last executing test programs: 7m34.638906783s ago: executing program 4 (id=1003): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4a) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4093, 0xffd}], 0x1, 0x9, 0x78) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001180)={&(0x7f0000001440)=ANY=[@ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x1300, 0x8d) fcntl$setlease(r1, 0x400, 0x0) 7m34.607249793s ago: executing program 4 (id=1006): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_open_dev$evdev(0x0, 0x2, 0x0) chdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee00, 0xee01) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x48942, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xffffffffa003e45c, 0x700000000000000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/102399, 0x18fff}], 0x1, 0xfffffff8, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x1000, @rand_addr, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7m34.074787511s ago: executing program 4 (id=1012): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xa, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) getdents(r0, &(0x7f00000000c0)=""/43, 0x2b) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x18) fcntl$lock(r3, 0x6, &(0x7f0000001880)={0x2, 0x2, 0x2, 0x8}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x5000, 0xc, 0x8001, 0x4e, 0x1]}, &(0x7f00000003c0)=0x54) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x80047441, 0xf0ff1f00000000) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) fchown(r7, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x80, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x7}, {0x0, 0xa, 0x1, "c4a7b64d69e351c62d65"}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x0, 0x7b}}}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_VAR="732af34527"]}]}}]}]}]}}]}, 0x80}}, 0x0) 7m33.925192173s ago: executing program 4 (id=1013): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x8040600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x14, 0x4, @void, @value=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) 7m33.812525395s ago: executing program 4 (id=1014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x2c97, 0x1000, 0xfffffffd, 0x17b}) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x88) openat(r3, &(0x7f0000000340)='.\x00', 0x0, 0x1b5) close_range(r1, 0xffffffffffffffff, 0x0) 7m33.57062092s ago: executing program 4 (id=1015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc0000001b0001002cbd7000ffdbdf25ac141438000000000000000000000000fe8000000000000000000000000000aa4e2380004e210005020020403a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b000000000000000800000000000013000000000000000000000000010000000000000000040000060000000000009ed21592da007016000000000000000000000000000600000000000000ff0f0000000000002e0c000000000000ff030000bb6b6e000201015156a185010000000002000000000000000a0010"], 0xcc}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0900000001000000e27f000050f7010000d70000000044a644d18b4aa5791e6e4fb78904ab1ab7a54007ec44291b61923c383b78da742df068f87fca85fea10954dc2a2e5083f10e5ff60909144dc790aab5a9eb77950826d0c1de5cd0bd1121ebbaf0976fee61c786e349de1e29718773076bb27be728f506f68951eaaf463ebf5b7c854d260a30f3e481ce308f3aaface9a3b80f597ac76ddab812cd5f63b74d9ee9246de84554b1d2e8f47d8ff8e1b3e1a7c1f4caf94493bd8670fe94ed0f825f7bfc0ebc", @ANYRES64=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="4a39e0f8ce4688de0007000000001f0018110000", @ANYBLOB="e7fa1d2a760b7e86389af759e60870f3a05eed6d9b36ac0b538db88a67dc2e49d6123f4c0bf1f4a97b1536700c905d063436d7fdf71acb59b10210971851db5f52e3ac4849e4967ba9862bd6c36aca16ae2a04f2d81789d4cdc5b192f361393031adf7b891f58b558b52d0c182867240745e30e2682ae681852e4166d0f0ee739a43efba52e490648346794f47e2d2365259742b6675e4a825fcc2cd3010b3b5d9c748e4e9c4fe6b6e8c39c1243e5b589189e699aab10ed0e4784de4e722ebf1e113", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES8=r3, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000000000000000000000000adfce3070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c000180090001006d657461000000000c00028008000240000000001400000010000100"/224], 0xe0}}, 0x4008400) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="000000000000000084001a80400002803c00018008002100000000000800180000000000080003000000000008000900d000000008000c0000000000080012"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_tables_names\x00') preadv(r11, &(0x7f0000000500)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x2000000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x0, &(0x7f0000000980), &(0x7f0000000640)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, @fallback=0x36, r11, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x0, 0x6}, 0x10, r12, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r1, r5, r5, r1, r5], &(0x7f0000000940)=[{0x4, 0x1, 0x5, 0x5}, {0x4, 0x4, 0xb, 0xa}], 0x10, 0x4008, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m33.56999685s ago: executing program 32 (id=1015): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc0000001b0001002cbd7000ffdbdf25ac141438000000000000000000000000fe8000000000000000000000000000aa4e2380004e210005020020403a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b000000000000000800000000000013000000000000000000000000010000000000000000040000060000000000009ed21592da007016000000000000000000000000000600000000000000ff0f0000000000002e0c000000000000ff030000bb6b6e000201015156a185010000000002000000000000000a0010"], 0xcc}}, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0900000001000000e27f000050f7010000d70000000044a644d18b4aa5791e6e4fb78904ab1ab7a54007ec44291b61923c383b78da742df068f87fca85fea10954dc2a2e5083f10e5ff60909144dc790aab5a9eb77950826d0c1de5cd0bd1121ebbaf0976fee61c786e349de1e29718773076bb27be728f506f68951eaaf463ebf5b7c854d260a30f3e481ce308f3aaface9a3b80f597ac76ddab812cd5f63b74d9ee9246de84554b1d2e8f47d8ff8e1b3e1a7c1f4caf94493bd8670fe94ed0f825f7bfc0ebc", @ANYRES64=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="4a39e0f8ce4688de0007000000001f0018110000", @ANYBLOB="e7fa1d2a760b7e86389af759e60870f3a05eed6d9b36ac0b538db88a67dc2e49d6123f4c0bf1f4a97b1536700c905d063436d7fdf71acb59b10210971851db5f52e3ac4849e4967ba9862bd6c36aca16ae2a04f2d81789d4cdc5b192f361393031adf7b891f58b558b52d0c182867240745e30e2682ae681852e4166d0f0ee739a43efba52e490648346794f47e2d2365259742b6675e4a825fcc2cd3010b3b5d9c748e4e9c4fe6b6e8c39c1243e5b589189e699aab10ed0e4784de4e722ebf1e113", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES8=r0, @ANYRES8=r3, @ANYRESDEC=r3], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000000000000000000000000adfce3070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c000180090001006d657461000000000c00028008000240000000001400000010000100"/224], 0xe0}}, 0x4008400) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=ANY=[@ANYRES32=r5, @ANYRES32=r10, @ANYBLOB="000000000000000084001a80400002803c00018008002100000000000800180000000000080003000000000008000900d000000008000c0000000000080012"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_tables_names\x00') preadv(r11, &(0x7f0000000500)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x2000000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000008c0)={0x9, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x0, &(0x7f0000000980), &(0x7f0000000640)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, @fallback=0x36, r11, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x9, 0x0, 0x6}, 0x10, r12, 0xffffffffffffffff, 0x2, &(0x7f0000000900)=[r1, r5, r5, r1, r5], &(0x7f0000000940)=[{0x4, 0x1, 0x5, 0x5}, {0x4, 0x4, 0xb, 0xa}], 0x10, 0x4008, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x80000}, 0x18) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) ioctl$AUTOFS_IOC_PROTOVER(r8, 0x80049363, &(0x7f0000000180)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m10.166655114s ago: executing program 5 (id=1246): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) (async) fcntl$setstatus(r2, 0x4, 0x7c00) (async, rerun: 32) r4 = dup3(r3, r2, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000001060500"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x6}, 0x18) fcntl$setstatus(r0, 0x4, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) (async) io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) (async) read(r2, &(0x7f00000002c0)=""/66, 0x42) (async, rerun: 64) r10 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, r2, &(0x7f0000000e80), &(0x7f0000000280)='./file0\x00', 0x108, 0x400}) recvfrom$inet6(r1, &(0x7f0000000240)=""/31, 0x1f, 0x10040, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0xfffffffffffffff7, 0x0, 0xae8, 0x4, 0x1}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000e00)={[{@lazytime}, {@debug}, {@journal_async_commit}, {@minixdf}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@test_dummy_encryption_v1}, {@prjquota}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0x80080400) 7m10.091826184s ago: executing program 5 (id=1249): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251df8020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 7m10.091449985s ago: executing program 5 (id=1250): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x7fff, 0x0}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x5, &(0x7f0000000440)=@framed={{}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x13, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000020000000000000000000850000006d00000018110000", @ANYRES64=0x0, @ANYRES16=r2], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe94, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x3) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e2202aacbe64605f57968d46b8b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 7m10.049074135s ago: executing program 5 (id=1253): socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x8040600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x14, 0x4, @void, @value=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe0a, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) 7m9.360079316s ago: executing program 5 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_bp={0x0}, 0x4008, 0x1000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/4, 0x204000, 0x1000, 0x0, 0x2}, 0x20) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x8c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r5, &(0x7f00000002c0)={0x2c, 0x4, r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) 7m9.182359269s ago: executing program 5 (id=1259): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 7m9.09487872s ago: executing program 33 (id=1259): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 6m56.899929255s ago: executing program 1 (id=1371): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10, 0x0}, 0x4000000) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4a) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000004000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(r2, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4093, 0xffd}], 0x1, 0x9, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x2) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast1, 0x5}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) pipe2$9p(0x0, 0x80880) openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x1300, 0x8d) fcntl$setlease(r1, 0x400, 0x0) 6m56.794511897s ago: executing program 1 (id=1372): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) 6m56.734681058s ago: executing program 1 (id=1373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100c93a, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x560b, &(0x7f00000004c0)={0x0, 0x5a61, 0x4000, 0x2, 0x1b0}, 0x0, &(0x7f00000003c0)) io_uring_setup(0x7190, &(0x7f0000000680)={0x0, 0xedfb, 0x2000, 0x3, 0x3d6, 0x0, r1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='tlb_flush\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r7 = io_uring_setup(0x4332, &(0x7f0000000780)={0x0, 0x986d, 0x1000, 0xfffffffc}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) move_mount(0xffffffffffffffff, 0x0, r8, 0x0, 0x46) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000440)=ANY=[], 0x0) 6m56.671864809s ago: executing program 1 (id=1374): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000100)={[{@block_validity}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") setresuid(0xee01, 0xee00, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 6m56.305921074s ago: executing program 1 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0xb, 0x14, &(0x7f0000001cc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x7, 0x5, 0x8, 0x90}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1ff}, @jmp={0x5, 0x1, 0x5, 0xe, 0xb, 0xffffffffffffffc0, 0x8}], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xac, &(0x7f0000001d80)=""/172, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x2, 0x0, &(0x7f00000004c0)=[{0x3, 0x3, 0xa, 0xc}, {0x1, 0x1, 0xc, 0x8}], 0x10, 0x101, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_vmscan_throttled\x00', r1, 0x0, 0x7ff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00009fb000/0x2000)=nil, 0x2000, 0xa) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305839, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x1, 0xffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000040)=r6) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) preadv(r0, &(0x7f0000002f80)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/66, 0x42}, {&(0x7f0000000500)=""/15, 0xf}], 0x3, 0x401, 0xffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r7, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x174, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x160, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xfffffffffffffffd}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x174}}, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0xc6801, 0x0) 6m56.121654808s ago: executing program 1 (id=1381): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x5453, 0x7cb7562f2d67) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000001000)={[{&(0x7f0000000200)="6b94e90fa0bd736bad718caf185cf7b5947b6c42eb1ef7", 0x17}, {&(0x7f0000000280)="62762505c3d6a70f95593e64ee26215c230d096cbd72827dcb2cf4dd8d5d9ba49d175364917b87d9b8b69770c7b83efaff4d1a", 0x33, 0x1}, {&(0x7f0000000480)="1e5aa2c55f93c4e3d9aaefc0babf3949b91a3c41463dba26c72958d82c1ae011dc86d9955082a8eb1d7b92e497c62b55cfdcd5999016fa135b224aa2dca97792dfdac37c37492119a7f292aa6aa6b1e49d86ff46e0900a05341a86c9819e02b93bafd7fe07a5f936372b6f02bce75dcc8eff8bcab236928d88460a4371b0a74ac23fe22d6da9b7abae0407e3874b2860f35df4132a16884207f49ff6729ac440470824d748168729ffd63ab6593c2f72605d07c82af5063c6d867b5c10a0c373ae9645496c1ffd23762af5679c2451e245f3204afdfe7693b6ba4b8d0f06cd73ba6d36596858c24a0dcbd06c3fbca407f2abc90f88", 0xf5, 0x3}, {&(0x7f00000005c0)="4c261aa4569f71f66bb01fc136dc2119ae15cad6d7dd097d102ab41a267cfa84625b0e361d9306214817386b2c429d0aa28cbdec120d835a8d308eb790bbfd104c08cbd4c77d28c474b45473aa00325aeaaa60895be52c8c795a3b3bea52f10c5e0ca1b995789607a6682242dd1cd2dd10a986b45a96c773d19b007c592217dd886534fa5b6f9a859de45ec4972360bc5dd012b153c0f4ac0a2745cd582ad5a5c34c16d5c39bfc09d0fbce59224a442f064b658572cb8e26d6cb1a4a9f9c656a", 0xc0, 0x1}, {&(0x7f0000000680)="96db3453afb5be7178ca9e1699e2f9e3adaea075bb0d84189dcc68a51951ad149c2ac3110d7e566e3337cd579d3c2c5901787358baaaacd4109bdcbb6accfba2423366c6810b2e76e0a187e641be696c0ccad71083df14315d482c4dfde3cd54b739497464e0e9ab83b7314427ffc493cb940498211f2b673d305a04657114d5140a476e282b", 0x86, 0x1}, {&(0x7f0000000740)="1dcf2bdca43eb3500905024fbb78f16f53052bfba4122b561727ddfadbb5502e6d917a1a0937b2efec305f4aab196f5eee179260f0e8433258410993ec869599f906a96774ccd84e3dabd62e8b0915c5b119d877c2d1868961d2151ca42c070f04165422a4e947e841", 0x69}, {&(0x7f0000000800)="894d5b84c336dc434686881817ab0edde678c4605c0834b7adcc83439aa491b1b683fc0735e40cfbc17bd02fdaef1b90cab984a74296b53b5ca49fb3c35659d8b22ab1f6d91f356da3a4e55fd2370fc8aec3d722cfa12577e7d05261bc8ce236c03fada830f7765169774afb59600a7185d7836bae5c66f0ee8aac7fc20fa0976571d8ddc4325ae8f96a8c9b06d5af2c73f6a5e977ebe32f596a93d7bd8489df0507fdbeecc81adfdde05839891b246d2ba7f6297486654e447101fdfe6867d9bdbcb814d93facd9426ccd05a69feda6a74d5e00354bfe2d0887bbb1fb49ed6cb1aa99cfb782aec607bc5b17837000ec032b69cf3093", 0xf6}, {&(0x7f00000002c0)="47f371f581f9f06ef656d24aed42235e8a50ac64390c286bd69fb5210db6fc0ad27509d981bd2d1be60b6dc02f4dc2ea5e", 0x31, 0x1}, {&(0x7f0000000900)="daffd5bd74b214feb3ae8efb3aae2733c68a8f70a3774f901c431ddaf143862903e56913441b5e789594476cc38d81b24c45693b83ab7b4d31c1cec3dff783c8f710f58bcd839256d9d9e29433478bc7d9d9c48814f01f1b84b2d4ce36a36337873e480916f3f501d35f578d6a169b28fc43ca4f61ef89e6", 0x78, 0x1}]}, 0x9, 0x3}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) clock_settime(0x5, &(0x7f0000000b00)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="584765f8788d4e4417ac384c6888bdda128dbbb73466112a20dc5401a53b0879bd0b3da441495826bb66ac7588156dfca5802f4e51c26908d03374b5e319859ff5e1c76a88e3440dfce3511e62f57bf82b9ed82f15f075bfd9d65947a21474ee10193e9a0667", @ANYRES16, @ANYBLOB="52d13c51191c4aac29c8ef14ddc63e606f9a1e5323f11e7724b5e165a7e9deb9728b512eab4ebc6c87243d6aa7b7dec043f04ac862af111114485b79dabcf290909fc7cc3459add1b457ef7f53998dc3af8b294bc5a5e7f44cea22b1f806af1525970d57c1f047"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) 6m56.078147939s ago: executing program 34 (id=1381): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x5453, 0x7cb7562f2d67) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000980)={&(0x7f0000001000)={[{&(0x7f0000000200)="6b94e90fa0bd736bad718caf185cf7b5947b6c42eb1ef7", 0x17}, {&(0x7f0000000280)="62762505c3d6a70f95593e64ee26215c230d096cbd72827dcb2cf4dd8d5d9ba49d175364917b87d9b8b69770c7b83efaff4d1a", 0x33, 0x1}, {&(0x7f0000000480)="1e5aa2c55f93c4e3d9aaefc0babf3949b91a3c41463dba26c72958d82c1ae011dc86d9955082a8eb1d7b92e497c62b55cfdcd5999016fa135b224aa2dca97792dfdac37c37492119a7f292aa6aa6b1e49d86ff46e0900a05341a86c9819e02b93bafd7fe07a5f936372b6f02bce75dcc8eff8bcab236928d88460a4371b0a74ac23fe22d6da9b7abae0407e3874b2860f35df4132a16884207f49ff6729ac440470824d748168729ffd63ab6593c2f72605d07c82af5063c6d867b5c10a0c373ae9645496c1ffd23762af5679c2451e245f3204afdfe7693b6ba4b8d0f06cd73ba6d36596858c24a0dcbd06c3fbca407f2abc90f88", 0xf5, 0x3}, {&(0x7f00000005c0)="4c261aa4569f71f66bb01fc136dc2119ae15cad6d7dd097d102ab41a267cfa84625b0e361d9306214817386b2c429d0aa28cbdec120d835a8d308eb790bbfd104c08cbd4c77d28c474b45473aa00325aeaaa60895be52c8c795a3b3bea52f10c5e0ca1b995789607a6682242dd1cd2dd10a986b45a96c773d19b007c592217dd886534fa5b6f9a859de45ec4972360bc5dd012b153c0f4ac0a2745cd582ad5a5c34c16d5c39bfc09d0fbce59224a442f064b658572cb8e26d6cb1a4a9f9c656a", 0xc0, 0x1}, {&(0x7f0000000680)="96db3453afb5be7178ca9e1699e2f9e3adaea075bb0d84189dcc68a51951ad149c2ac3110d7e566e3337cd579d3c2c5901787358baaaacd4109bdcbb6accfba2423366c6810b2e76e0a187e641be696c0ccad71083df14315d482c4dfde3cd54b739497464e0e9ab83b7314427ffc493cb940498211f2b673d305a04657114d5140a476e282b", 0x86, 0x1}, {&(0x7f0000000740)="1dcf2bdca43eb3500905024fbb78f16f53052bfba4122b561727ddfadbb5502e6d917a1a0937b2efec305f4aab196f5eee179260f0e8433258410993ec869599f906a96774ccd84e3dabd62e8b0915c5b119d877c2d1868961d2151ca42c070f04165422a4e947e841", 0x69}, {&(0x7f0000000800)="894d5b84c336dc434686881817ab0edde678c4605c0834b7adcc83439aa491b1b683fc0735e40cfbc17bd02fdaef1b90cab984a74296b53b5ca49fb3c35659d8b22ab1f6d91f356da3a4e55fd2370fc8aec3d722cfa12577e7d05261bc8ce236c03fada830f7765169774afb59600a7185d7836bae5c66f0ee8aac7fc20fa0976571d8ddc4325ae8f96a8c9b06d5af2c73f6a5e977ebe32f596a93d7bd8489df0507fdbeecc81adfdde05839891b246d2ba7f6297486654e447101fdfe6867d9bdbcb814d93facd9426ccd05a69feda6a74d5e00354bfe2d0887bbb1fb49ed6cb1aa99cfb782aec607bc5b17837000ec032b69cf3093", 