0d76dbebb7 R09: 00007f0d76dbee40 [ 82.725814][ T6426] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 82.725824][ T6426] R13: 00007f0d76dbeef0 R14: 00007f0d76dbeeb0 R15: 0000200000004180 [ 82.725841][ T6426] [ 82.999673][ T6452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.991'. [ 83.013896][ T6453] netlink: 'syz.3.989': attribute type 39 has an invalid length. [ 83.061592][ T6462] netlink: 'syz.5.995': attribute type 7 has an invalid length. [ 83.123508][ T6468] loop5: detected capacity change from 0 to 2048 [ 83.150910][ T6468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.169785][ T6468] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.195356][ T6468] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 83.207770][ T6468] EXT4-fs (loop5): This should not happen!! Data will be lost [ 83.207770][ T6468] [ 83.217435][ T6468] EXT4-fs (loop5): Total free blocks count 0 [ 83.223454][ T6468] EXT4-fs (loop5): Free/Dirty block details [ 83.229446][ T6468] EXT4-fs (loop5): free_blocks=2415919104 [ 83.235264][ T6468] EXT4-fs (loop5): dirty_blocks=64 [ 83.240381][ T6468] EXT4-fs (loop5): Block reservation details [ 83.246389][ T6468] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 83.316930][ T6503] netlink: 'syz.6.1006': attribute type 7 has an invalid length. [ 83.388662][ T6518] netlink: 'syz.0.1009': attribute type 7 has an invalid length. [ 83.419443][ T6523] syz_tun: entered allmulticast mode [ 83.435912][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.486067][ T6522] syz_tun: left allmulticast mode [ 83.496737][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1012'. [ 83.633488][ T6556] netlink: 'syz.6.1018': attribute type 7 has an invalid length. [ 83.714070][ T6568] loop6: detected capacity change from 0 to 512 [ 83.721178][ T6568] EXT4-fs: Ignoring removed i_version option [ 83.727226][ T6568] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.734396][ T6568] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 83.746239][ T6558] siw: device registration error -23 [ 83.759324][ T6572] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1025'. [ 83.770249][ T6568] netlink: 'syz.6.1023': attribute type 13 has an invalid length. [ 83.778194][ T6568] netlink: 24859 bytes leftover after parsing attributes in process `syz.6.1023'. [ 83.788631][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 83.788646][ T29] audit: type=1400 audit(2000000017.110:2497): avc: denied { audit_write } for pid=6567 comm="syz.6.1023" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.818597][ T6572] IPv6: Can't replace route, no match found [ 83.831359][ T29] audit: type=1107 audit(2000000017.110:2498): pid=6567 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 83.848915][ T29] audit: type=1326 audit(2000000017.160:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.872421][ T29] audit: type=1326 audit(2000000017.160:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.895936][ T29] audit: type=1326 audit(2000000017.160:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.919382][ T29] audit: type=1326 audit(2000000017.160:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.944483][ T29] audit: type=1326 audit(2000000017.160:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.968178][ T29] audit: type=1326 audit(2000000017.180:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.976944][ T6580] netlink: 'syz.3.1029': attribute type 7 has an invalid length. [ 83.991632][ T29] audit: type=1326 audit(2000000017.180:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 83.991658][ T29] audit: type=1326 audit(2000000017.180:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 84.118758][ T6590] netlink: 888 bytes leftover after parsing attributes in process `syz.0.1033'. [ 84.127851][ T6590] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1033'. [ 84.143126][ T6592] loop6: detected capacity change from 0 to 256 [ 84.152380][ T6590] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.161445][ T6590] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.170371][ T6590] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.179259][ T6590] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 84.188408][ T6590] geneve2: entered promiscuous mode [ 84.193703][ T6590] geneve2: entered allmulticast mode [ 84.199497][ T6592] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.213116][ T6586] SELinux: syz.3.1032 (6586) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 84.230445][ T6592] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 84.238995][ T6592] FAT-fs (loop6): Filesystem has been set read-only [ 84.405300][ T6618] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1045'. [ 84.442606][ T6618] IPv6: Can't replace route, no match found [ 84.866898][ T6672] siw: device registration error -23 [ 84.879813][ T6674] tipc: Enabled bearer , priority 10 [ 84.985289][ T6674] loop6: detected capacity change from 0 to 164 [ 84.993414][ T6674] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 85.036031][ T6685] IPv6: Can't replace route, no match found [ 85.433433][ T6712] loop6: detected capacity change from 0 to 1024 [ 85.440222][ T6712] EXT4-fs: test_dummy_encryption option not supported [ 85.650065][ T6717] IPv6: Can't replace route, no match found [ 85.684174][ T6718] loop6: detected capacity change from 0 to 1024 [ 85.715865][ T6718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.236392][ T6726] netlink: 'syz.3.1086': attribute type 7 has an