last executing test programs: 2m1.467190255s ago: executing program 3 (id=2215): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@nombcache}, {@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@data_journal}, {@nombcache}]}, 0x8, 0x5fa, &(0x7f00000004c0)="$eJzs3c1vVFUbAPDn3k4/aN/XFmJUXEgTYyBRWlrAEGMi7AnBj52rSgtBCiW0RosklgQ3JsaNCxNXLsT/QkncunDrwo0rQ0KMYSGGyJg7vVOn05nSTjsfzPx+yaXn3Mvc89zC03Pn9Jw7AfSs8eyPNGJ/RFxNIkYrjhUiPzi++vfu/3njXLYlUSy+/UcSNz5JVirPleRfR/IX/zMayc9pxL6+je0uLl+/NDM/P3ctr08uXb46ubh8/fDFyzMX5i7MXZl+dfrE8WPHT0wd2dH1FSrKp2+9/+HoZ2fe/fbrh8nUd7+eSeJkPMpjy66r+rWDO2o5+56NR3HVg+qYTuzw3J3ir9H13+NMUr2DjnU+///YHxHPxmj0Vfxrjsanb7Y1OKCpikmU+yig5yQN5f/Q7gcCtFj5PqD83r7W++CN0ibflQCtcO/U6gDAau73R0Q5/wurY4MxVBobGL6frBvnSSJiZyNzq7I2fvrxzK1sizrjcEBzrNwsj3JX9/9JKTfHYqhUG76frsv/tGLL9r/VYPvjVXX5D62zcjMinsv7/4HYVv6PV+T/ew22L/8BAAAAAABg99w5FRGv1Jr/l67N/xmoMf9nJCJO7kL7j//9X3o3LyS70BxQ4d6piNdrzv9dm+M71pfX/l+aD9CfnL84P3ckIp6KiEPRP5jVp6rOWzlD+PDn+76q137l/L9sy9ovzwXMz3S3ULUQd3ZmaWan1w1E3LsZ8Xxp/u+BfM/6+T9Z/5/U6P+z/L66xTb2vXT7bL1jj89/oFmK30QcrNn//3e7nWz+fI7J0v3AZPmuYKMXPv7i+3rty39on6z/H948/weTyuf1LG7v/AMRcXS5UKx3vNH7/4Hknb7y+TMfzSwtXZuKGEhOb9w/vb2YoVuV86GcL1n+H3px8/G/tfv/ijzcExErW2zzmUcjv9U7pv+H9snyf3bz/n9sff+//cL07bEf6rV/dkv9/7FSn34o32P8DyptfB7HVhO0LeECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBMujYj/RZJOrJXTdGIiYiQino7hdH5hcenl8wsfXJnNjpU+/z8tf9Lv6Go9KX/+/1hFfbqqfjQi9kbEl317SvWJcwvzs+2+eAAAAAAAAAAAAAAAAAAAAOgQI6U1/8XB6vX/md/72h0d0HSF/Kt8h95TaPiVxcFdDQRoucbzH3jSbT3/+5saB9B69fP/wcNiSUvDAVrI/T/0rgbz368LoAvo/6FXbXFMb6jZcQDtoP8HAAAAAICusvfAnV+SiFh5bU9pywzkx0z2h+6WtjsAoG3M4YXeVVhodwRAu3iPDyRrpb9rLvavP/s/aU5AAAAAAAAAAAAAAMAGB/db/w+9avP1/+b2QzfbZP1/reT3uADoIvU/+kPfD93Oe3zgcb299f8AAAAAAAAAAAAA0AGGrl+amZ+fu7a4/OQV3uiMMLZXWJnpiDB2tfCoOWfuj4jOuMBWF8qP4GhjGG3+uQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKz5NwAA//+Ysid/") 2m1.220692248s ago: executing program 3 (id=2220): syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000f6c21ffc244ced2e1107f22e053d34a9eaaafc85f55fad455ea34cc6835f180c71f9485d8b7cb4e937f6e72f46210a494d2c0e1c082b9dfda5613a1b6fb0b2e11319aef7249db2240fdcd90681e6da72fb557c4da14bd604869697c7d248f800bb8c1c13bb0f72", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/204, 0xcb}, {&(0x7f0000000380)=""/116}, {&(0x7f0000000400)=""/111}], 0x54}, 0x40000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x4004000) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r10 = open(&(0x7f0000000600)='./file1\x00', 0x40, 0x0) fgetxattr(r10, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@noextend}]}}) syz_usb_connect$cdc_ecm(0x2, 0x59, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0xb, 0x80, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x6, 0x24, 0x6, 0x0, 0x0, '6'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x3, 0xf, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xd4, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x4, 0x6}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x6, 0x8, 0x8, 0x40, 0x1}, 0xee, &(0x7f0000000700)={0x5, 0xf, 0xee, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x3}, @generic={0xcd, 0x10, 0x4, "0a20946ea9eedd71301d8d44ffc6ba8d142c271ea7743c7f3e3a2496b6d432152b81e8f6a70e65ed8784c71262ac3dff4591d85a12b4bc7625939caaeb46d934eeeaf6fcebf4862391ab40689d97b60176bd757e633ac609e08afd7749da631fa1e5c93fcbe345b3712974262ed1316295175c6c4cbd54431400535cde2220e29cf1eafb99211231a2f4a957633916cfe0637c3b3cacf47cea4be61bbb6e5e8fa6b5a41abf1451996eaac82fdb3c6e1c270ecd9c2fc5224cd0111093d9bf1e32d2809eeb0247af986b02"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x3, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x1, 0x3f, 0x6, 0xb}]}, 0x5, [{0xf8, &(0x7f0000000800)=@string={0xf8, 0x3, "4d772fb2555d974bebcfa4598e993b3bb8e8b199ea117070c577e3851b472703a508cd1b26bca7c42b757425f158abc5c44edc4539507e95ca7f84eb9b22c8ce5fa2c5d91c368a4879edb05c7a0da3ef182d664ee9b2eec23604c6f402c0d6b12731875363a8bf317f6c6831d987d57ae77b679e9cc8bec494ece822dd317bdae387b39c31708c3131d16eccdf080312951703a189dab8329869d657aed0ef8ab752988b45e27853477fcc66d5a0c71ac451295c54cf307aadad9c7901f966097ee101781a75500f65376fa65671554fb689c249ca67ebfdebec58117bfd09bc83ba1563e9a5822e5252b0b2f4cc549a3eb33643c756"}}, {0xca, &(0x7f0000000900)=@string={0xca, 0x3, "72ebe55c5d3083d70850295fd36d837645778f4e9d13f96640b34b8f1ea4d7fdad5e0853488faf5852e6c5700e0d26f8a19e634761aba3b44e71f10ce3ae75d98508f31733726f2b354dfa46e9cc62458ec02d302da15cd82bc92f32b039840d45ca23fb8060484af392e979a9504b31ee13a9341230656bacea1a7cf147abee512880953b686eff2eb1ff75fcc3d97dc17cf0e63851081b4f471cb765661fbb65c8cbfd893526c2440926726f330f274bd5120ab59497dc96038ebcdc73e86495a5a0840dce367b"}}, {0x8a, &(0x7f0000000a00)=@string={0x8a, 0x3, "dd42c5f8e64eb6bb4d92e154d4f99871f202295aa1f0926881597e6ca02da002cccc4fd44cb8a9fe386d05fc7ea414e1bef90755cdb3e0a533ad5eff72a29263cc0528eb0e1bab7eaa0195e89b29e97e054003153079d7fe367ffc953fafef46c03b8b25f572db6a38a17eb7a1dc23d2dafd582cb4a062d82a10ea29facab3665efb0ec50e6f625b"}}, {0x99, &(0x7f0000000ac0)=@string={0x99, 0x3, "98c99c03b43dd39c42827da5d10e2e89607b1e80dedd9cde065fb46911e23405025a3f2034d04c353aadda1bfe81926892dea767bbd0dfaad3465a8944b4397e2f943f7b48c519e444bf45da17e13786d1643052177b36736bba15b69b75acf6f8e9a873fa032a0cabc332e61beb403ec3c03c49dc1a3d1d7b1b6b8835d417674247354ec565a32a62299a42002e13c5602bc94261ce09"}}, {0x3, &(0x7f0000000300)=@string={0x3, 0x3, "84"}}]}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x26, @local, 0x5}, 0x1c) 2m0.033627494s ago: executing program 3 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000600)='./file0\x00', 0xca) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000, 0x1}, 0x8002, 0x0, 0x1003, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x11, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 1m59.339216062s ago: executing program 3 (id=2250): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x24) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x1b, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a0040000000000000000000f27c0000e8ff00", [0x0, 0xffffffffffffffff]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x200) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7, 0x9000, 0x5c8, 0x4, 0x6}) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x49}}], 0x30}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) getpid() socket$nl_generic(0x10, 0x3, 0x10) 1m58.454250604s ago: executing program 3 (id=2267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x10) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) fstat(r2, &(0x7f0000000240)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r4, 0x0, 0x0, 0x1}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0002004300000125bd7000ffdbdf2502000026c9eb23b3f3d4ff6c"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x8850) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) 1m58.141978678s ago: executing program 3 (id=2272): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000600)='./file1\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1m58.104380828s ago: executing program 32 (id=2272): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f0000000600)='./file1\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 1m4.262710852s ago: executing program 5 (id=3187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="911033000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000dc0)=@nat={'nat\x00', 0x1b, 0x5, 0x668, 0x388, 0x240, 0xffffffff, 0x0, 0x388, 0x598, 0x598, 0xffffffff, 0x598, 0x598, 0x5, &(0x7f0000000d40), {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [0xff, 0xff0000ff, 0xffffffff, 0xff], [0xff000000, 0xff, 0xff, 0xff000000], 'ip6gretap0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x2f, 0x81, 0x0, 0x73}, 0x0, 0x1f8, 0x240, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@frag={{0x30}, {[0x38, 0x5], 0xca, 0x0, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x344969799295111f, @ipv4=@multicast1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}, @port=0x4e23, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "0f27"}}, @common=@inet=@esp={{0x30}, {[0x4d6, 0x4d6]}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x15, @ipv4=@rand_addr=0x64010101, @ipv6=@empty, @icmp_id=0x68, @port=0x4e20}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xff, 0xff], [0x0, 0x0, 0xff], 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x6c, 0x40}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e20, 0x4e20], 0x8, 0x0, 0xf06c, 0xec}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010101, @ipv6=@empty, @icmp_id=0x64, @gre_key=0xa}}}, {{@ipv6={@mcast2, @private0, [0x0, 0xffffffff, 0xff, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'netpci0\x00', {0xff}, {0xff}, 0x67, 0x26, 0x4, 0x7d}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@empty, @ipv6=@local, @icmp_id=0x68, @gre_key=0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 1m4.106544844s ago: executing program 5 (id=3188): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b"], 0x28}}, 0x0) 1m4.060766535s ago: executing program 5 (id=3191): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2c41, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000100)='./bus\x00', 0x1) open(&(0x7f00000003c0)='./bus\x00', 0x64842, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8012}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 1m3.960759916s ago: executing program 5 (id=3192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r5, 0x25, 0x2, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='afs_folio_dirty\x00', r0, 0x0, 0x36}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r6, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(0x0) kcmp(r7, r8, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 1m3.63202225s ago: executing program 5 (id=3195): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xfffffffe, 0x6, 0x0, 0x0, "000038d4583b2e1e63a22300"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSBRK(r2, 0x5427) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086ddccef6a00", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x44, 0x30, 0x48b, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x20}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$key(r5, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1m2.459967765s ago: executing program 5 (id=3203): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001100)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1m2.459742405s ago: executing program 33 (id=3203): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001100)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 1.248571344s ago: executing program 1 (id=4772): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4084, 0xff4}], &(0x7f0000000200), 0x1}, 0x20) 1.164336255s ago: executing program 1 (id=4773): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f00000700000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a"], 0x40}, 0x20000004) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1.131368755s ago: executing program 1 (id=4775): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x3, 0x4, 0x10005, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x74c, &(0x7f0000000f40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000080)=0x8) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="eaa9ed49abe6b34ae974176f8e49b3dc6af54c9cd2e8bcbd818b8a5655769618fa998d02c18b1cf14f85e4ce405428d93380eb599839998b044507b8d1960ddf5d8248cdd58b8dd4f32dc2884a78c086f13fa742f502a1625e6e8284856f03734b5994bc6909f9d4c8b72103adb74bb5e510f0860e9152ba8e16730fe351535400d827af12f2ac1eafab40ca4707cdbe10d5195d3a01ecd804ddad508ed2530cdc3ecfd373bc5da4ac637aa6aecdef89dbf5cf8a4605e4b62e661d634057302ced99dcfd0b0d", 0xc6, 0xc000, &(0x7f0000000300)={0xa, 0x4e24, 0x7b, @loopback, 0x1}, 0x1c) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x3, &(0x7f0000000380)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x3, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@afid={'afid', 0x3d, 0x40}}], [], 0x6b}}) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1.021181897s ago: executing program 2 (id=4780): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x38a009a, &(0x7f0000000240)=ANY=[], 0x97, 0x2b0, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="f72034c1b1eb4e18000200000000000020000000000000850000007b00000018010000f6ce3d5966ff0007010000f8ffffffb70200000800000a7f6ad200"/75], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r5, 0x9}, 0x8) write$selinux_validatetrans(r3, 0x0, 0x71) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r7 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r7, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) r9 = dup3(r8, r7, 0x0) finit_module(r9, 0x0, 0x200000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r12}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='jbd2_lock_buffer_stall\x00', r11}, 0x18) socket$netlink(0x10, 0x3, 0x0) 963.482067ms ago: executing program 6 (id=4782): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x22, 0x8008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x4, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000580)='@', 0x1, 0x20004004, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 906.485798ms ago: executing program 2 (id=4784): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 794.4622ms ago: executing program 0 (id=4787): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 578.145572ms ago: executing program 2 (id=4788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) 535.132173ms ago: executing program 0 (id=4789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="fc5ddbe2e963cd2709cccb9b95c91aaff00bb81168c74453be02ecb8cb3d257702605ff6c86cd2560adf7ac50f3b0c220463f2c72755c6044597c22762bb03885e2cb3579ec5732d6b5fe60e817d9b15aca06be2d2065617bdeb1d2143642ced3ad239eed5d9ad1f676685d9c7d4b5b435b832638606f258c5e9d2c790e9f7d7000f12f38afdfc59"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x900, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x80000001}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200008c0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010080000000000000000000000a4c000000060a0b040000002ffb4d0abd5e28f1da000000000002000000200004801c000180090001006d617371000000000c00028008000240000000110900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) readv(r7, &(0x7f0000000480)=[{&(0x7f0000000600)=""/163, 0xa3}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000780)=""/112, 0x70}, {&(0x7f0000000800)=""/148, 0x94}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='tlb_flush\x00', r8, 0x0, 0x8000000000}, 0x18) write$binfmt_script(r7, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={[&(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)='\x02', &(0x7f0000000280)=',){\\,/&+\x00', &(0x7f00000002c0)='/dev/loop-control\x00']}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) 462.515754ms ago: executing program 2 (id=4790): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000000000000000000300000000020000000200000000fcff0000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xd) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 436.837294ms ago: executing program 6 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 431.134994ms ago: executing program 1 (id=4793): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_io_uring_complete(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x7, @loopback}, r3, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0xd, 0x80000001, "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", 0x81, 0x2, 0x60, 0x4, 0x2, 0x9, 0x8}, r3}}, 0x120) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x390, 0x460, 0x1f0, 0x2c0, 0x1f0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@inet=@recent0={{0xf8}, {0x6, 0x9, 0x2, 0x1, 'syz0\x00', 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ipv6={@empty, @mcast1, [0xff000000, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'wg1\x00', {}, {}, 0x87, 0x6, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@loopback, @mcast2, [0xffffffff, 0xff000000, 0xff000000, 0xff0000ff], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'lo\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x16, 0x9f, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) iopl(0xe) 412.951625ms ago: executing program 2 (id=4795): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgroups(0x1, &(0x7f0000000100)=[0x0]) setregid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0xfffffed6) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioprio_get$pid(0x2, 0x0) alarm(0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x3}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) 348.995605ms ago: executing program 4 (id=4796): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=@newchain={0x9f0, 0x64, 0x10, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0x1, 0xe}, {0x0, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x800}, @filter_kind_options=@f_bpf={{0x8}, {0x98c, 0x2, [@TCA_BPF_ACT={0x4a0, 0x1, [@m_csum={0x238, 0x6, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa16, 0x3, 0xffffffffffffffff, 0x80000001, 0x100}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0xb16, 0x8, 0x5, 0x3}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xc, 0x10000000, 0x9, 0xfffffff5}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x57, 0x4, 0x3c, 0x3}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x20000000, 0x10001, 0x7}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1a6b, 0x4, 0x3, 0x7, 0xffff}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x2, 0x1000, 0xff}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x5, 0xffffffffffffffff, 0x6, 0xbe}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xfffffff7, 0x6, 0x800, 