0xf6}, {&(0x7f00000002c0)="47f371f581f9f06ef656d24aed42235e8a50ac64390c286bd69fb5210db6fc0ad27509d981bd2d1be60b6dc02f4dc2ea5e", 0x31, 0x1}, {&(0x7f0000000900)="daffd5bd74b214feb3ae8efb3aae2733c68a8f70a3774f901c431ddaf143862903e56913441b5e789594476cc38d81b24c45693b83ab7b4d31c1cec3dff783c8f710f58bcd839256d9d9e29433478bc7d9d9c48814f01f1b84b2d4ce36a36337873e480916f3f501d35f578d6a169b28fc43ca4f61ef89e6", 0x78, 0x1}]}, 0x9, 0x3}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) clock_settime(0x5, &(0x7f0000000b00)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="584765f8788d4e4417ac384c6888bdda128dbbb73466112a20dc5401a53b0879bd0b3da441495826bb66ac7588156dfca5802f4e51c26908d03374b5e319859ff5e1c76a88e3440dfce3511e62f57bf82b9ed82f15f075bfd9d65947a21474ee10193e9a0667", @ANYRES16, @ANYBLOB="52d13c51191c4aac29c8ef14ddc63e606f9a1e5323f11e7724b5e165a7e9deb9728b512eab4ebc6c87243d6aa7b7dec043f04ac862af111114485b79dabcf290909fc7cc3459add1b457ef7f53998dc3af8b294bc5a5e7f44cea22b1f806af1525970d57c1f047"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) 2m54.791163674s ago: executing program 0 (id=4294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) 2m54.720901036s ago: executing program 0 (id=4296): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$eJzs3d9rHFsdAPDvbHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AcIIir4pCC+CP4BghR88VGEgj4rKopoqw8+aEd2d5KmyW6ybbbZNPl8YDLnnPnxPSdhJnNmDjMBnFrvRMSNiHiapunFiBjJynPZFJutqbHek8f3ZxpTEml66x9JJFnZ1r6SbH4u2+xMRHzlixFfT/bGra1vLE5XKuXVLF+qL62UausblxaWpufL8+XlycmJq1PXpq5Mjfeknecj4vrn//K9b//0C9d/+am7f7z9twvfaFRrOFu+sx0vKL/fwlbTC83fxc4NVl8y2HGUb7YwM9RujYE9JQ9ecZ0AAGivcY3//oj4eERcjJEY2P9yFgAAAHgNpZ8djv8mEWl7gx3KAQAAgNdIrjkGNskVs7EAw5HLFYutMbwfjLO5SrVW/+RcdW15tjVWdjQKubmFSnk8Gys8GoWkkZ9opp/lL+/KT0bEmxHx3ZGhZr44U63M9vvmBwAAAJwS53b1//890ur/AwAAACfMaL8rAAAAALxy+v8AAABw8un/AwAAwIn2pZs3G1O69f3r2Tvra4vVO5dmy7XF4tLaTHGmurpSnK9W55vv7Fs6aH+VanXl07G8dq9UL9fqpdr6xu2l6tpy/fbCc5/ABgAAAI7Qmx99+PskIjY/M9ScGga727TL1YDjKr+dSrJ5m8P6D2+05n8+okoBR2Kg3xUA+ibf7woAfVM4zMa53tUD6J/kgOUdB+/8Jpt/rLf1AQAAem/sw7ue/yfPugL7d+839f7hNffSB/FP0pbeVgc4Qp7/w+nVfP7f7UheV/xwohRcAcCpd+jn/wdyqwAAAPptuDkluWJ2e284crliMeJ887MAhWRuoVIej4g3IuJ3I4X3NfITzS2TA/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBLmiaRAgAAACdaRO6vya9a7/IfG3lvePf9gcHkPyORfSL07g9vff/edL2+OtEo/+d2ef0HWfnlftzBAAAAgFPhhT7gv9VP3+rHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvPXl8f2Zr2i4cffVx//65Vpy98fNxpjk/E4WIOPuvJPI7tksiYqAH8YcaPz7ULn7SqNZ2yHbxh3oQf/PBvvFjNPst7I4/GBHnehAfTrOHjfPPjXbHXy7eac7bH3/5iOfyL6vz+S+2z38DHc4/57uM8dajn5c6xn8Q8Va+/flnK37SIf67Xcb/2lc3NjotS38UMdb2/0/yXKxSfWmlVFvfuLSwND1fni8vT05OXJ26NnVlarw0t1ApZz/bxvjOR37xdL/2n+0Qf/SA9r/XZfv/9+je4w+0koV28S+82yb+r3+crbE3fi773/eJLN1YPraV3myld3r7Z799e7/2z3Zo/0F//wtdtv/il7/1py5XBQCOQG19Y3G6UimvnthEo5d+DKohcQwT3+zpDtM0TRvH1CH2k8Qhq3GjZ83p95kJAADotWcX/f2uCQAAAAAAAAAAAAAAAAAAAJxeR/GWtd0xN7dTSS9eoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0BP/DwAA//+aT+Dl") 2m54.525874778s ago: executing program 0 (id=4300): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r0, 0x4004743c, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0xe}]}) 2m54.371836201s ago: executing program 0 (id=4301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) readlinkat(r3, 0x0, &(0x7f00000002c0)=""/204, 0xcc) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) 2m54.370631491s ago: executing program 0 (id=4302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000180)=""/48, &(0x7f0000000140)=0x30) (async) flock(0xffffffffffffffff, 0xc) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) (async) fstatfs(0xffffffffffffffff, 0x0) (async) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESOCT=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000068209571fb2b491300"/28, @ANYRES16=r4], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x17) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@noblock_validity}]}, 0x1, 0x511, &(0x7f0000000a80)="$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") (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000005c0)="351a400100010021bd873442be7d180be5766368645089df9ec782f922910e2b3bd7b2461614d4d18b21ac38cf28810ef13ea167bcfe6102ccaa2a4abd0a39c8ec7eee9c53c2406e4a18529855977feed39ed635ebd68025d710b70ac9c284d390a2ef094a28400a0d162e6c2d00ea123f5ed0d1b7e21bc13a408e2b85cf46ac123187bb5b4ba523f0728ef1ee9fd4054b53db9f83bdb30058bd1fb45ec2ad979232640639b90124bbc6dab26dea8a1b4f28184a4628c53a8ae47affeac9f3c022d4d2072b33919b1cd316f4b172c8a3f374a5f1a2485ac242a0371238b5e6457959580d4038ab", 0xe7}], 0x1) (async, rerun: 64) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendto$x25(r2, &(0x7f0000000fc0)="6e18b842c1037927ff43b6d5963353f871488505c533422af973d7735e7f7238090701738bd24d13253bed272737085fe45b08a7834439309d616a53c0321c38b1663995f417dfc97788c6be5cb05e95943097f9c8ee4d40f897d35b654de7d1a8c08d8f7ddcc128681bf143845c1786e16c59984c21a2f82006785e7874bed0aa2da97e2ac2e3036d5289551705fe60ac9237b503084cee760d", 0x9a, 0x4008004, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="020000000000000014001280090001007665746800000000040002800a0001002a"], 0x48}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="187cb4a4466d25f0000000000300000095000050da1ac76fdb602be8e5ec15185bc418e6aa7a2e521d00723136a88790eca083fda4d180458d6230f454c6c9eeed"], 0x0, 0x8, 0x16, &(0x7f00000003c0)=""/22, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x6, 0x0, 0xfd}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ef2, @void, @value}, 0x94) 2m54.078886015s ago: executing program 0 (id=4303): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000005f40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m54.078649995s ago: executing program 35 (id=4303): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007750000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x80, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000005f40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m33.872647443s ago: executing program 7 (id=4652): open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioperm(0x0, 0x3, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r7, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) 2m32.7933525s ago: executing program 7 (id=4667): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1018, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0x400000000000000, 0x1}, 0x115428, 0x0, 0x0, 0x0, 0x5f4d, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000500)=ANY=[@ANYRES32=r2], &(0x7f0000000180), 0x100) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x358) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 2m32.353798427s ago: executing program 7 (id=4677): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xe81, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb09ebf4778eb2080045000e730000000000119078000000000000000000004e200e5f907841040000238b05c6fe5ef24c85719eeea815edf62318fe3e37a6a7b6ecc29bdc3ad77f6d2d0486205c571c9f4dff5e1de625d9b86fd7ad6d22edf52aad0751fc22a37df76b2d552ae8f0e26b61947c8727b437451fc2458a5d46ea77df0611b60f260ac2da9ce265429e8c4aee054acc608f7cffd53f01cf0ae190fb7244cbdfd948776eccc4488348f22ba8dbe75b9ce78577c39886f1ab90129df4dfd310337b97c8b9ff628d19932edefeba1a90cb3e453ffb3b931f375ca41e78e3888685fed628e3661c9c4d5992e802c3b122b1394225380664ba7d18c8acbe0b38acdb2ca6c83c52a12c228cd9f4971e04245065db5b1b75e779e5d705935eba77821aa40236a846fa80d0826b341f68b6a83fbf71312ec89fe07275667db51b3f8dbc66a0387768d8abfff862f57177cfe50b50eb3dc55ee1a6601ff7038811d78a675c743bb2e42028b39e3dbce86e6d2d0e58072c04de36e7b7e2f1bceb48f4c464d4ad6ccde7622f32cbce6cd48e7c3dec9ad71a30c1018bcda80ff3c4ec9c03a2ef3898055e75982d0c54d9ee9713feb7d1666a347202475b50ca550260573db8cf27d0d73d3c548884fd1a46a2d9d8360df07e5ee350c3fd1b2a64f8c7e2782576618af00c9a55730c9166f1039ef029626c0836b150d9134d28913a97bc167ab1cedc3fbe5af914381147a02a1745415b97e0ae50a72c7d0ceb9070f56c7dadec5552337b4e67bfa8921e82393873189e1006baef31b9a77f5a409923c7f6f9984f92ad7febb17a69387de54ca694ef4b7394417e7af335010ea3f39c3d2ba5b73ef2b05bb6a3ec31199e1a4f9ae67e22f6e86e1a1da2ba29f3764531cd744bd627cd508fe3fde616d53d415ce7e26d7ac2a38fe5e6a066d9728459972a5878c3194448354821e825c5af41c34abaeac7c8f008dc0ce2ba1a027f87f5e810205bef5c28aeaa7f16443335b797dddf646c076cf09983c7b2ce6e74f94db38fe85c18b258fac6b6069ca87452fe12afd9b5f3615f300d695f549d8cd835cf7eca72d9dad5fafad3220678d16c22f358fe00289174c5b0068927d60527733a4bc0d92450df10ddc1bfacebea4b8a8538bbf22c508ec69a85c364c60a010abfbd72eec7f46dd78c7e1239675d034b4678303bbd8799113969ca4315f6891df882c09613afe6e2ab9d7f0ef5a5c1f7c08e908012596798d59c7af1c4775892d1b48a80589f2f689bee24265d12dffcd90d33bc085695f07056724c948b5981e9a3490db2390c6790e599c9cee4fc287d36a96401dfa229dca840df284dc0184db2175e037ad42904bf81f8d7eaedf423f6682887f33b5f96616108001e7dac5b41b312d8d45452c9b592803b4202758aa02abf7648745a86945e158f6c60ef01b49e114df8bfd5c83b76b42d8b24ec3386ef2f2f5a2f29294d24ec5c7b31c45fab2825d100cfb11a398a87411ca8014c7158b157823430d3dbdcea10e4b12d03abae1d7d1c5c281b0e9255cab70ea0fae920def7fda6bdb0a0cb3bcba2f5bf61c12afe18fc46f30b4ea1db8bb520a1623add5876c2008e0f29a96b9f669b2e756e7be5d345d5b5ff94440c0f46b09105ea529b87138f6021426d7e66f636a6f2d2a5824fb5d580a1ebbfabca79d7ff16d9eebca1f3b8865ac6e7a76cc2803a5422ede756b13a59ccc8da5a7d429c5affccd50d477195f2cbbfe8746f1c1cbb686fcc90f5d8831e5c7c773745427b658ec8bc76b667ba3bf3308f050594da2dce03634304bf7ebd7b6eb923c4d02faba9eb7c670256d4ccb783557833b4810cfc54e1df8c5808d9a93f92582214120fa3c4183092c19a5278cc08f8fb3a695c9134cd7064b07cfae6d978845e63e2c4dddd60a17edd4d6a917b622fe2a2ecdd1ec55cfab9ccf8a091d3a7440c37c4e81860c152908dc1f6f9957578e1b2295bec231301a956d2de4fcfd59555eaf121663061a736610c6f3bc3f80a161151704f78d9198ff5ea1cdf347bd4dc6a427c1f220e6209e8c70fea6b2ed4a25396d081d76f026c88d66423dad5dc4d2eba40c9e5a30041be4910f547b99fd2d6d56d0e894d2dad77d930e1f0e546864e18f5c99b2cd5e68ac8f374cfc80cc29ec46508d8d66eafc2cf4b208cf95ee902bd576377676422a6e95a66bc4ee17084e97d5dc14a7fe2d77fd98c387c2d6321a9a402647c69d2c7b79f3b0a479376a0c06e5157d6f004e61464080a4d433bfeb0f4fcbbf444b9d80a028e45ef08f1be52e4787befae993eb315a5082f90bb068f20640df48b54e8f621eeb5c004bf3efc239341859353603edc30841cb7948ab475cd45d56b84dd87a6b92cb9e6790718f5cc144ddec4938a277ecd18c3c225b14c597057d01736b29bbdab6f4677d12aa33e4921265e50dcd25e8c47b98ac3f5f90a5f2fe6c46c17e58dcd467442e85c2fae45cb7746167349a43a53c9e68268db586164d4413cd7fb724e6f4c3dbcf40bc86e1e7b8bbc0b69de347a9385999eda3ef795786268482a1107346620693c1179505fbe165dffb5224017cc240ddfe84a33cf91f077ca4b9975adeb4a7fdc1114cff5724155e6141bb3418dd5f2054f370dcd8c58bf220794981052d7152b7ff860fef803379686714769b3d82169fcd0f5e3f1046e0a6a99fb8162453c128b7545ec80e45dc29f61810de218d24da0e8ac711854edb3b7a8387d17f1fee645aa9ab6391b00d86e8031b117495bcbf5d22db6ccbc11fe1ba3e1fcfa66ae02cf11b56a109c10d6446e64ef7b7e3cb94204ff9cb2b42046d667d404286cb31fe11d1e61d83d974a66b462629b5f3309c25f10ed01d95286ae0c9d446adb37f3b753317bb4c92b58b72fee234bb67f39132ed6d1276452ccf5d50d081de61b6a20b1adfa010039cc6c04e7e48195daa906f61d51a17c606df5fcdce0e9a2f97bee7297607c08caa8ab3c7fbb33396375a6ad40a4dbfc09495be3e4bf042c99570e280e7c7d4e270a42948ef6f954946c8ef660c4219eec91fc42bf29da38c29fc7bd1a75c6c9844796a31528e583eee115f0f1afbf489bfcfdaaa8148483d9419ef8be9c75ff6852bcc2f57bb815a2f3e2009ede6f11250366b37039a3d59b404471c2db500a6f27a324d371b801f5cf67dd0541bef99232c5fa2f68afba7b604d838992ef12f3fc765a838b99b22029ec26f289e5b5c43e04936d48dba37728d6d7adefb195637a047c2461078f8c834d28aa0293ea7cc716629e359b1de023775d50fd307840242a811cc792e0dc157580e093bf6d171e59394b5c276af109584bc19497b7f0a9122f50a5c66c0ad5d350976ca2b8e0c61bfaabcbf8f02d6e3d14cbbc2f970873288f5e77449dca749505bd86dee597511b4ac8f4176291a6e6df561fdb7f9ea2b43d5a8b4ee718abe9fa8cab663d93d0e10c500073646000f5e4e563f0142eaf17b0eb35e977882979acc54bf5342170e654d24852ce4121eb42ff97e1a7a8ab74ae1c2312c43f97103a54b3e0be14dac19fa535b7f4148044acca86261cbb32934607118182081b48f9f4a1e7ddc5aaa5afd79b7d979965d386dc2ba5e68e32be36448491376f6dfb038d79abc3937f1de5781fc7b6925c940392ba9ea3c1c1367a521ab4d7d6232777f902b151bf178cfe85453446ffbd3293e1b9d057b87ed3bb9be7bb5a73b4696838c36de93e9eb6b074ba80fd5fc22805cb4b35ce1197f5091df682772a419d13e6f3208263fe4935987b5d6007eb254200be8618b10356022f4a89f20c979d0330f79b3ced939f901d432e4862061e805b08b431e63f0c60c78439d6da07ad3589c060fa5e8993fb6ff06283ce96518728439a1d3e6404744bcb9ce73bcf184c072036ce39a4ee33d8f65cd56306552ab01a7d6506ab7ed6c88ab9a5d62970355c89cec218b8dc3c5a8c945bc4a71306966aa0502f816c9b2a90b11f8b7c6672654c3dcae9f4e62f70e85a2d78b4debddfdd841beb37a3f0573121bc85f93a9a4451b431d586bb65e301d52f3724a7b00ae815a44d36720f8a1ef7546febe4241dc76f9495bc114104778a3383498b1757ea59d063431ada117b4a0d81acead2075e36b29527fa943eb813639aa19fed10166b61a68e7f65fd2b5b39757c6b06d6bf2c9e360b3ca15e56b47bfb65e25f98c7af8be600c3ef35e3b0391d3656b5ecfdc194f70139b72bc0756745171b79f2b958696e8619f172b38d2cf7639c0e0d0728316e5aafcc69622e2d8e22ae6e6be3a0d470ede148bf27de75814c01e1d616581035e7b7cfd73bef1aa6cc0d55994d9efc723069c87244031d843d53d9518b9fc2c015d63ee37d5ff24177bf650946f4e5765ea3035282ac9ac588ee3371c09b99f6add649260e25353cc9a604206b6d6f6369cdc2776584dd4b7f1d9c52f1c5db4ff3e54aab07b690ba4372c150c2adfdc754f256c596affaa07f4d189103aeed50812993fad931dc6a16af7d8da602f773cca24caff390ea86c21998efc2672a78328d05aa31715bf7a7104cbfa616e51c0ac7d8881ab1272f65ce1b2306b1ed2a9cb037a9b6e10ffb453b220122cbd32ced0a56aeae379fa9e22b026d123bbc67b7bbb16dd01395181da69ccd941fda34c55ddee1a8543ac52b26df6607208d680f7eff8ced6f407b9fcd5dea8a473f4f41477f531111c92153029716fa48fc86052cd8b8d4c7d2b4d5c47b1ceba8de26c48a21097f659ac15ac3c7863f142d8964927cfaaf580fa11ab39e4eee25a24474839ed3e0b4fc5eadff028eee2d86283fa5274f0cc048855e86b407f341f55dbb8e0fda5c27420d21b6d70e8d8d97f2ae83623e20c327ae7f3c2df5151f9924f37280c51b95b6d6a4b0f4ce42d7d87e2e31864e8423c70e2e7223800567b560ea421724a286e146dccb2e132e3baca12e4bcb4f134d3471bb7d26057cd615314577c2b2f4c463bce618428137d561fb2681490fc111d24148cf3c18d874e24ae71db8dcc80a881283237c5cf93256e57166bc34ca6f50a0a78abea61592068d2bfeb4e33c268d76d255ba5aac1f3e4088f9733fc97957e13dcdf4506e63b6829ff79f8c4501bf3550e4d283451d1739d590f48337adf3bc70c92faa2614851b6bad51a3d824d95ca2fc8ab5a7ff5a89fc435bd9c3fa5ac86c0399502ceb9fb79108176c532a4485d838d83fa6b5010b33f9728c"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x48081) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xb, 0x2291, 0x22, @mcast2, @private2, 0x80, 0x700, 0x9, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="1800e8ced94ff500000900000000000000940d0000186100000f0000000000000006000000f29bf2a4886d2aa0a88f2ce3e746e6dc8a4c7c9fa2f485e915823164581a5e9b06fcc33d422ee35e6b24252801a23a7c8b44b9dceff2d28dbb8eb13fb94466d4d86e7c41583b8260e3919e4c67bb110a24cedff70c7c3f612f435142206ccdfba7490ee34f3af1f3c98dc337a32700f5000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0x1000, &(0x7f0000001580)=""/4096, 0x40f00, 0x4, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000400)=[{0x5, 0x3, 0x5, 0x2}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x2, 0x6}], 0x10, 0x5, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r7, 0x0, 0x1a, 0x0, &(0x7f00000001c0)=0x2) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 2m32.329299618s ago: executing program 7 (id=4678): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x8a9cf903be768ecc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000002c00000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x63, 0x0, &(0x7f00000003c0)="8902da60882db2d5b6912f378479aef6a77684f038344b855fba71345b75fb1cfb75001d2f592f5805815f510b09f92a89e2c7e8c2fd8b189f7d64dadc6cb1cbc399aa6a129046d2df4d670fc1ed6d1016970bb8cc5e00"/99, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) clock_getres(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0x78}) 2m32.16674502s ago: executing program 7 (id=4680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x6) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff00000000030000000000000000000000030000000100000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0x4, &(0x7f0000000000)) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x10000, 0xe2, 0x0, 'queue1\x00', 0x9}) 2m31.959201194s ago: executing program 7 (id=4684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) 2m31.947598904s ago: executing program 36 (id=4684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x82, 0x3}, 0x10) bind$tipc(r1, 0x0, 0x0) 1.580258045s ago: executing program 8 (id=7314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x34, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80008000}}, @generic={0x6, 0x2, 0x9, 0xf1c, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0xec, &(0x7f0000000240)=""/236, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x4, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x196, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='xen_cpu_load_idt\x00', r0, 0x0, 0x8}, 0x18) unshare(0x400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) socket(0x10, 0x3, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8, 0x9, {{0x9, 0x4, 0x3, 0x35, 0x24, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @private=0xa010101, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) getsockopt(r1, 0xff, 0x401, 0x0, 0x0) 1.088049873s ago: executing program 3 (id=7321): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 1.011267444s ago: executing program 3 (id=7322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x34, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80008000}}, @generic={0x6, 0x2, 0x9, 0xf1c, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0xec, &(0x7f0000000240)=""/236, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x4, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x196, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='xen_cpu_load_idt\x00', r0, 0x0, 0x8}, 0x18) unshare(0x400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) socket(0x10, 0x3, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8, 0x9, {{0x9, 0x4, 0x3, 0x35, 0x24, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @private=0xa010101, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) getsockopt(r1, 0xff, 0x401, 0x0, 0x0) 918.383605ms ago: executing program 8 (id=7323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) 896.216406ms ago: executing program 8 (id=7324): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x63, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$AUDIT_GET_FEATURE(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10100001}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x240480c0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) preadv(r6, &(0x7f0000000bc0)=[{&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000004c0)=""/97, 0x61}, {&(0x7f0000000540)=""/47, 0x2f}, {0xfffffffffffffffc}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/57, 0x39}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000980)=""/16, 0x10}, {&(0x7f0000000b40)=""/70, 0x46}], 0xa, 0xfff, 0x9) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x1e8, 0x178, 0x178, 0x1e8, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@ttl={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0x0, 0xff000000], 0x0, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e0) 895.739796ms ago: executing program 3 (id=7325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700083c00fe800000000000000000000000000000ff0200000000000000000000000000018100c9"], 0x0) 875.554326ms ago: executing program 3 (id=7327): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) chroot(0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 503.964192ms ago: executing program 6 (id=7330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000005e783f30110000", @ANYRES32=r3, @ANYRES64=r2], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000c80)=ANY=[], &(0x7f0000000c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776664ee6f3d", @ANYRESHEX=r2, @ANYBLOB="45b1ec6b3cac3cd244011e725df3768c7fe587a1eb862e0e96bcbe3de9960171329d44112debe99de551d1080000aca45751c64023c5cf1cbb1beed257a2e03769f0d555129ce51f06408bdb3ef2a751", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="330000e6", @ANYRES16=r6, @ANYBLOB="000129bd7000fbdbdf25210000000c0005000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async, rerun: 64) pipe(0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r8 = getpid() (rerun: 64) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x0, 0x7fe, 0x0, &(0x7f0000000640)=0x2, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r10, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x87, 0x6, 0x100000}, 0x20) (async) setfsuid(0x0) (async, rerun: 64) r11 = semget$private(0x0, 0x1, 0x4ac0c2fc29e33682) (rerun: 64) semtimedop(r11, &(0x7f0000000100)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 462.728983ms ago: executing program 6 (id=7331): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$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") 419.094823ms ago: executing program 3 (id=7332): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 405.259964ms ago: executing program 6 (id=7333): getpriority(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=ANY=[@ANYBLOB="34000000050601020000000000000000020000090900030063797a30000000000900020073797a30"], 0x34}}, 0x844) 373.018034ms ago: executing program 6 (id=7335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4000a6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 329.768145ms ago: executing program 3 (id=7336): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6d3a2e17dee28253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000180)=""/73, 0xfffffdef, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x28, r5, 0x1, 0xf0bd28, 0x10000000, {}, [@NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'cram\x00\x00\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x200000000000000, 0x0, 0x2000805}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1040820}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r5, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\\/#'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'GPL\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xf, 0x14, 'j]\xc0[&-\\|^--'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r12 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r12, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 297.592106ms ago: executing program 6 (id=7339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) 297.233756ms ago: executing program 2 (id=7340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000080000"], 0x0, 0x2000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) 262.149356ms ago: executing program 2 (id=7341): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x108) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r3, &(0x7f0000000080)='./file1/file0\x00') fcntl$setlease(r1, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 261.945046ms ago: executing program 6 (id=7342): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 183.572757ms ago: executing program 2 (id=7344): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$eJzs3d9rHFsdAPDvbHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AcIIir4pCC+CP4BghR88VGEgj4rKopoqw8+aEd2d5KmyW6ybbbZNPl8YDLnnPnxPSdhJnNmDjMBnFrvRMSNiHiapunFiBjJynPZFJutqbHek8f3ZxpTEml66x9JJFnZ1r6SbH4u2+xMRHzlixFfT/bGra1vLE5XKuXVLF+qL62UausblxaWpufL8+XlycmJq1PXpq5Mjfeknecj4vrn//K9b//0C9d/+am7f7z9twvfaFRrOFu+sx0vKL/fwlbTC83fxc4NVl8y2HGUb7YwM9RujYE9JQ9ecZ0AAGivcY3//oj4eERcjJEY2P9yFgAAAHgNpZ8djv8mEWl7gx3KAQAAgNdIrjkGNskVs7EAw5HLFYutMbwfjLO5SrVW/+RcdW15tjVWdjQKubmFSnk8Gys8GoWkkZ9opp/lL+/KT0bEmxHx3ZGhZr44U63M9vvmBwAAAJwS53b1//890ur/AwAAACfMaL8rAAAAALxy+v8AAABw8un/AwAAwIn2pZs3G1O69f3r2Tvra4vVO5dmy7XF4tLaTHGmurpSnK9W55vv7Fs6aH+VanXl07G8dq9UL9fqpdr6xu2l6tpy/fbCc5/ABgAAAI7Qmx99+PskIjY/M9ScGga727TL1YDjKr+dSrJ5m8P6D2+05n8+okoBR2Kg3xUA+ibf7woAfVM4zMa53tUD6J/kgOUdB+/8Jpt/rLf1AQAAem/sw7ue/yfPugL7d+839f7hNffSB/FP0pbeVgc4Qp7/w+nVfP7f7UheV/xwohRcAcCpd+jn/wdyqwAAAPptuDkluWJ2e284crliMeJ887MAhWRuoVIej4g3IuJ3I4X3NfITzS2TA/sMAAAAAAAAAAAAAAAAAAAAAAAAAEBLmiaRAgAAACdaRO6vya9a7/IfG3lvePf9gcHkPyORfSL07g9vff/edL2+OtEo/+d2ef0HWfnlftzBAAAAgFPhhT7gv9VP3+rHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvPXl8f2Zr2i4cffVx//65Vpy98fNxpjk/E4WIOPuvJPI7tksiYqAH8YcaPz7ULn7SqNZ2yHbxh3oQf/PBvvFjNPst7I4/GBHnehAfTrOHjfPPjXbHXy7eac7bH3/5iOfyL6vz+S+2z38DHc4/57uM8dajn5c6xn8Q8Va+/flnK37SIf67Xcb/2lc3NjotS38UMdb2/0/yXKxSfWmlVFvfuLSwND1fni8vT05OXJ26NnVlarw0t1ApZz/bxvjOR37xdL/2n+0Qf/SA9r/XZfv/9+je4w+0koV28S+82yb+r3+crbE3fi773/eJLN1YPraV3myld3r7Z799e7/2z3Zo/0F//wtdtv/il7/1py5XBQCOQG19Y3G6UimvnthEo5d+DKohcQwT3+zpDtM0TRvH1CH2k8Qhq3GjZ83p95kJAADotWcX/f2uCQAAAAAAAAAAAAAAAAAAAJxeR/GWtd0xN7dTSS9eoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0BP/DwAA//+aT+Dl") 182.619797ms ago: executing program 9 (id=7345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4e8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000009a52", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) fchmod(r7, 0x42) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0xf, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES8=r6, @ANYRES8=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) sendto$inet6(r11, 0x0, 0x0, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local, 0x7f}, 0x1c) socket$packet(0x11, 0x2, 0x300) 172.916088ms ago: executing program 2 (id=7346): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 128.158378ms ago: executing program 2 (id=7347): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000000000000000000070000000189"], 0x20}, 0x4000) 89.981719ms ago: executing program 2 (id=7348): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000003c0)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYBLOB="100000002000005b15bd6283bfb317f38a864416e7b3905f330000250f6f255d33498c5ce207383efdc63eaf4f7071557c5abdbd02e40fbc041d9b91f6bddd65af5b7d1c2f9a80bb00865d22dcb26327195971635ea4838d9dfdb4f3964ca362565ad4bf9ddb4e08fcadd8e267b3eec688563207c7e142411ce6e625542e3e42c6e323c4", @ANYRES32=r1, @ANYRES64=r0], 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000080)=""/111, 0x6f, 0x40001000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00009b1ffc)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = gettid() tkill(r4, 0x13) 89.714369ms ago: executing program 9 (id=7349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) 89.542379ms ago: executing program 9 (id=7350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 61.661999ms ago: executing program 9 (id=7351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700083c00fe800000000000000000000000000000ff0200000000000000000000000000018100c9"], 0x0) 61.338859ms ago: executing program 9 (id=7352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000080000"], 0x0, 0x2000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) 47.464569ms ago: executing program 8 (id=7353): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setpriority(0x1, 0x0, 0x7) 2.82807ms ago: executing program 9 (id=7354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x34, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80008000}}, @generic={0x6, 0x2, 0x9, 0xf1c, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0xec, &(0x7f0000000240)=""/236, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x4, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x196, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='xen_cpu_load_idt\x00', r0, 0x0, 0x8}, 0x18) unshare(0x400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) socket(0x10, 0x3, 0x2) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x2, 0xfa2, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x3, 0x4, 0x0, @broadcast, @empty}}}}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r1, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000ac0)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8, 0x9, {{0x9, 0x4, 0x3, 0x35, 0x24, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @private=0xa010101, {[@noop, @end, @timestamp_prespec={0x44, 0xc, 0x54, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000d80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b80)={0x1b0, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) getsockopt(r1, 0xff, 0x401, 0x0, 0x0) 2.57403ms ago: executing program 8 (id=7355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x18) (async) ioperm(0x0, 0x12e, 0x8000000000008) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x55, &(0x7f0000000140), &(0x7f0000000380)=""/85, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 8 (id=7356): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)=ANY=[@ANYBLOB="1c000000"], 0x1c}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x68, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f00000012c0), &(0x7f00000005c0)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x0, 0x0, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940), 0x64, 0x51c, &(0x7f0000000c00)="$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") kernel console output (not intermixed with test programs): race: [ 546.217015][T24628] [ 546.217024][T24628] dump_stack_lvl+0xf6/0x150 [ 546.217096][T24628] dump_stack+0x15/0x1a [ 546.217116][T24628] should_fail_ex+0x261/0x270 [ 546.217196][T24628] should_fail+0xb/0x10 [ 546.217243][T24628] should_fail_usercopy+0x1a/0x20 [ 546.217271][T24628] copy_page_from_iter_atomic+0x232/0xfa0 [ 546.217305][T24628] ? shmem_write_begin+0xa7/0x190 [ 546.217385][T24628] ? shmem_write_begin+0xdf/0x190 [ 546.217407][T24628] generic_perform_write+0x2d2/0x4b0 [ 546.217444][T24628] shmem_file_write_iter+0xc2/0xe0 [ 546.217515][T24628] vfs_write+0x79b/0x950 [ 546.217538][T24628] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 546.217579][T24628] ksys_write+0xeb/0x1b0 [ 546.217602][T24628] __x64_sys_write+0x42/0x50 [ 546.217648][T24628] x64_sys_call+0x2a45/0x2e10 [ 546.217668][T24628] do_syscall_64+0xc9/0x1a0 [ 546.217697][T24628] ? clear_bhb_loop+0x25/0x80 [ 546.217807][T24628] ? clear_bhb_loop+0x25/0x80 [ 546.217889][T24628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.217915][T24628] RIP: 0033:0x7f5cebfee169 [ 546.217933][T24628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.217954][T24628] RSP: 002b:00007f5cea657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.217976][T24628] RAX: ffffffffffffffda RBX: 00007f5cec215fa0 RCX: 00007f5cebfee169 [ 546.217991][T24628] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000006 [ 546.218002][T24628] RBP: 00007f5cea657090 R08: 0000000000000000 R09: 0000000000000000 [ 546.218013][T24628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.218044][T24628] R13: 0000000000000000 R14: 00007f5cec215fa0 R15: 00007ffe880fe1a8 [ 546.218066][T24628] [ 546.435810][ T29] kauditd_printk_skb: 691 callbacks suppressed [ 546.435824][ T29] audit: type=1400 audit(546.443:28327): avc: denied { create } for pid=24627 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 546.487433][T24639] sctp: [Deprecated]: syz.6.6660 (pid 24639) Use of int in max_burst socket option. [ 546.487433][T24639] Use struct sctp_assoc_value instead [ 546.533733][ T29] audit: type=1326 audit(546.543:28328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.556841][ T29] audit: type=1326 audit(546.543:28329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.579938][ T29] audit: type=1326 audit(546.543:28330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.643738][ T29] audit: type=1326 audit(546.543:28331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.666944][ T29] audit: type=1326 audit(546.543:28332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.690009][ T29] audit: type=1326 audit(546.543:28333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.713074][ T29] audit: type=1326 audit(546.543:28334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.736060][ T29] audit: type=1326 audit(546.543:28335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.759059][ T29] audit: type=1326 audit(546.543:28336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24642 comm="syz.9.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 546.949657][T24677] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.107112][T24695] FAULT_INJECTION: forcing a failure. [ 547.107112][T24695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.120305][T24695] CPU: 0 UID: 0 PID: 24695 Comm: syz.8.6684 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 547.120435][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.120450][T24695] Call Trace: [ 547.120457][T24695] [ 547.120465][T24695] dump_stack_lvl+0xf6/0x150 [ 547.120488][T24695] dump_stack+0x15/0x1a [ 547.120580][T24695] should_fail_ex+0x261/0x270 [ 547.120609][T24695] should_fail+0xb/0x10 [ 547.120632][T24695] should_fail_usercopy+0x1a/0x20 [ 547.120654][T24695] _copy_from_user+0x1c/0xa0 [ 547.120709][T24695] memdup_user+0x6b/0xd0 [ 547.120743][T24695] proc_pid_attr_write+0x15d/0x220 [ 547.120779][T24695] vfs_writev+0x3f3/0x880 [ 547.120844][T24695] ? get_pid_task+0x94/0xd0 [ 547.120866][T24695] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 547.120903][T24695] ? mutex_lock+0xd/0x40 [ 547.120957][T24695] do_writev+0xf7/0x230 [ 547.120988][T24695] __x64_sys_writev+0x45/0x50 [ 547.121013][T24695] x64_sys_call+0x1d68/0x2e10 [ 547.121038][T24695] do_syscall_64+0xc9/0x1a0 [ 547.121068][T24695] ? clear_bhb_loop+0x25/0x80 [ 547.121110][T24695] ? clear_bhb_loop+0x25/0x80 [ 547.121136][T24695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.121161][T24695] RIP: 0033:0x7f482be4e169 [ 547.121179][T24695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.121275][T24695] RSP: 002b:00007f482a4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 547.121297][T24695] RAX: ffffffffffffffda RBX: 00007f482c075fa0 RCX: 00007f482be4e169 [ 547.121311][T24695] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 547.121326][T24695] RBP: 00007f482a4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 547.121341][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.121355][T24695] R13: 0000000000000000 R14: 00007f482c075fa0 R15: 00007fffe3ece2d8 [ 547.121378][T24695] [ 547.562665][T24709] dummy0 speed is unknown, defaulting to 1000 [ 547.903674][T24732] 0ªX¹¦À: renamed from caif0 [ 547.931538][T24732] FAULT_INJECTION: forcing a failure. [ 547.931538][T24732] name failslab, interval 1, probability 0, space 0, times 0 [ 547.944309][T24732] CPU: 1 UID: 0 PID: 24732 Comm: syz.2.6698 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 547.944469][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.944546][T24732] Call Trace: [ 547.944553][T24732] [ 547.944561][T24732] dump_stack_lvl+0xf6/0x150 [ 547.944588][T24732] dump_stack+0x15/0x1a [ 547.944607][T24732] should_fail_ex+0x261/0x270 [ 547.944630][T24732] should_failslab+0x8f/0xb0 [ 547.944649][T24732] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 547.944692][T24732] ? kstrdup_const+0x3e/0x50 [ 547.944719][T24732] kstrdup+0x3d/0xd0 [ 547.944743][T24732] kstrdup_const+0x3e/0x50 [ 547.944824][T24732] kernfs_rename_ns+0x26b/0x420 [ 547.944887][T24732] sysfs_rename_dir_ns+0x4d/0x70 [ 547.944949][T24732] kobject_rename+0x285/0x350 [ 547.944978][T24732] ? sysfs_rename_link_ns+0x105/0x120 [ 547.945030][T24732] device_rename+0x12a/0x1a0 [ 547.945047][T24732] netif_change_name+0x1fb/0x6d0 [ 547.945073][T24732] ? nla_strscpy+0xef/0x120 [ 547.945117][T24732] do_setlink+0x8e3/0x2430 [ 547.945151][T24732] ? selinux_capable+0x1f9/0x260 [ 547.945183][T24732] ? security_capable+0x81/0x90 [ 547.945201][T24732] ? ns_capable+0x7d/0xb0 [ 547.945279][T24732] ? netlink_ns_capable+0x88/0xa0 [ 547.945322][T24732] rtnl_setlink+0x2fd/0x440 [ 547.945440][T24732] ? security_capable+0x81/0x90 [ 547.945464][T24732] ? ns_capable+0x7d/0xb0 [ 547.945553][T24732] ? __pfx_rtnl_setlink+0x10/0x10 [ 547.945578][T24732] rtnetlink_rcv_msg+0x65a/0x740 [ 547.945645][T24732] ? avc_has_perm_noaudit+0x1cc/0x210 [ 547.945670][T24732] netlink_rcv_skb+0x12f/0x230 [ 547.945695][T24732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 547.945732][T24732] rtnetlink_rcv+0x1c/0x30 [ 547.945811][T24732] netlink_unicast+0x605/0x6c0 [ 547.945867][T24732] netlink_sendmsg+0x609/0x720 [ 547.945895][T24732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.945914][T24732] __sock_sendmsg+0x140/0x180 [ 547.945940][T24732] sock_write_iter+0x186/0x1c0 [ 547.946055][T24732] do_iter_readv_writev+0x40d/0x4b0 [ 547.946107][T24732] vfs_writev+0x2da/0x880 [ 547.946130][T24732] ? get_pid_task+0x94/0xd0 [ 547.946162][T24732] do_writev+0xf7/0x230 [ 547.946192][T24732] __x64_sys_writev+0x45/0x50 [ 547.946213][T24732] x64_sys_call+0x1d68/0x2e10 [ 547.946292][T24732] do_syscall_64+0xc9/0x1a0 [ 547.946312][T24732] ? clear_bhb_loop+0x25/0x80 [ 547.946344][T24732] ? clear_bhb_loop+0x25/0x80 [ 547.946367][T24732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.946442][T24732] RIP: 0033:0x7f53604ae169 [ 547.946455][T24732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.946472][T24732] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 547.946493][T24732] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 547.946575][T24732] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 547.946585][T24732] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 547.946595][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.946604][T24732] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 547.946624][T24732] [ 548.330639][T24736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.360947][T24738] sctp: [Deprecated]: syz.9.6701 (pid 24738) Use of int in max_burst socket option. [ 548.360947][T24738] Use struct sctp_assoc_value instead [ 548.694181][T24762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.973628][T24781] FAULT_INJECTION: forcing a failure. [ 548.973628][T24781] name failslab, interval 1, probability 0, space 0, times 0 [ 548.986367][T24781] CPU: 1 UID: 0 PID: 24781 Comm: syz.2.6719 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 548.986395][T24781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.986483][T24781] Call Trace: [ 548.986488][T24781] [ 548.986495][T24781] dump_stack_lvl+0xf6/0x150 [ 548.986515][T24781] dump_stack+0x15/0x1a [ 548.986532][T24781] should_fail_ex+0x261/0x270 [ 548.986637][T24781] should_failslab+0x8f/0xb0 [ 548.986658][T24781] __kmalloc_cache_noprof+0x55/0x320 [ 548.986756][T24781] ? nft_trans_table_add+0x38/0x1a0 [ 548.986775][T24781] nft_trans_table_add+0x38/0x1a0 [ 548.986799][T24781] nf_tables_newtable+0x9df/0xf10 [ 548.986907][T24781] nfnetlink_rcv+0xb6e/0x1610 [ 548.986958][T24781] netlink_unicast+0x605/0x6c0 [ 548.986998][T24781] netlink_sendmsg+0x609/0x720 [ 548.987026][T24781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.987097][T24781] __sock_sendmsg+0x140/0x180 [ 548.987129][T24781] ____sys_sendmsg+0x350/0x4e0 [ 548.987160][T24781] __sys_sendmsg+0x1a0/0x240 [ 548.987202][T24781] __x64_sys_sendmsg+0x46/0x50 [ 548.987358][T24781] x64_sys_call+0x26f3/0x2e10 [ 548.987379][T24781] do_syscall_64+0xc9/0x1a0 [ 548.987406][T24781] ? clear_bhb_loop+0x25/0x80 [ 548.987477][T24781] ? clear_bhb_loop+0x25/0x80 [ 548.987500][T24781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.987539][T24781] RIP: 0033:0x7f53604ae169 [ 548.987557][T24781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.987576][T24781] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.987593][T24781] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 548.987665][T24781] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 548.987676][T24781] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 548.987686][T24781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.987698][T24781] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 548.987795][T24781] [ 