invalid length. [ 86.331375][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.638689][ T6768] FAULT_INJECTION: forcing a failure. [ 86.638689][ T6768] name failslab, interval 1, probability 0, space 0, times 0 [ 86.651432][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.3.1104 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 86.651516][ T6768] Tainted: [W]=WARN [ 86.651524][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.651537][ T6768] Call Trace: [ 86.651542][ T6768] [ 86.651605][ T6768] dump_stack_lvl+0xf6/0x150 [ 86.651631][ T6768] dump_stack+0x15/0x1a [ 86.651727][ T6768] should_fail_ex+0x261/0x270 [ 86.651752][ T6768] should_failslab+0x8f/0xb0 [ 86.651778][ T6768] __kvmalloc_node_noprof+0x12c/0x520 [ 86.651799][ T6768] ? vmemdup_user+0x26/0xd0 [ 86.651914][ T6768] vmemdup_user+0x26/0xd0 [ 86.651951][ T6768] path_setxattrat+0x1cd/0x320 [ 86.651979][ T6768] __x64_sys_fsetxattr+0x6d/0x80 [ 86.652145][ T6768] x64_sys_call+0x2bad/0x2e10 [ 86.652163][ T6768] do_syscall_64+0xc9/0x1c0 [ 86.652186][ T6768] ? clear_bhb_loop+0x25/0x80 [ 86.652209][ T6768] ? clear_bhb_loop+0x25/0x80 [ 86.652313][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.652331][ T6768] RIP: 0033:0x7f0d7875d169 [ 86.652345][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.652364][ T6768] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 86.652383][ T6768] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 86.652476][ T6768] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 86.652487][ T6768] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.652533][ T6768] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 86.652545][ T6768] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 86.652565][ T6768] [ 86.874178][ T6764] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 86.981480][ T6779] SELinux: failed to load policy [ 87.038480][ T6791] loop5: detected capacity change from 0 to 512 [ 87.098590][ T6796] FAULT_INJECTION: forcing a failure. [ 87.098590][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.111722][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: +}[@ Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 87.111830][ T6796] Tainted: [W]=WARN [ 87.111838][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.111866][ T6796] Call Trace: [ 87.111873][ T6796] [ 87.111880][ T6796] dump_stack_lvl+0xf6/0x150 [ 87.111903][ T6796] dump_stack+0x15/0x1a [ 87.111916][ T6796] should_fail_ex+0x261/0x270 [ 87.112005][ T6796] should_fail+0xb/0x10 [ 87.112021][ T6796] should_fail_usercopy+0x1a/0x20 [ 87.112051][ T6796] strncpy_from_user+0x25/0x230 [ 87.112137][ T6796] ? getname_flags+0x81/0x3b0 [ 87.112202][ T6796] getname_flags+0xb0/0x3b0 [ 87.112246][ T6796] __x64_sys_mkdirat+0x41/0x60 [ 87.112271][ T6796] x64_sys_call+0x2ce3/0x2e10 [ 87.112322][ T6796] do_syscall_64+0xc9/0x1c0 [ 87.112343][ T6796] ? clear_bhb_loop+0x25/0x80 [ 87.112366][ T6796] ? clear_bhb_loop+0x25/0x80 [ 87.112388][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.112511][ T6796] RIP: 0033:0x7f0d7875d169 [ 87.112523][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.112564][ T6796] RSP: 002b:00007f0d76dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.112582][ T6796] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875d169 [ 87.112595][ T6796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 87.112687][ T6796] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 87.112700][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.112710][ T6796] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 87.112726][ T6796] [ 87.402850][ T6809] loop3: detected capacity change from 0 to 1024 [ 87.428256][ T6813] FAULT_INJECTION: forcing a failure. [ 87.428256][ T6813] name failslab, interval 1, probability 0, space 0, times 0 [ 87.440953][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.5.1124 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 87.440986][ T6813] Tainted: [W]=WARN [ 87.441051][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.441064][ T6813] Call Trace: [ 87.441070][ T6813] [ 87.441118][ T6813] dump_stack_lvl+0xf6/0x150 [ 87.441140][ T6813] dump_stack+0x15/0x1a [ 87.441153][ T6813] should_fail_ex+0x261/0x270 [ 87.441226][ T6813] should_failslab+0x8f/0xb0 [ 87.441253][ T6813] __kmalloc_cache_noprof+0x55/0x320 [ 87.441282][ T6813] ? l2tp_tunnel_create+0x67/0x1d0 [ 87.441309][ T6813] l2tp_tunnel_create+0x67/0x1d0 [ 87.441388][ T6813] pppol2tp_connect+0x440/0xb20 [ 87.441409][ T6813] ? release_sock+0x117/0x150 [ 87.441519][ T6813] ? __pfx_pppol2tp_connect+0x10/0x10 [ 87.441538][ T6813] __sys_connect+0x192/0x1b0 [ 87.441575][ T6813] __x64_sys_connect+0x41/0x50 [ 87.441621][ T6813] x64_sys_call+0x2030/0x2e10 [ 87.441640][ T6813] do_syscall_64+0xc9/0x1c0 [ 87.441719][ T6813] ? clear_bhb_loop+0x25/0x80 [ 87.441741][ T6813] ? clear_bhb_loop+0x25/0x80 [ 87.441763][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.441786][ T6813] RIP: 0033:0x7f567fe1d169 [ 87.441797][ T6813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.441814][ T6813] RSP: 002b:00007f567e487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 87.441888][ T6813] RAX: ffffffffffffffda RBX: 00007f5680035fa0 RCX: 00007f567fe1d169 [ 87.441901][ T6813] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000006 [ 87.441913][ T6813] RBP: 00007f567e487090 R08: 0000000000000000 R09: 0000000000000000 [ 87.441925][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.441938][ T6813] R13: 0000000000000000 