0x10000}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x4, 0x8, 0xfffffffb}, 0x5}}]}, {0xf1, 0x6, "dbe5399ef9f31a18edd61c5f2a7c892e7eddf4c90af02ade28cd3d86517cb3bd98fce31bf59f5190c81559e46012e0c0e4e7d7e47646ba5a196b063142836519f5b2e07954133f72252be65388078e3b637597ff89a8db733395fdff20bdc37cf3f8bb925ce579f50b432821b7c709b4c2f03c6ea0e6471bafc2132a131dfd6114ff1f906c6453688ddc0022b964db3607ace5c734b88c95db69dd086ef71bad76642c5c198ff43313ac9ab9199e4ac692fbcd65d20f0d652bbf6496b44f0899c3b26a54a9eff83613862b1807f9e83e2c942b558043f39a8b520e3c94cdbec7ddbc5d31748b7018467fd8b80d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x15c, 0x1e, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xc, 0x0, 0xf5e4, 0x6}, 0xd}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0x4, 0xfffffff8, 0x7}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xed, 0x7cb, 0x4, 0x5, 0x1}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x542, 0x8, 0x5, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x58, 0x6, 0x1, 0x7bc6}, 0xf}}]}, {0x9d, 0x6, "a02f159433b04cbde2f55824d9ef88c776b8f8e51cfb5b31a6138666429d420edf2100870780e021b9a4d24adca13f818c3d54fd45c8a9a2122edad5b53828f09a5d17f9cdb52234869c06ea58e6e97360e4b8d27982c04b33ce3e201b0b42f29477cf0a1c4df91a92ba285001ca4c187757ac6bd11affa4138c1dd776a249a45ab88f3fa0452588d81bc22e060bccf49e1104da56c971f843"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x108, 0x2, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x56}, @TCA_CT_ZONE={0x6, 0x4, 0xa}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010102}]}, {0x9d, 0x6, "bbad6eb8d3263987773043f5c376d000f3ba38d90e1934da0b6072f8fc7dea0befbd6eef83094298ad9663715ee88fb1c07fc141cd9b9a1c318711f16262bbb179a168b0068dc3a96a7d248c1ab8e9d5a59fad0b513d1c4fdcefe500add8532db67c4db0379772d76a6a966e5c35ae6078ef2ebd287d8c03c8c4b150f3b8b1741cc54a40a3559bbfbb77028b647159b9808e5585d66b360166"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8d}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x1756, 0x4, 0x8, 0x5}, {0x40, 0x2, 0x5, 0x1}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0xd7, 0xc, 0x6}, {0x4, 0x19, 0xf, 0x10000}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0xa}, {0x54, 0x5, [{0x0, 0xc7, 0x5, 0x6}, {0x1, 0x1, 0x9, 0xe10c}, {0xe, 0x6, 0x9, 0x7f}, {0x9, 0x12, 0x59, 0x3800}, {0x8, 0x3, 0x80, 0x3}, {0x1000, 0xc0, 0x9d, 0x8}, {0x4, 0x1d, 0x5, 0x7}, {0x3, 0x3, 0x5, 0xed4}, {0x7, 0xdd, 0x28, 0x5}, {0x1000, 0x0, 0x6, 0x1000}]}}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x414, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x9, 0x3, 0x7, 0x1, 0x8, 0x7, 0x9, 0x3, 0xff, 0x4, 0xe33f, 0x80000000, 0x6, 0x0, 0x6, 0x40, 0xff, 0x0, 0xbb, 0x1696, 0xa, 0x8, 0x67c72f6e, 0xe, 0x74434ef6, 0x1000, 0x1, 0x8, 0x80000000, 0x1, 0x1, 0x200, 0xdf8, 0x4, 0xfffff2a7, 0x0, 0x10001, 0x3c3a300b, 0x7, 0x0, 0x54cd, 0xaf5, 0x3, 0xffff, 0x0, 0xffffff80, 0x6, 0xff, 0x4, 0xfffffffc, 0x7f, 0x1, 0x9, 0x4, 0xdc20, 0x5, 0x9, 0x1, 0x8000, 0x7, 0x2, 0xfffffa32, 0x7, 0xf87, 0x8, 0x0, 0x66, 0x8, 0x6, 0x7ff, 0x39, 0xffffffff, 0xfffffff7, 0x3bc6, 0x9ec9, 0x7, 0x2, 0x4af0, 0x1, 0x1, 0x3, 0x9, 0x5e1, 0x81, 0x0, 0x5, 0xffffff9f, 0x0, 0x9, 0xb46, 0x6, 0x5, 0x8, 0x7, 0x5, 0x8, 0x9, 0x0, 0xfd06, 0x6e59, 0x698, 0x1, 0x8, 0x0, 0x80000000, 0x6, 0x10001, 0x6, 0x2, 0x800, 0xffff, 0x2, 0x1, 0xf47cce67, 0x2, 0x4f, 0x6, 0x1, 0x3ff, 0xc, 0x8, 0x4, 0x0, 0x1, 0x401, 0x2, 0xffff, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x5, 0x5, 0x9, 0x2, 0x7ff, 0x374b8463, 0x2, 0xfffffff7, 0x0, 0x8, 0x4, 0x2, 0xd89, 0x3, 0x1, 0xfffffc00, 0x1, 0x3, 0xa, 0x7, 0x9, 0x8, 0x1, 0x5, 0x6, 0x1, 0x1, 0xff, 0x0, 0x6, 0x2, 0x6, 0xfffffcd6, 0x4, 0x6, 0x7, 0x100, 0x34d97183, 0x1, 0x6, 0x74, 0x5, 0x7, 0x4, 0x7, 0xfffffff9, 0x8, 0x3, 0x10000, 0xf, 0x3, 0x1000, 0xa, 0x6, 0x0, 0x4, 0x4, 0x9, 0x4, 0x2, 0x8, 0x8, 0x2, 0xffffffff, 0xb, 0x52fde876, 0xfffffffb, 0x7, 0x8, 0x84, 0x4, 0xffffffff, 0x9, 0x5, 0xad4, 0x1ff, 0x1, 0xfffeffff, 0x7, 0x1fe0000, 0x10, 0x9, 0xdf, 0xffffffff, 0xe000, 0x1, 0x400, 0x1, 0x5, 0x0, 0x8, 0xca, 0x401, 0x7, 0x9, 0x80000000, 0x10001, 0x6, 0x6d, 0x3, 0x7, 0x3, 0xfffffffb, 0x3, 0xec3, 0xffff, 0x3, 0x1f9a754b, 0xfffffffe, 0x7, 0x1, 0x81, 0xcc, 0x30, 0xfe, 0x5, 0x5314, 0x8, 0x540, 0x7, 0x0, 0x0, 0x31a4, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x7, 0x2, 0x9, 0x7}, {0x7, 0x4, 0x0, 0x2}]}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e20}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000780)={@remote, @rand_addr=' \x01\x00', @mcast1, 0x1, 0x6, 0x0, 0x100, 0x6, 0x2100013, r3}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="380200008cb7407208253be7ac753d2a8ac51a288388471860246a5c00946de79ed1dbfd5c3d3c406e88773d41343517", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="040102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004002007000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=r3, @ANYBLOB], 0x238}, 0x1, 0x0, 0x0, 0x20000080}, 0x44084) r4 = memfd_secret(0x0) sendmsg$IPSET_CMD_TYPE(r4, 0x0, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat(r4, &(0x7f0000000180)='./file0\x00', 0x492040, 0x100) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "369220a32ea7cbb9", "9fb18895146e740861737c50577fddea", "303f6d9d", "772e0e7dbe8629a2"}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000280)=[0x0], 0x0, 0x2b, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', r8, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x1}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x90) close(r0) 348.514665ms ago: executing program 6 (id=4797): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000000}, 0x1100, 0x5dd7, 0xfffffffe, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x4, 0x3, {0x0, 0x0, 0x0, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) socket$rds(0x15, 0x5, 0x0) 286.546816ms ago: executing program 2 (id=4798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000f00)={0x24, &(0x7f0000000d80)={0x40, 0x10, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r7) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0xfffffffffffffffe, 0x8, 0x0) 286.330136ms ago: executing program 6 (id=4799): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 283.282536ms ago: executing program 4 (id=4800): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffe9, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 255.467947ms ago: executing program 6 (id=4801): r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000080)={0x8, 0x2, 0xa0, 0xfffffe00, 0x5, 0xa}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xca}]}, 0x3c}}, 0x0) 241.300067ms ago: executing program 1 (id=4802): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000602, 0xee00, &(0x7f00000002c0)={0x3, 0x9, 0x1, 0x1}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xd}}}]}, 0x38}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @local, 0xfffffffe}, 0x80, 0x0}, 0x20000080) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', r4, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe8}, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x72c1, &(0x7f0000000240)={0x0, 0xb54c, 0x2000, 0x3, 0x16, 0x0, r8}, &(0x7f0000000000), &(0x7f0000000080)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r9) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) 163.402717ms ago: executing program 6 (id=4803): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000380)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@grpjquota}, {@usrjquota}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) 163.191957ms ago: executing program 4 (id=4804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r5, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, @ax25={0x3, @bcast, 0x1}, @generic={0x1a, "9a0f7401c9ab33a335893161e548"}, 0x2, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000000)='ipvlan0\x00', 0x7f, 0x10001, 0x621}) 162.560148ms ago: executing program 0 (id=4805): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000000000000000000300000000020000000200000000fcff0000000000000000010500000010000000010000000000000e01000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xd) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 162.223048ms ago: executing program 4 (id=4806): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x101, 0x408080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000400000000000000030000002400018008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000080003"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff581}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) sysinfo(&(0x7f0000000080)=""/98) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xc92b) 106.270098ms ago: executing program 0 (id=4807): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) ioprio_set$pid(0x3, 0x0, 0x0) 42.553869ms ago: executing program 4 (id=4808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x1100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 1) 42.195549ms ago: executing program 4 (id=4809): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x0, 0x8, r0, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYRES64=0x0, @ANYRESHEX], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, &(0x7f0000000440)) r5 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x3c7a, &(0x7f00000003c0)={0x0, 0xe982, 0x200, 0x0, 0x57}, &(0x7f0000000240), &(0x7f0000000340)) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.894969ms ago: executing program 0 (id=4810): kexec_load(0x8000, 0x9, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000, 0x9}, {&(0x7f0000000000)="71e8f6c51f4f7847e0780ba997e4d1d5d3b88310367662e99d76e4d4c5a449f1f27293fe55394fc98b06a1bd21bdc13234f6d3fbb75003e63807a96753899d7ff23b7149d6c6d2f3ec80fa7bc36c776f994e50afd300840007b40b980261dd92f55f26fe0ae7a90d4283ac73a76ca95b79593eb55a7003d9b9caf2b02e6c16ad8026ffc71c13f4b6af54e709ac2f07abbd7c369fd90815c0d5", 0x99, 0x8000000000000000, 0xfffffffffffff512}, {&(0x7f0000000140)="1759b668ef2f696a4959d396ccdec9a5e154ebc111b67a4fb8faad019be993d032dcc7b7c43bf8662f87450855651ff1d9b8944158cef21425b8f4a2b075e8496f16b60182", 0x45, 0x0, 0x9}, {&(0x7f00000000c0)="a284560c614113f34aa7cbb9a9fbdc0b88ab6f501a1c532e44f33af6d588895db9c6be6de8de5db500a16e285a168c7bd6c7013056fa82512509c4a99b", 0x3d, 0x3a2, 0xc}, {&(0x7f00000001c0)="2e9757ee08c70615dc9eb12ed4a99c0364a17ed6988f21f3c2385dd117c2e9db5481a103ceb2c9142be3968939083d51f577a917f3339c6c8e0f7657b2a5a54020b539a58c351576423336638155634d87ee", 0x52, 0x0, 0xa0}, {&(0x7f0000001280)="a117b70834e4b7d926eca2d0a62ad6e18600cfcc6ad69d0085ba6a7520163d92fc49bd43e3b5397eb745bb88ff00c01c3646cd2f7129a91a5385fa3ffd9023937ff6998b11933560c21621e434946471441b087b31a533a485002f81643af935347761a84fe68af794c9a844ecf278c198a648111e40edd99606b3fef1cfee2c2d64d0276dcf9adcd1c629897bc2886966b79f22f9063917a4d7d40c78e473b6e4902c07eb1373cdc7b227a9dd5ca006c196d19b545bf19ea087c495774e2321e3e4ddac276d7d61f6c6", 0xca, 0x6, 0xffff}, {&(0x7f0000001380)="fcba079d7794df735706dcfc186738b1f5cfa084e2710f02a88b78275ea1f916d294687da5803a4728573a08e9cf2c7986a4282a17796931c4caa9ccc2a03745946c1c4bc9cfb01180eec8837b401143475cfe14a82b7a86416bb514aff412224f2c376bbb4f1c13b4d2e59ab4391d58b1c611", 0x73, 0x6, 0x100}, {&(0x7f0000001400)="b82397ab6c8e80c948c6cc601fd5e80d23d3ee6a79db37d0c514fd1d43fd3ba89bad0e18613f99f313aa2b777beee5f8b2148e6de28637d74392", 0x3a, 0xff, 0xff}, {&(0x7f0000001440)="de4e010f38af08bbbdeb4f82e2c6f9955a40cdcf8c4220d40edaa57150a8154a019da15a46c4ac0cbbf3b50989b144f9aa6d419673e6da653f", 0x39, 0x71, 0x1000}], 0x140000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x1100, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 27.759209ms ago: executing program 1 (id=4811): getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 0s ago: executing program 0 (id=4812): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x180) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000200)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.729956][T16710] RSP: 002b:00007f4d7e387038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 233.729978][T16710] RAX: ffffffffffffffda RBX: 00007f4d7ff45fa0 RCX: 00007f4d7fd1e969 [ 233.729991][T16710] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 233.730003][T16710] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000000 [ 233.730016][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.730029][T16710] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 233.730049][T16710] [ 234.075657][T16728] ALSA: seq fatal error: cannot create timer (-22) [ 234.299856][T16739] serio: Serial port ptm0 [ 234.534638][T16755] x_tables: duplicate underflow at hook 2 [ 234.659382][T16780] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.887957][T16808] FAULT_INJECTION: forcing a failure. [ 234.887957][T16808] name failslab, interval 1, probability 0, space 0, times 0 [ 234.901438][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.6.3517 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 234.901473][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.901489][T16808] Call Trace: [ 234.901503][T16808] [ 234.901512][T16808] __dump_stack+0x1d/0x30 [ 234.901539][T16808] dump_stack_lvl+0xe8/0x140 [ 234.901563][T16808] dump_stack+0x15/0x1b [ 234.901585][T16808] should_fail_ex+0x265/0x280 [ 234.901627][T16808] should_failslab+0x8c/0xb0 [ 234.901740][T16808] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 234.901768][T16808] ? simple_xattr_set+0xa3/0x2b0 [ 234.901810][T16808] kstrdup+0x3e/0xd0 [ 234.901957][T16808] simple_xattr_set+0xa3/0x2b0 [ 234.901994][T16808] ? strlen+0x19/0x40 [ 234.902024][T16808] shmem_xattr_handler_set+0x12b/0x220 [ 234.902147][T16808] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 234.902224][T16808] __vfs_setxattr+0x2e3/0x310 [ 234.902250][T16808] __vfs_setxattr_noperm+0xe8/0x410 [ 234.902285][T16808] __vfs_setxattr_locked+0x1af/0x1d0 [ 234.902425][T16808] vfs_setxattr+0x132/0x270 [ 234.902452][T16808] file_setxattr+0x139/0x1b0 [ 234.902493][T16808] path_setxattrat+0x290/0x310 [ 234.902546][T16808] __x64_sys_fsetxattr+0x6b/0x80 [ 234.902594][T16808] x64_sys_call+0x2f7c/0x2fb0 [ 234.902654][T16808] do_syscall_64+0xd0/0x1a0 [ 234.902678][T16808] ? clear_bhb_loop+0x25/0x80 [ 234.902699][T16808] ? clear_bhb_loop+0x25/0x80 [ 234.902724][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.902750][T16808] RIP: 0033:0x7fc11fafe969 [ 234.902815][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.902832][T16808] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 234.902913][T16808] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 234.902935][T16808] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 0000000000000003 [ 234.902950][T16808] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 234.902966][T16808] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 234.902979][T16808] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 234.903007][T16808] [ 235.433543][T16851] FAULT_INJECTION: forcing a failure. [ 235.433543][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.448518][T16851] CPU: 0 UID: 0 PID: 16851 Comm: syz.4.3536 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 235.448552][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.448564][T16851] Call Trace: [ 235.448572][T16851] [ 235.448607][T16851] __dump_stack+0x1d/0x30 [ 235.448670][T16851] dump_stack_lvl+0xe8/0x140 [ 235.448691][T16851] dump_stack+0x15/0x1b [ 235.448707][T16851] should_fail_ex+0x265/0x280 [ 235.448783][T16851] should_fail+0xb/0x20 [ 235.448810][T16851] should_fail_usercopy+0x1a/0x20 [ 235.448854][T16851] _copy_from_user+0x1c/0xb0 [ 235.448915][T16851] kstrtouint_from_user+0x69/0xf0 [ 235.448979][T16851] ? avc_policy_seqno+0x15/0x30 [ 235.449023][T16851] proc_fail_nth_write+0x50/0x160 [ 235.449071][T16851] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.449117][T16851] vfs_write+0x266/0x8d0 [ 235.449147][T16851] ? vfs_read+0x47f/0x6f0 [ 235.449170][T16851] ? __rcu_read_unlock+0x4f/0x70 [ 235.449190][T16851] ? __fget_files+0x184/0x1c0 [ 235.449265][T16851] ksys_write+0xda/0x1a0 [ 235.449289][T16851] __x64_sys_write+0x40/0x50 [ 235.449314][T16851] x64_sys_call+0x2cdd/0x2fb0 [ 235.449334][T16851] do_syscall_64+0xd0/0x1a0 [ 235.449401][T16851] ? clear_bhb_loop+0x25/0x80 [ 235.449422][T16851] ? clear_bhb_loop+0x25/0x80 [ 235.449466][T16851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.449489][T16851] RIP: 0033:0x7f425fdad41f [ 235.449507][T16851] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 235.449529][T16851] RSP: 002b:00007f425e417030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 235.449552][T16851] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f425fdad41f [ 235.449604][T16851] RDX: 0000000000000001 RSI: 00007f425e4170a0 RDI: 0000000000000004 [ 235.449617][T16851] RBP: 00007f425e417090 R08: 0000000000000000 R09: 0000000000000000 [ 235.449631][T16851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 235.449654][T16851] R13: 0000000000000000 R14: 00007f425ffd5fa0 R15: 00007ffdf369cad8 [ 235.449677][T16851] [ 235.687878][T16859] FAULT_INJECTION: forcing a failure. [ 235.687878][T16859] name failslab, interval 1, probability 0, space 0, times 0 [ 235.700884][T16859] CPU: 1 UID: 0 PID: 16859 Comm: syz.2.3540 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 235.700961][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.701008][T16859] Call Trace: [ 235.701018][T16859] [ 235.701028][T16859] __dump_stack+0x1d/0x30 [ 235.701055][T16859] dump_stack_lvl+0xe8/0x140 [ 235.701078][T16859] dump_stack+0x15/0x1b [ 235.701098][T16859] should_fail_ex+0x265/0x280 [ 235.701143][T16859] ? device_add+0x88/0x770 [ 235.701169][T16859] should_failslab+0x8c/0xb0 [ 235.701204][T16859] __kmalloc_cache_noprof+0x4c/0x320 [ 235.701227][T16859] ? hrtimer_setup+0x31/0x100 [ 235.701251][T16859] device_add+0x88/0x770 [ 235.701340][T16859] netdev_register_kobject+0xe8/0x210 [ 235.701504][T16859] ? register_netdevice+0x916/0xf10 [ 235.701543][T16859] register_netdevice+0x931/0xf10 [ 235.701581][T16859] register_netdev+0x3b/0x50 [ 235.701646][T16859] register_candev+0x21c/0x260 [ 235.701672][T16859] slcan_open+0x21d/0x280 [ 235.701708][T16859] tty_ldisc_open+0x5a/0xb0 [ 235.701731][T16859] tty_set_ldisc+0x1db/0x380 [ 235.701796][T16859] tiocsetd+0x51/0x60 [ 235.701820][T16859] tty_ioctl+0xa7f/0xb80 [ 235.701849][T16859] ? __pfx_tty_ioctl+0x10/0x10 [ 235.701873][T16859] __se_sys_ioctl+0xcb/0x140 [ 235.701989][T16859] __x64_sys_ioctl+0x43/0x50 [ 235.702023][T16859] x64_sys_call+0x19a8/0x2fb0 [ 235.702052][T16859] do_syscall_64+0xd0/0x1a0 [ 235.702073][T16859] ? clear_bhb_loop+0x25/0x80 [ 235.702115][T16859] ? clear_bhb_loop+0x25/0x80 [ 235.702143][T16859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.702170][T16859] RIP: 0033:0x7fba8a08e969 [ 235.702189][T16859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.702212][T16859] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.702237][T16859] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 235.702252][T16859] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000004 [ 235.702267][T16859] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 235.702281][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.702296][T16859] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 235.702319][T16859] [ 235.725812][T16859] slcan: can't register candev [ 236.155513][T16900] wg2: entered promiscuous mode [ 236.161137][T16900] wg2: entered allmulticast mode [ 236.418259][T16956] FAULT_INJECTION: forcing a failure. [ 236.418259][T16956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.433509][T16956] CPU: 0 UID: 0 PID: 16956 Comm: syz.6.3571 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 236.433626][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.433642][T16956] Call Trace: [ 236.433652][T16956] [ 236.433705][T16956] __dump_stack+0x1d/0x30 [ 236.433733][T16956] dump_stack_lvl+0xe8/0x140 [ 236.433757][T16956] dump_stack+0x15/0x1b [ 236.433773][T16956] should_fail_ex+0x265/0x280 [ 236.433853][T16956] should_fail_alloc_page+0xf2/0x100 [ 236.433895][T16956] __alloc_frozen_pages_noprof+0xff/0x360 [ 236.433973][T16956] alloc_pages_mpol+0xb3/0x250 [ 236.434003][T16956] vma_alloc_folio_noprof+0x1aa/0x300 [ 236.434034][T16956] handle_mm_fault+0x1056/0x2ae0 [ 236.434070][T16956] ? __rcu_read_lock+0x37/0x50 [ 236.434128][T16956] __get_user_pages+0xde2/0x1d20 [ 236.434176][T16956] __mm_populate+0x243/0x3a0 [ 236.434210][T16956] do_mlock+0x47f/0x520 [ 236.434233][T16956] ? __secure_computing+0x82/0x150 [ 236.434296][T16956] __x64_sys_mlock+0x36/0x50 [ 236.434320][T16956] x64_sys_call+0x28f4/0x2fb0 [ 236.434344][T16956] do_syscall_64+0xd0/0x1a0 [ 236.434369][T16956] ? clear_bhb_loop+0x25/0x80 [ 236.434476][T16956] ? clear_bhb_loop+0x25/0x80 [ 236.434581][T16956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.434607][T16956] RIP: 0033:0x7fc11fafe969 [ 236.434626][T16956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.434647][T16956] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 236.434699][T16956] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 236.434714][T16956] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 236.434728][T16956] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 236.434743][T16956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.434757][T16956] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 236.434779][T16956] [ 236.725963][ T29] kauditd_printk_skb: 1607 callbacks suppressed [ 236.725978][ T29] audit: type=1400 audit(1745777280.349:9364): avc: denied { read write } for pid=12894 comm="syz-executor" name="loop0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 236.757999][ T29] audit: type=1326 audit(1745777280.358:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.6.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc11fafd37c code=0x7ffc0000 [ 236.783669][ T29] audit: type=1326 audit(1745777280.358:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.6.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc11fafd41f code=0x7ffc0000 [ 236.809666][ T29] audit: type=1326 audit(1745777280.358:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.6.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc11fafd5ca code=0x7ffc0000 [ 236.836410][ T29] audit: type=1326 audit(1745777280.358:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.6.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11fafe969 code=0x7ffc0000 [ 236.862566][ T29] audit: type=1326 audit(1745777280.358:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16955 comm="syz.6.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11fafe969 code=0x7ffc0000 [ 236.890834][ T29] audit: type=1400 audit(1745777280.386:9370): avc: denied { create } for pid=16961 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 236.906678][T16970] FAULT_INJECTION: forcing a failure. [ 236.906678][T16970] name failslab, interval 1, probability 0, space 0, times 0 [ 236.913637][ T29] audit: type=1400 audit(1745777280.423:9371): avc: denied { read write } for pid=12894 comm="syz-executor" name="loop0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 236.927449][T16970] CPU: 1 UID: 0 PID: 16970 Comm: syz.6.3576 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 236.927533][T16970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.927550][T16970] Call Trace: [ 236.927560][T16970] [ 236.927570][T16970] __dump_stack+0x1d/0x30 [ 236.927595][T16970] dump_stack_lvl+0xe8/0x140 [ 236.927620][T16970] dump_stack+0x15/0x1b [ 236.927672][T16970] should_fail_ex+0x265/0x280 [ 236.927717][T16970] should_failslab+0x8c/0xb0 [ 236.927811][T16970] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 236.927909][T16970] ? shmem_alloc_inode+0x34/0x50 [ 236.927946][T16970] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 236.927983][T16970] shmem_alloc_inode+0x34/0x50 [ 236.928086][T16970] alloc_inode+0x3d/0x170 [ 236.928117][T16970] new_inode+0x1d/0xe0 [ 236.928156][T16970] shmem_get_inode+0x244/0x750 [ 236.928199][T16970] shmem_mknod+0x46/0x180 [ 236.928289][T16970] shmem_create+0x34/0x50 [ 236.928326][T16970] ? __pfx_shmem_create+0x10/0x10 [ 236.928374][T16970] path_openat+0x1102/0x2170 [ 236.928417][T16970] do_filp_open+0x109/0x230 [ 236.928577][T16970] do_sys_openat2+0xa6/0x110 [ 236.928607][T16970] __x64_sys_open+0xe6/0x110 [ 236.928632][T16970] x64_sys_call+0x14d4/0x2fb0 [ 236.928729][T16970] do_syscall_64+0xd0/0x1a0 [ 236.928827][T16970] ? clear_bhb_loop+0x25/0x80 [ 236.928850][T16970] ? clear_bhb_loop+0x25/0x80 [ 236.928900][T16970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.928930][T16970] RIP: 0033:0x7fc11fafe969 [ 236.928952][T16970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.928976][T16970] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 236.929012][T16970] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 236.929029][T16970] RDX: 0000000000000000 RSI: 0000000000145142 RDI: 0000200000000240 [ 236.929045][T16970] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 236.929063][T16970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.929079][T16970] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 236.929104][T16970] [ 237.061835][T16978] FAULT_INJECTION: forcing a failure. [ 237.061835][T16978] name failslab, interval 1, probability 0, space 0, times 0 [ 237.066233][ T29] audit: type=1400 audit(1745777280.423:9372): avc: denied { prog_load } for pid=16963 comm="syz.0.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 237.071433][T16978] CPU: 1 UID: 0 PID: 16978 Comm: syz.6.3580 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 237.071468][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.071485][T16978] Call Trace: [ 237.071495][T16978] [ 237.071505][T16978] __dump_stack+0x1d/0x30 [ 237.071532][T16978] dump_stack_lvl+0xe8/0x140 [ 237.071604][T16978] dump_stack+0x15/0x1b [ 237.071658][T16978] should_fail_ex+0x265/0x280 [ 237.071711][T16978] should_failslab+0x8c/0xb0 [ 237.071792][T16978] kmem_cache_alloc_noprof+0x50/0x310 [ 237.071831][T16978] ? security_file_alloc+0x32/0x100 [ 237.071866][T16978] security_file_alloc+0x32/0x100 [ 237.071903][T16978] init_file+0x5c/0x1d0 [ 237.071943][T16978] alloc_empty_file+0x8b/0x200 [ 237.071980][T16978] path_openat+0x68/0x2170 [ 237.072006][T16978] ? _parse_integer_limit+0x170/0x190 [ 237.072053][T16978] ? kstrtoull+0x111/0x140 [ 237.072090][T16978] ? kstrtouint+0x76/0xc0 [ 237.072152][T16978] do_filp_open+0x109/0x230 [ 237.072198][T16978] do_sys_openat2+0xa6/0x110 [ 237.072231][T16978] __x64_sys_openat+0xf2/0x120 [ 237.072258][T16978] x64_sys_call+0x1af/0x2fb0 [ 237.072287][T16978] do_syscall_64+0xd0/0x1a0 [ 237.072316][T16978] ? clear_bhb_loop+0x25/0x80 [ 237.072361][T16978] ? clear_bhb_loop+0x25/0x80 [ 237.072455][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.072482][T16978] RIP: 0033:0x7fc11fafe969 [ 237.072549][T16978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.072634][T16978] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.072658][T16978] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 237.072674][T16978] RDX: 0000000000002000 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 237.072691][T16978] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 237.072706][T16978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.072722][T16978] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 237.072821][T16978] [ 237.391721][T14944] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.579009][T17018] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17018 comm=syz.1.3597 [ 238.947683][T17206] FAULT_INJECTION: forcing a failure. [ 238.947683][T17206] name failslab, interval 1, probability 0, space 0, times 0 [ 238.962318][T17206] CPU: 0 UID: 0 PID: 17206 Comm: syz.0.3649 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 238.962349][T17206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.962362][T17206] Call Trace: [ 238.962369][T17206] [ 238.962402][T17206] __dump_stack+0x1d/0x30 [ 238.962427][T17206] dump_stack_lvl+0xe8/0x140 [ 238.962446][T17206] dump_stack+0x15/0x1b [ 238.962466][T17206] should_fail_ex+0x265/0x280 [ 238.962521][T17206] should_failslab+0x8c/0xb0 [ 238.962572][T17206] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 238.962599][T17206] ? kstrdup_const+0x3e/0x50 [ 238.962647][T17206] kstrdup+0x3e/0xd0 [ 238.962679][T17206] kstrdup_const+0x3e/0x50 [ 238.962738][T17206] alloc_vfsmnt+0xe7/0x350 [ 238.962891][T17206] clone_mnt+0x41/0x750 [ 238.962918][T17206] copy_tree+0x2f1/0x820 [ 238.962959][T17206] copy_mnt_ns+0x120/0x5e0 [ 238.962991][T17206] ? kmem_cache_alloc_noprof+0x220/0x310 [ 238.963027][T17206] ? create_new_namespaces+0x3c/0x410 [ 238.963156][T17206] create_new_namespaces+0x83/0x410 [ 238.963189][T17206] unshare_nsproxy_namespaces+0xe8/0x120 [ 238.963255][T17206] ksys_unshare+0x3d0/0x6d0 [ 238.963294][T17206] ? ksys_write+0x16e/0x1a0 [ 238.963328][T17206] __x64_sys_unshare+0x1f/0x30 [ 238.963373][T17206] x64_sys_call+0x2d4b/0x2fb0 [ 238.963398][T17206] do_syscall_64+0xd0/0x1a0 [ 238.963428][T17206] ? clear_bhb_loop+0x25/0x80 [ 238.963458][T17206] ? clear_bhb_loop+0x25/0x80 [ 238.963557][T17206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.963587][T17206] RIP: 0033:0x7f6d3664e969 [ 238.963654][T17206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.963676][T17206] RSP: 002b:00007f6d34cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 238.963701][T17206] RAX: ffffffffffffffda RBX: 00007f6d36875fa0 RCX: 00007f6d3664e969 [ 238.963714][T17206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 238.963727][T17206] RBP: 00007f6d34cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.963740][T17206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.963829][T17206] R13: 0000000000000000 R14: 00007f6d36875fa0 R15: 00007fff60fd6db8 [ 238.963849][T17206] [ 239.282616][T17218] FAULT_INJECTION: forcing a failure. [ 239.282616][T17218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.296397][T17218] CPU: 0 UID: 0 PID: 17218 Comm: syz.6.3653 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 239.296431][T17218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.296447][T17218] Call Trace: [ 239.296457][T17218] [ 239.296468][T17218] __dump_stack+0x1d/0x30 [ 239.296535][T17218] dump_stack_lvl+0xe8/0x140 [ 239.296555][T17218] dump_stack+0x15/0x1b [ 239.296629][T17218] should_fail_ex+0x265/0x280 [ 239.296665][T17218] should_fail+0xb/0x20 [ 239.296709][T17218] should_fail_usercopy+0x1a/0x20 [ 239.296794][T17218] _copy_to_user+0x20/0xa0 [ 239.296846][T17218] simple_read_from_buffer+0xb5/0x130 [ 239.296877][T17218] proc_fail_nth_read+0x100/0x140 [ 239.297033][T17218] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.297057][T17218] vfs_read+0x19d/0x6f0 [ 239.297082][T17218] ? __pfx_unix_dgram_connect+0x10/0x10 [ 239.297161][T17218] ? __sys_connect+0x20b/0x2b0 [ 239.297202][T17218] ksys_read+0xda/0x1a0 [ 239.297230][T17218] __x64_sys_read+0x40/0x50 [ 239.297330][T17218] x64_sys_call+0x2d77/0x2fb0 [ 239.297385][T17218] do_syscall_64+0xd0/0x1a0 [ 239.297461][T17218] ? clear_bhb_loop+0x25/0x80 [ 239.297544][T17218] ? clear_bhb_loop+0x25/0x80 [ 239.297572][T17218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.297600][T17218] RIP: 0033:0x7fc11fafd37c [ 239.297619][T17218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.297687][T17218] RSP: 002b:00007fc11e167030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.297778][T17218] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafd37c [ 239.297790][T17218] RDX: 000000000000000f RSI: 00007fc11e1670a0 RDI: 0000000000000005 [ 239.297804][T17218] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 239.297819][T17218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.297840][T17218] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 239.297858][T17218] [ 239.708922][T17230] ALSA: seq fatal error: cannot create timer (-22) [ 239.768101][T17235] @ÿ: renamed from bond_slave_0 (while UP) [ 241.418888][T17358] xt_CT: You must specify a L4 protocol and not use inversions on it [ 241.430490][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.438140][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.452975][T17358] bridge_slave_1: left allmulticast mode [ 241.459272][T17358] bridge_slave_1: left promiscuous mode [ 241.465080][T17358] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.473640][T17358] bridge_slave_0: left allmulticast mode [ 241.479784][T17358] bridge_slave_0: left promiscuous mode [ 241.485732][T17358] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.526510][T17365] FAULT_INJECTION: forcing a failure. [ 241.526510][T17365] name failslab, interval 1, probability 0, space 0, times 0 [ 241.540466][T17365] CPU: 1 UID: 0 PID: 17365 Comm: syz.6.3701 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 241.540494][T17365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.540596][T17365] Call Trace: [ 241.540602][T17365] [ 241.540610][T17365] __dump_stack+0x1d/0x30 [ 241.540638][T17365] dump_stack_lvl+0xe8/0x140 [ 241.540657][T17365] dump_stack+0x15/0x1b [ 241.540673][T17365] should_fail_ex+0x265/0x280 [ 241.540706][T17365] should_failslab+0x8c/0xb0 [ 241.540733][T17365] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 241.540850][T17365] ? __d_alloc+0x3d/0x350 [ 241.540881][T17365] __d_alloc+0x3d/0x350 [ 241.540991][T17365] d_alloc+0x2e/0x100 [ 241.541045][T17365] lookup_one_qstr_excl_raw+0x95/0x1b0 [ 241.541139][T17365] do_unlinkat+0x175/0x4c0 [ 241.541173][T17365] __x64_sys_unlink+0x2e/0x40 [ 241.541202][T17365] x64_sys_call+0x22a6/0x2fb0 [ 241.541223][T17365] do_syscall_64+0xd0/0x1a0 [ 241.541272][T17365] ? clear_bhb_loop+0x25/0x80 [ 241.541328][T17365] ? clear_bhb_loop+0x25/0x80 [ 241.541348][T17365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.541368][T17365] RIP: 0033:0x7fc11fafe969 [ 241.541385][T17365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.541408][T17365] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 241.541435][T17365] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 241.541447][T17365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 241.541458][T17365] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 241.541471][T17365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.541486][T17365] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 241.541557][T17365] [ 242.154512][ T29] kauditd_printk_skb: 1274 callbacks suppressed [ 242.154530][ T29] audit: type=1400 audit(1745777285.398:10645): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161157][ T29] audit: type=1400 audit(1745777285.398:10646): avc: denied { map_create } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161305][ T29] audit: type=1400 audit(1745777285.398:10647): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161333][ T29] audit: type=1400 audit(1745777285.398:10648): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161358][ T29] audit: type=1400 audit(1745777285.398:10649): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161384][ T29] audit: type=1400 audit(1745777285.398:10650): avc: denied { create } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 242.161501][ T29] audit: type=1400 audit(1745777285.398:10651): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.161745][ T29] audit: type=1400 audit(1745777285.407:10652): avc: denied { prog_load } for pid=17433 comm="syz.2.3731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.186436][ T29] audit: type=1400 audit(1745777285.407:10653): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 242.186649][ T29] audit: type=1400 audit(1745777285.435:10654): avc: denied { prog_load } for pid=17444 comm="syz.4.