549.215552][T24790] sctp: [Deprecated]: syz.8.6720 (pid 24790) Use of int in max_burst socket option. [ 549.215552][T24790] Use struct sctp_assoc_value instead [ 549.361638][T24809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.493084][T24817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.605924][T24826] vhci_hcd: invalid port number 96 [ 549.611363][T24826] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 549.692171][T24840] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=24840 comm=syz.6.6740 [ 549.704682][T24840] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24840 comm=syz.6.6740 [ 549.780547][T24854] __nla_validate_parse: 26 callbacks suppressed [ 549.780626][T24854] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6745'. [ 549.938612][T24863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6748'. [ 549.965955][T24865] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6749'. [ 550.065104][T24870] dummy0 speed is unknown, defaulting to 1000 [ 550.317233][T24883] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6756'. [ 550.424720][T24886] vhci_hcd: invalid port number 96 [ 550.430349][T24886] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 550.570632][T24898] vhci_hcd: invalid port number 96 [ 550.576088][T24898] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 550.881667][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 550.889499][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 550.904445][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.912159][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.919911][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.927590][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.935306][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.943002][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.950757][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.958469][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.966150][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.973863][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.981641][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.989353][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 550.997004][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 551.004732][ T1041] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 551.014042][T24960] dummy0 speed is unknown, defaulting to 1000 [ 551.020484][ T1041] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 551.236013][T24948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.245202][T24948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.443979][T25041] vhci_hcd: invalid port number 96 [ 551.450016][T25041] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 551.599627][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 551.599643][ T29] audit: type=1400 audit(551.613:28696): avc: denied { create } for pid=25052 comm="syz.8.6775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 551.625322][ T29] audit: type=1400 audit(551.643:28697): avc: denied { ioctl } for pid=25052 comm="syz.8.6775" path="socket:[77685]" dev="sockfs" ino=77685 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 551.760660][ T29] audit: type=1326 audit(551.773:28698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.783874][ T29] audit: type=1326 audit(551.773:28699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.806973][ T29] audit: type=1326 audit(551.773:28700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.829958][ T29] audit: type=1326 audit(551.773:28701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.852996][ T29] audit: type=1326 audit(551.773:28702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.876030][ T29] audit: type=1326 audit(551.773:28703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.899066][ T29] audit: type=1326 audit(551.773:28704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.922165][ T29] audit: type=1326 audit(551.773:28705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25061 comm="syz.3.6778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 551.991200][T25071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25071 comm=syz.6.6782 [ 552.003689][T25071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25071 comm=syz.6.6782 [ 552.106179][T25077] vhci_hcd: invalid port number 96 [ 552.114198][T25077] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 552.125107][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6790'. [ 552.181106][T25091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.498900][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6797'. [ 552.548955][T25110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4883 sclass=netlink_route_socket pid=25110 comm=syz.2.6799 [ 552.644221][T25114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6801'. [ 552.686904][T25117] FAULT_INJECTION: forcing a failure. [ 552.686904][T25117] name failslab, interval 1, probability 0, space 0, times 0 [ 552.699575][T25117] CPU: 1 UID: 0 PID: 25117 Comm: syz.2.6802 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 552.699602][T25117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.699682][T25117] Call Trace: [ 552.699689][T25117] [ 552.699698][T25117] dump_stack_lvl+0xf6/0x150 [ 552.699720][T25117] dump_stack+0x15/0x1a [ 552.699733][T25117] should_fail_ex+0x261/0x270 [ 552.699829][T25117] should_failslab+0x8f/0xb0 [ 552.699852][T25117] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 552.699885][T25117] ? __alloc_skb+0x10d/0x320 [ 552.699907][T25117] __alloc_skb+0x10d/0x320 [ 552.699943][T25117] ? audit_log_start+0x37f/0x6e0 [ 552.699970][T25117] audit_log_start+0x39a/0x6e0 [ 552.700018][T25117] ? kstrtouint+0x7b/0xc0 [ 552.700046][T25117] audit_seccomp+0x49/0x100 [ 552.700069][T25117] __seccomp_filter+0x694/0x10e0 [ 552.700093][T25117] ? vfs_write+0x669/0x950 [ 552.700112][T25117] ? putname+0xe1/0x100 [ 552.700198][T25117] __secure_computing+0x7e/0x150 [ 552.700217][T25117] syscall_trace_enter+0xcf/0x1f0 [ 552.700237][T25117] ? fpregs_assert_state_consistent+0x83/0xa0 [ 552.700266][T25117] do_syscall_64+0xaa/0x1a0 [ 552.700298][T25117] ? clear_bhb_loop+0x25/0x80 [ 552.700327][T25117] ? clear_bhb_loop+0x25/0x80 [ 552.700362][T25117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.700380][T25117] RIP: 0033:0x7f53604ae169 [ 552.700393][T25117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.700410][T25117] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 552.700427][T25117] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 552.700438][T25117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 552.700449][T25117] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 552.700528][T25117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.700539][T25117] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 552.700556][T25117] [ 553.036849][T25120] vhci_hcd: invalid port number 96 [ 553.042523][T25120] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 553.490669][T25149] vhci_hcd: invalid port number 96 [ 553.496094][T25149] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 553.639626][T25164] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6822'. [ 553.834284][T25177] vhci_hcd: invalid port number 96 [ 553.839661][T25177] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 553.945008][T25188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25188 comm=syz.9.6831 [ 553.957530][T25188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25188 comm=syz.9.6831 [ 554.053435][T25197] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6834'. [ 554.098414][T25203] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.133802][T25201] vhci_hcd: invalid port number 96 [ 554.139307][T25201] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 554.330575][T25211] dummy0 speed is unknown, defaulting to 1000 [ 554.357602][T25216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25216 comm=syz.3.6844 [ 554.370137][T25216] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25216 comm=syz.3.6844 [ 554.538991][T25233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6850'. [ 554.559089][T25231] netlink: 'syz.2.6849': attribute type 13 has an invalid length. [ 554.604053][T25231] erspan0: refused to change device tx_queue_len [ 554.610503][T25231] net_ratelimit: 11 callbacks suppressed [ 554.610515][T25231] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 554.656713][T25236] vhci_hcd: invalid port number 96 [ 554.662563][T25236] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 554.759160][T25251] sctp: [Deprecated]: syz.3.6857 (pid 25251) Use of int in max_burst socket option. [ 554.759160][T25251] Use struct sctp_assoc_value instead [ 554.793002][T25253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25253 comm=syz.6.6858 [ 554.805509][T25253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25253 comm=syz.6.6858 [ 554.868717][T25263] __nla_validate_parse: 2 callbacks suppressed [ 554.868735][T25263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6862'. [ 554.949574][T25269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6864'. [ 554.949816][T25267] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6863'. [ 555.065165][T25273] vhci_hcd: invalid port number 96 [ 555.070905][T25273] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 555.247672][T25295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25295 comm=syz.2.6873 [ 555.260229][T25295] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25295 comm=syz.2.6873 [ 555.361837][T25304] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6875'. [ 555.665499][T25313] vhci_hcd: invalid port number 96 [ 555.673278][T25313] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 555.715344][T25326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25326 comm=syz.9.6885 [ 555.727943][T25326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25326 comm=syz.9.6885 [ 555.809486][T25334] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6889'. [ 555.838715][T25342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6893'. [ 555.855967][T25344] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6895'. [ 555.897723][T25348] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6896'. [ 555.897916][T25347] sctp: [Deprecated]: syz.2.6897 (pid 25347) Use of int in max_burst socket option. [ 555.897916][T25347] Use struct sctp_assoc_value instead [ 555.949222][T25352] vhci_hcd: invalid port number 96 [ 555.954642][T25352] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 556.109745][T25370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25370 comm=syz.3.6903 [ 556.122367][T25370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25370 comm=syz.3.6903 [ 556.135461][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6901'. [ 556.149877][T25357] bond0: (slave bond_slave_0): Releasing backup interface [ 556.245087][T25380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6906'. [ 556.530446][T25389] vhci_hcd: invalid port number 96 [ 556.535726][T25387] sg_write: process 1327 (syz.6.6910) changed security contexts after opening file descriptor, this is not allowed. [ 556.548580][T25389] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 556.630735][T25395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25395 comm=syz.6.6912 [ 556.659002][T25397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=25397 comm=syz.9.6914 [ 556.782314][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 556.782329][ T29] audit: type=1400 audit(556.793:28979): avc: denied { relabelto } for pid=25405 comm="syz.6.6918" name="525" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 556.813766][ T29] audit: type=1400 audit(556.793:28980): avc: denied { associate } for pid=25405 comm="syz.6.6918" name="525" dev="tmpfs" ino=2769 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 556.845279][ T29] audit: type=1400 audit(556.843:28981): avc: denied { write } for pid=17569 comm="syz-executor" name="525" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 556.870580][ T29] audit: type=1400 audit(556.843:28982): avc: denied { remove_name } for pid=17569 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 556.896713][ T29] audit: type=1400 audit(556.843:28983): avc: denied { rmdir } for pid=17569 comm="syz-executor" name="525" dev="tmpfs" ino=2769 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 556.921966][ T29] audit: type=1326 audit(556.853:28984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25400 comm="syz.3.6916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x0 [ 556.945309][ T29] audit: type=1326 audit(556.913:28985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25400 comm="syz.3.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 556.968569][ T29] audit: type=1326 audit(556.913:28986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25400 comm="syz.3.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 556.991880][ T29] audit: type=1326 audit(556.913:28987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25400 comm="syz.3.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 557.014979][ T29] audit: type=1326 audit(556.913:28988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25400 comm="syz.3.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 557.136054][T25427] FAULT_INJECTION: forcing a failure. [ 557.136054][T25427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.149343][T25427] CPU: 0 UID: 0 PID: 25427 Comm: syz.6.6934 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 557.149367][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.149379][T25427] Call Trace: [ 557.149385][T25427] [ 557.149393][T25427] dump_stack_lvl+0xf6/0x150 [ 557.149454][T25427] dump_stack+0x15/0x1a [ 557.149472][T25427] should_fail_ex+0x261/0x270 [ 557.149500][T25427] should_fail+0xb/0x10 [ 557.149524][T25427] should_fail_usercopy+0x1a/0x20 [ 557.149552][T25427] _copy_from_user+0x1c/0xa0 [ 557.149577][T25427] __se_sys_add_key+0x20d/0x330 [ 557.149611][T25427] ? fput+0x99/0xd0 [ 557.149640][T25427] __x64_sys_add_key+0x67/0x80 [ 557.149661][T25427] x64_sys_call+0x1f10/0x2e10 [ 557.149686][T25427] do_syscall_64+0xc9/0x1a0 [ 557.149772][T25427] ? clear_bhb_loop+0x25/0x80 [ 557.149790][T25427] ? clear_bhb_loop+0x25/0x80 [ 557.149808][T25427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.149826][T25427] RIP: 0033:0x7f04cac8e169 [ 557.149850][T25427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.149866][T25427] RSP: 002b:00007f04c92f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 557.149883][T25427] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8e169 [ 557.149896][T25427] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 557.149959][T25427] RBP: 00007f04c92f7090 R08: 0000000001631f08 R09: 0000000000000000 [ 557.149972][T25427] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 557.149984][T25427] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 557.150004][T25427] [ 557.543196][T25441] sctp: [Deprecated]: syz.2.6930 (pid 25441) Use of int in max_burst socket option. [ 557.543196][T25441] Use struct sctp_assoc_value instead [ 558.975203][T25518] sctp: [Deprecated]: syz.8.6959 (pid 25518) Use of int in max_burst socket option. [ 558.975203][T25518] Use struct sctp_assoc_value instead [ 559.866124][T25547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.980119][T25559] __nla_validate_parse: 8 callbacks suppressed [ 559.980134][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6972'. [ 560.224943][T25569] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6976'. [ 560.272636][T25575] sctp: [Deprecated]: syz.6.6978 (pid 25575) Use of int in max_burst socket option. [ 560.272636][T25575] Use struct sctp_assoc_value instead [ 560.459410][T25592] sctp: [Deprecated]: syz.8.6983 (pid 25592) Use of int in max_burst socket option. [ 560.459410][T25592] Use struct sctp_assoc_value instead [ 560.809091][T25613] FAULT_INJECTION: forcing a failure. [ 560.809091][T25613] name failslab, interval 1, probability 0, space 0, times 0 [ 560.821927][T25613] CPU: 1 UID: 0 PID: 25613 Comm: syz.3.6988 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 560.821949][T25613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 560.821960][T25613] Call Trace: [ 560.821969][T25613] [ 560.821977][T25613] dump_stack_lvl+0xf6/0x150 [ 560.822019][T25613] dump_stack+0x15/0x1a [ 560.822045][T25613] should_fail_ex+0x261/0x270 [ 560.822066][T25613] should_failslab+0x8f/0xb0 [ 560.822083][T25613] kmem_cache_alloc_noprof+0x59/0x340 [ 560.822142][T25613] ? __proc_create+0x25f/0x4b0 [ 560.822161][T25613] __proc_create+0x25f/0x4b0 [ 560.822242][T25613] proc_create_data+0xb0/0x200 [ 560.822262][T25613] recent_mt_check+0x6dd/0x860 [ 560.822342][T25613] recent_mt_check_v0+0x6a/0x90 [ 560.822369][T25613] xt_check_match+0x265/0x4d0 [ 560.822413][T25613] ? strcmp+0x21/0x50 [ 560.822433][T25613] ? xt_find_match+0x1d2/0x210 [ 560.822528][T25613] translate_table+0xb87/0x10b0 [ 560.822582][T25613] ? _copy_from_user+0x89/0xa0 [ 560.822625][T25613] do_ip6t_set_ctl+0x663/0x840 [ 560.822646][T25613] ? kstrtouint+0x7b/0xc0 [ 560.822661][T25613] ? __rcu_read_unlock+0x4e/0x70 [ 560.822681][T25613] nf_setsockopt+0x195/0x1b0 [ 560.822772][T25613] ipv6_setsockopt+0x10f/0x130 [ 560.822792][T25613] rawv6_setsockopt+0x23d/0x460 [ 560.822810][T25613] sock_common_setsockopt+0x64/0x80 [ 560.822835][T25613] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 560.822918][T25613] __sys_setsockopt+0x187/0x200 [ 560.822938][T25613] __x64_sys_setsockopt+0x66/0x80 [ 560.822956][T25613] x64_sys_call+0x2a09/0x2e10 [ 560.822973][T25613] do_syscall_64+0xc9/0x1a0 [ 560.823030][T25613] ? clear_bhb_loop+0x25/0x80 [ 560.823046][T25613] ? clear_bhb_loop+0x25/0x80 [ 560.823174][T25613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.823262][T25613] RIP: 0033:0x7f5cebfee169 [ 560.823274][T25613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.823418][T25613] RSP: 002b:00007f5cea657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 560.823434][T25613] RAX: ffffffffffffffda RBX: 00007f5cec215fa0 RCX: 00007f5cebfee169 [ 560.823444][T25613] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 560.823454][T25613] RBP: 00007f5cea657090 R08: 0000000000000520 R09: 0000000000000000 [ 560.823465][T25613] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 560.823487][T25613] R13: 0000000000000000 R14: 00007f5cec215fa0 R15: 00007ffe880fe1a8 [ 560.823502][T25613] [ 561.139729][T25624] FAULT_INJECTION: forcing a failure. [ 561.139729][T25624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 561.153120][T25624] CPU: 1 UID: 0 PID: 25624 Comm: syz.3.6993 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 561.153174][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 561.153186][T25624] Call Trace: [ 561.153292][T25624] [ 561.153311][T25624] dump_stack_lvl+0xf6/0x150 [ 561.153340][T25624] dump_stack+0x15/0x1a [ 561.153365][T25624] should_fail_ex+0x261/0x270 [ 561.153388][T25624] should_fail_alloc_page+0xfd/0x110 [ 561.153409][T25624] __alloc_frozen_pages_noprof+0x11d/0x360 [ 561.153434][T25624] alloc_pages_mpol+0xb6/0x260 [ 561.153472][T25624] vma_alloc_folio_noprof+0x19c/0x300 [ 561.153530][T25624] handle_mm_fault+0xdda/0x2e80 [ 561.153556][T25624] ? expand_downwards+0x509/0x710 [ 561.153656][T25624] exc_page_fault+0x296/0x6a0 [ 561.153678][T25624] asm_exc_page_fault+0x26/0x30 [ 561.153696][T25624] RIP: 0010:filldir64+0x1ce/0x400 [ 561.153734][T25624] Code: 89 f3 e8 e5 24 c4 ff 48 89 ef 4c 89 fe e8 da 24 c4 ff 4c 39 fd 0f 82 ac 01 00 00 48 39 dd 0f 87 a3 01 00 00 0f 01 cb 0f ae e8 <4d> 89 67 08 4c 8b 24 24 48 8b 44 24 38 49 89 04 24 48 8b 44 24 10 [ 561.153806][T25624] RSP: 0018:ffffc900017efd38 EFLAGS: 00050283 [ 561.153824][T25624] RAX: 0000000000000000 