R14: 00007f5680035fa0 R15: 00007ffc5c835c88 [ 87.441957][ T6813] [ 87.766791][ T6827] __nla_validate_parse: 9 callbacks suppressed [ 87.766808][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 87.822678][ T6823] netlink: 'syz.6.1130': attribute type 13 has an invalid length. [ 87.901907][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.909321][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.962770][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.973677][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.012097][ T6823] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.021251][ T6823] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.030212][ T6823] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.039156][ T6823] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.135815][ T6842] loop6: detected capacity change from 0 to 512 [ 88.147241][ T6842] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.160171][ T6842] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.189276][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.306956][ T6851] xt_CT: No such helper "pptp" [ 88.516176][ T6865] loop6: detected capacity change from 0 to 2048 [ 88.537495][ T6867] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1146'. [ 88.538589][ T6865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.577232][ T6865] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.622371][ T6865] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 88.634831][ T6865] EXT4-fs (loop6): This should not happen!! Data will be lost [ 88.634831][ T6865] [ 88.644484][ T6865] EXT4-fs (loop6): Total free blocks count 0 [ 88.650473][ T6865] EXT4-fs (loop6): Free/Dirty block details [ 88.656409][ T6865] EXT4-fs (loop6): free_blocks=2415919104 [ 88.662133][ T6865] EXT4-fs (loop6): dirty_blocks=64 [ 88.667313][ T6865] EXT4-fs (loop6): Block reservation details [ 88.673365][ T6865] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 88.700501][ T6879] loop3: detected capacity change from 0 to 128 [ 88.715437][ T6879] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 88.730937][ T6879] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.748914][ T6879] ext2 filesystem being mounted at /203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.781774][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 88.781789][ T6884] netlink: 'syz.5.1151': attribute type 1 has an invalid length. [ 88.791008][ T6883] FAULT_INJECTION: forcing a failure. [ 88.791008][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 88.798598][ T6884] netlink: 'syz.5.1151': attribute type 1 has an invalid length. [ 88.811157][ T6883] CPU: 1 UID: 0 PID: 6883 Comm: syz.0.1141 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 88.811190][ T6883] Tainted: [W]=WARN [ 88.811198][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.811212][ T6883] Call Trace: [ 88.811219][ T6883] [ 88.811228][ T6883] dump_stack_lvl+0xf6/0x150 [ 88.811251][ T6883] dump_stack+0x15/0x1a [ 88.811269][ T6883] should_fail_ex+0x261/0x270 [ 88.811369][ T6883] should_failslab+0x8f/0xb0 [ 88.811463][ T6883] __kmalloc_cache_noprof+0x55/0x320 [ 88.811502][ T6883] ? alloc_netdev_mqs+0x884/0xac0 [ 88.811526][ T6883] alloc_netdev_mqs+0x884/0xac0 [ 88.811589][ T6883] rtnl_create_link+0x232/0x720 [ 88.811614][ T6883] rtnl_newlink_create+0x14f/0x640 [ 88.811647][ T6883] ? security_capable+0x81/0x90 [ 88.811672][ T6883] ? netlink_ns_capable+0x88/0xa0 [ 88.811705][ T6883] rtnl_newlink+0xf38/0x12d0 [ 88.811770][ T6883] ? page_counter_charge+0x21a/0x240 [ 88.811807][ T6883] ? __rcu_read_unlock+0x4e/0x70 [ 88.811926][ T6883] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 88.811958][ T6883] ? mod_objcg_state+0x3f9/0x530 [ 88.811978][ T6883] ? __rcu_read_unlock+0x4e/0x70 [ 88.812010][ T6883] ? avc_has_perm_noaudit+0x1cc/0x210 [ 88.812038][ T6883] ? selinux_capable+0x1f9/0x260 [ 88.812133][ T6883] ? security_capable+0x81/0x90 [ 88.812156][ T6883] ? ns_capable+0x7d/0xb0 [ 88.812245][ T6883] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.812273][ T6883] rtnetlink_rcv_msg+0x65a/0x740 [ 88.812300][ T6883] ? should_fail_ex+0xd7/0x270 [ 88.812323][ T6883] ? ref_tracker_free+0x3b8/0x420 [ 88.812349][ T6883] netlink_rcv_skb+0x12f/0x230 [ 88.812446][ T6883] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.812566][ T6883] rtnetlink_rcv+0x1c/0x30 [ 88.812679][ T6883] netlink_unicast+0x605/0x6c0 [ 88.812721][ T6883] netlink_sendmsg+0x609/0x720 [ 88.812749][ T6883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.812771][ T6883] __sock_sendmsg+0x140/0x180 [ 88.812806][ T6883] ____sys_sendmsg+0x350/0x4e0 [ 88.812848][ T6883] __sys_sendmsg+0x1a0/0x240 [ 88.812894][ T6883] __x64_sys_sendmsg+0x46/0x50 [ 88.812919][ T6883] x64_sys_call+0x26f3/0x2e10 [ 88.812954][ T6883] do_syscall_64+0xc9/0x1c0 [ 88.813012][ T6883] ? clear_bhb_loop+0x25/0x80 [ 88.813039][ T6883] ? clear_bhb_loop+0x25/0x80 [ 88.813067][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.813148][ T6883] RIP: 0033:0x7f72a5ffd169 [ 88.813167][ T6883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.813189][ T6883] RSP: 002b:00007f72a4667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.813212][ T6883] RAX: ffffffffffffffda RBX: 00007f72a6215fa0 RCX: 00007f72a5ffd169 [ 88.813227][ T6883] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 88.813242][ T6883] RBP: 00007f72a4667090 R08: 0000000000000000 R09: 0000000000000000 [ 88.813334][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.813349][ T6883] R13: 0000000000000000 R14: 00007f72a6215fa0 R15: 00007ffcf718ba78 [ 88.813373][ T6883] [ 88.815683][ T6879] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.132748][ T6879] FAULT_INJECTION: forcing a failure. [ 89.132748][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.145926][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.3.1150 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 89.145961][ T6879] Tainted: [W]=WARN [ 89.145969][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.146033][ T6879] Call Trace: [ 89.146040][ T6879] [ 89.146046][ T6879] dump_stack_lvl+0xf6/0x150 [ 89.146069][ T6879] dump_stack+0x15/0x1a [ 89.146084][ T6879] should_fail_ex+0x261/0x270 [ 89.146105][ T6879] should_fail+0xb/0x10 [ 89.146182][ T6879] should_fail_usercopy+0x1a/0x20 [ 89.146235][ T6879] _copy_to_user+0x20/0xa0 [ 89.146259][ T6879] simple_read_from_buffer+0xb2/0x130 [ 89.146330][ T6879] proc_fail_nth_read+0x103/0x140 [ 89.146359][ T6879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.146461][ T6879] vfs_read+0x1b2/0x710 [ 89.146480][ T6879] ? __rcu_read_unlock+0x4e/0x70 [ 89.146505][ T6879] ? __fget_files+0x186/0x1c0 [ 89.146561][ T6879] ksys_read+0xeb/0x1b0 [ 89.146582][ T6879] __x64_sys_read+0x42/0x50 [ 89.146603][ T6879] x64_sys_call+0x2a3b/0x2e10 [ 89.146679][ T6879] do_syscall_64+0xc9/0x1c0 [ 89.146736][ T6879] ? clear_bhb_loop+0x25/0x80 [ 89.146754][ T6879] ? clear_bhb_loop+0x25/0x80 [ 89.146773][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.146795][ T6879] RIP: 0033:0x7f0d7875bb7c [ 89.146808][ T6879] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.146824][ T6879] RSP: 002b:00007f0d76dbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.146840][ T6879] RAX: ffffffffffffffda RBX: 00007f0d78975fa0 RCX: 00007f0d7875bb7c [ 89.146850][ T6879] RDX: 000000000000000f RSI: 00007f0d76dbf0a0 RDI: 000000000000000b [ 89.146861][ T6879] RBP: 00007f0d76dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 89.146871][ T6879] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 89.146916][ T6879] R13: 0000000000000000 R14: 00007f0d78975fa0 R15: 00007ffe914e65f8 [ 89.146943][ T6879] [ 89.373992][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.385893][ T43] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.419161][ T6892] FAULT_INJECTION: forcing a failure. [ 89.419161][ T6892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.432355][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.0.1154 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 89.432384][ T6892] Tainted: [W]=WARN [ 89.432389][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.432401][ T6892] Call Trace: [ 89.432406][ T6892] [ 89.432412][ T6892] dump_stack_lvl+0xf6/0x150 [ 89.432434][ T6892] dump_stack+0x15/0x1a [ 89.432500][ T6892] should_fail_ex+0x261/0x270 [ 89.432518][ T6892] should_fail+0xb/0x10 [ 89.432535][ T6892] should_fail_usercopy+0x1a/0x20 [ 89.432595][ T6892] fpu__restore_sig+0x124/0xaa0 [ 89.432642][ T6892] restore_sigcontext+0x1ba/0x230 [ 89.432669][ T6892] __do_sys_rt_sigreturn+0x112/0x180 [ 89.432728][ T6892] x64_sys_call+0x2b49/0x2e10 [ 89.432781][ T6892] do_syscall_64+0xc9/0x1c0 [ 89.432801][ T6892] ? clear_bhb_loop+0x25/0x80 [ 89.432821][ T6892] ? clear_bhb_loop+0x25/0x80 [ 89.432839][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.432858][ T6892] RIP: 0033:0x7f72a5ffd167 [ 89.432871][ T6892] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 89.432925][ T6892] RSP: 002b:00007f72a4667038 EFLAGS: 00000246 [ 89.432938][ T6892] RAX: 000000000000012b RBX: 00007f72a6215fa0 RCX: 00007f72a5ffd169 [ 89.432948][ T6892] RDX: 0000000000000001 RSI: 0000200000000f00 RDI: 0000000000000003 [ 89.432958][ T6892] RBP: 00007f72a4667090 R08: 0000000000000000 R09: 0000000000000000 [ 89.432967][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.432977][ T6892] R13: 0000000000000000 R14: 00007f72a6215fa0 R15: 00007ffcf718ba78 [ 89.432993][ T6892] [ 89.741127][ T6914] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1163'. [ 89.794847][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 89.794864][ T29] audit: type=1326 audit(2000000023.110:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 89.825677][ T6924] FAULT_INJECTION: forcing a failure. [ 89.825677][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.826499][ T6925] netlink: 'syz.0.1167': attribute type 7 has an invalid length. [ 89.838937][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.6.1168 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 89.838992][ T6924] Tainted: [W]=WARN [ 89.839000][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.839017][ T6924] Call Trace: [ 89.839025][ T6924] [ 89.839033][ T6924] dump_stack_lvl+0xf6/0x150 [ 89.839064][ T6924] dump_stack+0x15/0x1a [ 89.839086][ T6924] should_fail_ex+0x261/0x270 [ 89.839115][ T6924] should_fail+0xb/0x10 [ 89.839166][ T6924] should_fail_usercopy+0x1a/0x20 [ 89.839196][ T6924] _copy_to_user+0x20/0xa0 [ 89.839289][ T6924] simple_read_from_buffer+0xb2/0x130 [ 89.839324][ T6924] proc_fail_nth_read+0x103/0x140 [ 89.839389][ T6924] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.839427][ T6924] vfs_read+0x1b2/0x710 [ 89.839454][ T6924] ? __rcu_read_unlock+0x4e/0x70 [ 89.839489][ T6924] ? __fget_files+0x186/0x1c0 [ 89.839537][ T6924] ksys_read+0xeb/0x1b0 [ 89.839567][ T6924] __x64_sys_read+0x42/0x50 [ 89.839597][ T6924] x64_sys_call+0x2a3b/0x2e10 [ 89.839623][ T6924] do_syscall_64+0xc9/0x1c0 [ 89.839719][ T6924] ? clear_bhb_loop+0x25/0x80 [ 89.839757][ T6924] ? clear_bhb_loop+0x25/0x80 [ 89.839785][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.839891][ T6924] RIP: 0033:0x7f14c4b3bb7c [ 89.839986][ T6924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 89.840007][ T6924] RSP: 002b:00007f14c31a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 89.840045][ T6924] RAX: ffffffffffffffda RBX: 00007f14c4d55fa0 RCX: 00007f14c4b3bb7c [ 89.840060][ T6924] RDX: 000000000000000f RSI: 00007f14c31a70a0 RDI: 0000000000000008 [ 89.840074][ T6924] RBP: 00007f14c31a7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.840088][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.840102][ T6924] R13: 0000000000000000 R14: 00007f14c4d55fa0 R15: 00007ffc8bb71288 [ 89.840125][ T6924] [ 89.965601][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1166'. [ 89.966598][ T29] audit: type=1326 audit(2000000023.110:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.080607][ T29] audit: type=1326 audit(2000000023.110:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.104141][ T29] audit: type=1326 audit(2000000023.110:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.127648][ T29] audit: type=1326 audit(2000000023.110:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.151190][ T29] audit: type=1326 audit(2000000023.110:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.174747][ T29] audit: type=1326 audit(2000000023.110:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.198183][ T29] audit: type=1326 audit(2000000023.110:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.221677][ T29] audit: type=1326 audit(2000000023.140:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.245101][ T29] audit: type=1326 audit(2000000023.140:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6923 comm="syz.6.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c4b3d169 code=0x7ffc0000 [ 90.486643][ T6971] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1184'. [ 90.520122][ T6971] IPv6: Can't replace route, no match found [ 90.754942][ T6981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1188'. [ 90.842076][ T6991] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1193'. [ 90.928988][ T7000] dns_resolver: Unsupported server list version (0) [ 91.096402][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'. [ 91.544007][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 92.148213][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.161445][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.175675][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.189158][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.201762][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.215840][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.230199][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.242849][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.255490][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.268416][ T7071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7071 comm=syz.0.1229 [ 92.328307][ T7081] loop3: detected capacity change from 0 to 256 [ 92.340491][ T7081] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.352213][ T7081] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.360815][ T7081] FAT-fs (loop3): Filesystem has been set read-only [ 92.445760][ T7090] netlink: 'syz.6.1236': attribute type 7 has an invalid length. [ 92.483020][ T7096] FAULT_INJECTION: forcing a failure. [ 92.483020][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 92.495743][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.5.1239 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 92.495775][ T7096] Tainted: [W]=WARN [ 92.495781][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.495817][ T7096] Call Trace: [ 92.495823][ T7096] [ 92.495828][ T7096] dump_stack_lvl+0xf6/0x150 [ 92.495853][ T7096] dump_stack+0x15/0x1a [ 92.495867][ T7096] should_fail_ex+0x261/0x270 [ 92.495889][ T7096] should_failslab+0x8f/0xb0 [ 92.495937][ T7096] __kmalloc_noprof+0xad/0x410 [ 92.495972][ T7096] ? security_sem_alloc+0x44/0x100 [ 92.495999][ T7096] security_sem_alloc+0x44/0x100 [ 92.496067][ T7096] newary+0x13d/0x520 [ 92.496081][ T7096] ? vfs_write+0x669/0x950 [ 92.496107][ T7096] ipcget+0x338/0x500 [ 92.496137][ T7096] ? fput+0x99/0xd0 [ 92.496157][ T7096] __x64_sys_semget+0xfd/0x130 [ 92.496180][ T7096] x64_sys_call+0x2793/0x2e10 [ 92.496280][ T7096] do_syscall_64+0xc9/0x1c0 [ 92.496301][ T7096] ? clear_bhb_loop+0x25/0x80 [ 92.496436][ T7096] ? clear_bhb_loop+0x25/0x80 [ 92.496459][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.496486][ T7096] RIP: 0033:0x7f567fe1d169 [ 92.496498][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.496513][ T7096] RSP: 002b:00007f567e487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 92.496531][ T7096] RAX: ffffffffffffffda RBX: 00007f5680035fa0 RCX: 00007f567fe1d169 [ 92.496542][ T7096] RDX: 0000000000000404 RSI: 0000000000000001 RDI: 0000000000000000 [ 92.496552][ T7096] RBP: 00007f567e487090 R08: 0000000000000000 R09: 0000000000000000 [ 92.496562][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.496571][ T7096] R13: 0000000000000000 R14: 00007f5680035fa0 R15: 00007ffc5c835c88 [ 92.496623][ T7096] [ 92.779072][ T7114] FAULT_INJECTION: forcing a failure. [ 92.779072][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.792299][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.5.1246 