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 242.409076][T17467] pim6reg1: entered promiscuous mode [ 242.409094][T17467] pim6reg1: entered allmulticast mode [ 242.906587][T17509] xt_policy: too many policy elements [ 243.475960][T17584] FAULT_INJECTION: forcing a failure. [ 243.475960][T17584] name failslab, interval 1, probability 0, space 0, times 0 [ 243.488666][T17584] CPU: 1 UID: 0 PID: 17584 Comm: syz.0.3794 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 243.488698][T17584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.488714][T17584] Call Trace: [ 243.488723][T17584] [ 243.488733][T17584] __dump_stack+0x1d/0x30 [ 243.488758][T17584] dump_stack_lvl+0xe8/0x140 [ 243.488782][T17584] dump_stack+0x15/0x1b [ 243.488802][T17584] should_fail_ex+0x265/0x280 [ 243.488840][T17584] should_failslab+0x8c/0xb0 [ 243.488871][T17584] kmem_cache_alloc_noprof+0x50/0x310 [ 243.488905][T17584] ? vm_area_dup+0x32/0x260 [ 243.488933][T17584] vm_area_dup+0x32/0x260 [ 243.488959][T17584] __split_vma+0xe9/0x610 [ 243.488994][T17584] ? mas_find+0x4ea/0x610 [ 243.489021][T17584] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 243.489064][T17584] mmap_region+0x44f/0x1470 [ 243.489106][T17584] ? mntput+0x4b/0x80 [ 243.489126][T17584] ? terminate_walk+0x27f/0x2a0 [ 243.489181][T17584] do_mmap+0x9de/0xc20 [ 243.489214][T17584] vm_mmap_pgoff+0x17a/0x2e0 [ 243.489240][T17584] ksys_mmap_pgoff+0xc2/0x310 [ 243.489263][T17584] ? __x64_sys_mmap+0x49/0x70 [ 243.489287][T17584] x64_sys_call+0x1602/0x2fb0 [ 243.489320][T17584] do_syscall_64+0xd0/0x1a0 [ 243.489341][T17584] ? clear_bhb_loop+0x25/0x80 [ 243.489362][T17584] ? clear_bhb_loop+0x25/0x80 [ 243.489382][T17584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.489404][T17584] RIP: 0033:0x7f6d3664e969 [ 243.489423][T17584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.489445][T17584] RSP: 002b:00007f6d34cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.489467][T17584] RAX: ffffffffffffffda RBX: 00007f6d36875fa0 RCX: 00007f6d3664e969 [ 243.489480][T17584] RDX: 0000000000000002 RSI: 0000000000fbe000 RDI: 0000200000000000 [ 243.489492][T17584] RBP: 00007f6d34cb7090 R08: ffffffffffffffff R09: 0000000000000000 [ 243.489507][T17584] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 243.489521][T17584] R13: 0000000000000000 R14: 00007f6d36875fa0 R15: 00007fff60fd6db8 [ 243.489544][T17584] [ 243.937146][T17610] FAULT_INJECTION: forcing a failure. [ 243.937146][T17610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.950689][T17610] CPU: 1 UID: 0 PID: 17610 Comm: wg1 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 243.950724][T17610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.950739][T17610] Call Trace: [ 243.950748][T17610] [ 243.950757][T17610] __dump_stack+0x1d/0x30 [ 243.950781][T17610] dump_stack_lvl+0xe8/0x140 [ 243.950801][T17610] dump_stack+0x15/0x1b [ 243.950898][T17610] should_fail_ex+0x265/0x280 [ 243.950936][T17610] should_fail+0xb/0x20 [ 243.950963][T17610] should_fail_usercopy+0x1a/0x20 [ 243.950982][T17610] _copy_from_user+0x1c/0xb0 [ 243.951014][T17610] ___sys_sendmsg+0xc1/0x1d0 [ 243.951048][T17610] __x64_sys_sendmsg+0xd4/0x160 [ 243.951070][T17610] x64_sys_call+0x2999/0x2fb0 [ 243.951090][T17610] do_syscall_64+0xd0/0x1a0 [ 243.951127][T17610] ? clear_bhb_loop+0x25/0x80 [ 243.951155][T17610] ? clear_bhb_loop+0x25/0x80 [ 243.951183][T17610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.951251][T17610] RIP: 0033:0x7fc11fafe969 [ 243.951308][T17610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.951332][T17610] RSP: 002b:00007fc11e167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.951351][T17610] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafe969 [ 243.951412][T17610] RDX: 000000002008c014 RSI: 00002000000000c0 RDI: 0000000000000004 [ 243.951492][T17610] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 0000000000000000 [ 243.951503][T17610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.951588][T17610] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 243.951612][T17610] [ 244.634785][T17666] FAULT_INJECTION: forcing a failure. [ 244.634785][T17666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.648801][T17666] CPU: 0 UID: 0 PID: 17666 Comm: syz.4.3823 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 244.648836][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.648848][T17666] Call Trace: [ 244.648856][T17666] [ 244.648865][T17666] __dump_stack+0x1d/0x30 [ 244.648917][T17666] dump_stack_lvl+0xe8/0x140 [ 244.648941][T17666] dump_stack+0x15/0x1b [ 244.648956][T17666] should_fail_ex+0x265/0x280 [ 244.649056][T17666] should_fail+0xb/0x20 [ 244.649092][T17666] should_fail_usercopy+0x1a/0x20 [ 244.649116][T17666] _copy_to_user+0x20/0xa0 [ 244.649144][T17666] simple_read_from_buffer+0xb5/0x130 [ 244.649210][T17666] proc_fail_nth_read+0x100/0x140 [ 244.649253][T17666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.649284][T17666] vfs_read+0x19d/0x6f0 [ 244.649314][T17666] ? __rcu_read_unlock+0x4f/0x70 [ 244.649397][T17666] ? __fget_files+0x184/0x1c0 [ 244.649434][T17666] ksys_read+0xda/0x1a0 [ 244.649473][T17666] __x64_sys_read+0x40/0x50 [ 244.649508][T17666] x64_sys_call+0x2d77/0x2fb0 [ 244.649629][T17666] do_syscall_64+0xd0/0x1a0 [ 244.649656][T17666] ? clear_bhb_loop+0x25/0x80 [ 244.649729][T17666] ? clear_bhb_loop+0x25/0x80 [ 244.649753][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.649788][T17666] RIP: 0033:0x7f425fdad37c [ 244.649806][T17666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 244.649828][T17666] RSP: 002b:00007f425e417030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.649865][T17666] RAX: ffffffffffffffda RBX: 00007f425ffd5fa0 RCX: 00007f425fdad37c [ 244.649879][T17666] RDX: 000000000000000f RSI: 00007f425e4170a0 RDI: 0000000000000004 [ 244.649893][T17666] RBP: 00007f425e417090 R08: 0000000000000000 R09: 0000000000000000 [ 244.649908][T17666] R10: 0000200000000c80 R11: 0000000000000246 R12: 0000000000000002 [ 244.649923][T17666] R13: 0000000000000000 R14: 00007f425ffd5fa0 R15: 00007ffdf369cad8 [ 244.649946][T17666] [ 245.596982][T17781] FAULT_INJECTION: forcing a failure. [ 245.596982][T17781] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.611528][T17781] CPU: 0 UID: 0 PID: 17781 Comm: syz.1.3868 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 245.611563][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.611641][T17781] Call Trace: [ 245.611651][T17781] [ 245.611662][T17781] __dump_stack+0x1d/0x30 [ 245.611689][T17781] dump_stack_lvl+0xe8/0x140 [ 245.611782][T17781] dump_stack+0x15/0x1b [ 245.611802][T17781] should_fail_ex+0x265/0x280 [ 245.611867][T17781] should_fail_alloc_page+0xf2/0x100 [ 245.611976][T17781] __alloc_frozen_pages_noprof+0xff/0x360 [ 245.612021][T17781] alloc_pages_mpol+0xb3/0x250 [ 245.612049][T17781] vma_alloc_folio_noprof+0x1aa/0x300 [ 245.612079][T17781] handle_mm_fault+0x1056/0x2ae0 [ 245.612146][T17781] ? __rcu_read_unlock+0x4f/0x70 [ 245.612180][T17781] do_user_addr_fault+0x3fe/0x1090 [ 245.612223][T17781] exc_page_fault+0x54/0xc0 [ 245.612282][T17781] asm_exc_page_fault+0x26/0x30 [ 245.612307][T17781] RIP: 0010:rep_stos_alternative+0x40/0x80 [ 245.612386][T17781] Code: c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 83 e9 08 74 ef 83 f9 08 73 ef eb de 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 245.612409][T17781] RSP: 0018:ffffc9000294fda8 EFLAGS: 00050246 [ 245.612428][T17781] RAX: 0000000000000000 RBX: 000000000000b000 RCX: 0000000000000040 [ 245.612444][T17781] RDX: 0000000000000000 RSI: 000020000000b040 RDI: 000020000000c000 [ 245.612459][T17781] RBP: 000020000000b040 R08: 0001ffff858a7f77 R09: 0000000000000000 [ 245.612510][T17781] R10: 0000000000000000 R11: ffffffff821ad560 R12: 0000000000001000 [ 245.612526][T17781] R13: 00007ffffffff000 R14: 000000007fff4000 R15: 0000000000000000 [ 245.612545][T17781] ? __pfx_read_zero+0x10/0x10 [ 245.612583][T17781] read_zero+0x77/0x160 [ 245.612613][T17781] ? __pfx_read_zero+0x10/0x10 [ 245.612712][T17781] vfs_read+0x19d/0x6f0 [ 245.612743][T17781] ? __rcu_read_unlock+0x4f/0x70 [ 245.612768][T17781] ? __fget_files+0x184/0x1c0 [ 245.612804][T17781] ksys_read+0xda/0x1a0 [ 245.612851][T17781] __x64_sys_read+0x40/0x50 [ 245.612887][T17781] x64_sys_call+0x2d77/0x2fb0 [ 245.612915][T17781] do_syscall_64+0xd0/0x1a0 [ 245.612945][T17781] ? clear_bhb_loop+0x25/0x80 [ 245.612972][T17781] ? clear_bhb_loop+0x25/0x80 [ 245.613001][T17781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.613137][T17781] RIP: 0033:0x7f4d7fd1e969 [ 245.613155][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.613177][T17781] RSP: 002b:00007f4d7e387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.613198][T17781] RAX: ffffffffffffffda RBX: 00007f4d7ff45fa0 RCX: 00007f4d7fd1e969 [ 245.613223][T17781] RDX: 00000000ffffff96 RSI: 0000200000000040 RDI: 0000000000000003 [ 245.613239][T17781] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000000 [ 245.613311][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.613327][T17781] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 245.613349][T17781] [ 245.974012][T17794] FAULT_INJECTION: forcing a failure. [ 245.974012][T17794] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.988184][T17794] CPU: 1 UID: 0 PID: 17794 Comm: syz.2.3873 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 245.988213][T17794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.988227][T17794] Call Trace: [ 245.988234][T17794] [ 245.988243][T17794] __dump_stack+0x1d/0x30 [ 245.988318][T17794] dump_stack_lvl+0xe8/0x140 [ 245.988343][T17794] dump_stack+0x15/0x1b [ 245.988359][T17794] should_fail_ex+0x265/0x280 [ 245.988396][T17794] should_fail_alloc_page+0xf2/0x100 [ 245.988556][T17794] __alloc_frozen_pages_noprof+0xff/0x360 [ 245.988592][T17794] alloc_pages_mpol+0xb3/0x250 [ 245.988621][T17794] folio_alloc_noprof+0x97/0x150 [ 245.988646][T17794] filemap_alloc_folio_noprof+0x66/0x210 [ 245.988682][T17794] __filemap_get_folio+0x28f/0x650 [ 245.988709][T17794] ? aio_setup_ring+0x1e8/0x740 [ 245.988741][T17794] aio_setup_ring+0x26c/0x740 [ 245.988843][T17794] ioctx_alloc+0x2c4/0x4e0 [ 245.988908][T17794] ? fput+0x8f/0xc0 [ 245.988929][T17794] __se_sys_io_setup+0x6b/0x1b0 [ 245.988955][T17794] __x64_sys_io_setup+0x31/0x40 [ 245.988996][T17794] x64_sys_call+0x2f0e/0x2fb0 [ 245.989018][T17794] do_syscall_64+0xd0/0x1a0 [ 245.989040][T17794] ? clear_bhb_loop+0x25/0x80 [ 245.989083][T17794] ? clear_bhb_loop+0x25/0x80 [ 245.989104][T17794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.989124][T17794] RIP: 0033:0x7fba8a08e969 [ 245.989140][T17794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.989195][T17794] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 245.989217][T17794] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 245.989229][T17794] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 245.989242][T17794] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.989257][T17794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.989299][T17794] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 245.989318][T17794] [ 246.450992][T17855] SELinux: syz.2.3894 (17855) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 246.522455][T17866] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 246.529028][T17866] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 246.536811][T17866] vhci_hcd vhci_hcd.0: Device attached [ 246.553178][T17867] vhci_hcd: connection closed [ 246.553411][T14090] vhci_hcd: stop threads [ 246.562552][T14090] vhci_hcd: release socket [ 246.567168][T14090] vhci_hcd: disconnect device [ 246.979788][T17936] ALSA: seq fatal error: cannot create timer (-19) [ 247.229147][T17972] futex_wake_op: syz.2.3946 tries to shift op by -1; fix this program [ 247.278409][T17979] FAULT_INJECTION: forcing a failure. [ 247.278409][T17979] name failslab, interval 1, probability 0, space 0, times 0 [ 247.292094][T17979] CPU: 1 UID: 0 PID: 17979 Comm: syz.2.3947 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 247.292129][T17979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.292166][T17979] Call Trace: [ 247.292175][T17979] [ 247.292185][T17979] __dump_stack+0x1d/0x30 [ 247.292212][T17979] dump_stack_lvl+0xe8/0x140 [ 247.292237][T17979] dump_stack+0x15/0x1b [ 247.292277][T17979] should_fail_ex+0x265/0x280 [ 247.292328][T17979] should_failslab+0x8c/0xb0 [ 247.292365][T17979] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 247.292445][T17979] ? __d_alloc+0x3d/0x350 [ 247.292535][T17979] __d_alloc+0x3d/0x350 [ 247.292574][T17979] d_alloc_parallel+0x53/0xc40 [ 247.292592][T17979] ? __rcu_read_unlock+0x34/0x70 [ 247.292618][T17979] ? lockref_get_not_dead+0x120/0x1c0 [ 247.292695][T17979] ? __rcu_read_unlock+0x4f/0x70 [ 247.292722][T17979] __lookup_slow+0x8c/0x250 [ 247.292745][T17979] lookup_slow+0x3c/0x60 [ 247.292762][T17979] link_path_walk+0x71d/0x8b0 [ 247.292831][T17979] path_openat+0x1de/0x2170 [ 247.292858][T17979] ? _parse_integer_limit+0x170/0x190 [ 247.292905][T17979] do_filp_open+0x109/0x230 [ 247.292941][T17979] ? __pfx_kfree_link+0x10/0x10 [ 247.292985][T17979] do_sys_openat2+0xa6/0x110 [ 247.293005][T17979] __x64_sys_openat+0xf2/0x120 [ 247.293025][T17979] x64_sys_call+0x1af/0x2fb0 [ 247.293052][T17979] do_syscall_64+0xd0/0x1a0 [ 247.293120][T17979] ? clear_bhb_loop+0x25/0x80 [ 247.293143][T17979] ? clear_bhb_loop+0x25/0x80 [ 247.293166][T17979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.293243][T17979] RIP: 0033:0x7fba8a08d2d0 [ 247.293262][T17979] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 247.293283][T17979] RSP: 002b:00007fba886f6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 247.293310][T17979] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba8a08d2d0 [ 247.293322][T17979] RDX: 0000000000000000 RSI: 00007fba8a110bc9 RDI: 00000000ffffff9c [ 247.293334][T17979] RBP: 00007fba8a110bc9 R08: 0000000000000000 R09: 0000000000000000 [ 247.293345][T17979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 247.293357][T17979] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 247.293434][T17979] [ 247.585112][ T29] kauditd_printk_skb: 1683 callbacks suppressed [ 247.585135][ T29] audit: type=1400 audit(1745777290.410:12336): avc: denied { prog_load } for pid=17983 comm="syz.2.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.610993][ T29] audit: type=1400 audit(1745777290.410:12337): avc: denied { prog_load } for pid=17983 comm="syz.2.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.630337][ T29] audit: type=1400 audit(1745777290.410:12338): avc: denied { allowed } for pid=17983 comm="syz.2.3949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 247.657274][ T29] audit: type=1400 audit(1745777290.419:12339): avc: denied { prog_load } for pid=18002 comm="syz.1.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.679133][ T29] audit: type=1400 audit(1745777290.428:12340): avc: denied { map_create } for pid=17984 comm="syz.0.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.701704][ T29] audit: type=1400 audit(1745777290.428:12341): avc: denied { create } for pid=18002 comm="syz.1.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 247.725430][ T29] audit: type=1400 audit(1745777290.428:12342): avc: denied { map_create } for pid=18002 comm="syz.1.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.747334][ T29] audit: type=1400 audit(1745777290.428:12343): avc: denied { prog_load } for pid=18002 comm="syz.1.