RBX: 00007ffffffff000 RCX: ffff88811c2de300 [ 561.153911][T25624] RDX: 00000000000000ce RSI: 0000200000002f40 RDI: 0000200000002f58 [ 561.153923][T25624] RBP: 0000200000002f58 R08: ffffffff818f0e16 R09: 0000000000000000 [ 561.153934][T25624] R10: 0001ffffffffffff R11: 0001c900017efeb0 R12: 0000000000000000 [ 561.153945][T25624] R13: 0000000000000001 R14: ffffffff865d6776 R15: 0000200000002f40 [ 561.153959][T25624] ? filldir64+0x1b6/0x400 [ 561.154012][T25624] ? filldir64+0x1b6/0x400 [ 561.154043][T25624] ? __pfx_filldir64+0x10/0x10 [ 561.154189][T25624] proc_readfd_common+0x111/0x3d0 [ 561.154237][T25624] ? avc_policy_seqno+0x15/0x20 [ 561.154259][T25624] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 561.154296][T25624] proc_fdinfo_iterate+0x24/0x30 [ 561.154326][T25624] iterate_dir+0x11d/0x310 [ 561.154464][T25624] __se_sys_getdents64+0x8c/0x1b0 [ 561.154495][T25624] ? __pfx_filldir64+0x10/0x10 [ 561.154571][T25624] __x64_sys_getdents64+0x43/0x50 [ 561.154606][T25624] x64_sys_call+0x1110/0x2e10 [ 561.154662][T25624] do_syscall_64+0xc9/0x1a0 [ 561.154685][T25624] ? clear_bhb_loop+0x25/0x80 [ 561.154704][T25624] ? clear_bhb_loop+0x25/0x80 [ 561.154723][T25624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.154744][T25624] RIP: 0033:0x7f5cebfee169 [ 561.154782][T25624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.154803][T25624] RSP: 002b:00007f5cea657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 561.154824][T25624] RAX: ffffffffffffffda RBX: 00007f5cec215fa0 RCX: 00007f5cebfee169 [ 561.154838][T25624] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000004 [ 561.154852][T25624] RBP: 00007f5cea657090 R08: 0000000000000000 R09: 0000000000000000 [ 561.154865][T25624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.154876][T25624] R13: 0000000000000000 R14: 00007f5cec215fa0 R15: 00007ffe880fe1a8 [ 561.155018][T25624] [ 561.562381][T25635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6999'. [ 561.682210][T25656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7008'. [ 561.733056][T25659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7009'. [ 561.742059][T25659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7009'. [ 561.751061][T25659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7009'. [ 561.760127][T25659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7009'. [ 561.770072][T25659] FAULT_INJECTION: forcing a failure. [ 561.770072][T25659] name failslab, interval 1, probability 0, space 0, times 0 [ 561.782740][T25659] CPU: 0 UID: 0 PID: 25659 Comm: syz.2.7009 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 561.782771][T25659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 561.782852][T25659] Call Trace: [ 561.782860][T25659] [ 561.782869][T25659] dump_stack_lvl+0xf6/0x150 [ 561.782897][T25659] dump_stack+0x15/0x1a [ 561.782917][T25659] should_fail_ex+0x261/0x270 [ 561.782946][T25659] should_failslab+0x8f/0xb0 [ 561.783042][T25659] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 561.783077][T25659] ? __alloc_skb+0x10d/0x320 [ 561.783101][T25659] __alloc_skb+0x10d/0x320 [ 561.783124][T25659] netlink_alloc_large_skb+0xad/0xe0 [ 561.783225][T25659] netlink_sendmsg+0x3da/0x720 [ 561.783255][T25659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.783279][T25659] __sock_sendmsg+0x140/0x180 [ 561.783314][T25659] ____sys_sendmsg+0x350/0x4e0 [ 561.783424][T25659] __sys_sendmsg+0x1a0/0x240 [ 561.783550][T25659] __x64_sys_sendmsg+0x46/0x50 [ 561.783655][T25659] x64_sys_call+0x26f3/0x2e10 [ 561.783683][T25659] do_syscall_64+0xc9/0x1a0 [ 561.783714][T25659] ? clear_bhb_loop+0x25/0x80 [ 561.783740][T25659] ? clear_bhb_loop+0x25/0x80 [ 561.783790][T25659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.783810][T25659] RIP: 0033:0x7f53604ae169 [ 561.783823][T25659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.783844][T25659] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.783867][T25659] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 561.783948][T25659] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 561.783963][T25659] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 561.783977][T25659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.783991][T25659] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 561.784011][T25659] [ 561.991465][ T29] kauditd_printk_skb: 6640 callbacks suppressed [ 561.991532][ T29] audit: type=1400 audit(562.003:35629): avc: denied { ioctl } for pid=25661 comm="syz.6.7010" path="socket:[79940]" dev="sockfs" ino=79940 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.024415][T25662] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7010'. [ 562.033655][T25662] netem: unknown loss type 13 [ 562.037535][T25666] sctp: [Deprecated]: syz.2.7011 (pid 25666) Use of int in max_burst socket option. [ 562.037535][T25666] Use struct sctp_assoc_value instead [ 562.038637][T25662] netem: change failed [ 562.065882][T25662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7010'. [ 562.423437][T25694] FAULT_INJECTION: forcing a failure. [ 562.423437][T25694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.436659][T25694] CPU: 1 UID: 0 PID: 25694 Comm: syz.3.7021 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 562.436688][T25694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.436719][T25694] Call Trace: [ 562.436725][T25694] [ 562.436732][T25694] dump_stack_lvl+0xf6/0x150 [ 562.436753][T25694] dump_stack+0x15/0x1a [ 562.436769][T25694] should_fail_ex+0x261/0x270 [ 562.436796][T25694] should_fail+0xb/0x10 [ 562.436815][T25694] should_fail_usercopy+0x1a/0x20 [ 562.436855][T25694] _copy_from_iter+0xd8/0xd10 [ 562.436909][T25694] ? kmalloc_reserve+0x16e/0x190 [ 562.436929][T25694] ? __build_skb_around+0x199/0x1f0 [ 562.436950][T25694] ? __alloc_skb+0x227/0x320 [ 562.436965][T25694] ? __virt_addr_valid+0x1ed/0x250 [ 562.436987][T25694] ? __check_object_size+0x367/0x510 [ 562.437100][T25694] netlink_sendmsg+0x492/0x720 [ 562.437129][T25694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.437165][T25694] __sock_sendmsg+0x140/0x180 [ 562.437197][T25694] ____sys_sendmsg+0x350/0x4e0 [ 562.437229][T25694] __sys_sendmsg+0x1a0/0x240 [ 562.437346][T25694] __x64_sys_sendmsg+0x46/0x50 [ 562.437403][T25694] x64_sys_call+0x26f3/0x2e10 [ 562.437420][T25694] do_syscall_64+0xc9/0x1a0 [ 562.437463][T25694] ? clear_bhb_loop+0x25/0x80 [ 562.437480][T25694] ? clear_bhb_loop+0x25/0x80 [ 562.437521][T25694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.437547][T25694] RIP: 0033:0x7f5cebfee169 [ 562.437560][T25694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.437642][T25694] RSP: 002b:00007f5cea657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.437657][T25694] RAX: ffffffffffffffda RBX: 00007f5cec215fa0 RCX: 00007f5cebfee169 [ 562.437667][T25694] RDX: 0000000010000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 562.437677][T25694] RBP: 00007f5cea657090 R08: 0000000000000000 R09: 0000000000000000 [ 562.437688][T25694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.437697][T25694] R13: 0000000000000000 R14: 00007f5cec215fa0 R15: 00007ffe880fe1a8 [ 562.437790][T25694] [ 562.664819][ T29] audit: type=1326 audit(562.673:35630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.688470][ T29] audit: type=1326 audit(562.673:35631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.711603][ T29] audit: type=1326 audit(562.673:35632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.734710][ T29] audit: type=1326 audit(562.673:35633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.757753][ T29] audit: type=1326 audit(562.673:35634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.780907][ T29] audit: type=1326 audit(562.673:35635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.803954][ T29] audit: type=1326 audit(562.673:35636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.827025][ T29] audit: type=1326 audit(562.673:35637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 562.850030][ T29] audit: type=1326 audit(562.673:35638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25697 comm="syz.3.7023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 563.247720][T25758] sctp: [Deprecated]: syz.3.7045 (pid 25758) Use of int in max_burst socket option. [ 563.247720][T25758] Use struct sctp_assoc_value instead [ 563.802482][T25786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.157600][T25797] sctp: [Deprecated]: syz.8.7067 (pid 25797) Use of int in max_burst socket option. [ 564.157600][T25797] Use struct sctp_assoc_value instead [ 564.416150][T25822] selinux_netlink_send: 4 callbacks suppressed [ 564.416169][T25822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25822 comm=syz.3.7061 [ 564.426657][T25821] vhci_hcd: invalid port number 96 [ 564.443760][T25821] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 564.631739][T25829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25829 comm=syz.9.7066 [ 565.023103][T25841] xt_CT: No such helper "pptp" [ 565.113741][T25848] vhci_hcd: invalid port number 96 [ 565.127284][T25848] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 565.345433][T25867] __nla_validate_parse: 4 callbacks suppressed [ 565.345448][T25867] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7081'. [ 565.399301][T25873] sctp: [Deprecated]: syz.3.7084 (pid 25873) Use of int in max_burst socket option. [ 565.399301][T25873] Use struct sctp_assoc_value instead [ 565.503013][T25877] vhci_hcd: invalid port number 96 [ 565.508579][T25877] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 566.089467][T25869] syz.2.7082 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 566.100465][T25869] CPU: 0 UID: 0 PID: 25869 Comm: syz.2.7082 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 566.100492][T25869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.100505][T25869] Call Trace: [ 566.100511][T25869] [ 566.100518][T25869] dump_stack_lvl+0xf6/0x150 [ 566.100541][T25869] dump_stack+0x15/0x1a [ 566.100600][T25869] dump_header+0x83/0x2d0 [ 566.100623][T25869] oom_kill_process+0x341/0x4c0 [ 566.100648][T25869] out_of_memory+0x9d1/0xc20 [ 566.100767][T25869] mem_cgroup_out_of_memory+0x13f/0x190 [ 566.100874][T25869] try_charge_memcg+0x5f1/0x890 [ 566.100896][T25869] charge_memcg+0x50/0xc0 [ 566.100924][T25869] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 566.100970][T25869] __read_swap_cache_async+0x207/0x3b0 [ 566.101079][T25869] swap_cluster_readahead+0x27f/0x400 [ 566.101123][T25869] swapin_readahead+0xe6/0x6f0 [ 566.101233][T25869] ? __lruvec_stat_mod_folio+0xde/0x120 [ 566.101257][T25869] ? swap_cache_get_folio+0x77/0x210 [ 566.101286][T25869] do_swap_page+0x31c/0x2510 [ 566.101345][T25869] ? __rcu_read_lock+0x36/0x50 [ 566.101368][T25869] ? __pfx_default_wake_function+0x10/0x10 [ 566.101392][T25869] handle_mm_fault+0x8ed/0x2e80 [ 566.101481][T25869] ? mas_walk+0x204/0x320 [ 566.101501][T25869] ? __rcu_read_unlock+0x4e/0x70 [ 566.101587][T25869] exc_page_fault+0x3b9/0x6a0 [ 566.101672][T25869] asm_exc_page_fault+0x26/0x30 [ 566.101758][T25869] RIP: 0033:0x7f5360384bcc [ 566.101773][T25869] Code: 66 0f 1f 44 00 00 69 3d e6 0a e8 00 e8 03 00 00 48 8d 1d e7 13 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 566.101930][T25869] RSP: 002b:00007fffd0581ce0 EFLAGS: 00010206 [ 566.101953][T25869] RAX: 0000000000000000 RBX: 00007f53606d5fa0 RCX: 0000000000000000 [ 566.101966][T25869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558968f808 [ 566.101984][T25869] RBP: 00007f53606d7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 566.102010][T25869] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000008a3b0 [ 566.102024][T25869] R13: 00007f53606d6160 R14: ffffffffffffffff R15: 00007fffd0581df0 [ 566.102046][T25869] [ 566.102054][T25869] memory: usage 307200kB, limit 307200kB, failcnt 1590 [ 566.319818][T25869] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 566.327748][T25869] kmem: usage 307044kB, limit 9007199254740988kB, failcnt 0 [ 566.335055][T25869] Memory cgroup stats for /syz2: [ 566.335353][T25869] cache 0 [ 566.343324][T25869] rss 131072 [ 566.346580][T25869] shmem 0 [ 566.349573][T25869] mapped_file 0 [ 566.349569][T25907] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7093'. [ 566.361977][T25869] dirty 0 [ 566.364972][T25869] writeback 0 [ 566.368263][T25869] workingset_refault_anon 867 [ 566.372934][T25869] workingset_refault_file 3399 [ 566.377682][T25869] swap 303104 [ 566.380968][T25869] swapcached 20480 [ 566.384694][T25869] pgpgin 401603 [ 566.388200][T25869] pgpgout 401564 [ 566.391748][T25869] pgfault 445863 [ 566.395286][T25869] pgmajfault 435 [ 566.398830][T25869] inactive_anon 20480 [ 566.402860][T25869] active_anon 0 [ 566.406308][T25869] inactive_file 8192 [ 566.410245][T25869] active_file 0 [ 566.413687][T25869] unevictable 131072 [ 566.417579][T25869] hierarchical_memory_limit 314572800 [ 566.422992][T25869] hierarchical_memsw_limit 9223372036854771712 [ 566.429163][T25869] total_cache 0 [ 566.432605][T25869] total_rss 131072 [ 566.436305][T25869] total_shmem 0 [ 566.439798][T25869] total_mapped_file 0 [ 566.443786][T25869] total_dirty 0 [ 566.447228][T25869] total_writeback 0 [ 566.451028][T25869] total_workingset_refault_anon 867 [ 566.456259][T25869] total_workingset_refault_file 3399 [ 566.461620][T25869] total_swap 303104 [ 566.465426][T25869] total_swapcached 20480 [ 566.469670][T25869] total_pgpgin 401603 [ 566.473641][T25869] total_pgpgout 401564 [ 566.477816][T25869] total_pgfault 445863 [ 566.481879][T25869] total_pgmajfault 435 [ 566.485960][T25869] total_inactive_anon 20480 [ 566.490514][T25869] total_active_anon 0 [ 566.494483][T25869] total_inactive_file 8192 [ 566.498925][T25869] total_active_file 0 [ 566.502961][T25869] total_unevictable 131072 [ 566.507376][T25869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7082,pid=25869,uid=0 [ 566.522365][T25869] Memory cgroup out of memory: Killed process 25869 (syz.2.7082) total-vm:93880kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 566.648125][T25923] FAULT_INJECTION: forcing a failure. [ 566.648125][T25923] name failslab, interval 1, probability 0, space 0, times 0 [ 566.660936][T25923] CPU: 1 UID: 0 PID: 25923 Comm: syz.6.7100 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 566.660963][T25923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 566.660975][T25923] Call Trace: [ 566.660981][T25923] [ 566.660988][T25923] dump_stack_lvl+0xf6/0x150 [ 566.661018][T25923] dump_stack+0x15/0x1a [ 566.661123][T25923] should_fail_ex+0x261/0x270 [ 566.661206][T25923] should_failslab+0x8f/0xb0 [ 566.661234][T25923] __kmalloc_noprof+0xad/0x410 [ 566.661342][T25923] ? _ib_alloc_device+0x37/0x430 [ 566.661364][T25923] _ib_alloc_device+0x37/0x430 [ 566.661384][T25923] rxe_net_add+0x1f/0xa0 [ 566.661429][T25923] rxe_newlink+0xc7/0x180 [ 566.661507][T25923] nldev_newlink+0x36c/0x3f0 [ 566.661622][T25923] ? __pfx_nldev_newlink+0x10/0x10 [ 566.661651][T25923] rdma_nl_rcv+0x48a/0x5b0 [ 566.661683][T25923] ? should_fail_ex+0xd7/0x270 [ 566.661792][T25923] netlink_unicast+0x605/0x6c0 [ 566.661836][T25923] netlink_sendmsg+0x609/0x720 [ 566.661867][T25923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 566.661887][T25923] __sock_sendmsg+0x140/0x180 [ 566.661956][T25923] ____sys_sendmsg+0x350/0x4e0 [ 566.661988][T25923] __sys_sendmsg+0x1a0/0x240 [ 566.662053][T25923] __x64_sys_sendmsg+0x46/0x50 [ 566.662081][T25923] x64_sys_call+0x26f3/0x2e10 [ 566.662104][T25923] do_syscall_64+0xc9/0x1a0 [ 566.662133][T25923] ? clear_bhb_loop+0x25/0x80 [ 566.662164][T25923] ? clear_bhb_loop+0x25/0x80 [ 566.662245][T25923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.662266][T25923] RIP: 0033:0x7f04cac8e169 [ 566.662285][T25923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.662307][T25923] RSP: 002b:00007f04c92f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.662348][T25923] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8e169 [ 566.662362][T25923] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000006 [ 566.662374][T25923] RBP: 00007f04c92f7090 R08: 0000000000000000 R09: 0000000000000000 [ 566.662386][T25923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.662401][T25923] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 566.662424][T25923] [ 566.662433][T25923] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 566.667186][T25916] vhci_hcd: invalid port number 96 [ 566.908562][T25916] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 566.945062][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7102'. [ 566.959062][T25938] sctp: [Deprecated]: syz.2.7103 (pid 25938) Use of int in max_burst socket option. [ 566.959062][T25938] Use struct sctp_assoc_value instead [ 567.000694][T25944] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7107'. [ 567.011305][T25942] $Hÿ: renamed from bond0 (while UP) [ 567.026516][T25942] $Hÿ: entered promiscuous mode [ 567.220439][T25964] GUP no longer grows the stack in syz.6.7113 (25964): 200000004000-20000000a000 (200000002000) [ 567.230954][T25964] CPU: 1 UID: 0 PID: 25964 Comm: syz.6.7113 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 567.231029][T25964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.231040][T25964] Call Trace: [ 567.231044][T25964] [ 567.231050][T25964] dump_stack_lvl+0xf6/0x150 [ 567.231069][T25964] dump_stack+0x15/0x1a [ 567.231110][T25964] __get_user_pages+0x1dc1/0x2340 [ 567.231145][T25964] get_user_pages_remote+0x1f4/0x800 [ 567.231172][T25964] __access_remote_vm+0x160/0x590 [ 567.231197][T25964] access_remote_vm+0x34/0x50 [ 567.231261][T25964] proc_pid_cmdline_read+0x3fd/0x720 [ 567.231291][T25964] vfs_readv+0x3e5/0x660 [ 567.231311][T25964] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 567.231369][T25964] __x64_sys_preadv+0xf9/0x1c0 [ 567.231429][T25964] x64_sys_call+0x1410/0x2e10 [ 567.231448][T25964] do_syscall_64+0xc9/0x1a0 [ 567.231468][T25964] ? clear_bhb_loop+0x25/0x80 [ 567.231539][T25964] ? clear_bhb_loop+0x25/0x80 [ 567.231556][T25964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.231572][T25964] RIP: 0033:0x7f04cac8e169 [ 567.231584][T25964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.231598][T25964] RSP: 002b:00007f04c92f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 567.231686][T25964] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8e169 [ 567.231738][T25964] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 567.231748][T25964] RBP: 00007f04cad10a68 R08: 00000000fffffff9 R09: 0000000000000000 [ 567.231816][T25964] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 567.231826][T25964] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 567.231843][T25964] [ 567.410392][T25964] FAULT_INJECTION: forcing a failure. [ 567.410392][T25964] name failslab, interval 1, probability 0, space 0, times 0 [ 567.423255][T25964] CPU: 0 UID: 0 PID: 25964 Comm: syz.6.7113 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 567.423330][T25964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.423342][T25964] Call Trace: [ 567.423349][T25964] [ 567.423356][T25964] dump_stack_lvl+0xf6/0x150 [ 567.423384][T25964] dump_stack+0x15/0x1a [ 567.423403][T25964] should_fail_ex+0x261/0x270 [ 567.423432][T25964] should_failslab+0x8f/0xb0 [ 567.423459][T25964] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 567.423550][T25964] ? proc_alloc_inode+0x34/0x90 [ 567.423577][T25964] proc_alloc_inode+0x34/0x90 [ 567.423631][T25964] ? __pfx_proc_alloc_inode+0x10/0x10 [ 567.423649][T25964] alloc_inode+0x40/0x170 [ 567.423741][T25964] new_inode+0x1e/0xe0 [ 567.423766][T25964] proc_pid_make_inode+0x1d/0xd0 [ 567.423856][T25964] proc_fdinfo_instantiate+0x34/0x140 [ 567.423890][T25964] proc_fill_cache+0x1bd/0x240 [ 567.423987][T25964] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 