last executing test programs: 2.919876233s ago: executing program 4 (id=1711): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) syz_read_part_table(0x60d, &(0x7f0000002240)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000b21e45", @ANYRES32, @ANYBLOB='\x00'/19], 0x48) unshare(0x64000600) 1.613668807s ago: executing program 2 (id=1736): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c74c50000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYRES32], 0x54}}, 0x0) 1.590768507s ago: executing program 4 (id=1737): ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 1.493399496s ago: executing program 4 (id=1741): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sg0, 0x0, 0x0) 1.492935106s ago: executing program 4 (id=1742): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x7f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) 1.479746166s ago: executing program 2 (id=1743): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x40000000009}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001", @ANYRESDEC], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f00000002c0)=[{0x3, 0x4, 0x80, 0x4d}, {0x8, 0x5, 0x54, 0x8}, {0x7ca, 0x0, 0x7f, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) fcntl$notify(r5, 0x402, 0x5) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) fcntl$dupfd(r7, 0x0, r7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000) 1.473759476s ago: executing program 0 (id=1744): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0xfffffdfd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9419a9ca946946333fe6df1b0000000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="67fd31dd4c4a8d7fedbc5be3a78a75d5c0cb93c14bb0a7ce3680e760ea13b1e4631783f718dbfaa2ad219a4696e6c5e7ab6b1411d741c68764732a8b14273eebbd671b145c68163bd9cab2d56ec61d6eb6aa2861b4e1cfa725b6845698a35e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000005fd5d990000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0x7005, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) 1.437109556s ago: executing program 2 (id=1745): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0xfffffdfd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9419a9ca946946333fe6df1b0000000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="67fd31dd4c4a8d7fedbc5be3a78a75d5c0cb93c14bb0a7ce3680e760ea13b1e4631783f718dbfaa2ad219a4696e6c5e7ab6b1411d741c68764732a8b14273eebbd671b145c68163bd9cab2d56ec61d6eb6aa2861b4e1cfa725b6845698a35e9498f11f2daebd12b96decc67e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000005fd5d990000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0x7005, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) 1.332231955s ago: executing program 3 (id=1746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 1.315121705s ago: executing program 3 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 1.298151535s ago: executing program 3 (id=1748): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigsuspend(&(0x7f0000000400)={[0xca]}, 0x8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000005f0ffff7b000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYBLOB="d8410de1040d0ef9f4eb40e97617cc6d166046f29be07ce3343174c732a1b01653bb9fa29c56a231465e6cfc248c70888599fae1da4d0a4ac3fb9dcbc94bc69712bd52325847fd157cdfc71c85cb4b549a14c186d2ea76d6c39cfc51f53a828e8dbf5f9fa67b02259e0b7ca72579015ef06343944c1ed104f212654977215dd43ec67fcf6ebed3c87bf06f76c3307b7d127a72f60cc3095c2abf29cabea71ae46bfea082cc36f4dfd015ea9916294dc7410da86d46e5fe80778dcf8b997cd462ea3d8bcca99f", @ANYRESDEC=r4], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000001cc0), 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000002c0)) 680.434613ms ago: executing program 1 (id=1749): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/7, 0x7}, 0xfffff107}], 0x1, 0x10122, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0xc21268d0491e3de4) write(r0, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 615.713582ms ago: executing program 0 (id=1750): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 597.632542ms ago: executing program 0 (id=1751): epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @remote, @private=0xa010104}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 579.667782ms ago: executing program 4 (id=1752): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 546.731542ms ago: executing program 0 (id=1753): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 540.891992ms ago: executing program 0 (id=1754): mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 540.628512ms ago: executing program 2 (id=1755): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(0x0, 