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 92.792338][ T7114] Tainted: [W]=WARN [ 92.792345][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.792360][ T7114] Call Trace: [ 92.792367][ T7114] [ 92.792374][ T7114] dump_stack_lvl+0xf6/0x150 [ 92.792398][ T7114] dump_stack+0x15/0x1a [ 92.792484][ T7114] should_fail_ex+0x261/0x270 [ 92.792505][ T7114] should_fail+0xb/0x10 [ 92.792521][ T7114] should_fail_usercopy+0x1a/0x20 [ 92.792544][ T7114] _copy_from_user+0x1c/0xa0 [ 92.792575][ T7114] __se_sys_add_key+0x20d/0x330 [ 92.792597][ T7114] ? fput+0x99/0xd0 [ 92.792679][ T7114] __x64_sys_add_key+0x67/0x80 [ 92.792699][ T7114] x64_sys_call+0x1f10/0x2e10 [ 92.792729][ T7114] do_syscall_64+0xc9/0x1c0 [ 92.792752][ T7114] ? clear_bhb_loop+0x25/0x80 [ 92.792833][ T7114] ? clear_bhb_loop+0x25/0x80 [ 92.792852][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.792954][ T7114] RIP: 0033:0x7f567fe1d169 [ 92.792967][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.792985][ T7114] RSP: 002b:00007f567e487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 92.793006][ T7114] RAX: ffffffffffffffda RBX: 00007f5680035fa0 RCX: 00007f567fe1d169 [ 92.793019][ T7114] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040 [ 92.793033][ T7114] RBP: 00007f567e487090 R08: ffffffffffffffff R09: 0000000000000000 [ 92.793068][ T7114] R10: 00000000000052ba R11: 0000000000000246 R12: 0000000000000001 [ 92.793081][ T7114] R13: 0000000000000000 R14: 00007f5680035fa0 R15: 00007ffc5c835c88 [ 92.793103][ T7114] [ 93.159208][ T7138] __nla_validate_parse: 4 callbacks suppressed [ 93.159227][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 93.308782][ T7156] hub 9-0:1.0: USB hub found [ 93.321247][ T7156] hub 9-0:1.0: 8 ports detected [ 93.380777][ T7166] netlink: 'syz.6.1265': attribute type 10 has an invalid length. [ 93.388847][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1265'. [ 93.399990][ T7166] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.408868][ T7166] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.417710][ T7166] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.426495][ T7166] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.441330][ T7166] team0: Port device geneve1 added [ 93.450430][ T7168] pim6reg: entered allmulticast mode [ 93.550497][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1267'. [ 93.575770][ T7177] loop3: detected capacity change from 0 to 2048 [ 93.602169][ T7177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.760217][ T7177] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.779896][ T7192] dns_resolver: Unsupported server list version (0) [ 93.780063][ T7177] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 93.798942][ T7177] EXT4-fs (loop3): This should not happen!! Data will be lost [ 93.798942][ T7177] [ 93.808618][ T7177] EXT4-fs (loop3): Total free blocks count 0 [ 93.814633][ T7177] EXT4-fs (loop3): Free/Dirty block details [ 93.820532][ T7177] EXT4-fs (loop3): free_blocks=2415919104 [ 93.826276][ T7177] EXT4-fs (loop3): dirty_blocks=64 [ 93.831395][ T7177] EXT4-fs (loop3): Block reservation details [ 93.837473][ T7177] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 93.909039][ T3394] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.944718][ T7200] loop3: detected capacity change from 0 to 256 [ 93.962148][ T7200] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.080794][ T7205] loop6: detected capacity change from 0 to 1024 [ 94.096429][ T7205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.126875][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.174265][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 94.286039][ T3443] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.293895][ T3443] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.302443][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 94.303795][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1289'. [ 94.450361][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1295'. [ 94.520877][ T7265] loop3: detected capacity change from 0 to 1024 [ 94.529800][ T7265] EXT4-fs: test_dummy_encryption option not supported [ 94.723123][ T7291] loop6: detected capacity change from 0 to 256 [ 94.732945][ T7291] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.749809][ T7291] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.758409][ T7291] FAT-fs (loop6): Filesystem has been set read-only [ 94.780028][ T7292] loop3: detected capacity change from 0 to 1024 [ 94.800743][ T7292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.872813][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1310'. [ 95.167062][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 95.167078][ T29] audit: type=1326 audit(2000000028.480:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.196863][ T29] audit: type=1326 audit(2000000028.480:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.220342][ T29] audit: type=1326 audit(2000000028.480:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.221755][ T7316] dns_resolver: Unsupported server list version (0) [ 95.243918][ T29] audit: type=1326 audit(2000000028.480:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.273796][ T29] audit: type=1326 audit(2000000028.480:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.297304][ T29] audit: type=1326 audit(2000000028.480:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.320760][ T29] audit: type=1326 