567.424051][T25964] proc_readfd_common+0x28d/0x3d0 [ 567.424150][T25964] ? __pfx_proc_fdinfo_instantiate+0x10/0x10 [ 567.424256][T25964] proc_fdinfo_iterate+0x24/0x30 [ 567.424318][T25964] iterate_dir+0x11d/0x310 [ 567.424351][T25964] __se_sys_getdents64+0x8c/0x1b0 [ 567.424427][T25964] ? __pfx_filldir64+0x10/0x10 [ 567.424457][T25964] __x64_sys_getdents64+0x43/0x50 [ 567.424484][T25964] x64_sys_call+0x1110/0x2e10 [ 567.424575][T25964] do_syscall_64+0xc9/0x1a0 [ 567.424596][T25964] ? clear_bhb_loop+0x25/0x80 [ 567.424627][T25964] ? clear_bhb_loop+0x25/0x80 [ 567.424644][T25964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.424662][T25964] RIP: 0033:0x7f04cac8e169 [ 567.424676][T25964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.424691][T25964] RSP: 002b:00007f04c92f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 567.424777][T25964] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8e169 [ 567.424787][T25964] RDX: 0000000000001002 RSI: 0000200000002f40 RDI: 0000000000000006 [ 567.424798][T25964] RBP: 00007f04c92f7090 R08: 0000000000000000 R09: 0000000000000000 [ 567.424808][T25964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.424818][T25964] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 567.424908][T25964] [ 567.715665][T25969] vhci_hcd: invalid port number 96 [ 567.721534][T25969] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 567.765851][T25977] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7118'. [ 567.775319][T25977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25977 comm=syz.6.7118 [ 567.810162][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7119'. [ 567.819404][T25979] FAULT_INJECTION: forcing a failure. [ 567.819404][T25979] name failslab, interval 1, probability 0, space 0, times 0 [ 567.832161][T25979] CPU: 1 UID: 0 PID: 25979 Comm: syz.8.7119 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 567.832214][T25979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 567.832229][T25979] Call Trace: [ 567.832235][T25979] [ 567.832243][T25979] dump_stack_lvl+0xf6/0x150 [ 567.832287][T25979] dump_stack+0x15/0x1a [ 567.832378][T25979] should_fail_ex+0x261/0x270 [ 567.832400][T25979] should_failslab+0x8f/0xb0 [ 567.832420][T25979] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 567.832447][T25979] ? __alloc_skb+0x10d/0x320 [ 567.832466][T25979] __alloc_skb+0x10d/0x320 [ 567.832553][T25979] ? __pfx_team_nl_send_unicast+0x10/0x10 [ 567.832572][T25979] team_nl_send_options_get+0xb8/0xb90 [ 567.832592][T25979] ? __pfx_team_nl_send_unicast+0x10/0x10 [ 567.832615][T25979] team_nl_options_get_doit+0x225/0x2d0 [ 567.832704][T25979] genl_rcv_msg+0x69b/0x6f0 [ 567.832730][T25979] ? __pfx_team_nl_options_get_doit+0x10/0x10 [ 567.832749][T25979] ? __dev_queue_xmit+0xb76/0x20b0 [ 567.832777][T25979] netlink_rcv_skb+0x12f/0x230 [ 567.832861][T25979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.832953][T25979] genl_rcv+0x28/0x40 [ 567.832974][T25979] netlink_unicast+0x605/0x6c0 [ 567.833006][T25979] netlink_sendmsg+0x609/0x720 [ 567.833057][T25979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.833076][T25979] __sock_sendmsg+0x140/0x180 [ 567.833129][T25979] ____sys_sendmsg+0x350/0x4e0 [ 567.833226][T25979] __sys_sendmsg+0x1a0/0x240 [ 567.833268][T25979] __x64_sys_sendmsg+0x46/0x50 [ 567.833289][T25979] x64_sys_call+0x26f3/0x2e10 [ 567.833308][T25979] do_syscall_64+0xc9/0x1a0 [ 567.833331][T25979] ? clear_bhb_loop+0x25/0x80 [ 567.833418][T25979] ? clear_bhb_loop+0x25/0x80 [ 567.833437][T25979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.833474][T25979] RIP: 0033:0x7f482be4e169 [ 567.833487][T25979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.833502][T25979] RSP: 002b:00007f482a4b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.833551][T25979] RAX: ffffffffffffffda RBX: 00007f482c075fa0 RCX: 00007f482be4e169 [ 567.833562][T25979] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000003 [ 567.833573][T25979] RBP: 00007f482a4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 567.833584][T25979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.833595][T25979] R13: 0000000000000000 R14: 00007f482c075fa0 R15: 00007fffe3ece2d8 [ 567.833612][T25979] [ 568.090564][T25983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7121'. [ 568.110482][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 568.110499][ T29] audit: type=1400 audit(568.123:35906): avc: denied { create } for pid=25980 comm="syz.6.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 568.172847][ T29] audit: type=1400 audit(568.143:35907): avc: denied { write } for pid=25980 comm="syz.6.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 568.196309][ T29] audit: type=1326 audit(568.203:35908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.219371][ T29] audit: type=1326 audit(568.203:35909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.242304][ T29] audit: type=1326 audit(568.203:35910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.265329][ T29] audit: type=1326 audit(568.203:35911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.288251][ T29] audit: type=1326 audit(568.203:35912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.311398][ T29] audit: type=1326 audit(568.203:35913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.334392][ T29] audit: type=1326 audit(568.203:35914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.357355][ T29] audit: type=1326 audit(568.203:35915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25990 comm="syz.8.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f482be4e169 code=0x7ffc0000 [ 568.391885][T25999] vhci_hcd: invalid port number 96 [ 568.397122][T25999] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 568.409891][T26009] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7130'. [ 568.437923][ T37] page_pool_release_retry() stalled pool shutdown: id 126, 33 inflight 60 sec [ 568.461707][T26017] sctp: [Deprecated]: syz.3.7133 (pid 26017) Use of int in max_burst socket option. [ 568.461707][T26017] Use struct sctp_assoc_value instead [ 568.480323][T26019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7134'. [ 568.711999][T26033] FAULT_INJECTION: forcing a failure. [ 568.711999][T26033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.725179][T26033] CPU: 1 UID: 0 PID: 26033 Comm: syz.6.7137 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 568.725232][T26033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.725248][T26033] Call Trace: [ 568.725256][T26033] [ 568.725266][T26033] dump_stack_lvl+0xf6/0x150 [ 568.725402][T26033] dump_stack+0x15/0x1a [ 568.725416][T26033] should_fail_ex+0x261/0x270 [ 568.725437][T26033] should_fail+0xb/0x10 [ 568.725453][T26033] should_fail_usercopy+0x1a/0x20 [ 568.725474][T26033] _copy_to_user+0x20/0xa0 [ 568.725527][T26033] simple_read_from_buffer+0xb2/0x130 [ 568.725555][T26033] proc_fail_nth_read+0x103/0x140 [ 568.725641][T26033] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.725668][T26033] vfs_read+0x1b2/0x710 [ 568.725681][T26033] ? __rcu_read_unlock+0x4e/0x70 [ 568.725698][T26033] ? __fget_files+0x186/0x1c0 [ 568.725773][T26033] ksys_read+0xeb/0x1b0 [ 568.725789][T26033] __x64_sys_read+0x42/0x50 [ 568.725804][T26033] x64_sys_call+0x2a3b/0x2e10 [ 568.725829][T26033] do_syscall_64+0xc9/0x1a0 [ 568.725903][T26033] ? clear_bhb_loop+0x25/0x80 [ 568.725923][T26033] ? clear_bhb_loop+0x25/0x80 [ 568.725960][T26033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.725977][T26033] RIP: 0033:0x7f04cac8cb7c [ 568.726022][T26033] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 568.726038][T26033] RSP: 002b:00007f04c92f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.726053][T26033] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8cb7c [ 568.726064][T26033] RDX: 000000000000000f RSI: 00007f04c92f70a0 RDI: 0000000000000009 [ 568.726075][T26033] RBP: 00007f04c92f7090 R08: 0000000000000000 R09: 0000000000000000 [ 568.726086][T26033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.726096][T26033] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 568.726158][T26033] [ 569.107227][T26050] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7144'. [ 569.116647][T26050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26050 comm=syz.8.7144 [ 569.536455][T26088] sctp: [Deprecated]: syz.6.7159 (pid 26088) Use of int in max_burst socket option. [ 569.536455][T26088] Use struct sctp_assoc_value instead [ 570.324425][ T10] kernel write not supported for file /1389/attr/exec (pid: 10 comm: kworker/0:1) [ 570.429019][T26123] FAULT_INJECTION: forcing a failure. [ 570.429019][T26123] name failslab, interval 1, probability 0, space 0, times 0 [ 570.430184][T26122] __nla_validate_parse: 1 callbacks suppressed [ 570.430200][T26122] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7169'. [ 570.441765][T26123] CPU: 0 UID: 0 PID: 26123 Comm: syz.2.7170 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 570.441797][T26123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.441814][T26123] Call Trace: [ 570.441823][T26123] [ 570.441831][T26123] dump_stack_lvl+0xf6/0x150 [ 570.441862][T26123] dump_stack+0x15/0x1a [ 570.441881][T26123] should_fail_ex+0x261/0x270 [ 570.441962][T26123] should_failslab+0x8f/0xb0 [ 570.441988][T26123] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 570.442022][T26123] ? __alloc_skb+0x10d/0x320 [ 570.442085][T26123] __alloc_skb+0x10d/0x320 [ 570.442176][T26123] __ip_append_data+0x19cd/0x2490 [ 570.442212][T26123] ? __pfx_raw_getfrag+0x10/0x10 [ 570.442252][T26123] ? dst_init+0x208/0x260 [ 570.442277][T26123] ? should_failslab+0x8f/0xb0 [ 570.442302][T26123] ? __kmalloc_cache_noprof+0x18d/0x320 [ 570.442446][T26123] ? ip_setup_cork+0x18c/0x490 [ 570.442476][T26123] ? __pfx_raw_getfrag+0x10/0x10 [ 570.442513][T26123] ip_append_data+0x11f/0x150 [ 570.442600][T26123] raw_sendmsg+0xd3b/0xee0 [ 570.442650][T26123] ? __pfx_raw_sendmsg+0x10/0x10 [ 570.442728][T26123] inet_sendmsg+0xc5/0xd0 [ 570.442765][T26123] __sock_sendmsg+0x102/0x180 [ 570.442807][T26123] ____sys_sendmsg+0x350/0x4e0 [ 570.442839][T26123] __sys_sendmsg+0x1a0/0x240 [ 570.442885][T26123] __x64_sys_sendmsg+0x46/0x50 [ 570.442912][T26123] x64_sys_call+0x26f3/0x2e10 [ 570.442942][T26123] do_syscall_64+0xc9/0x1a0 [ 570.443008][T26123] ? clear_bhb_loop+0x25/0x80 [ 570.443032][T26123] ? clear_bhb_loop+0x25/0x80 [ 570.443092][T26123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.443125][T26123] RIP: 0033:0x7f53604ae169 [ 570.443143][T26123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.443246][T26123] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.443269][T26123] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 570.443283][T26123] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 570.443298][T26123] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 570.443312][T26123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 570.443340][T26123] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 570.443362][T26123] [ 570.469834][T26124] FAULT_INJECTION: forcing a failure. [ 570.469834][T26124] name failslab, interval 1, probability 0, space 0, times 0 [ 570.703364][T26124] CPU: 0 UID: 0 PID: 26124 Comm: syz.9.7167 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 570.703391][T26124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.703403][T26124] Call Trace: [ 570.703410][T26124] [ 570.703418][T26124] dump_stack_lvl+0xf6/0x150 [ 570.703446][T26124] dump_stack+0x15/0x1a [ 570.703478][T26124] should_fail_ex+0x261/0x270 [ 570.703575][T26124] should_failslab+0x8f/0xb0 [ 570.703597][T26124] kmem_cache_alloc_noprof+0x59/0x340 [ 570.703631][T26124] ? prepare_creds+0x39/0x4e0 [ 570.703654][T26124] ? __rcu_read_unlock+0x4e/0x70 [ 570.703674][T26124] prepare_creds+0x39/0x4e0 [ 570.703721][T26124] copy_creds+0x90/0x3f0 [ 570.703746][T26124] copy_process+0x63f/0x1f60 [ 570.703775][T26124] ? __rcu_read_unlock+0x4e/0x70 [ 570.703853][T26124] ? 0xffffffffff600000 [ 570.703866][T26124] kernel_clone+0x168/0x5d0 [ 570.703893][T26124] ? vfs_write+0x669/0x950 [ 570.703917][T26124] ? 0xffffffffff600000 [ 570.703929][T26124] __x64_sys_clone+0xe9/0x120 [ 570.703958][T26124] ? 0xffffffffff600000 [ 570.704028][T26124] x64_sys_call+0x2dc9/0x2e10 [ 570.704054][T26124] do_syscall_64+0xc9/0x1a0 [ 570.704084][T26124] ? clear_bhb_loop+0x25/0x80 [ 570.704109][T26124] ? clear_bhb_loop+0x25/0x80 [ 570.704133][T26124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.704236][T26124] RIP: 0033:0x7f87dbeee169 [ 570.704251][T26124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.704270][T26124] RSP: 002b:00007f87da535fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 570.704290][T26124] RAX: ffffffffffffffda RBX: 00007f87dc116080 RCX: 00007f87dbeee169 [ 570.704304][T26124] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c9a4080 [ 570.704316][T26124] RBP: 00007f87da536090 R08: ffffffffff600000 R09: ffffffffff600000 [ 570.704343][T26124] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 570.704355][T26124] R13: 0000000000000001 R14: 00007f87dc116080 R15: 00007ffc45227c98 [ 570.704370][T26124] ? 0xffffffffff600000 [ 570.704382][T26124] ? 0xffffffffff600000 [ 570.704398][T26124] [ 570.936515][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7171'. [ 571.031884][T26139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 571.138261][T26160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.151906][T26162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7186'. [ 571.166552][T26160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.220553][T26167] block device autoloading is deprecated and will be removed. [ 571.228342][T26167] FAULT_INJECTION: forcing a failure. [ 571.228342][T26167] name failslab, interval 1, probability 0, space 0, times 0 [ 571.240988][T26167] CPU: 0 UID: 0 PID: 26167 Comm: syz.6.7188 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 571.241054][T26167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 571.241065][T26167] Call Trace: [ 571.241071][T26167] [ 571.241078][T26167] dump_stack_lvl+0xf6/0x150 [ 571.241104][T26167] dump_stack+0x15/0x1a [ 571.241123][T26167] should_fail_ex+0x261/0x270 [ 571.241179][T26167] should_failslab+0x8f/0xb0 [ 571.241203][T26167] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 571.241235][T26167] ? __d_alloc+0x3d/0x350 [ 571.241258][T26167] ? __rcu_read_unlock+0x4e/0x70 [ 571.241283][T26167] __d_alloc+0x3d/0x350 [ 571.241313][T26167] d_alloc_parallel+0x57/0xcb0 [ 571.241388][T26167] ? __rcu_read_unlock+0x4e/0x70 [ 571.241413][T26167] ? __d_lookup+0x362/0x390 [ 571.241445][T26167] ? inode_permission+0xbf/0x300 [ 571.241476][T26167] __lookup_slow+0x8f/0x280 [ 571.241510][T26167] lookup_one_len+0xf6/0x1d0 [ 571.241551][T26167] start_creating+0x139/0x230 [ 571.241574][T26167] __debugfs_create_file+0x73/0x330 [ 571.241598][T26167] debugfs_create_file_full+0x40/0x60 [ 571.241680][T26167] do_blk_trace_setup+0x2d1/0x4d0 [ 571.241714][T26167] blk_trace_setup+0xa9/0x140 [ 571.241749][T26167] blk_trace_ioctl+0xf1/0x2f0 [ 571.241782][T26167] ? do_vfs_ioctl+0x977/0x1570 [ 571.241869][T26167] ? selinux_file_ioctl+0x2f9/0x380 [ 571.241894][T26167] blkdev_ioctl+0x283/0x450 [ 571.241922][T26167] ? __pfx_blkdev_ioctl+0x10/0x10 [ 571.241943][T26167] __se_sys_ioctl+0xc9/0x140 [ 571.242033][T26167] __x64_sys_ioctl+0x43/0x50 [ 571.242058][T26167] x64_sys_call+0x168d/0x2e10 [ 571.242076][T26167] do_syscall_64+0xc9/0x1a0 [ 571.242099][T26167] ? clear_bhb_loop+0x25/0x80 [ 571.242162][T26167] ? clear_bhb_loop+0x25/0x80 [ 571.242180][T26167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.242199][T26167] RIP: 0033:0x7f04cac8e169 [ 571.242211][T26167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.242227][T26167] RSP: 002b:00007f04c92f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.242242][T26167] RAX: ffffffffffffffda RBX: 00007f04caeb5fa0 RCX: 00007f04cac8e169 [ 571.242320][T26167] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 571.242331][T26167] RBP: 00007f04c92f7090 R08: 0000000000000000 R09: 0000000000000000 [ 571.242398][T26167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.242408][T26167] R13: 0000000000000000 R14: 00007f04caeb5fa0 R15: 00007ffc7b7f76d8 [ 571.242424][T26167] [ 571.552755][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7195'. [ 571.561805][T26181] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7195'. [ 571.574440][T26181] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7195'. [ 571.659178][T26193] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7200'. [ 571.669408][T26193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7200'. [ 572.024914][T26205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.180789][T26213] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 572.303086][T26219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7211'. [ 572.313595][T26219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7211'. [ 572.692204][T26249] FAULT_INJECTION: forcing a failure. [ 572.692204][T26249] name failslab, interval 1, probability 0, space 0, times 0 [ 572.705011][T26249] CPU: 0 UID: 0 PID: 26249 Comm: syz.9.7222 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 572.705050][T26249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.705065][T26249] Call Trace: [ 572.705073][T26249] [ 572.705082][T26249] dump_stack_lvl+0xf6/0x150 [ 572.705123][T26249] dump_stack+0x15/0x1a [ 572.705143][T26249] should_fail_ex+0x261/0x270 [ 572.705191][T26249] should_failslab+0x8f/0xb0 [ 572.705216][T26249] kmem_cache_alloc_noprof+0x59/0x340 [ 572.705299][T26249] ? getname_flags+0x81/0x3b0 [ 572.705322][T26249] getname_flags+0x81/0x3b0 [ 572.705345][T26249] __x64_sys_rename+0x40/0x70 [ 572.705379][T26249] x64_sys_call+0x2cd9/0x2e10 [ 572.705474][T26249] do_syscall_64+0xc9/0x1a0 [ 572.705509][T26249] ? clear_bhb_loop+0x25/0x80 [ 572.705608][T26249] ? clear_bhb_loop+0x25/0x80 [ 572.705632][T26249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.705652][T26249] RIP: 0033:0x7f87dbeee169 [ 572.705669][T26249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.705691][T26249] RSP: 002b:00007f87da557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 572.705782][T26249] RAX: ffffffffffffffda RBX: 00007f87dc115fa0 RCX: 00007f87dbeee169 [ 572.705798][T26249] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000180 [ 572.705813][T26249] RBP: 00007f87da557090 R08: 0000000000000000 R09: 0000000000000000 [ 572.705828][T26249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.705886][T26249] R13: 0000000000000000 R14: 00007f87dc115fa0 R15: 00007ffc45227c98 [ 572.705910][T26249] [ 572.875468][T26249] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 573.024232][T26255] FAULT_INJECTION: forcing a failure. [ 573.024232][T26255] name failslab, interval 1, probability 0, space 0, times 0 [ 573.037008][T26255] CPU: 1 UID: 0 PID: 26255 Comm: syz.9.7224 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 573.037041][T26255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.037115][T26255] Call Trace: [ 573.037123][T26255] [ 573.037132][T26255] dump_stack_lvl+0xf6/0x150 [ 573.037160][T26255] dump_stack+0x15/0x1a [ 573.037198][T26255] should_fail_ex+0x261/0x270 [ 573.037227][T26255] should_failslab+0x8f/0xb0 [ 573.037254][T26255] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 573.037289][T26255] ? __alloc_skb+0x10d/0x320 [ 573.037385][T26255] __alloc_skb+0x10d/0x320 [ 573.037470][T26255] ? audit_log_start+0x37f/0x6e0 [ 573.037519][T26255] audit_log_start+0x39a/0x6e0 [ 573.037674][T26255] ? audit_log_end+0x1d0/0x1e0 [ 573.037770][T26255] audit_seccomp+0x49/0x100 [ 573.037803][T26255] __seccomp_filter+0x694/0x10e0 [ 573.037841][T26255] __secure_computing+0x7e/0x150 [ 573.037866][T26255] syscall_trace_enter+0xcf/0x1f0 [ 573.038015][T26255] ? fpregs_assert_state_consistent+0x83/0xa0 [ 573.038053][T26255] do_syscall_64+0xaa/0x1a0 [ 573.038084][T26255] ? clear_bhb_loop+0x25/0x80 [ 573.038110][T26255] ? clear_bhb_loop+0x25/0x80 [ 573.038137][T26255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.038241][T26255] RIP: 0033:0x7f87dbeecb7c [ 573.038260][T26255] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 573.038314][T26255] RSP: 002b:00007f87da557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.038335][T26255] RAX: ffffffffffffffda RBX: 00007f87dc115fa0 RCX: 00007f87dbeecb7c [ 573.038350][T26255] RDX: 000000000000000f RSI: 00007f87da5570a0 RDI: 0000000000000005 [ 573.038365][T26255] RBP: 00007f87da557090 R08: 0000000000000000 R09: 0000000000000000 [ 573.038377][T26255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.038431][T26255] R13: 0000000000000000 R14: 00007f87dc115fa0 R15: 00007ffc45227c98 [ 573.038450][T26255] [ 573.234884][T26255] audit_log_lost: 205 callbacks suppressed [ 573.234990][T26255] audit: audit_lost=18 audit_rate_limit=0 audit_backlog_limit=64 [ 573.248796][T26255] audit: out of memory in audit_log_start [ 573.254692][ T29] audit: type=1326 audit(573.263:36121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26254 comm="syz.9.