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.767224][ T29] audit: type=1400 audit(1745777290.428:12344): avc: denied { prog_load } for pid=18002 comm="syz.1.3950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 247.789794][ T29] audit: type=1400 audit(1745777290.428:12345): avc: denied { bpf } for pid=18002 comm="syz.1.3950" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 248.092381][T18071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18071 comm=syz.6.3970 [ 250.005288][T18199] xt_connbytes: Forcing CT accounting to be enabled [ 250.013339][T18199] Cannot find set identified by id 0 to match [ 250.096068][T18208] FAULT_INJECTION: forcing a failure. [ 250.096068][T18208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.110801][T18208] CPU: 0 UID: 0 PID: 18208 Comm: syz.1.4027 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 250.110863][T18208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.110878][T18208] Call Trace: [ 250.110887][T18208] [ 250.110897][T18208] __dump_stack+0x1d/0x30 [ 250.110923][T18208] dump_stack_lvl+0xe8/0x140 [ 250.110944][T18208] dump_stack+0x15/0x1b [ 250.111011][T18208] should_fail_ex+0x265/0x280 [ 250.111053][T18208] should_fail+0xb/0x20 [ 250.111079][T18208] should_fail_usercopy+0x1a/0x20 [ 250.111157][T18208] _copy_from_iter+0xcf/0xdd0 [ 250.111178][T18208] ? alloc_pages_mpol+0x202/0x250 [ 250.111252][T18208] copy_page_from_iter+0x15a/0x290 [ 250.111278][T18208] tun_get_user+0x5c7/0x24d0 [ 250.111315][T18208] ? ref_tracker_alloc+0x1f2/0x2f0 [ 250.111351][T18208] tun_chr_write_iter+0x15e/0x210 [ 250.111378][T18208] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 250.111462][T18208] vfs_write+0x49d/0x8d0 [ 250.111498][T18208] ksys_write+0xda/0x1a0 [ 250.111522][T18208] __x64_sys_write+0x40/0x50 [ 250.111590][T18208] x64_sys_call+0x2cdd/0x2fb0 [ 250.111617][T18208] do_syscall_64+0xd0/0x1a0 [ 250.111644][T18208] ? clear_bhb_loop+0x25/0x80 [ 250.111739][T18208] ? clear_bhb_loop+0x25/0x80 [ 250.111763][T18208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.111786][T18208] RIP: 0033:0x7f4d7fd1d41f [ 250.111802][T18208] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 250.111823][T18208] RSP: 002b:00007f4d7e387000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.111841][T18208] RAX: ffffffffffffffda RBX: 00007f4d7ff45fa0 RCX: 00007f4d7fd1d41f [ 250.111853][T18208] RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 [ 250.111866][T18208] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000000 [ 250.111878][T18208] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 250.111892][T18208] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 250.111916][T18208] [ 250.764624][T18280] FAULT_INJECTION: forcing a failure. [ 250.764624][T18280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.778071][T18280] CPU: 1 UID: 0 PID: 18280 Comm: syz.1.4056 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 250.778105][T18280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.778117][T18280] Call Trace: [ 250.778125][T18280] [ 250.778133][T18280] __dump_stack+0x1d/0x30 [ 250.778229][T18280] dump_stack_lvl+0xe8/0x140 [ 250.778315][T18280] dump_stack+0x15/0x1b [ 250.778332][T18280] should_fail_ex+0x265/0x280 [ 250.778389][T18280] should_fail+0xb/0x20 [ 250.778415][T18280] should_fail_usercopy+0x1a/0x20 [ 250.778433][T18280] _copy_from_user+0x1c/0xb0 [ 250.778530][T18280] kstrtouint_from_user+0x69/0xf0 [ 250.778563][T18280] ? avc_policy_seqno+0x15/0x30 [ 250.778596][T18280] proc_fail_nth_write+0x50/0x160 [ 250.778620][T18280] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.778756][T18280] vfs_write+0x266/0x8d0 [ 250.778812][T18280] ? vfs_read+0x47f/0x6f0 [ 250.778834][T18280] ? __rcu_read_unlock+0x4f/0x70 [ 250.778895][T18280] ? __fget_files+0x184/0x1c0 [ 250.778930][T18280] ksys_write+0xda/0x1a0 [ 250.778955][T18280] __x64_sys_write+0x40/0x50 [ 250.779025][T18280] x64_sys_call+0x2cdd/0x2fb0 [ 250.779052][T18280] do_syscall_64+0xd0/0x1a0 [ 250.779080][T18280] ? clear_bhb_loop+0x25/0x80 [ 250.779120][T18280] ? clear_bhb_loop+0x25/0x80 [ 250.779142][T18280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.779174][T18280] RIP: 0033:0x7f4d7fd1d41f [ 250.779193][T18280] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 250.779210][T18280] RSP: 002b:00007f4d7e387030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.779228][T18280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d7fd1d41f [ 250.779240][T18280] RDX: 0000000000000001 RSI: 00007f4d7e3870a0 RDI: 0000000000000004 [ 250.779256][T18280] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000000 [ 250.779271][T18280] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.779327][T18280] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 250.779350][T18280] [ 251.115445][T18295] xt_hashlimit: size too large, truncated to 1048576 [ 251.122334][T18295] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 251.366062][T18347] FAULT_INJECTION: forcing a failure. [ 251.366062][T18347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.379579][T18347] CPU: 1 UID: 0 PID: 18347 Comm: syz.2.4075 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 251.379637][T18347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.379720][T18347] Call Trace: [ 251.379738][T18347] [ 251.379749][T18347] __dump_stack+0x1d/0x30 [ 251.379776][T18347] dump_stack_lvl+0xe8/0x140 [ 251.379806][T18347] dump_stack+0x15/0x1b [ 251.379827][T18347] should_fail_ex+0x265/0x280 [ 251.379878][T18347] should_fail_alloc_page+0xf2/0x100 [ 251.379916][T18347] __alloc_frozen_pages_noprof+0xff/0x360 [ 251.379955][T18347] alloc_pages_mpol+0xb3/0x250 [ 251.379978][T18347] alloc_migration_target_by_mpol+0x11b/0x240 [ 251.380061][T18347] migrate_pages_batch+0x2e4/0x17d0 [ 251.380138][T18347] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 251.380173][T18347] ? __walk_page_range+0x324/0x340 [ 251.380194][T18347] ? mas_ascend+0x1e9/0x560 [ 251.380217][T18347] ? find_vma+0x6c/0xa0 [ 251.380285][T18347] migrate_pages+0xf99/0x17f0 [ 251.380393][T18347] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 251.380437][T18347] __se_sys_mbind+0x975/0xac0 [ 251.380507][T18347] __x64_sys_mbind+0x78/0x90 [ 251.380581][T18347] x64_sys_call+0x14af/0x2fb0 [ 251.380605][T18347] do_syscall_64+0xd0/0x1a0 [ 251.380683][T18347] ? clear_bhb_loop+0x25/0x80 [ 251.380710][T18347] ? clear_bhb_loop+0x25/0x80 [ 251.380745][T18347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.380940][T18347] RIP: 0033:0x7fba8a08e969 [ 251.380957][T18347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.381056][T18347] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 251.381080][T18347] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 251.381097][T18347] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 251.381113][T18347] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000002 [ 251.381128][T18347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.381143][T18347] R13: 0000000000000001 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 251.381165][T18347] [ 252.649738][T18503] FAULT_INJECTION: forcing a failure. [ 252.649738][T18503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.663010][T18503] CPU: 0 UID: 0 PID: 18503 Comm: syz.6.4132 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 252.663041][T18503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.663084][T18503] Call Trace: [ 252.663091][T18503] [ 252.663100][T18503] __dump_stack+0x1d/0x30 [ 252.663124][T18503] dump_stack_lvl+0xe8/0x140 [ 252.663219][T18503] dump_stack+0x15/0x1b [ 252.663238][T18503] should_fail_ex+0x265/0x280 [ 252.663271][T18503] should_fail+0xb/0x20 [ 252.663361][T18503] should_fail_usercopy+0x1a/0x20 [ 252.663380][T18503] _copy_to_user+0x20/0xa0 [ 252.663400][T18503] simple_read_from_buffer+0xb5/0x130 [ 252.663428][T18503] proc_fail_nth_read+0x100/0x140 [ 252.663460][T18503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.663537][T18503] vfs_read+0x19d/0x6f0 [ 252.663566][T18503] ? __rcu_read_unlock+0x4f/0x70 [ 252.663592][T18503] ? __fget_files+0x184/0x1c0 [ 252.663636][T18503] ksys_read+0xda/0x1a0 [ 252.663737][T18503] __x64_sys_read+0x40/0x50 [ 252.663767][T18503] x64_sys_call+0x2d77/0x2fb0 [ 252.663793][T18503] do_syscall_64+0xd0/0x1a0 [ 252.663847][T18503] ? clear_bhb_loop+0x25/0x80 [ 252.663873][T18503] ? clear_bhb_loop+0x25/0x80 [ 252.663901][T18503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.663924][T18503] RIP: 0033:0x7fc11fafd37c [ 252.663940][T18503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.664004][T18503] RSP: 002b:00007fc11e167030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.664026][T18503] RAX: ffffffffffffffda RBX: 00007fc11fd25fa0 RCX: 00007fc11fafd37c [ 252.664042][T18503] RDX: 000000000000000f RSI: 00007fc11e1670a0 RDI: 0000000000000003 [ 252.664057][T18503] RBP: 00007fc11e167090 R08: 0000000000000000 R09: 000000000000ff39 [ 252.664072][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.664105][T18503] R13: 0000000000000000 R14: 00007fc11fd25fa0 R15: 00007ffce0480928 [ 252.664154][T18503] [ 253.007550][T18525] syzkaller0: entered promiscuous mode [ 253.013211][T18525] syzkaller0: entered allmulticast mode [ 253.013245][ T29] kauditd_printk_skb: 1718 callbacks suppressed [ 253.013256][ T29] audit: type=1400 audit(1745777295.422:14064): avc: denied { read write } for pid=18542 comm="syz.0.4141" name="loop0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 253.052407][ T29] audit: type=1400 audit(1745777295.459:14065): avc: denied { relabelfrom } for pid=18524 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 253.073751][ T29] audit: type=1400 audit(1745777295.459:14066): avc: denied { prog_load } for pid=18524 comm="syz.2.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.093629][ T29] audit: type=1400 audit(1745777295.459:14067): avc: denied { mounton } for pid=18542 comm="syz.0.4141" path="/197/bus" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 253.118339][ T29] audit: type=1400 audit(1745777295.459:14068): avc: denied { create } for pid=18542 comm="syz.0.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 253.138048][ T29] audit: type=1400 audit(1745777295.459:14069): avc: denied { prog_load } for pid=18542 comm="syz.0.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.158751][ T29] audit: type=1400 audit(1745777295.523:14070): avc: denied { map_create } for pid=18556 comm="syz.4.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.178140][ T29] audit: type=1400 audit(1745777295.523:14071): avc: denied { prog_load } for pid=18556 comm="syz.4.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.198589][ T29] audit: type=1400 audit(1745777295.523:14072): avc: denied { prog_load } for pid=18556 comm="syz.4.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.218426][ T29] audit: type=1400 audit(1745777295.523:14073): avc: denied { prog_load } for pid=18556 comm="syz.4.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 253.246646][T18561] wg2: entered promiscuous mode [ 253.251699][T18561] wg2: entered allmulticast mode [ 253.976454][T18604] xt_hashlimit: size too large, truncated to 1048576 [ 253.985192][T18604] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 256.065121][T18721] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4203'. [ 256.084711][T18723] FAULT_INJECTION: forcing a failure. [ 256.084711][T18723] name failslab, interval 1, probability 0, space 0, times 0 [ 256.100572][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.2.4204 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 256.100606][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.100619][T18723] Call Trace: [ 256.100625][T18723] [ 256.100634][T18723] __dump_stack+0x1d/0x30 [ 256.100696][T18723] dump_stack_lvl+0xe8/0x140 [ 256.100779][T18723] dump_stack+0x15/0x1b [ 256.100863][T18723] should_fail_ex+0x265/0x280 [ 256.101048][T18723] ? nd_alloc_stack+0x50/0xa0 [ 256.101084][T18723] should_failslab+0x8c/0xb0 [ 256.101117][T18723] __kmalloc_cache_noprof+0x4c/0x320 [ 256.101144][T18723] nd_alloc_stack+0x50/0xa0 [ 256.101252][T18723] pick_link+0x781/0x820 [ 256.101373][T18723] ? __d_lookup_rcu+0x248/0x2a0 [ 256.101396][T18723] step_into+0x7b6/0x820 [ 256.101473][T18723] ? inode_permission+0xb5/0x300 [ 256.101514][T18723] link_path_walk+0x545/0x8b0 [ 256.101552][T18723] path_lookupat+0x63/0x2a0 [ 256.101588][T18723] filename_lookup+0x147/0x340 [ 256.101752][T18723] ? __pfx_shmem_put_link+0x10/0x10 [ 256.101887][T18723] ? __pfx_shmem_put_link+0x10/0x10 [ 256.101931][T18723] do_linkat+0xd2/0x600 [ 256.102016][T18723] ? getname_flags+0x2be/0x3b0 [ 256.102049][T18723] ? kmem_cache_free+0xdd/0x2f0 [ 256.102139][T18723] __x64_sys_link+0x58/0x70 [ 256.102172][T18723] x64_sys_call+0x2af9/0x2fb0 [ 256.102218][T18723] do_syscall_64+0xd0/0x1a0 [ 256.102244][T18723] ? clear_bhb_loop+0x25/0x80 [ 256.102265][T18723] ? clear_bhb_loop+0x25/0x80 [ 256.102285][T18723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.102305][T18723] RIP: 0033:0x7fba8a08e969 [ 256.102332][T18723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.102363][T18723] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 256.102387][T18723] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 256.102403][T18723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 256.102418][T18723] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.102433][T18723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.102448][T18723] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 256.102481][T18723] [ 258.360395][T18883] pim6reg1: entered promiscuous mode [ 258.366765][T18883] pim6reg1: entered allmulticast mode [ 258.454898][T18893] netlink: 'syz.1.4273': attribute type 16 has an invalid length. [ 258.464330][T18893] netlink: 'syz.1.4273': attribute type 3 has an invalid length. [ 258.476531][T18893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4273'. [ 258.596457][ T29] kauditd_printk_skb: 880 callbacks suppressed [ 258.596477][ T29] audit: type=1400 audit(1745777300.397:14954): avc: denied { prog_load } for pid=18877 comm="syz.4.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.624746][ T29] audit: type=1400 audit(1745777300.397:14955): avc: denied { map_create } for pid=18877 comm="syz.4.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.651091][ T29] audit: type=1400 audit(1745777300.397:14956): avc: denied { prog_load } for pid=18877 comm="syz.4.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.674787][ T29] audit: type=1400 audit(1745777300.397:14957): avc: denied { read write } for pid=12894 comm="syz-executor" name="loop0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 258.702614][ T29] audit: type=1400 audit(1745777300.406:14958): avc: denied { write } for pid=18890 comm="syz.0.4272" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 258.730416][ T29] audit: type=1400 audit(1745777300.406:14959): avc: denied { open } for pid=18890 comm="syz.0.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 258.753229][ T29] audit: type=1400 audit(1745777300.406:14960): avc: denied { map_create } for pid=18890 comm="syz.0.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.777689][ T29] audit: type=1400 audit(1745777300.415:14961): avc: denied { prog_load } for pid=18890 comm="syz.0.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.800886][ T29] audit: type=1400 audit(1745777300.415:14962): avc: denied { prog_load } for pid=18890 comm="syz.0.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 258.821476][ T29] audit: type=1400 audit(1745777300.415:14963): avc: denied { prog_load } for pid=18890 comm="syz.0.4272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 259.230071][T18927] FAULT_INJECTION: forcing a failure. [ 259.230071][T18927] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.245737][T18927] CPU: 1 UID: 0 PID: 18927 Comm: syz.6.4287 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 259.245809][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.245824][T18927] Call Trace: [ 259.245833][T18927] [ 259.245844][T18927] __dump_stack+0x1d/0x30 [ 259.245872][T18927] dump_stack_lvl+0xe8/0x140 [ 259.245893][T18927] dump_stack+0x15/0x1b [ 259.245911][T18927] should_fail_ex+0x265/0x280 [ 259.246004][T18927] should_fail_alloc_page+0xf2/0x100 [ 259.246059][T18927] __alloc_frozen_pages_noprof+0xff/0x360 [ 259.246892][T18927] alloc_pages_mpol+0xb3/0x250 [ 259.246928][T18927] folio_alloc_mpol_noprof+0x39/0x80 [ 259.246955][T18927] shmem_get_folio_gfp+0x3cf/0xd40 [ 259.247413][T18927] shmem_write_begin+0xa8/0x190 [ 259.247451][T18927] generic_perform_write+0x181/0x490 [ 259.247498][T18927] shmem_file_write_iter+0xc5/0xf0 [ 259.247598][T18927] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 259.247634][T18927] vfs_write+0x49d/0x8d0 [ 259.247667][T18927] ksys_write+0xda/0x1a0 [ 259.247798][T18927] __x64_sys_write+0x40/0x50 [ 259.247851][T18927] x64_sys_call+0x2cdd/0x2fb0 [ 259.247930][T18927] do_syscall_64+0xd0/0x1a0 [ 259.247953][T18927] ? clear_bhb_loop+0x25/0x80 [ 259.248068][T18927] ? clear_bhb_loop+0x25/0x80 [ 259.248101][T18927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.248129][T18927] RIP: 0033:0x7fc11fafd41f [ 259.248150][T18927] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 259.248210][T18927] RSP: 002b:00007fc11e166df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 259.248230][T18927] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fc11fafd41f [ 259.248242][T18927] RDX: 0000000000040000 RSI: 00007fc115d47000 RDI: 0000000000000004 [ 259.248255][T18927] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000054e [ 259.248267][T18927] R10: 00000000000007c4 R11: 0000000000000293 R12: 0000000000000004 [ 259.248282][T18927] R13: 00007fc11e166ef0 R14: 00007fc11e166eb0 R15: 00007fc115d47000 [ 259.248306][T18927] [ 259.973722][T18964] Cannot find set identified by id 0 to match [ 260.119789][T18977] FAULT_INJECTION: forcing a failure. [ 260.119789][T18977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.133922][T18977] CPU: 0 UID: 0 PID: 18977 Comm: syz.2.4307 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 260.133952][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.133968][T18977] Call Trace: [ 260.133977][T18977] [ 260.133987][T18977] __dump_stack+0x1d/0x30 [ 260.134015][T18977] dump_stack_lvl+0xe8/0x140 [ 260.134190][T18977] dump_stack+0x15/0x1b [ 260.134213][T18977] should_fail_ex+0x265/0x280 [ 260.134252][T18977] should_fail+0xb/0x20 [ 260.134453][T18977] should_fail_usercopy+0x1a/0x20 [ 260.134478][T18977] copy_page_from_iter_atomic+0x21b/0xff0 [ 260.134510][T18977] ? shmem_write_begin+0xa8/0x190 [ 260.134608][T18977] ? shmem_write_begin+0xe1/0x190 [ 260.134669][T18977] generic_perform_write+0x2c2/0x490 [ 260.134714][T18977] shmem_file_write_iter+0xc5/0xf0 [ 260.134754][T18977] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 260.134784][T18977] vfs_write+0x49d/0x8d0 [ 260.134871][T18977] ksys_write+0xda/0x1a0 [ 260.134896][T18977] __x64_sys_write+0x40/0x50 [ 260.134992][T18977] x64_sys_call+0x2cdd/0x2fb0 [ 260.135065][T18977] do_syscall_64+0xd0/0x1a0 [ 260.135092][T18977] ? clear_bhb_loop+0x25/0x80 [ 260.135120][T18977] ? clear_bhb_loop+0x25/0x80 [ 260.135149][T18977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.135196][T18977] RIP: 0033:0x7fba8a08d41f [ 260.135214][T18977] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 260.135232][T18977] RSP: 002b:00007fba886f6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 260.135254][T18977] RAX: ffffffffffffffda RBX: 000000000005c000 RCX: 00007fba8a08d41f [ 260.135277][T18977] RDX: 000000000005c000 RSI: 00007fba802d7000 RDI: 0000000000000004 [ 260.135349][T18977] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000005bc [ 260.135361][T18977] R10: 0000200000000e02 R11: 0000000000000293 R12: 0000000000000004 [ 260.135375][T18977] R13: 00007fba886f6ef0 R14: 00007fba886f6eb0 R15: 00007fba802d7000 [ 260.135400][T18977] [ 260.874383][T19074] FAULT_INJECTION: forcing a failure. [ 260.874383][T19074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.891063][T19074] CPU: 0 UID: 0 PID: 19074 