audit(2000000028.480:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.394097][ T29] audit: type=1326 audit(2000000028.620:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.417624][ T29] audit: type=1326 audit(2000000028.620:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.441080][ T29] audit: type=1326 audit(2000000028.620:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f91e506d169 code=0x7ffc0000 [ 95.484639][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.545785][ T7327] loop3: detected capacity change from 0 to 2048 [ 95.575747][ T7327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.597250][ T7327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.622205][ T7327] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 95.635006][ T7327] EXT4-fs (loop3): This should not happen!! Data will be lost [ 95.635006][ T7327] [ 95.644786][ T7327] EXT4-fs (loop3): Total free blocks count 0 [ 95.650794][ T7327] EXT4-fs (loop3): Free/Dirty block details [ 95.656831][ T7327] EXT4-fs (loop3): free_blocks=2415919104 [ 95.662565][ T7327] EXT4-fs (loop3): dirty_blocks=64 [ 95.667692][ T7327] EXT4-fs (loop3): Block reservation details [ 95.673680][ T7327] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 95.735374][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 95.736199][ T7354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 95.828270][ T7363] loop3: detected capacity change from 0 to 512 [ 95.857547][ T7363] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.871344][ T7363] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.895265][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.921062][ T7370] dns_resolver: Unsupported server list version (0) [ 96.060050][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1339'. [ 96.173603][ T7392] netlink: 'syz.5.1349': attribute type 11 has an invalid length. [ 96.338716][ T7412] dns_resolver: Unsupported server list version (0) [ 96.391052][ T7420] loop5: detected capacity change from 0 to 2048 [ 96.408333][ T7420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.491927][ T7426] loop6: detected capacity change from 0 to 2048 [ 96.515356][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.545844][ T7426] GPT:first_usable_lbas don't match. [ 96.551139][ T7426] GPT:34 != 290 [ 96.554648][ T7426] GPT: Use GNU Parted to correct GPT errors. [ 96.560773][ T7426] loop6: p1 p2 p3 [ 96.675543][ T7430] loop5: detected capacity change from 0 to 512 [ 96.682522][ T7430] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 96.695820][ T7430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.718152][ T7435] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 96.727209][ T7435] FAULT_INJECTION: forcing a failure. [ 96.727209][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.740311][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.6.1363 Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 96.740401][ T7435] Tainted: [W]=WARN [ 96.740408][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.740421][ T7435] Call Trace: [ 96.740427][ T7435] [ 96.740466][ T7435] dump_stack_lvl+0xf6/0x150 [ 96.740490][ T7435] dump_stack+0x15/0x1a [ 96.740524][ T7435] should_fail_ex+0x261/0x270 [ 96.740547][ T7435] should_fail+0xb/0x10 [ 96.740565][ T7435] should_fail_usercopy+0x1a/0x20 [ 96.740641][ T7435] _copy_from_user+0x1c/0xa0 [ 96.740696][ T7435] kstrtouint_from_user+0x84/0x100 [ 96.740718][ T7435] ? 0xffffffff81000000 [ 96.740732][ T7435] ? selinux_file_permission+0x22d/0x360 [ 96.740768][ T7435] proc_fail_nth_write+0x54/0x160 [ 96.740800][ T7435] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 96.740831][ T7435] vfs_write+0x295/0x950 [ 96.740925][ T7435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.740958][ T7435] ? __fget_files+0x186/0x1c0 [ 96.740991][ T7435] ksys_write+0xeb/0x1b0 [ 96.741016][ T7435] __x64_sys_write+0x42/0x50 [ 96.741054][ T7435] x64_sys_call+0x2a45/0x2e10 [ 96.741075][ T7435] do_syscall_64+0xc9/0x1c0 [ 96.741102][ T7435] ? clear_bhb_loop+0x25/0x80 [ 96.741124][ T7435] ? clear_bhb_loop+0x25/0x80 [ 96.741148][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.741169][ T7435] RIP: 0033:0x7f14c4b3bc1f [ 96.741183][ T7435] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 96.741201][ T7435] RSP: 002b:00007f14c31a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 96.741220][ T7435] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f14c4b3bc1f [ 96.741232][ T7435] RDX: 0000000000000001 RSI: 00007f14c31a70a0 RDI: 0000000000000008 [ 96.741244][ T7435] RBP: 00007f14c31a7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.741256][ T7435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 96.741342][ T7435] R13: 0000000000000000 R14: 00007f14c4d55fa0 R15: 00007ffc8bb71288 [ 96.741360][ T7435] [ 96.955912][ T7430] EXT4-fs error (device loop5): ext4_do_update_inode:5194: inode #2: comm syz.5.1362: corrupted inode contents [ 96.967918][ T7430] EXT4-fs error (device loop5): ext4_dirty_inode:6086: inode #2: comm syz.5.1362: mark_inode_dirty error [ 96.992375][ T7430] EXT4-fs error (device loop5): ext4_do_update_inode:5194: inode #2: comm syz.5.1362: corrupted inode contents [ 97.028253][ T7444] netlink: 'syz.3.1366': attribute type 7 has an invalid length. [ 97.098204][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.155834][ T7464] bond0: (slave syz_tun): Releasing backup interface [ 97.196156][ T7465] gtp calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.216606][ T7465] netlink: 'gtp': attribute type 