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87dbeecc1f code=0x7ffc0000 [ 573.278744][ T29] audit: type=1326 audit(573.263:36122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26254 comm="syz.9.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87dbeecdca code=0x7ffc0000 [ 573.301638][ T29] audit: type=1326 audit(573.263:36123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26254 comm="syz.9.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 573.324720][ T29] audit: type=1326 audit(573.263:36124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26254 comm="syz.9.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87dbeee169 code=0x7ffc0000 [ 573.358559][ T29] audit: type=1400 audit(573.373:36125): avc: denied { create } for pid=26258 comm="syz.9.7226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 573.378422][ T29] audit: type=1400 audit(573.373:36126): avc: denied { getopt } for pid=26258 comm="syz.9.7226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 573.404784][T26263] FAULT_INJECTION: forcing a failure. [ 573.404784][T26263] name failslab, interval 1, probability 0, space 0, times 0 [ 573.417428][T26263] CPU: 0 UID: 0 PID: 26263 Comm: syz.8.7228 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 573.417454][T26263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.417471][T26263] Call Trace: [ 573.417478][T26263] [ 573.417512][T26263] dump_stack_lvl+0xf6/0x150 [ 573.417539][T26263] dump_stack+0x15/0x1a [ 573.417558][T26263] should_fail_ex+0x261/0x270 [ 573.417606][T26263] should_failslab+0x8f/0xb0 [ 573.417626][T26263] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 573.417684][T26263] ? alloc_vmap_area+0x1d5/0x1800 [ 573.417796][T26263] alloc_vmap_area+0x1d5/0x1800 [ 573.417834][T26263] ? should_fail_ex+0xd7/0x270 [ 573.417871][T26263] ? should_failslab+0x8f/0xb0 [ 573.417916][T26263] ? __kmalloc_cache_node_noprof+0x194/0x340 [ 573.417956][T26263] __get_vm_area_node+0x162/0x1c0 [ 573.417996][T26263] __vmalloc_node_range_noprof+0x285/0xe80 [ 573.418066][T26263] ? copy_process+0x39e/0x1f60 [ 573.418090][T26263] ? mod_objcg_state+0x3f6/0x530 [ 573.418128][T26263] ? __memcg_slab_post_alloc_hook+0x473/0x5a0 [ 573.418164][T26263] ? copy_process+0x39e/0x1f60 [ 573.418250][T26263] __vmalloc_node_noprof+0x65/0x80 [ 573.418287][T26263] ? copy_process+0x39e/0x1f60 [ 573.418396][T26263] dup_task_struct+0x46d/0x6e0 [ 573.418422][T26263] ? kstrtoull+0x115/0x140 [ 573.418465][T26263] copy_process+0x39e/0x1f60 [ 573.418488][T26263] ? __rcu_read_unlock+0x4e/0x70 [ 573.418515][T26263] kernel_clone+0x168/0x5d0 [ 573.418549][T26263] __x64_sys_clone+0xe9/0x120 [ 573.418674][T26263] x64_sys_call+0x2dc9/0x2e10 [ 573.418736][T26263] do_syscall_64+0xc9/0x1a0 [ 573.418769][T26263] ? clear_bhb_loop+0x25/0x80 [ 573.418859][T26263] ? clear_bhb_loop+0x25/0x80 [ 573.418882][T26263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.418904][T26263] RIP: 0033:0x7f482be4e169 [ 573.418921][T26263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.419014][T26263] RSP: 002b:00007f482a4b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 573.419033][T26263] RAX: ffffffffffffffda RBX: 00007f482c075fa0 RCX: 00007f482be4e169 [ 573.419047][T26263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 573.419060][T26263] RBP: 00007f482a4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 573.419072][T26263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 573.419081][T26263] R13: 0000000000000000 R14: 00007f482c075fa0 R15: 00007fffe3ece2d8 [ 573.419178][T26263] [ 573.665720][T26263] warn_alloc: 1 callbacks suppressed [ 573.665733][T26263] syz.8.7228: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 573.686126][T26263] CPU: 0 UID: 0 PID: 26263 Comm: syz.8.7228 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 573.686175][T26263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.686190][T26263] Call Trace: [ 573.686197][T26263] [ 573.686205][T26263] dump_stack_lvl+0xf6/0x150 [ 573.686279][T26263] dump_stack+0x15/0x1a [ 573.686376][T26263] warn_alloc+0x145/0x1b0 [ 573.686419][T26263] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 573.686472][T26263] ? mod_objcg_state+0x3f6/0x530 [ 573.686509][T26263] ? __memcg_slab_post_alloc_hook+0x473/0x5a0 [ 573.686541][T26263] ? copy_process+0x39e/0x1f60 [ 573.686561][T26263] __vmalloc_node_noprof+0x65/0x80 [ 573.686621][T26263] ? copy_process+0x39e/0x1f60 [ 573.686663][T26263] dup_task_struct+0x46d/0x6e0 [ 573.686684][T26263] ? kstrtoull+0x115/0x140 [ 573.686716][T26263] copy_process+0x39e/0x1f60 [ 573.686744][T26263] ? __rcu_read_unlock+0x4e/0x70 [ 573.686775][T26263] kernel_clone+0x168/0x5d0 [ 573.686812][T26263] __x64_sys_clone+0xe9/0x120 [ 573.686927][T26263] x64_sys_call+0x2dc9/0x2e10 [ 573.687030][T26263] do_syscall_64+0xc9/0x1a0 [ 573.687058][T26263] ? clear_bhb_loop+0x25/0x80 [ 573.687084][T26263] ? clear_bhb_loop+0x25/0x80 [ 573.687107][T26263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.687215][T26263] RIP: 0033:0x7f482be4e169 [ 573.687233][T26263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.687252][T26263] RSP: 002b:00007f482a4b6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 573.687294][T26263] RAX: ffffffffffffffda RBX: 00007f482c075fa0 RCX: 00007f482be4e169 [ 573.687308][T26263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004000 [ 573.687319][T26263] RBP: 00007f482a4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 573.687335][T26263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 573.687345][T26263] R13: 0000000000000000 R14: 00007f482c075fa0 R15: 00007fffe3ece2d8 [ 573.687366][T26263] [ 573.687374][T26263] Mem-Info: [ 573.892052][T26263] active_anon:6853 inactive_anon:6 isolated_anon:0 [ 573.892052][T26263] active_file:16443 inactive_file:2724 isolated_file:0 [ 573.892052][T26263] unevictable:0 dirty:83 writeback:0 [ 573.892052][T26263] slab_reclaimable:3064 slab_unreclaimable:32214 [ 573.892052][T26263] mapped:31357 shmem:3575 pagetables:981 [ 573.892052][T26263] sec_pagetables:0 bounce:0 [ 573.892052][T26263] kernel_misc_reclaimable:0 [ 573.892052][T26263] free:1854305 free_pcp:2200 free_cma:0 [ 573.936805][T26263] Node 0 active_anon:27412kB inactive_anon:24kB active_file:65772kB inactive_file:10896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125428kB dirty:332kB writeback:0kB shmem:14300kB writeback_tmp:0kB kernel_stack:2880kB pagetables:3924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 573.965820][T26263] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.992689][T26263] lowmem_reserve[]: 0 2882 7860 7860 [ 573.998121][T26263] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 574.026661][T26263] lowmem_reserve[]: 0 0 4978 4978 [ 574.031754][T26263] Node 0 Normal free:4454080kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:27412kB inactive_anon:24kB active_file:65772kB inactive_file:10896kB unevictable:0kB writepending:332kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:5272kB local_pcp:4576kB free_cma:0kB [ 574.061880][T26263] lowmem_reserve[]: 0 0 0 0 [ 574.066471][T26263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 574.079236][T26263] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB [ 574.095279][T26263] Node 0 Normal: 1569*4kB (UME) 1095*8kB (UME) 1207*16kB (UME) 1250*32kB (UME) 857*64kB (UME) 886*128kB (UME) 365*256kB (UME) 231*512kB (UME) 254*1024kB (UM) 92*2048kB (UME) 867*4096kB (UM) = 4454060kB [ 574.115285][T26263] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 574.124730][T26263] 22748 total pagecache pages [ 574.129413][T26263] 12 pages in swap cache [ 574.133637][T26263] Free swap = 124640kB [ 574.137821][T26263] Total swap = 124996kB [ 574.141986][T26263] 2097051 pages RAM [ 574.145803][T26263] 0 pages HighMem/MovableOnly [ 574.150471][T26263] 80823 pages reserved [ 574.192940][ T29] audit: type=1400 audit(574.203:36127): avc: denied { bind } for pid=26271 comm="syz.8.7231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 574.211944][ T29] audit: type=1400 audit(574.203:36128): avc: denied { name_bind } for pid=26271 comm="syz.8.7231" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 574.265837][T26277] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.329330][T26277] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.391364][T26277] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.469381][T26277] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.536536][T26284] dummy0 speed is unknown, defaulting to 1000 [ 574.552107][T26277] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.565311][T26277] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.577848][T26277] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.589225][ T3424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.602834][T26277] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.649781][ T3424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.675562][T26284] chnl_net:caif_netlink_parms(): no params data found [ 574.712645][ T3424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.723983][T26284] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.731190][T26284] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.738554][T26284] bridge_slave_0: entered allmulticast mode [ 574.745054][T26284] bridge_slave_0: entered promiscuous mode [ 574.753749][ T3424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.765032][T26284] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.772142][T26284] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.779364][T26284] bridge_slave_1: entered allmulticast mode [ 574.785761][T26284] bridge_slave_1: entered promiscuous mode [ 574.802712][T26284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.813276][T26284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.832860][T26284] team0: Port device team_slave_0 added [ 574.839435][T26284] team0: Port device team_slave_1 added [ 574.858580][T26284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.865605][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.891672][T26284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.905160][T26284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.912329][T26284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.938357][T26284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.019427][ T3424] $Hÿ (unregistering): Released all slaves [ 575.035551][T26284] hsr_slave_0: entered promiscuous mode [ 575.041845][T26284] hsr_slave_1: entered promiscuous mode [ 575.047949][T26284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.055529][T26284] Cannot create hsr debugfs directory [ 575.091691][ T3424] hsr_slave_0: left promiscuous mode [ 575.097459][ T3424] hsr_slave_1: left promiscuous mode [ 575.104653][ T3424] veth0_macvtap: left promiscuous mode [ 575.462952][T26331] FAULT_INJECTION: forcing a failure. [ 575.462952][T26331] name failslab, interval 1, probability 0, space 0, times 0 [ 575.475630][T26331] CPU: 1 UID: 0 PID: 26331 Comm: syz.2.7245 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 575.475749][T26331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 575.475761][T26331] Call Trace: [ 575.475767][T26331] [ 575.475774][T26331] dump_stack_lvl+0xf6/0x150 [ 575.475797][T26331] dump_stack+0x15/0x1a [ 575.475873][T26331] should_fail_ex+0x261/0x270 [ 575.475898][T26331] should_failslab+0x8f/0xb0 [ 575.475924][T26331] __kmalloc_cache_noprof+0x55/0x320 [ 575.475953][T26331] ? alloc_netdev_mqs+0x843/0xac0 [ 575.476035][T26331] alloc_netdev_mqs+0x843/0xac0 [ 575.476061][T26331] rtnl_create_link+0x232/0x720 [ 575.476116][T26331] rtnl_newlink_create+0x14f/0x640 [ 575.476150][T26331] ? security_capable+0x81/0x90 [ 575.476173][T26331] ? netlink_ns_capable+0x88/0xa0 [ 575.476206][T26331] rtnl_newlink+0xf38/0x12d0 [ 575.476270][T26331] ? page_counter_charge+0x21a/0x240 [ 575.476336][T26331] ? __rcu_read_unlock+0x4e/0x70 [ 575.476355][T26331] ? refill_obj_stock+0x15d/0x230 [ 575.476390][T26331] ? mod_objcg_state+0x3f6/0x530 [ 575.476424][T26331] ? __rcu_read_unlock+0x4e/0x70 [ 575.476484][T26331] ? avc_has_perm_noaudit+0x1cc/0x210 [ 575.476519][T26331] ? selinux_capable+0x1f9/0x260 [ 575.476601][T26331] ? security_capable+0x81/0x90 [ 575.476622][T26331] ? rtnetlink_rcv_msg+0x636/0x740 [ 575.476679][T26331] ? __pfx_rtnl_newlink+0x10/0x10 [ 575.476704][T26331] rtnetlink_rcv_msg+0x65a/0x740 [ 575.476744][T26331] ? avc_has_perm_noaudit+0x1cc/0x210 [ 575.476766][T26331] netlink_rcv_skb+0x12f/0x230 [ 575.476796][T26331] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.476835][T26331] rtnetlink_rcv+0x1c/0x30 [ 575.476920][T26331] netlink_unicast+0x605/0x6c0 [ 575.476949][T26331] netlink_sendmsg+0x609/0x720 [ 575.476997][T26331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.477145][T26331] __sock_sendmsg+0x140/0x180 [ 575.477180][T26331] ____sys_sendmsg+0x350/0x4e0 [ 575.477281][T26331] __sys_sendmsg+0x1a0/0x240 [ 575.477323][T26331] __x64_sys_sendmsg+0x46/0x50 [ 575.477350][T26331] x64_sys_call+0x26f3/0x2e10 [ 575.477376][T26331] do_syscall_64+0xc9/0x1a0 [ 575.477438][T26331] ? clear_bhb_loop+0x25/0x80 [ 575.477461][T26331] ? clear_bhb_loop+0x25/0x80 [ 575.477549][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.477649][T26331] RIP: 0033:0x7f53604ae169 [ 575.477663][T26331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.477681][T26331] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.477701][T26331] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 575.477713][T26331] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 575.477725][T26331] RBP: 00007f535eb17090 R08: 0000000000000000 R09: 0000000000000000 [ 575.477783][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 575.477794][T26331] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 575.477812][T26331] [ 575.804097][T26284] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.819437][T26284] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.829646][T26284] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.839581][T26333] sctp: [Deprecated]: syz.2.7246 (pid 26333) Use of int in max_burst socket option. [ 575.839581][T26333] Use struct sctp_assoc_value instead [ 575.854354][T26284] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.920808][T26284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.941869][T26284] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.965201][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.972356][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.999249][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.006325][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.114636][T26356] FAULT_INJECTION: forcing a failure. [ 576.114636][T26356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.117742][T26284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.127794][T26356] CPU: 0 UID: 0 PID: 26356 Comm: syz.8.7251 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 576.127824][T26356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.127840][T26356] Call Trace: [ 576.127848][T26356] [ 576.127858][T26356] dump_stack_lvl+0xf6/0x150 [ 576.127953][T26356] dump_stack+0x15/0x1a [ 576.128021][T26356] should_fail_ex+0x261/0x270 [ 576.128127][T26356] should_fail+0xb/0x10 [ 576.128152][T26356] should_fail_usercopy+0x1a/0x20 [ 576.128184][T26356] _copy_to_user+0x20/0xa0 [ 576.128279][T26356] simple_read_from_buffer+0xb2/0x130 [ 576.128345][T26356] proc_fail_nth_read+0x103/0x140 [ 576.128443][T26356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 576.128483][T26356] vfs_read+0x1b2/0x710 [ 576.128503][T26356] ? __rcu_read_unlock+0x4e/0x70 [ 576.128550][T26356] ? __fget_files+0x186/0x1c0 [ 576.128578][T26356] ksys_read+0xeb/0x1b0 [ 576.128601][T26356] __x64_sys_read+0x42/0x50 [ 576.128703][T26356] x64_sys_call+0x2a3b/0x2e10 [ 576.128728][T26356] do_syscall_64+0xc9/0x1a0 [ 576.128775][T26356] ? clear_bhb_loop+0x25/0x80 [ 576.128801][T26356] ? clear_bhb_loop+0x25/0x80 [ 576.128891][T26356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.128996][T26356] RIP: 0033:0x7f482be4cb7c [ 576.129075][T26356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 576.129097][T26356] RSP: 002b:00007f482a4b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 576.129120][T26356] RAX: ffffffffffffffda RBX: 00007f482c075fa0 RCX: 00007f482be4cb7c [ 576.129135][T26356] RDX: 000000000000000f RSI: 00007f482a4b70a0 RDI: 0000000000000003 [ 576.129150][T26356] RBP: 00007f482a4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 576.129223][T26356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.129238][T26356] R13: 0000000000000000 R14: 00007f482c075fa0 R15: 00007fffe3ece2d8 [ 576.129262][T26356] [ 576.409790][T26284] veth0_vlan: entered promiscuous mode [ 576.417305][T26284] veth1_vlan: entered promiscuous mode [ 576.431695][T26284] veth0_macvtap: entered promiscuous mode [ 576.439574][T26284] veth1_macvtap: entered promiscuous mode [ 576.448964][T26284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.459447][T26284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.469322][T26284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.479775][T26284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.490475][T26284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.498780][T26284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.509344][T26284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.519181][T26284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.529618][T26284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.540121][T26284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.551055][T26284] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.559830][T26284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.568652][T26284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.577330][T26284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.673206][T26382] smc: net device bond0 erased user defined pnetid SYZ2 [ 576.732433][T26384] bridge0: port 3(veth0_to_bond) entered blocking state [ 576.740053][T26384] bridge0: port 3(veth0_to_bond) entered disabled state [ 576.748472][T26384] veth0_to_bond: entered allmulticast mode [ 576.759636][T26384] veth0_to_bond: entered promiscuous mode [ 576.766963][T26384] bridge0: port 3(veth0_to_bond) entered blocking state [ 576.774222][T26384] bridge0: port 3(veth0_to_bond) entered forwarding state [ 576.815272][T26395] __nla_validate_parse: 4 callbacks suppressed [ 576.815306][T26395] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7258'. [ 576.830785][T26394] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7258'. [ 