Comm: syz.1.4341 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 260.891100][T19074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.891150][T19074] Call Trace: [ 260.891158][T19074] [ 260.891168][T19074] __dump_stack+0x1d/0x30 [ 260.891196][T19074] dump_stack_lvl+0xe8/0x140 [ 260.891220][T19074] dump_stack+0x15/0x1b [ 260.891240][T19074] should_fail_ex+0x265/0x280 [ 260.891292][T19074] should_fail_alloc_page+0xf2/0x100 [ 260.891408][T19074] __alloc_frozen_pages_noprof+0xff/0x360 [ 260.891457][T19074] alloc_pages_mpol+0xb3/0x250 [ 260.891547][T19074] folio_alloc_mpol_noprof+0x39/0x80 [ 260.891658][T19074] shmem_get_folio_gfp+0x3cf/0xd40 [ 260.891700][T19074] shmem_write_begin+0xa8/0x190 [ 260.891770][T19074] generic_perform_write+0x181/0x490 [ 260.891861][T19074] shmem_file_write_iter+0xc5/0xf0 [ 260.891965][T19074] do_iter_readv_writev+0x41e/0x4c0 [ 260.892019][T19074] vfs_writev+0x2c9/0x870 [ 260.892135][T19074] __se_sys_pwritev2+0xfc/0x1c0 [ 260.892176][T19074] __x64_sys_pwritev2+0x67/0x80 [ 260.892291][T19074] x64_sys_call+0x1cea/0x2fb0 [ 260.892363][T19074] do_syscall_64+0xd0/0x1a0 [ 260.892390][T19074] ? clear_bhb_loop+0x25/0x80 [ 260.892413][T19074] ? clear_bhb_loop+0x25/0x80 [ 260.892440][T19074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.892476][T19074] RIP: 0033:0x7f4d7fd1e969 [ 260.892496][T19074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.892521][T19074] RSP: 002b:00007f4d7e387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 260.892546][T19074] RAX: ffffffffffffffda RBX: 00007f4d7ff45fa0 RCX: 00007f4d7fd1e969 [ 260.892564][T19074] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 260.892581][T19074] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000003 [ 260.892597][T19074] R10: 0000000000007c00 R11: 0000000000000246 R12: 0000000000000002 [ 260.892692][T19074] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 260.892716][T19074] [ 262.880157][T19316] FAULT_INJECTION: forcing a failure. [ 262.880157][T19316] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 262.899147][T19316] CPU: 0 UID: 0 PID: 19316 Comm: syz.1.4433 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 262.899183][T19316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.899199][T19316] Call Trace: [ 262.899209][T19316] [ 262.899224][T19316] __dump_stack+0x1d/0x30 [ 262.899250][T19316] dump_stack_lvl+0xe8/0x140 [ 262.899290][T19316] dump_stack+0x15/0x1b [ 262.899312][T19316] should_fail_ex+0x265/0x280 [ 262.899405][T19316] should_fail_alloc_page+0xf2/0x100 [ 262.899442][T19316] __alloc_frozen_pages_noprof+0xff/0x360 [ 262.899477][T19316] alloc_pages_mpol+0xb3/0x250 [ 262.899575][T19316] vma_alloc_folio_noprof+0x1aa/0x300 [ 262.899597][T19316] do_wp_page+0x673/0x23e0 [ 262.899622][T19316] ? __rcu_read_lock+0x37/0x50 [ 262.899684][T19316] handle_mm_fault+0x6dc/0x2ae0 [ 262.899710][T19316] ? mas_walk+0xf2/0x120 [ 262.899740][T19316] do_user_addr_fault+0x636/0x1090 [ 262.899768][T19316] ? fpregs_assert_state_consistent+0x84/0xa0 [ 262.899796][T19316] exc_page_fault+0x54/0xc0 [ 262.899825][T19316] asm_exc_page_fault+0x26/0x30 [ 262.899905][T19316] RIP: 0033:0x7f4d7fbe0cc3 [ 262.899919][T19316] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 262.899934][T19316] RSP: 002b:00007f4d7e3864a0 EFLAGS: 00010202 [ 262.899948][T19316] RAX: 0000000000006005 RBX: 00007f4d7e386540 RCX: 00007f4d75f67000 [ 262.899959][T19316] RDX: 00007f4d7e3866e0 RSI: 0000000000000003 RDI: 00007f4d7e3865e0 [ 262.899970][T19316] RBP: 00000000000000c6 R08: 0000000000000007 R09: 0000000000000041 [ 262.899981][T19316] R10: 0000000000000050 R11: 00007f4d7e386540 R12: 0000000000000001 [ 262.900012][T19316] R13: 00007f4d7fdbbfc0 R14: 0000000000000004 R15: 00007f4d7e3865e0 [ 262.900028][T19316] [ 262.900046][T19316] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 263.042891][T19320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19320 comm=syz.4.4435 [ 263.721254][T19415] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 263.882948][T19439] pim6reg1: entered promiscuous mode [ 263.888578][T19439] pim6reg1: entered allmulticast mode [ 263.993791][T19460] FAULT_INJECTION: forcing a failure. [ 263.993791][T19460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.008136][T19460] CPU: 1 UID: 0 PID: 19460 Comm: syz.2.4472 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 264.008168][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.008181][T19460] Call Trace: [ 264.008188][T19460] [ 264.008196][T19460] __dump_stack+0x1d/0x30 [ 264.008221][T19460] dump_stack_lvl+0xe8/0x140 [ 264.008290][T19460] dump_stack+0x15/0x1b [ 264.008307][T19460] should_fail_ex+0x265/0x280 [ 264.008338][T19460] should_fail+0xb/0x20 [ 264.008447][T19460] should_fail_usercopy+0x1a/0x20 [ 264.008465][T19460] _copy_to_user+0x20/0xa0 [ 264.008486][T19460] simple_read_from_buffer+0xb5/0x130 [ 264.008514][T19460] proc_fail_nth_read+0x100/0x140 [ 264.008577][T19460] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.008607][T19460] vfs_read+0x19d/0x6f0 [ 264.008643][T19460] ? __rcu_read_unlock+0x4f/0x70 [ 264.008840][T19460] ? __fget_files+0x184/0x1c0 [ 264.008928][T19460] ksys_read+0xda/0x1a0 [ 264.009033][T19460] __x64_sys_read+0x40/0x50 [ 264.009142][T19460] x64_sys_call+0x2d77/0x2fb0 [ 264.009166][T19460] do_syscall_64+0xd0/0x1a0 [ 264.009206][T19460] ? clear_bhb_loop+0x25/0x80 [ 264.009232][T19460] ? clear_bhb_loop+0x25/0x80 [ 264.009261][T19460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.009325][T19460] RIP: 0033:0x7fba8a08d37c [ 264.009346][T19460] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.009409][T19460] RSP: 002b:00007fba886f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.009428][T19460] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08d37c [ 264.009443][T19460] RDX: 000000000000000f RSI: 00007fba886f70a0 RDI: 0000000000000003 [ 264.009459][T19460] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 264.009475][T19460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.009491][T19460] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 264.009572][T19460] [ 264.251421][ T29] kauditd_printk_skb: 1601 callbacks suppressed [ 264.251444][ T29] audit: type=1326 audit(1745777305.787:16563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba8a08d41f code=0x7ffc0000 [ 264.296950][ T29] audit: type=1326 audit(1745777305.787:16564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fba8a08d41f code=0x7ffc0000 [ 264.329140][ T29] audit: type=1326 audit(1745777305.787:16565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.2.4472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 264.366219][ T29] audit: type=1400 audit(1745777305.815:16566): avc: denied { map_create } for pid=19464 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.389593][ T29] audit: type=1400 audit(1745777305.815:16567): avc: denied { prog_load } for pid=19464 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.410647][ T29] audit: type=1400 audit(1745777305.815:16568): avc: denied { prog_load } for pid=19464 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.435478][ T29] audit: type=1400 audit(1745777305.815:16569): avc: denied { prog_load } for pid=19464 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.458693][ T29] audit: type=1400 audit(1745777305.815:16570): avc: denied { execmem } for pid=19464 comm="syz.6.4475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 264.480376][ T29] audit: type=1400 audit(1745777305.824:16571): avc: denied { read write } for pid=14944 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.483639][ T29] audit: type=1400 audit(1745777305.944:16572): avc: denied { append } for pid=19468 comm="syz.2.4476" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 264.583165][T19479] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 265.579719][T19617] FAULT_INJECTION: forcing a failure. [ 265.579719][T19617] name failslab, interval 1, probability 0, space 0, times 0 [ 265.593747][T19617] CPU: 1 UID: 0 PID: 19617 Comm: syz.4.4526 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 265.593776][T19617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.593791][T19617] Call Trace: [ 265.593800][T19617] [ 265.593811][T19617] __dump_stack+0x1d/0x30 [ 265.593839][T19617] dump_stack_lvl+0xe8/0x140 [ 265.593864][T19617] dump_stack+0x15/0x1b [ 265.593881][T19617] should_fail_ex+0x265/0x280 [ 265.593913][T19617] should_failslab+0x8c/0xb0 [ 265.593949][T19617] kmem_cache_alloc_noprof+0x50/0x310 [ 265.593987][T19617] ? vm_area_alloc+0x2c/0xb0 [ 265.594016][T19617] vm_area_alloc+0x2c/0xb0 [ 265.594043][T19617] mmap_region+0x81f/0x1470 [ 265.594108][T19617] do_mmap+0x9de/0xc20 [ 265.594136][T19617] vm_mmap_pgoff+0x17a/0x2e0 [ 265.594162][T19617] ksys_mmap_pgoff+0xc2/0x310 [ 265.594193][T19617] ? __x64_sys_mmap+0x49/0x70 [ 265.594220][T19617] x64_sys_call+0x1602/0x2fb0 [ 265.594244][T19617] do_syscall_64+0xd0/0x1a0 [ 265.594267][T19617] ? clear_bhb_loop+0x25/0x80 [ 265.594289][T19617] ? clear_bhb_loop+0x25/0x80 [ 265.594312][T19617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.594338][T19617] RIP: 0033:0x7f425fdae9a3 [ 265.594355][T19617] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 265.594377][T19617] RSP: 002b:00007f425e416e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 265.594401][T19617] RAX: ffffffffffffffda RBX: 0000000000000483 RCX: 00007f425fdae9a3 [ 265.594422][T19617] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 265.594438][T19617] RBP: 0000200000000dc2 R08: 00000000ffffffff R09: 0000000000000000 [ 265.594455][T19617] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 265.594471][T19617] R13: 00007f425e416ef0 R14: 00007f425e416eb0 R15: 0000200000000300 [ 265.594495][T19617] [ 267.113743][T19770] FAULT_INJECTION: forcing a failure. [ 267.113743][T19770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.127944][T19770] CPU: 1 UID: 0 PID: 19770 Comm: syz.0.4570 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 267.127976][T19770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.127989][T19770] Call Trace: [ 267.127996][T19770] [ 267.128004][T19770] __dump_stack+0x1d/0x30 [ 267.128023][T19770] dump_stack_lvl+0xe8/0x140 [ 267.128063][T19770] dump_stack+0x15/0x1b [ 267.128077][T19770] should_fail_ex+0x265/0x280 [ 267.128106][T19770] should_fail+0xb/0x20 [ 267.128131][T19770] should_fail_usercopy+0x1a/0x20 [ 267.128184][T19770] copy_page_from_iter_atomic+0x21b/0xff0 [ 267.128207][T19770] ? shmem_write_begin+0xa8/0x190 [ 267.128236][T19770] ? shmem_write_begin+0xe1/0x190 [ 267.128273][T19770] generic_perform_write+0x2c2/0x490 [ 267.128322][T19770] shmem_file_write_iter+0xc5/0xf0 [ 267.128351][T19770] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 267.128410][T19770] vfs_write+0x49d/0x8d0 [ 267.128460][T19770] ksys_write+0xda/0x1a0 [ 267.128493][T19770] __x64_sys_write+0x40/0x50 [ 267.128525][T19770] x64_sys_call+0x2cdd/0x2fb0 [ 267.128601][T19770] do_syscall_64+0xd0/0x1a0 [ 267.128621][T19770] ? clear_bhb_loop+0x25/0x80 [ 267.128641][T19770] ? clear_bhb_loop+0x25/0x80 [ 267.128660][T19770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.128737][T19770] RIP: 0033:0x7f6d3664e969 [ 267.128751][T19770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.128767][T19770] RSP: 002b:00007f6d34cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.128784][T19770] RAX: ffffffffffffffda RBX: 00007f6d36875fa0 RCX: 00007f6d3664e969 [ 267.128802][T19770] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000004 [ 267.128814][T19770] RBP: 00007f6d34cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 267.128825][T19770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.128836][T19770] R13: 0000000000000000 R14: 00007f6d36875fa0 R15: 00007fff60fd6db8 [ 267.128853][T19770] [ 267.452645][T19781] pim6reg0: tun_chr_ioctl cmd 2147767506 [ 267.559505][T19800] FAULT_INJECTION: forcing a failure. [ 267.559505][T19800] name failslab, interval 1, probability 0, space 0, times 0 [ 267.572996][T19800] CPU: 1 UID: 0 PID: 19800 Comm: syz.1.4582 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 267.573026][T19800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.573120][T19800] Call Trace: [ 267.573129][T19800] [ 267.573138][T19800] __dump_stack+0x1d/0x30 [ 267.573161][T19800] dump_stack_lvl+0xe8/0x140 [ 267.573180][T19800] dump_stack+0x15/0x1b [ 267.573197][T19800] should_fail_ex+0x265/0x280 [ 267.573270][T19800] should_failslab+0x8c/0xb0 [ 267.573306][T19800] kmem_cache_alloc_noprof+0x50/0x310 [ 267.573424][T19800] ? security_file_alloc+0x32/0x100 [ 267.573460][T19800] security_file_alloc+0x32/0x100 [ 267.573507][T19800] init_file+0x5c/0x1d0 [ 267.573549][T19800] alloc_empty_file+0x8b/0x200 [ 267.573590][T19800] alloc_file_pseudo+0xc6/0x160 [ 267.573655][T19800] __shmem_file_setup+0x1b9/0x1f0 [ 267.573735][T19800] shmem_file_setup+0x3b/0x50 [ 267.573792][T19800] __se_sys_memfd_create+0x2c3/0x590 [ 267.573896][T19800] __x64_sys_memfd_create+0x31/0x40 [ 267.573924][T19800] x64_sys_call+0x122f/0x2fb0 [ 267.573945][T19800] do_syscall_64+0xd0/0x1a0 [ 267.573966][T19800] ? clear_bhb_loop+0x25/0x80 [ 267.573989][T19800] ? clear_bhb_loop+0x25/0x80 [ 267.574046][T19800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.574069][T19800] RIP: 0033:0x7f4d7fd1e969 [ 267.574085][T19800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.574102][T19800] RSP: 002b:00007f4d7e386e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 267.574192][T19800] RAX: ffffffffffffffda RBX: 00000000000007b7 RCX: 00007f4d7fd1e969 [ 267.574208][T19800] RDX: 00007f4d7e386ef0 RSI: 0000000000000000 RDI: 00007f4d7fda1444 [ 267.574281][T19800] RBP: 00002000000002c0 R08: 00007f4d7e386bb7 R09: 00007f4d7e386e40 [ 267.574293][T19800] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 267.574305][T19800] R13: 00007f4d7e386ef0 R14: 00007f4d7e386eb0 R15: 0000200000000340 [ 267.574323][T19800] [ 268.057883][T19854] SELinux: OOM in selnl_notify [ 268.097253][T19856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19856 comm=syz.4.4598 [ 268.112116][T19857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19857 comm=syz.4.4598 [ 268.493040][T19883] loop6: detected capacity change from 0 to 512 [ 268.513710][T19883] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 268.538059][T19883] EXT4-fs (loop6): orphan cleanup on readonly fs [ 268.545191][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.560844][T19883] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 268.571364][T19883] EXT4-fs (loop6): 1 orphan inode deleted [ 268.592227][T19883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 268.605990][T19883] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 268.619524][T19883] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 268.632721][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.648522][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.664291][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.678147][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.695012][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.712130][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.728773][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.742747][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 268.759939][T19883] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4603: Block bitmap for bg 0 marked uninitialized [ 269.011082][T19909] FAULT_INJECTION: forcing a failure. [ 269.011082][T19909] name failslab, interval 1, probability 0, space 0, times 0 [ 269.025028][T19909] CPU: 1 UID: 0 PID: 19909 Comm: syz.0.4615 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 269.025065][T19909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.025142][T19909] Call Trace: [ 269.025150][T19909] [ 269.025159][T19909] __dump_stack+0x1d/0x30 [ 269.025187][T19909] dump_stack_lvl+0xe8/0x140 [ 269.025209][T19909] dump_stack+0x15/0x1b [ 269.025231][T19909] should_fail_ex+0x265/0x280 [ 269.025359][T19909] should_failslab+0x8c/0xb0 [ 269.025420][T19909] kmem_cache_alloc_noprof+0x50/0x310 [ 269.025458][T19909] ? __anon_vma_prepare+0xcd/0x2f0 [ 269.025508][T19909] __anon_vma_prepare+0xcd/0x2f0 [ 269.025533][T19909] do_wp_page+0x17fa/0x23e0 [ 269.025568][T19909] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 269.025643][T19909] ? __rcu_read_lock+0x37/0x50 [ 269.025716][T19909] handle_mm_fault+0x6dc/0x2ae0 [ 269.025856][T19909] ? mas_walk+0xf2/0x120 [ 269.025889][T19909] do_user_addr_fault+0x636/0x1090 [ 269.025932][T19909] ? fpregs_assert_state_consistent+0x84/0xa0 [ 269.025980][T19909] exc_page_fault+0x54/0xc0 [ 269.026035][T19909] asm_exc_page_fault+0x26/0x30 [ 269.026061][T19909] RIP: 0033:0x7f6d36510cc3 [ 269.026107][T19909] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 269.026137][T19909] RSP: 002b:00007f6d34cb64a0 EFLAGS: 00010202 [ 269.026156][T19909] RAX: 0000000000000400 RBX: 00007f6d34cb6540 RCX: 00007f6d2c897000 [ 269.026174][T19909] RDX: 00007f6d34cb66e0 RSI: 0000000000000009 RDI: 00007f6d34cb65e0 [ 269.026190][T19909] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000aa [ 269.026205][T19909] R10: 00000000000000c0 R11: 00007f6d34cb6540 R12: 0000000000000001 [ 269.026219][T19909] R13: 00007f6d366ebfc0 R14: 0000000000000020 R15: 00007f6d34cb65e0 [ 269.026239][T19909] [ 269.026255][T19909] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 269.246589][T19909] loop0: detected capacity change from 0 to 1024 [ 269.256028][T19909] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 269.268062][T19909] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 269.290820][T19909] JBD2: no valid journal superblock found [ 269.296705][T19909] EXT4-fs (loop0): Could not load journal inode [ 269.323137][T19914] 9pnet: Could not find request transport: 0xffffffffffffffff [ 