4 has an invalid length. [ 97.248797][ T7465] : renamed from bond0 (while UP) [ 97.355650][ T7477] netlink: 'syz.1.1380': attribute type 7 has an invalid length. [ 98.021421][ T7515] loop5: detected capacity change from 0 to 512 [ 98.067287][ T7515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.134173][ T7515] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.176684][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.194867][ T7535] loop6: detected capacity change from 0 to 128 [ 98.264526][ T7545] dns_resolver: Unsupported server list version (0) [ 98.446705][ T7559] __nla_validate_parse: 9 callbacks suppressed [ 98.446743][ T7559] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1412'. [ 98.489444][ T7564] loop5: detected capacity change from 0 to 1024 [ 98.517011][ T7564] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.1413: bad orphan inode 2304 [ 98.525455][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 98.536115][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1406'. [ 98.543758][ T7564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.667475][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 98.926606][ T7592] dns_resolver: Unsupported server list version (0) [ 99.478879][ T7602] siw: device registration error -23 [ 99.599541][ T4919] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.720123][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 99.729050][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'. [ 99.814424][ T7643] loop5: detected capacity change from 0 to 128 [ 99.925188][ T7650] netlink: 'syz.0.1446': attribute type 7 has an invalid length. [ 100.110756][ T7674] dns_resolver: Unsupported server list version (0) [ 100.336507][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 100.336522][ T29] audit: type=1400 audit(2000000033.650:3119): avc: denied { read } for pid=7684 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 100.507485][ T7717] loop6: detected capacity change from 0 to 2048 [ 100.547105][ T7717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.660266][ T5190] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.732680][ T7732] xt_CT: No such helper "pptp" [ 100.800860][ T7744] netlink: 'syz.6.1481': attribute type 10 has an invalid length. [ 100.809223][ T7744] team0: Device hsr_slave_0 failed to register rx_handler [ 100.890937][ T29] audit: type=1400 audit(2000000034.200:3120): avc: denied { mounton } for pid=7754 comm="syz.5.1486" path="/171/file0" dev="tmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.894231][ T7753] hsr0: entered promiscuous mode [ 100.920933][ T29] audit: type=1400 audit(2000000034.200:3121): avc: denied { ioctl } for pid=7752 comm="syz.1.1485" path="socket:[18615]" dev="sockfs" ino=18615 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.920975][ T7757] loop6: detected capacity change from 0 to 128 [ 100.921048][ T29] ================================================================== [ 100.921074][ T29] BUG: KCSAN: data-race in data_push_tail / number [ 100.921110][ T29] [ 100.921118][ T29] write to 0xffffffff88e4ab9f of 1 bytes by task 7757 on cpu 1: [ 100.921135][ T29] number+0x7f2/0xac0 [ 100.921164][ T29] vsnprintf+0x6b0/0x8a0 [ 100.921191][ T29] vscnprintf+0x42/0x90 [ 100.921217][ T29] printk_sprint+0x30/0x2d0 [ 100.921243][ T29] vprintk_store+0x583/0x860 [ 100.921268][ T29] vprintk_emit+0x1a0/0x6c0 [ 100.921294][ T29] vprintk_default+0x26/0x30 [ 100.921320][ T29] vprintk+0x1d/0x30 [ 100.921350][ T29] _printk+0x7f/0xb0 [ 100.921372][ T29] set_capacity_and_notify+0x155/0x200 [ 100.921395][ T29] loop_set_size+0x2e/0x70 [ 100.921414][ T29] loop_configure+0x89c/0xa30 [ 100.921432][ T29] lo_ioctl+0x5fa/0x1570 [ 100.921448][ T29] blkdev_ioctl+0x35b/0x450 [ 100.921467][ T29] __se_sys_ioctl+0xc9/0x140 [ 100.921486][ T29] __x64_sys_ioctl+0x43/0x50 [ 100.921506][ T29] x64_sys_call+0x168d/0x2e10 [ 100.921529][ T29] do_syscall_64+0xc9/0x1c0 [ 100.921552][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.921574][ T29] [ 100.921581][ T29] read to 0xffffffff88e4ab98 of 8 bytes by task 29 on cpu 0: [ 100.921598][ T29] data_push_tail+0x107/0x440 [ 100.921622][ T29] data_alloc+0xbd/0x2c0 [ 100.921643][ T29] prb_reserve+0x86a/0xb80 [ 100.921665][ T29] vprintk_store+0x552/0x860 [ 100.921687][ T29] vprintk_emit+0x1a0/0x6c0 [ 100.921707][ T29] vprintk_default+0x26/0x30 [ 100.921731][ T29] vprintk+0x1d/0x30 [ 100.921756][ T29] _printk+0x7f/0xb0 [ 100.921783][ T29] kauditd_hold_skb+0x1a3/0x1b0 [ 100.921814][ T29] kauditd_send_queue+0x288/0x2e0 [ 100.921844][ T29] kauditd_thread+0x432/0x640 [ 100.921870][ T29] kthread+0x4b7/0x540 [ 100.921897][ T29] ret_from_fork+0x4b/0x60 [ 100.921921][ T29] ret_from_fork_asm+0x1a/0x30 [ 100.921946][ T29] [ 100.921952][ T29] value changed: 0x00000000ffffe5b5 -> 0x742030206d6f7266 [ 100.921963][ T29] [ 100.921968][ T29] Reported by Kernel Concurrency Sanitizer on: [ 100.921983][ T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Tainted: G W 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(voluntary) [ 100.922015][ T29] Tainted: [W]=WARN [ 100.922025][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.922041][ T29] ================================================================== [ 100.952410][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1485'. [ 101.297810][ T7753] hsr_slave_0: left promiscuous mode [ 101.305962][ T7753] hsr_slave_1: left promiscuous mode [ 101.318468][ T7753] hsr0 (unregistering): left promiscuous mode