576.853632][T26399] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7260'. [ 577.500443][T26408] syz.6.7264 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 577.514657][T26408] CPU: 0 UID: 0 PID: 26408 Comm: syz.6.7264 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 577.514772][T26408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.514843][T26408] Call Trace: [ 577.514848][T26408] [ 577.514856][T26408] dump_stack_lvl+0xf6/0x150 [ 577.514883][T26408] dump_stack+0x15/0x1a [ 577.514901][T26408] dump_header+0x83/0x2d0 [ 577.514929][T26408] oom_kill_process+0x341/0x4c0 [ 577.514957][T26408] out_of_memory+0x9d1/0xc20 [ 577.515050][T26408] mem_cgroup_out_of_memory+0x13f/0x190 [ 577.515076][T26408] try_charge_memcg+0x5f1/0x890 [ 577.515097][T26408] obj_cgroup_charge_pages+0xc0/0x1a0 [ 577.515125][T26408] __memcg_kmem_charge_page+0x9d/0x170 [ 577.515197][T26408] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 577.515218][T26408] alloc_pages_mpol+0xb6/0x260 [ 577.515248][T26408] alloc_pages_noprof+0xe8/0x130 [ 577.515343][T26408] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 577.515444][T26408] __kvmalloc_node_noprof+0x311/0x520 [ 577.515471][T26408] ? ip_set_alloc+0x1f/0x30 [ 577.515495][T26408] ? ip_set_alloc+0x1f/0x30 [ 577.515633][T26408] ip_set_alloc+0x1f/0x30 [ 577.515657][T26408] hash_netiface_create+0x273/0x730 [ 577.515683][T26408] ? __nla_parse+0x40/0x60 [ 577.515705][T26408] ? __pfx_hash_netiface_create+0x10/0x10 [ 577.515731][T26408] ip_set_create+0x3b6/0x970 [ 577.515790][T26408] ? __nla_parse+0x40/0x60 [ 577.515812][T26408] nfnetlink_rcv_msg+0x4ba/0x580 [ 577.515854][T26408] netlink_rcv_skb+0x12f/0x230 [ 577.515931][T26408] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 577.515959][T26408] nfnetlink_rcv+0x187/0x1610 [ 577.516012][T26408] ? __kfree_skb+0x102/0x150 [ 577.516041][T26408] ? nlmon_xmit+0x51/0x60 [ 577.516066][T26408] ? __kfree_skb+0x102/0x150 [ 577.516082][T26408] ? consume_skb+0x49/0x160 [ 577.516140][T26408] ? nlmon_xmit+0x51/0x60 [ 577.516164][T26408] ? dev_hard_start_xmit+0x3d1/0x400 [ 577.516236][T26408] ? __dev_queue_xmit+0xb76/0x20b0 [ 577.516257][T26408] ? should_fail_ex+0x31/0x270 [ 577.516275][T26408] ? ref_tracker_free+0x3b8/0x420 [ 577.516305][T26408] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 577.516326][T26408] netlink_unicast+0x605/0x6c0 [ 577.516355][T26408] netlink_sendmsg+0x609/0x720 [ 577.516436][T26408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.516452][T26408] __sock_sendmsg+0x140/0x180 [ 577.516477][T26408] ____sys_sendmsg+0x350/0x4e0 [ 577.516499][T26408] __sys_sendmsg+0x1a0/0x240 [ 577.516550][T26408] __x64_sys_sendmsg+0x46/0x50 [ 577.516604][T26408] x64_sys_call+0x26f3/0x2e10 [ 577.516624][T26408] do_syscall_64+0xc9/0x1a0 [ 577.516647][T26408] ? clear_bhb_loop+0x25/0x80 [ 577.516665][T26408] ? clear_bhb_loop+0x25/0x80 [ 577.516684][T26408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.516742][T26408] RIP: 0033:0x7f58e572e169 [ 577.516800][T26408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.516834][T26408] RSP: 002b:00007f58e3d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.516851][T26408] RAX: ffffffffffffffda RBX: 00007f58e5955fa0 RCX: 00007f58e572e169 [ 577.516861][T26408] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 577.516872][T26408] RBP: 00007f58e57b0a68 R08: 0000000000000000 R09: 0000000000000000 [ 577.516882][T26408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.516893][T26408] R13: 0000000000000000 R14: 00007f58e5955fa0 R15: 00007ffe216bd308 [ 577.516909][T26408] [ 577.516915][T26408] memory: usage 307200kB, limit 307200kB, failcnt 445 [ 577.690097][T26416] sctp: [Deprecated]: syz.2.7265 (pid 26416) Use of int in max_burst socket option. [ 577.690097][T26416] Use struct sctp_assoc_value instead [ 577.691883][T26408] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 577.884852][T26408] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 577.892227][T26408] Memory cgroup stats for /syz6: [ 577.892766][T26408] cache 0 [ 577.900675][T26408] rss 135168 [ 577.903885][T26408] shmem 0 [ 577.906831][T26408] mapped_file 0 [ 577.910367][T26408] dirty 0 [ 577.913369][T26408] writeback 0 [ 577.916698][T26408] workingset_refault_anon 2769 [ 577.921472][T26408] workingset_refault_file 289 [ 577.926203][T26408] swap 176128 [ 577.929485][T26408] swapcached 32768 [ 577.933189][T26408] pgpgin 424185 [ 577.936634][T26408] pgpgout 424145 [ 577.940211][T26408] pgfault 413193 [ 577.943743][T26408] pgmajfault 585 [ 577.947272][T26408] inactive_anon 32768 [ 577.951264][T26408] active_anon 0 [ 577.954831][T26408] inactive_file 0 [ 577.958601][T26408] active_file 0 [ 577.962099][T26408] unevictable 131072 [ 577.966042][T26408] hierarchical_memory_limit 314572800 [ 577.971425][T26408] hierarchical_memsw_limit 9223372036854771712 [ 577.977581][T26408] total_cache 0 [ 577.981084][T26408] total_rss 135168 [ 577.984801][T26408] total_shmem 0 [ 577.988343][T26408] total_mapped_file 0 [ 577.992315][T26408] total_dirty 0 [ 577.995815][T26408] total_writeback 0 [ 577.999627][T26408] total_workingset_refault_anon 2769 [ 578.004953][T26408] total_workingset_refault_file 289 [ 578.010185][T26408] total_swap 176128 [ 578.014097][T26408] total_swapcached 32768 [ 578.018420][T26408] total_pgpgin 424185 [ 578.022399][T26408] total_pgpgout 424145 [ 578.026509][T26408] total_pgfault 413193 [ 578.030609][T26408] total_pgmajfault 585 [ 578.034706][T26408] total_inactive_anon 32768 [ 578.039231][T26408] total_active_anon 0 [ 578.043208][T26408] total_inactive_file 0 [ 578.047433][T26408] total_active_file 0 [ 578.051438][T26408] total_unevictable 131072 [ 578.055855][T26408] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7264,pid=26407,uid=0 [ 578.070834][T26408] Memory cgroup out of memory: Killed process 26407 (syz.6.7264) total-vm:93808kB, anon-rss:1060kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 578.335085][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 578.335098][ T29] audit: type=1400 audit(578.343:36275): avc: denied { relabelfrom } for pid=26437 comm="syz.6.7269" name="" dev="pipefs" ino=83570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 578.349676][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7271'. [ 578.363465][ T29] audit: type=1401 audit(578.343:36276): op=setxattr invalid_context="" [ 578.405960][T26445] netlink: 'syz.3.7272': attribute type 8 has an invalid length. [ 578.413861][T26445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7272'. [ 578.462563][ T29] audit: type=1326 audit(578.473:36277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.486098][ T29] audit: type=1326 audit(578.473:36278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.509202][ T29] audit: type=1326 audit(578.473:36279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.532343][ T29] audit: type=1326 audit(578.473:36280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.555333][ T29] audit: type=1326 audit(578.473:36281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.578327][ T29] audit: type=1326 audit(578.473:36282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.601343][ T29] audit: type=1326 audit(578.473:36283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 578.624553][ T29] audit: type=1326 audit(578.473:36284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26452 comm="syz.3.7277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cebfee169 code=0x7ffc0000 [ 579.114101][T26483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7288'. [ 579.314165][T26463] syz.2.7280 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 579.328337][T26463] CPU: 1 UID: 0 PID: 26463 Comm: syz.2.7280 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 579.328381][T26463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 579.328397][T26463] Call Trace: [ 579.328406][T26463] [ 579.328416][T26463] dump_stack_lvl+0xf6/0x150 [ 579.328445][T26463] dump_stack+0x15/0x1a [ 579.328461][T26463] dump_header+0x83/0x2d0 [ 579.328559][T26463] oom_kill_process+0x341/0x4c0 [ 579.328587][T26463] out_of_memory+0x9d1/0xc20 [ 579.328685][T26463] mem_cgroup_out_of_memory+0x13f/0x190 [ 579.328729][T26463] try_charge_memcg+0x5f1/0x890 [ 579.328760][T26463] obj_cgroup_charge_pages+0xc0/0x1a0 [ 579.328872][T26463] __memcg_kmem_charge_page+0x9d/0x170 [ 579.328906][T26463] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 579.328930][T26463] alloc_pages_mpol+0xb6/0x260 [ 579.328964][T26463] alloc_pages_noprof+0xe8/0x130 [ 579.329003][T26463] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 579.329189][T26463] __kvmalloc_node_noprof+0x311/0x520 [ 579.329228][T26463] ? ip_set_alloc+0x1f/0x30 [ 579.329264][T26463] ? ip_set_alloc+0x1f/0x30 [ 579.329303][T26463] ip_set_alloc+0x1f/0x30 [ 579.329414][T26463] hash_netiface_create+0x273/0x730 [ 579.329453][T26463] ? __nla_parse+0x40/0x60 [ 579.329482][T26463] ? __pfx_hash_netiface_create+0x10/0x10 [ 579.329573][T26463] ip_set_create+0x3b6/0x970 [ 579.329624][T26463] ? __nla_parse+0x40/0x60 [ 579.329651][T26463] nfnetlink_rcv_msg+0x4ba/0x580 [ 579.329725][T26463] netlink_rcv_skb+0x12f/0x230 [ 579.329754][T26463] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 579.329801][T26463] nfnetlink_rcv+0x187/0x1610 [ 579.329852][T26463] ? find_get_entry+0x367/0x370 [ 579.329890][T26463] ? find_get_entries+0x1f2/0x230 [ 579.329917][T26463] ? percpu_counter_add_batch+0xc6/0x140 [ 579.329948][T26463] ? shmem_recalc_inode+0x19d/0x1b0 [ 579.329987][T26463] ? shmem_undo_range+0xa3f/0xa80 [ 579.330005][T26463] ? rb_insert_color+0x263/0x290 [ 579.330028][T26463] ? timerqueue_add+0x16e/0x1a0 [ 579.330143][T26463] ? rb_erase+0x230/0x6b0 [ 579.330171][T26463] ? timerqueue_del+0x88/0xb0 [ 579.330209][T26463] ? remove_hrtimer+0x158/0x2d0 [ 579.330242][T26463] ? should_fail_ex+0x31/0x270 [ 579.330263][T26463] ? selinux_nlmsg_lookup+0x119/0x8c0 [ 579.330298][T26463] ? __rcu_read_unlock+0x34/0x70 [ 579.330324][T26463] ? __netlink_lookup+0x25d/0x2a0 [ 579.330421][T26463] netlink_unicast+0x605/0x6c0 [ 579.330464][T26463] netlink_sendmsg+0x609/0x720 [ 579.330493][T26463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.330571][T26463] __sock_sendmsg+0x140/0x180 [ 579.330626][T26463] ____sys_sendmsg+0x350/0x4e0 [ 579.330660][T26463] __sys_sendmsg+0x1a0/0x240 [ 579.330717][T26463] __x64_sys_sendmsg+0x46/0x50 [ 579.330784][T26463] x64_sys_call+0x26f3/0x2e10 [ 579.330811][T26463] do_syscall_64+0xc9/0x1a0 [ 579.330841][T26463] ? clear_bhb_loop+0x25/0x80 [ 579.330873][T26463] ? clear_bhb_loop+0x25/0x80 [ 579.330899][T26463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.330989][T26463] RIP: 0033:0x7f53604ae169 [ 579.331061][T26463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.331079][T26463] RSP: 002b:00007f535eb17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.331097][T26463] RAX: ffffffffffffffda RBX: 00007f53606d5fa0 RCX: 00007f53604ae169 [ 579.331110][T26463] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 579.331125][T26463] RBP: 00007f5360530a68 R08: 0000000000000000 R09: 0000000000000000 [ 579.331139][T26463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.331154][T26463] R13: 0000000000000000 R14: 00007f53606d5fa0 R15: 00007fffd0581b78 [ 579.331176][T26463] [ 579.331288][T26463] memory: usage 307200kB, limit 307200kB, failcnt 1798 [ 579.699211][T26463] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 579.707119][T26463] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 579.714427][T26463] Memory cgroup stats for /syz2: [ 579.714942][T26463] cache 0 [ 579.722914][T26463] rss 0 [ 579.725746][T26463] shmem 0 [ 579.728777][T26463] mapped_file 0 [ 579.732233][T26463] dirty 0 [ 579.735173][T26463] writeback 0 [ 579.738481][T26463] workingset_refault_anon 935 [ 579.743238][T26463] workingset_refault_file 3529 [ 579.748089][T26463] swap 299008 [ 579.751373][T26463] swapcached 24576 [ 579.755086][T26463] pgpgin 413156 [ 579.758577][T26463] pgpgout 413148 [ 579.762116][T26463] pgfault 460695 [ 579.765670][T26463] pgmajfault 490 [ 579.769285][T26463] inactive_anon 24576 [ 579.773296][T26463] active_anon 0 [ 579.776749][T26463] inactive_file 8192 [ 579.780657][T26463] active_file 0 [ 579.784142][T26463] unevictable 0 [ 579.787597][T26463] hierarchical_memory_limit 314572800 [ 579.793028][T26463] hierarchical_memsw_limit 9223372036854771712 [ 579.799194][T26463] total_cache 0 [ 579.802692][T26463] total_rss 0 [ 579.805991][T26463] total_shmem 0 [ 579.809539][T26463] total_mapped_file 0 [ 579.813520][T26463] total_dirty 0 [ 579.816981][T26463] total_writeback 0 [ 579.820825][T26463] total_workingset_refault_anon 935 [ 579.826074][T26463] total_workingset_refault_file 3529 [ 579.831484][T26463] total_swap 299008 [ 579.835294][T26463] total_swapcached 24576 [ 579.839544][T26463] total_pgpgin 413156 [ 579.843534][T26463] total_pgpgout 413148 [ 579.847643][T26463] total_pgfault 460695 [ 579.851737][T26463] total_pgmajfault 490 [ 579.855867][T26463] total_inactive_anon 24576 [ 579.860406][T26463] total_active_anon 0 [ 579.864425][T26463] total_inactive_file 8192 [ 579.868867][T26463] total_active_file 0 [ 579.872842][T26463] total_unevictable 0 [ 579.876830][T26463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7280,pid=26462,uid=0 [ 579.891941][T26463] Memory cgroup out of memory: Killed process 26462 (syz.2.7280) total-vm:93748kB, anon-rss:1060kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 580.141800][T26502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 580.170194][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7299'. [ 580.289482][T26519] sctp: [Deprecated]: syz.6.7303 (pid 26519) Use of int in max_burst socket option. [ 580.289482][T26519] Use struct sctp_assoc_value instead [ 580.447999][T26540] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7309'. [ 580.546821][T26554] netlink: 76 bytes leftover after parsing attributes in process `syz.8.7314'. [ 580.556510][T26554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26554 comm=syz.8.7314 [ 580.608383][T26553] dummy0 speed is unknown, defaulting to 1000 [ 580.821097][T26561] Invalid ELF header magic: != ELF [ 581.114706][T26574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7322'. [ 581.124827][T26574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26574 comm=syz.3.7322 [ 581.219064][T26588] FAULT_INJECTION: forcing a failure. [ 581.219064][T26588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.232331][T26588] CPU: 1 UID: 0 PID: 26588 Comm: syz.6.7329 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 581.232357][T26588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.232368][T26588] Call Trace: [ 581.232374][T26588] [ 581.232381][T26588] dump_stack_lvl+0xf6/0x150 [ 581.232410][T26588] dump_stack+0x15/0x1a [ 581.232546][T26588] should_fail_ex+0x261/0x270 [ 581.232634][T26588] should_fail+0xb/0x10 [ 581.232651][T26588] should_fail_usercopy+0x1a/0x20 [ 581.232672][T26588] strncpy_from_user+0x25/0x230 [ 581.232724][T26588] ? ref_tracker_free+0x2bf/0x420 [ 581.232779][T26588] ? kfree+0x273/0x320 [ 581.232803][T26588] strncpy_from_user_nofault+0x66/0xe0 [ 581.232831][T26588] bpf_probe_read_compat_str+0xb3/0x130 [ 581.232898][T26588] bpf_prog_d73d3bb03d5a037f+0x3e/0x40 [ 581.232917][T26588] bpf_trace_run2+0x106/0x1d0 [ 581.232953][T26588] ? genl_rcv_msg+0x6dc/0x6f0 [ 581.233050][T26588] ? genl_rcv_msg+0x6dc/0x6f0 [ 581.233077][T26588] kfree+0x273/0x320 [ 581.233109][T26588] genl_rcv_msg+0x6dc/0x6f0 [ 581.233135][T26588] ? __pfx_ethnl_act_cable_test+0x10/0x10 [ 581.233157][T26588] ? __dev_queue_xmit+0xb76/0x20b0 [ 581.233239][T26588] netlink_rcv_skb+0x12f/0x230 [ 581.233255][T26588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 581.233284][T26588] genl_rcv+0x28/0x40 [ 581.233310][T26588] netlink_unicast+0x605/0x6c0 [ 581.233412][T26588] netlink_sendmsg+0x609/0x720 [ 581.233434][T26588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.233458][T26588] __sock_sendmsg+0x140/0x180 [ 581.233491][T26588] ____sys_sendmsg+0x350/0x4e0 [ 581.233561][T26588] __sys_sendmsg+0x1a0/0x240 [ 581.233592][T26588] __x64_sys_sendmsg+0x46/0x50 [ 581.233616][T26588] x64_sys_call+0x26f3/0x2e10 [ 581.233640][T26588] do_syscall_64+0xc9/0x1a0 [ 581.233668][T26588] ? clear_bhb_loop+0x25/0x80 [ 581.233751][T26588] ? clear_bhb_loop+0x25/0x80 [ 581.233769][T26588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.233827][T26588] RIP: 0033:0x7f58e572e169 [ 581.233843][T26588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.233863][T26588] RSP: 002b:00007f58e3d97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.233883][T26588] RAX: ffffffffffffffda RBX: 00007f58e5955fa0 RCX: 00007f58e572e169 [ 581.233956][T26588] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 581.233970][T26588] RBP: 00007f58e3d97090 R08: 0000000000000000 R09: 0000000000000000 [ 581.233983][T26588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.233993][T26588] R13: 0000000000000000 R14: 00007f58e5955fa0 R15: 00007ffe216bd308 [ 581.234009][T26588] [ 581.571282][T26586] dummy0 speed is unknown, defaulting to 1000 [ 581.706095][T26609] sctp: [Deprecated]: syz.3.7336 (pid 26609) Use of int in max_burst socket option. [ 581.706095][T26609] Use struct sctp_assoc_value instead [ 581.871310][T26631] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 582.081167][T26666] ================================================================== [ 582.089284][T26666] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 582.096060][T26666] [ 582.098390][T26666] write to 0xffff888118134e00 of 8 bytes by task 26665 on cpu 0: [ 582.106103][T26666] vms_clear_ptes+0x1a4/0x300 [ 582.110785][T26666] vms_complete_munmap_vmas+0x17b/0x470 [ 582.116335][T26666] do_vmi_align_munmap+0x379/0x3c0 [ 582.121448][T26666] do_vmi_munmap+0x1eb/0x230 [ 582.126043][T26666] __vm_munmap+0x196/0x270 [ 582.130468][T26666] __x64_sys_munmap+0x36/0x40 [ 582.135141][T26666] x64_sys_call+0xe1b/0x2e10 [ 582.139728][T26666] do_syscall_64+0xc9/0x1a0 [ 582.144244][T26666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.150161][T26666] [ 582.152481][T26666] read to 0xffff888118134e00 of 8 bytes by task 26666 on cpu 1: [ 582.160126][T26666] getrusage+0xa17/0xb70 [ 582.164379][T26666] io_sq_thread+0x5e0/0x1140 [ 582.168974][T26666] ret_from_fork+0x4b/0x60 [ 582.173389][T26666] ret_from_fork_asm+0x1a/0x30 [ 582.178176][T26666] [ 582.180517][T26666] value changed: 0x00000000000014ea -> 0x00000000000019f4 [ 582.187621][T26666] [ 582.189954][T26666] Reported by Kernel Concurrency Sanitizer on: [ 582.196105][T26666] CPU: 1 UID: 0 PID: 26666 Comm: iou-sqp-26665 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 582.208879][T26666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 582.218941][T26666] ================================================================== [ 582.228258][T26667] __nla_validate_parse: 2 callbacks suppressed [ 582.228272][T26667] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7354'. [ 582.261831][T26667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26667 comm=syz.9.7354 [ 587.590460][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 587.590476][ T29] audit: type=1400 audit(587.603:36392): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 587.618215][ T29] audit: type=1400 audit(587.603:36393): avc: denied { search } for pid=2986 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.639332][ T29] audit: type=1400 audit(587.603:36394): avc: denied { append } for pid=2986 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.661199][ T29] audit: type=1400 audit(587.603:36395): avc: denied { open } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.683259][ T29] audit: type=1400 audit(587.603:36396): avc: denied { getattr } for pid=2986 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1