269.345424][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.391690][T19923] pim6reg1: entered promiscuous mode [ 269.397087][T19923] pim6reg1: entered allmulticast mode [ 269.512147][T19949] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 269.528864][T19949] netlink: 'syz.6.4623': attribute type 32 has an invalid length. [ 269.539432][T19949] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4623'. [ 269.616412][T19968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4626'. [ 269.625706][T19968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4626'. [ 269.637963][T19972] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4628'. [ 269.666787][T19972] loop6: detected capacity change from 0 to 512 [ 269.679260][ T29] kauditd_printk_skb: 1139 callbacks suppressed [ 269.679279][ T29] audit: type=1400 audit(1745777310.808:17712): avc: denied { read write } for pid=19973 comm="syz.0.4629" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.680753][T19972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.703338][ T29] audit: type=1400 audit(1745777310.808:17713): avc: denied { open } for pid=19973 comm="syz.0.4629" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.750497][ T29] audit: type=1400 audit(1745777310.808:17714): avc: denied { ioctl } for pid=19973 comm="syz.0.4629" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 269.787774][T19972] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 269.796165][T19972] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 269.806291][T19972] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 269.816478][T19972] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 269.827706][T19972] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 269.847523][T19972] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 269.892642][T19980] loop0: detected capacity change from 0 to 128 [ 269.914004][ T29] audit: type=1400 audit(1745777311.020:17715): avc: denied { mount } for pid=19979 comm="syz.0.4630" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 269.945513][T19983] EXT4-fs warning (device loop6): dx_probe:863: inode #2: comm syz.6.4628: dx entry: limit 65535 != root limit 120 [ 269.959610][T19983] EXT4-fs warning (device loop6): dx_probe:936: inode #2: comm syz.6.4628: Corrupt directory, running e2fsck is recommended [ 270.001933][T19980] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4630'. [ 270.027756][ T29] audit: type=1400 audit(1745777311.076:17716): avc: denied { execute } for pid=19967 comm="syz.2.4626" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=50392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 270.078713][ T29] audit: type=1400 audit(1745777311.159:17717): avc: denied { unmount } for pid=12894 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 270.140995][T19987] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 270.148042][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.157257][T19987] pim6reg0: linktype set to 823 [ 270.173167][ T3469] IPVS: starting estimator thread 0... [ 270.193537][T19996] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 270.202512][ T29] audit: type=1400 audit(1745777311.288:17718): avc: denied { ioctl } for pid=19992 comm="syz.6.4632" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 270.283746][ T29] audit: type=1400 audit(1745777311.362:17719): avc: denied { create } for pid=20013 comm="syz.0.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 270.310541][ T29] audit: type=1400 audit(1745777311.362:17720): avc: denied { bind } for pid=20013 comm="syz.0.4633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 270.341298][T19993] IPVS: using max 2304 ests per chain, 115200 per kthread [ 270.425981][T20029] netlink: 'syz.2.4637': attribute type 1 has an invalid length. [ 270.468765][T20029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.601805][T20066] loop6: detected capacity change from 0 to 512 [ 270.610247][T20067] bond0: (slave syz_tun): making interface the new active one [ 270.678066][T20067] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 270.682948][T20066] EXT4-fs (loop6): 1 orphan inode deleted [ 270.697318][T20066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.712078][T14101] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 270.712175][T14101] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:45: Failed to release dquot type 1 [ 270.737608][T20066] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.843324][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.873164][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4643'. [ 270.995142][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4646'. [ 271.043661][T20094] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4641'. [ 271.052582][T13529] Process accounting resumed [ 271.060490][T13529] Process accounting resumed [ 271.065183][T20099] 9pnet: Could not find request transport: 0xffffffffffffffff [ 271.166233][T20110] serio: Serial port pts2 [ 271.216359][T20114] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4651'. [ 271.267527][T20120] loop6: detected capacity change from 0 to 128 [ 271.289524][T20120] loop6: detected capacity change from 0 to 2048 [ 271.317382][T14087] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.330366][T14101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.387346][T20130] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4654'. [ 271.489951][T20136] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0 [ 271.504746][T20138] FAULT_INJECTION: forcing a failure. [ 271.504746][T20138] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 271.520429][T20138] CPU: 1 UID: 0 PID: 20138 Comm: syz.0.4657 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 271.520465][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.520505][T20138] Call Trace: [ 271.520513][T20138] [ 271.520523][T20138] __dump_stack+0x1d/0x30 [ 271.520548][T20138] dump_stack_lvl+0xe8/0x140 [ 271.520568][T20138] dump_stack+0x15/0x1b [ 271.520584][T20138] should_fail_ex+0x265/0x280 [ 271.520616][T20138] should_fail_alloc_page+0xf2/0x100 [ 271.520677][T20138] __alloc_frozen_pages_noprof+0xff/0x360 [ 271.520713][T20138] alloc_pages_mpol+0xb3/0x250 [ 271.520740][T20138] vma_alloc_folio_noprof+0x1aa/0x300 [ 271.520775][T20138] handle_mm_fault+0x1056/0x2ae0 [ 271.520879][T20138] ? __rcu_read_lock+0x37/0x50 [ 271.520914][T20138] __get_user_pages+0xde2/0x1d20 [ 271.521011][T20138] faultin_page_range+0x10f/0x5b0 [ 271.521053][T20138] madvise_do_behavior+0x113/0x24a0 [ 271.521099][T20138] ? irq_work_queue+0x93/0x100 [ 271.521204][T20138] ? __rcu_read_unlock+0x4f/0x70 [ 271.521233][T20138] ? down_read+0x77/0xe0 [ 271.521261][T20138] __x64_sys_madvise+0xc9/0x100 [ 271.521333][T20138] x64_sys_call+0x2455/0x2fb0 [ 271.521422][T20138] do_syscall_64+0xd0/0x1a0 [ 271.521450][T20138] ? clear_bhb_loop+0x25/0x80 [ 271.521505][T20138] ? clear_bhb_loop+0x25/0x80 [ 271.521528][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.521556][T20138] RIP: 0033:0x7f6d3664e969 [ 271.521575][T20138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.521606][T20138] RSP: 002b:00007f6d34cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 271.521628][T20138] RAX: ffffffffffffffda RBX: 00007f6d36875fa0 RCX: 00007f6d3664e969 [ 271.521641][T20138] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 271.521652][T20138] RBP: 00007f6d34cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 271.521664][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.521676][T20138] R13: 0000000000000000 R14: 00007f6d36875fa0 R15: 00007fff60fd6db8 [ 271.521699][T20138] [ 271.767191][T20139] 9pnet_fd: Insufficient options for proto=fd [ 271.915130][T20150] loop0: detected capacity change from 0 to 2048 [ 271.965971][T20150] Alternate GPT is invalid, using primary GPT. [ 271.973366][T20150] loop0: p1 p2 p3 [ 272.034578][T20165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.044532][T20165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.107243][T20173] xt_hashlimit: max too large, truncated to 1048576 [ 272.115937][T20173] xt_limit: Overflow, try lower: 0/0 [ 272.345141][T20176] 9pnet: Could not find request transport: Td [ 272.483349][T20193] FAULT_INJECTION: forcing a failure. [ 272.483349][T20193] name failslab, interval 1, probability 0, space 0, times 0 [ 272.501127][T20193] CPU: 1 UID: 0 PID: 20193 Comm: syz.1.4673 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 272.501237][T20193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.501249][T20193] Call Trace: [ 272.501256][T20193] [ 272.501308][T20193] __dump_stack+0x1d/0x30 [ 272.501328][T20193] dump_stack_lvl+0xe8/0x140 [ 272.501345][T20193] dump_stack+0x15/0x1b [ 272.501386][T20193] should_fail_ex+0x265/0x280 [ 272.501415][T20193] should_failslab+0x8c/0xb0 [ 272.501489][T20193] kmem_cache_alloc_noprof+0x50/0x310 [ 272.501570][T20193] ? __kernfs_new_node+0x6d/0x350 [ 272.501603][T20193] __kernfs_new_node+0x6d/0x350 [ 272.501663][T20193] ? __rcu_read_unlock+0x4f/0x70 [ 272.501681][T20193] ? __rcu_read_unlock+0x4f/0x70 [ 272.501698][T20193] ? __rcu_read_unlock+0x4f/0x70 [ 272.501715][T20193] ? kernfs_next_descendant_post+0xd3/0x110 [ 272.501822][T20193] kernfs_new_node+0xd0/0x140 [ 272.501845][T20193] __kernfs_create_file+0x4b/0x180 [ 272.501933][T20193] ? __pfx_dev_attr_show+0x10/0x10 [ 272.502004][T20193] ? __pfx_dev_attr_store+0x10/0x10 [ 272.502087][T20193] sysfs_add_file_mode_ns+0x132/0x1c0 [ 272.502117][T20193] internal_create_group+0x441/0x9e0 [ 272.502136][T20193] ? kernfs_add_one+0x212/0x280 [ 272.502183][T20193] sysfs_create_groups+0x3f/0xf0 [ 272.502202][T20193] device_add_attrs+0x64/0x3e0 [ 272.502220][T20193] ? kobject_put+0x10b/0x190 [ 272.502285][T20193] device_add+0x37a/0x770 [ 272.502314][T20193] netdev_register_kobject+0xe8/0x210 [ 272.502348][T20193] ? register_netdevice+0x916/0xf10 [ 272.502397][T20193] register_netdevice+0x931/0xf10 [ 272.502462][T20193] ip6_tnl_create2+0x8a/0x290 [ 272.502491][T20193] ip6_tnl_locate+0x3d0/0x4a0 [ 272.502521][T20193] ip6_tnl_siocdevprivate+0x550/0x920 [ 272.502684][T20193] dev_ifsioc+0x8f5/0xaa0 [ 272.502702][T20193] dev_ioctl+0x78d/0x960 [ 272.502720][T20193] sock_ioctl+0x593/0x610 [ 272.502752][T20193] ? __pfx_sock_ioctl+0x10/0x10 [ 272.502838][T20193] __se_sys_ioctl+0xcb/0x140 [ 272.502858][T20193] __x64_sys_ioctl+0x43/0x50 [ 272.502901][T20193] x64_sys_call+0x19a8/0x2fb0 [ 272.502920][T20193] do_syscall_64+0xd0/0x1a0 [ 272.502948][T20193] ? clear_bhb_loop+0x25/0x80 [ 272.502967][T20193] ? clear_bhb_loop+0x25/0x80 [ 272.502990][T20193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.503018][T20193] RIP: 0033:0x7f4d7fd1e969 [ 272.503032][T20193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.503118][T20193] RSP: 002b:00007f4d7e387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.503134][T20193] RAX: ffffffffffffffda RBX: 00007f4d7ff45fa0 RCX: 00007f4d7fd1e969 [ 272.503145][T20193] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 272.503192][T20193] RBP: 00007f4d7e387090 R08: 0000000000000000 R09: 0000000000000000 [ 272.503203][T20193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.503213][T20193] R13: 0000000000000000 R14: 00007f4d7ff45fa0 R15: 00007ffdce92e278 [ 272.503230][T20193] [ 272.891321][T20200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.900352][T20200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.957766][T20214] futex_wake_op: syz.1.4680 tries to shift op by -1; fix this program [ 272.988062][T20216] loop0: detected capacity change from 0 to 2048 [ 273.052138][T20216] loop0: p1 < > p4 [ 273.056820][T20216] loop0: p4 size 8388608 extends beyond EOD, truncated [ 273.573426][T20240] SELinux: policydb magic number 0x11 does not match expected magic number 0xf97cff8c [ 273.608491][T20240] SELinux: failed to load policy [ 273.870463][T20244] FAULT_INJECTION: forcing a failure. [ 273.870463][T20244] name failslab, interval 1, probability 0, space 0, times 0 [ 273.883879][T20244] CPU: 1 UID: 0 PID: 20244 Comm: syz.2.4686 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 273.883923][T20244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.883939][T20244] Call Trace: [ 273.883947][T20244] [ 273.884007][T20244] __dump_stack+0x1d/0x30 [ 273.884091][T20244] dump_stack_lvl+0xe8/0x140 [ 273.884116][T20244] dump_stack+0x15/0x1b [ 273.884339][T20244] should_fail_ex+0x265/0x280 [ 273.884394][T20244] should_failslab+0x8c/0xb0 [ 273.884452][T20244] kmem_cache_alloc_node_noprof+0x57/0x320 [ 273.884577][T20244] ? __alloc_skb+0x101/0x320 [ 273.884662][T20244] __alloc_skb+0x101/0x320 [ 273.884695][T20244] pfkey_send_policy_notify+0x38d/0x660 [ 273.884735][T20244] ? __pfx_pfkey_send_policy_notify+0x10/0x10 [ 273.884770][T20244] km_policy_notify+0x5f/0xb0 [ 273.884871][T20244] pfkey_spdadd+0x8ea/0x950 [ 273.884946][T20244] pfkey_sendmsg+0x715/0x900 [ 273.885029][T20244] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 273.885118][T20244] __sock_sendmsg+0x142/0x180 [ 273.885154][T20244] ____sys_sendmsg+0x31e/0x4e0 [ 273.885325][T20244] ___sys_sendmsg+0x17b/0x1d0 [ 273.885371][T20244] __x64_sys_sendmsg+0xd4/0x160 [ 273.885401][T20244] x64_sys_call+0x2999/0x2fb0 [ 273.885431][T20244] do_syscall_64+0xd0/0x1a0 [ 273.885478][T20244] ? clear_bhb_loop+0x25/0x80 [ 273.885506][T20244] ? clear_bhb_loop+0x25/0x80 [ 273.885547][T20244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.885639][T20244] RIP: 0033:0x7fba8a08e969 [ 273.885660][T20244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.885698][T20244] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.885779][T20244] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 273.885797][T20244] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 273.885813][T20244] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 273.885860][T20244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.885873][T20244] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 273.885900][T20244] [ 274.157976][T20246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.169959][T20246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.301165][T20254] loop6: detected capacity change from 0 to 1024 [ 274.319079][T20254] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.4689: Failed to acquire dquot type 0 [ 274.336405][T20254] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 274.353568][T20254] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.4689: corrupted inode contents [ 274.446201][T20254] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #13: comm syz.6.4689: mark_inode_dirty error [ 274.460823][T20254] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.4689: corrupted inode contents [ 274.572699][T20254] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.4689: mark_inode_dirty error [ 274.614673][T20267] FAULT_INJECTION: forcing a failure. [ 274.614673][T20267] name failslab, interval 1, probability 0, space 0, times 0 [ 274.627918][T20267] CPU: 1 UID: 0 PID: 20267 Comm: syz.2.4694 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 274.627954][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.627971][T20267] Call Trace: [ 274.627981][T20267] [ 274.627990][T20267] __dump_stack+0x1d/0x30 [ 274.628055][T20267] dump_stack_lvl+0xe8/0x140 [ 274.628081][T20267] dump_stack+0x15/0x1b [ 274.628110][T20267] should_fail_ex+0x265/0x280 [ 274.628205][T20267] ? __pfx_cond_bools_destroy+0x10/0x10 [ 274.628225][T20267] should_failslab+0x8c/0xb0 [ 274.628254][T20267] kmem_cache_alloc_noprof+0x50/0x310 [ 274.628289][T20267] ? hashtab_duplicate+0xfe/0x360 [ 274.628387][T20267] ? __pfx_cond_bools_destroy+0x10/0x10 [ 274.628452][T20267] hashtab_duplicate+0xfe/0x360 [ 274.628478][T20267] ? __pfx_cond_bools_copy+0x10/0x10 [ 274.628500][T20267] cond_policydb_dup+0xd2/0x4e0 [ 274.628546][T20267] security_set_bools+0xa0/0x340 [ 274.628595][T20267] sel_commit_bools_write+0x1ea/0x270 [ 274.628621][T20267] vfs_writev+0x3eb/0x870 [ 274.628678][T20267] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 274.628714][T20267] ? mutex_lock+0xd/0x30 [ 274.628749][T20267] do_writev+0xe7/0x210 [ 274.628836][T20267] __x64_sys_writev+0x45/0x50 [ 274.628872][T20267] x64_sys_call+0x2006/0x2fb0 [ 274.628896][T20267] do_syscall_64+0xd0/0x1a0 [ 274.628991][T20267] ? clear_bhb_loop+0x25/0x80 [ 274.629013][T20267] ? clear_bhb_loop+0x25/0x80 [ 274.629038][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.629077][T20267] RIP: 0033:0x7fba8a08e969 [ 274.629098][T20267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.629121][T20267] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 274.629149][T20267] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 274.629162][T20267] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000004 [ 274.629175][T20267] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 274.629187][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 274.629209][T20267] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 274.629233][T20267] [ 274.793906][T20254] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.4689: corrupted inode contents [ 274.895598][T20254] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 274.909066][T20254] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.4689: corrupted inode contents [ 274.925356][T20254] EXT4-fs error (device loop6): ext4_truncate:4255: inode #13: comm syz.6.4689: mark_inode_dirty error [ 274.939609][T20254] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 274.957198][T20254] EXT4-fs (loop6): 1 truncate cleaned up [ 274.964756][T20254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.012377][T20254] EXT4-fs: Ignoring removed orlov option [ 275.019482][T20254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.029355][T20254] EXT4-fs (loop6): can't enable nombcache during remount [ 275.058270][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.183004][T20277] __nla_validate_parse: 4 callbacks suppressed [ 275.183026][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4700'. [ 275.293072][T20290] loop6: detected capacity change from 0 to 512 [ 275.364853][T20290] EXT4-fs (loop6): 1 orphan inode deleted [ 275.372385][T20290] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.385542][T14101] __quota_error: 90 callbacks suppressed [ 275.385578][T14101] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 275.386486][T20290] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.393120][T14101] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:45: Failed to release dquot type 1 [ 275.473138][T20301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.482963][T20296] FAULT_INJECTION: forcing a failure. [ 275.482963][T20296] name failslab, interval 1, probability 0, space 0, times 0 [ 275.496330][T20296] CPU: 0 UID: 0 PID: 20296 Comm: syz.2.4706 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 275.496375][T20296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.496392][T20296] Call Trace: [ 275.496400][T20296] [ 275.496408][T20296] __dump_stack+0x1d/0x30 [ 275.496434][T20296] dump_stack_lvl+0xe8/0x140 [ 275.496457][T20296] dump_stack+0x15/0x1b [ 275.496473][T20296] should_fail_ex+0x265/0x280 [ 275.496544][T20296] should_failslab+0x8c/0xb0 [ 275.496580][T20296] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 275.496605][T20296] ? sidtab_sid2str_get+0xa0/0x130 [ 275.496637][T20296] ? skb_put+0xa9/0xf0 [ 275.496761][T20296] kmemdup_noprof+0x2b/0x70 [ 275.496792][T20296] sidtab_sid2str_get+0xa0/0x130 [ 275.496827][T20296] security_sid_to_context_core+0x1eb/0x2e0 [ 275.496871][T20296] security_sid_to_context+0x27/0x40 [ 275.496900][T20296] avc_audit_post_callback+0x9d/0x520 [ 275.496942][T20296] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 275.497057][T20296] common_lsm_audit+0x1b8/0x230 [ 275.497089][T20296] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 275.497165][T20296] slow_avc_audit+0x104/0x140 [ 275.497209][T20296] avc_has_perm+0x128/0x150 [ 275.497247][T20296] selinux_perf_event_open+0xd4/0xe0 [ 275.497287][T20296] security_perf_event_open+0x34/0x70 [ 275.497324][T20296] find_get_context+0x33a/0x540 [ 275.497379][T20296] __se_sys_perf_event_open+0x729/0x1170 [ 275.497459][T20296] ? __rcu_read_unlock+0x4f/0x70 [ 275.497494][T20296] __x64_sys_perf_event_open+0x67/0x80 [ 275.497575][T20296] x64_sys_call+0x27ec/0x2fb0 [ 275.497600][T20296] do_syscall_64+0xd0/0x1a0 [ 275.497624][T20296] ? clear_bhb_loop+0x25/0x80 [ 275.497651][T20296] ? clear_bhb_loop+0x25/0x80 [ 275.497676][T20296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.497768][T20296] RIP: 0033:0x7fba8a08e969 [ 275.497787][T20296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.497809][T20296] RSP: 002b:00007fba886f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 275.497832][T20296] RAX: ffffffffffffffda RBX: 00007fba8a2b5fa0 RCX: 00007fba8a08e969 [ 275.497848][T20296] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000540 [ 275.497941][T20296] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000000 [ 275.497957][T20296] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 275.497972][T20296] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 275.498043][T20296] [ 275.570784][T20303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4704'. [ 275.580217][ T29] audit: type=1400 audit(1745777316.162:17809): avc: denied { cpu } for pid=20295 comm="syz.2.4706" ssid=135 tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 275.689324][T20305] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4704'. [ 275.690150][T20301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.095958][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.156149][ T29] audit: type=1326 audit(1745777316.780:17810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.2.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.182320][ T29] audit: type=1326 audit(1745777316.780:17811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.2.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.212524][ T29] audit: type=1326 audit(1745777316.780:17812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.2.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.240435][ T29] audit: type=1326 audit(1745777316.780:17813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.2.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.265841][ T29] audit: type=1326 audit(1745777316.780:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="syz.2.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.266023][T20315] loop6: detected capacity change from 0 to 8192 [ 276.293365][ T29] audit: type=1326 audit(1745777316.780:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.293473][ T29] audit: type=1326 audit(1745777316.780:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.293509][ T29] audit: type=1326 audit(1745777316.780:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20309 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8a08e969 code=0x7ffc0000 [ 276.495385][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4714'. [ 276.546402][T20336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4718'. [ 276.599897][T20336] lo speed is unknown, defaulting to 1000 [ 276.603001][T20344] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4721'. [ 276.606831][T20336] lo speed is unknown, defaulting to 1000 [ 276.664416][T20336] lo speed is unknown, defaulting to 1000 [ 276.707852][T20336] infiniband syz0: set down [ 276.712834][T20336] infiniband syz0: added lo [ 276.718350][T13511] lo speed is unknown, defaulting to 1000 [ 276.748984][T20336] RDS/IB: syz0: added [ 276.753830][T20336] smc: adding ib device syz0 with port count 1 [ 276.761627][T20336] smc: ib device syz0 port 1 has pnetid [ 276.768627][T13511] lo speed is unknown, defaulting to 1000 [ 276.775394][T20336] lo speed is unknown, defaulting to 1000 [ 276.801283][T20357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4724'. [ 276.814392][T20336] lo speed is unknown, defaulting to 1000 [ 276.851622][T20336] lo speed is unknown, defaulting to 1000 [ 276.862239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.896231][T20336] lo speed is unknown, defaulting to 1000 [ 276.932475][T20336] lo speed is unknown, defaulting to 1000 [ 276.970909][T20336] lo speed is unknown, defaulting to 1000 [ 277.307472][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4730'. [ 277.419966][T20379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 277.441775][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4731'. [ 277.594769][T20392] FAULT_INJECTION: forcing a failure. [ 277.594769][T20392] name failslab, interval 1, probability 0, space 0, times 0 [ 277.607745][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.2.4735 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 277.607779][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 277.607794][T20392] Call Trace: [ 277.607802][T20392] [ 277.607810][T20392] __dump_stack+0x1d/0x30 [ 277.607835][T20392] dump_stack_lvl+0xe8/0x140 [ 277.607859][T20392] dump_stack+0x15/0x1b [ 277.607879][T20392] should_fail_ex+0x265/0x280 [ 277.607919][T20392] should_failslab+0x8c/0xb0 [ 277.607947][T20392] kmem_cache_alloc_noprof+0x50/0x310 [ 277.607979][T20392] ? vm_area_dup+0x32/0x260 [ 277.608006][T20392] vm_area_dup+0x32/0x260 [ 277.608031][T20392] copy_mm+0x72c/0x1310 [ 277.608064][T20392] copy_process+0xcf1/0x1f90 [ 277.608094][T20392] kernel_clone+0x16c/0x5b0 [ 277.608127][T20392] __se_sys_clone3+0x1c2/0x200 [ 277.608172][T20392] ? fpregs_assert_state_consistent+0x84/0xa0 [ 277.608221][T20392] __x64_sys_clone3+0x31/0x40 [ 277.608247][T20392] x64_sys_call+0x10c9/0x2fb0 [ 277.608273][T20392] do_syscall_64+0xd0/0x1a0 [ 277.608300][T20392] ? clear_bhb_loop+0x25/0x80 [ 277.608327][T20392] ? clear_bhb_loop+0x25/0x80 [ 277.608348][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.608367][T20392] RIP: 0033:0x7fba8a08e969 [ 277.608386][T20392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.608409][T20392] RSP: 002b:00007fba886f6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 277.608430][T20392] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fba8a08e969 [ 277.608442][T20392] RDX: 00007fba886f6f20 RSI: 0000000000000058 RDI: 00007fba886f6f20 [ 277.608454][T20392] RBP: 00007fba886f7090 R08: 0000000000000000 R09: 0000000000000058 [ 277.608465][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.608477][T20392] R13: 0000000000000000 R14: 00007fba8a2b5fa0 R15: 00007ffee1a9ce58 [ 277.608501][T20392] [ 277.929899][T20401] x_tables: unsorted entry at hook 3 [ 277.929969][T20399] x_tables: unsorted entry at hook 3 [ 278.395405][T20435] loop6: detected capacity change from 0 to 128 [ 278.405191][T20435] EXT4-fs: Ignoring removed nobh option [ 278.413109][T20435] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.425944][T20437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 278.425972][T20437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.426004][T20437] vhci_hcd vhci_hcd.0: Device attached [ 278.445388][T20446] vhci_hcd: connection closed [ 278.453027][T14087] vhci_hcd: stop threads [ 278.457325][T20435] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.459384][T14087] vhci_hcd: release socket [ 278.469755][T20435] EXT4-fs (loop6): shut down requested (0) [ 278.473037][T14087] vhci_hcd: disconnect device [ 278.565672][T14944] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.636267][T20461] xt_HMARK: spi-set and port-set can't be combined [ 278.665386][T20463] loop6: detected capacity change from 0 to 256 [ 278.674057][T20463] vfat: Unknown parameter 'žú7VžÍ€îŒÇ8 ' [ 279.008311][T20483] lo speed is unknown, defaulting to 1000 [ 279.185035][T20516] netlink: 'syz.1.4767': attribute type 6 has an invalid length. [ 279.197266][T20502] loop6: detected capacity change from 0 to 2048 [ 279.475930][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 279.495027][ T36] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.609415][T20563] Invalid ELF header magic: != ELF [ 279.699397][T20576] FAULT_INJECTION: forcing a failure. [ 279.699397][T20576] name failslab, interval 1, probability 0, space 0, times 0 [ 279.714580][T20576] CPU: 1 UID: 0 PID: 20576 Comm: syz.0.4786 Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 279.714613][T20576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.714695][T20576] Call Trace: [ 279.714703][T20576] [ 279.714712][T20576] __dump_stack+0x1d/0x30 [ 279.714737][T20576] dump_stack_lvl+0xe8/0x140 [ 279.714759][T20576] dump_stack+0x15/0x1b [ 279.714842][T20576] should_fail_ex+0x265/0x280 [ 279.714877][T20576] should_failslab+0x8c/0xb0 [ 279.714909][T20576] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 279.714949][T20576] ? sidtab_sid2str_get+0xa0/0x130 [ 279.714980][T20576] ? skb_put+0xa9/0xf0 [ 279.715089][T20576] kmemdup_noprof+0x2b/0x70 [ 279.715110][T20576] sidtab_sid2str_get+0xa0/0x130 [ 279.715154][T20576] security_sid_to_context_core+0x1eb/0x2e0 [ 279.715189][T20576] security_sid_to_context+0x27/0x40 [ 279.715221][T20576] avc_audit_post_callback+0x9d/0x520 [ 279.715316][T20576] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.715354][T20576] common_lsm_audit+0x1b8/0x230 [ 279.715433][T20576] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 279.715474][T20576] ? avc_denied+0xe4/0x100 [ 279.715578][T20576] slow_avc_audit+0x104/0x140 [ 279.715621][T20576] avc_has_perm+0x128/0x150 [ 279.715665][T20576] sel_write_member+0xff/0x370 [ 279.715726][T20576] selinux_transaction_write+0xc3/0x110 [ 279.715770][T20576] ? __pfx_selinux_transaction_write+0x10/0x10 [ 279.715842][T20576] vfs_write+0x266/0x8d0 [ 279.715933][T20576] ? __rcu_read_unlock+0x4f/0x70 [ 279.715960][T20576] ? __fget_files+0x184/0x1c0 [ 279.716019][T20576] ksys_write+0xda/0x1a0 [ 279.716043][T20576] __x64_sys_write+0x40/0x50 [ 279.716075][T20576] x64_sys_call+0x2cdd/0x2fb0 [ 279.716101][T20576] do_syscall_64+0xd0/0x1a0 [ 279.716137][T20576] ? clear_bhb_loop+0x25/0x80 [ 279.716164][T20576] ? clear_bhb_loop+0x25/0x80 [ 279.716187][T20576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.716207][T20576] RIP: 0033:0x7f6d3664e969 [ 279.716222][T20576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.716299][T20576] RSP: 002b:00007f6d34cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 279.716320][T20576] RAX: ffffffffffffffda RBX: 00007f6d36875fa0 RCX: 00007f6d3664e969 [ 279.716332][T20576] RDX: 0000000000000056 RSI: 00002000000004c0 RDI: 0000000000000006 [ 279.716388][T20576] RBP: 00007f6d34cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 279.716404][T20576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.716426][T20576] R13: 0000000000000000 R14: 00007f6d36875fa0 R15: 00007fff60fd6db8 [ 279.716450][T20576] [ 279.733312][T20571] $Hÿ: renamed from bond0 (while UP) [ 280.043293][T20571] $Hÿ: entered promiscuous mode [ 280.049376][T20571] bond_slave_0: entered promiscuous mode [ 280.057944][T20571] bond_slave_1: entered promiscuous mode [ 280.214938][T20599] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 280.258202][T20604] all: renamed from lo (while UP) [ 280.362168][T20606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.393692][T20606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.584555][T20627] loop6: detected capacity change from 0 to 2048 [ 280.597757][T12894] ================================================================== [ 280.608255][T12894] BUG: KCSAN: data-race in copy_mm / copy_page_range [ 280.614969][T12894] [ 280.617392][T12894] write to 0xffff88810a1bc868 of 8 bytes by task 15516 on cpu 0: [ 280.626877][T12894] copy_page_range+0x2525/0x3760 [ 280.631920][T12894] copy_mm+0xab6/0x1310 [ 280.636093][T12894] copy_process+0xcf1/0x1f90 [ 280.640695][T12894] kernel_clone+0x16c/0x5b0 [ 280.645922][T12894] __x64_sys_clone+0xe6/0x120 [ 280.651159][T12894] x64_sys_call+0x2c59/0x2fb0 [ 280.656036][T12894] do_syscall_64+0xd0/0x1a0 [ 280.660653][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.666561][T12894] [ 280.668889][T12894] read to 0xffff88810a1bc780 of 1344 bytes by task 12894 on cpu 1: [ 280.677240][T12894] copy_mm+0xfb/0x1310 [ 280.681395][T12894] copy_process+0xcf1/0x1f90 [ 280.686015][T12894] kernel_clone+0x16c/0x5b0 [ 280.690737][T12894] __x64_sys_clone+0xe6/0x120 [ 280.695868][T12894] x64_sys_call+0x2c59/0x2fb0 [ 280.701273][T12894] do_syscall_64+0xd0/0x1a0 [ 280.706184][T12894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.713128][T12894] [ 280.715571][T12894] Reported by Kernel Concurrency Sanitizer on: [ 280.723874][T12894] CPU: 1 UID: 0 PID: 12894 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00342-g5bc1018675ec #0 PREEMPT(voluntary) [ 280.742882][T12894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.756234][T12894] ================================================================== [ 280.787078][T20627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.808627][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 280.808644][ T29] audit: type=1326 audit(1745777321.081:18020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6d3664e9f7 code=0x7ffc0000 [ 280.848441][T20646] loop0: detected capacity change from 0 to 512 [ 280.856745][T20646] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 280.867500][T20646] EXT4-fs (loop0): invalid journal inode [ 280.867617][T20627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4803: bg 0: block 234: padding at end of block bitmap is not set [ 280.874021][T20646] EXT4-fs (loop0): can't get journal size [ 280.874352][T20646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 280.874454][T20646] System zones: 1-12, 13-13 [ 280.874675][T20646] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.4812: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 280.874878][T20646] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4812: couldn't read orphan inode 15 (err -117) [ 280.875540][T20646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.897434][T20627] EXT4-fs (loop6): Remounting filesystem read-only [ 280.898168][ T29] audit: type=1326 audit(1745777321.118:18021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d3664d2d0 code=0x7ffc0000 [ 280.938228][T20646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.950607][ T29] audit: type=1326 audit(1745777321.118:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d3664e56b code=0x7ffc0000 [ 281.033475][ T29] audit: type=1326 audit(1745777321.127:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d3664d5ca code=0x7ffc0000 [ 281.058087][ T29] audit: type=1326 audit(1745777321.127:18024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6d3664d5ca code=0x7ffc0000 [ 281.084341][ T29] audit: type=1326 audit(1745777321.127:18025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6d3664d1d7 code=0x7ffc0000 [ 281.111380][ T29] audit: type=1326 audit(1745777321.127:18026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6d3665010a code=0x7ffc0000 [ 281.136705][ T29] audit: type=1400 audit(1745777321.127:18027): avc: denied { mounton } for pid=20645 comm="syz.0.4812" path="/276/file0" dev="tmpfs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 281.162470][ T29] audit: type=1400 audit(1745777321.137:18028): avc: denied { map } for pid=20626 comm="syz.6.4803" path="/369/file0/cpu.stat" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 281.187442][ T29] audit: type=1326 audit(1745777321.432:18029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20645 comm="syz.0.4812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d3664d2d0 code=0x7ffc0000 [ 281.224497][T14944] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.267994][T20646] lo speed is unknown, defaulting to 1000