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 524.540612ms ago: executing program 1 (id=1756): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004780)={'syz_tun\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c74c50000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x145542, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYRES32], 0x54}}, 0x0) 489.160112ms ago: executing program 2 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) 484.266272ms ago: executing program 4 (id=1758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='ext4_free_inode\x00', 0xffffffffffffffff, 0x0, 0x80000001}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newsa={0x138, 0x10, 0x713, 0x0, 0x3, {{@in6=@remote, @in=@private=0xa010102, 0x10, 0x0, 0x80}, {@in=@multicast1, 0x0, 0x32}, @in=@local, {}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x2, 0xa, 0x4, 0x0, 0x6a}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r6, 0x2) sendto$inet6(r6, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @local, 0x8}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x60, r8, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, {0x14, 0x2, @in={0x2, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r9 = dup(r5) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_collapse_range\x00', r3, 0x0, 0x7}, 0x18) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[], 0x7c8) 461.733132ms ago: executing program 2 (id=1759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r2, r3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) syz_open_procfs(r5, &(0x7f0000000340)='attr/sockcreate\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) close(0xffffffffffffffff) 457.269432ms ago: executing program 0 (id=1760): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0xfffffdfd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9419a9ca946946333fe6df1b0000000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="67fd31dd4c4a8d7fedbc5be3a78a75d5c0cb93c14bb0a7ce3680e760ea13b1e4631783f718dbfaa2ad219a4696e6c5e7ab6b1411d741c68764732a8b14273eebbd671b145c68163bd9cab2d56ec61d6eb6aa2861b4e1cfa725b6845698a35e9498f11f2daebd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000005fd5d990000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0x7005, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) 441.944851ms ago: executing program 3 (id=1761): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 425.712211ms ago: executing program 3 (id=1762): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xbe0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c745f72000000000000000000000000000000000000000024710000000004"], &(0x7f0000000100)=0x2c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0x1068, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1054, 0x1, [@m_police={0x1050, 0x1, 0x0, 0x0, {{0xb}, {0x1024, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0x1000008, 0xf7f, 0x8001, 0x0, 0x4, 0x3, 0x4a82, 0x5, 0x100, 0xd, 0x4, 0x9, 0x4, 0x5, 0x6, 0xf17a, 0x6, 0x800080, 0x9, 0x80000001, 0x6e1e28f3, 0x9, 0x101, 0x9, 0x80, 0xad, 0x1, 0x0, 0x80, 0x0, 0x8, 0xfffffffc, 0x171d, 0x40, 0x2, 0x464, 0x40, 0x0, 0x4, 0x2, 0xa0000, 0x5, 0x8, 0x3, 0xffffff96, 0x7, 0x5, 0x8, 0x6, 0x9c5, 0x100, 0x3, 0x9, 0x7, 0x4ba, 0x8001, 0xd, 0x0, 0x8, 0x4, 0x16d, 0xbb, 0xfffffff5, 0x9, 0x1, 0xacf, 0xa, 0x3, 0x8001, 0x6, 0x2, 0xda9, 0x6, 0xf, 0x9e05, 0x2d1, 0x80000001, 0x5, 0xfff, 0x600, 0x3, 0x0, 0x876, 0xe2, 0x9, 0xfffffff9, 0x0, 0x0, 0x6, 0x9, 0x5, 0xdbff, 0x5, 0x10, 0x7, 0xe7, 0xfffffffb, 0x8, 0x1, 0x9, 0x0, 0x5, 0x9, 0x7, 0x3, 0x4, 0x3, 0xfffffff9, 0x10000, 0x0, 0x2, 0x80000000, 0x8001, 0xa, 0x52, 0x7b03, 0x6, 0x6, 0xfffffffb, 0x5, 0xfffffffd, 0xb91470fb, 0x3, 0x3, 0x4, 0xa, 0x6d, 0x2, 0x3, 0x8, 0x412e, 0x24, 0xfffffff7, 0x6, 0x9, 0x2, 0x6, 0x0, 0xeaf, 0x75a0, 0x8, 0x5, 0x268, 0x200, 0x1, 0x400, 0x167, 0x9, 0x7, 0x8, 0xf, 0xdf, 0x1, 0xb, 0xa4, 0x5, 0xc6, 0x5b0, 0x9, 0x8, 0x2, 0x4, 0x1ee, 0x8, 0x1, 0xf725, 0x6, 0x8, 0x5, 0x1, 0x0, 0x1baac88f, 0x1, 0x400, 0x5, 0xff, 0x3, 0x1ff, 0x4, 0xceb, 0x3, 0xff, 0x5, 0xdc, 0x9, 0xfffffff0, 0x0, 0x800, 0x6, 0x8eb, 0xfffffffc, 0x8, 0x36919be0, 0x5, 0x2, 0x8, 0x5, 0x81, 0x892c, 0x3, 0x2, 0x7ff, 0xef83, 0x4, 0x80, 0xffff, 0xda, 0x0, 0x5, 0xa, 0x80000000, 0x93c, 0x0, 0xa, 0x0, 0x7, 0x7, 0x8, 0x100, 0x3, 0xfaa6, 0x1, 0x1, 0x5, 0x6, 0x1, 0x3, 0x0, 0x8, 0x7f, 0x9710, 0x7, 0x81, 0x2, 0x6, 0x401, 0x9, 0x7, 0x80000010, 0x5, 0x3, 0x6, 0x7ff00000, 0x401, 0xd3d, 0x3, 0x5, 0x200, 0xe, 0x7, 0x3, 0x9, 0x9, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0x59e9, 0x5, 0x1ffe, 0x7f, 0x1, 0x1000, 0xffffffff, 0x7, 0x1c00, 0x4, 0x6, 0x16c800, 0xf, 0x1, 0x81, 0xff, 0x9, 0xf760, 0x6, 0x2, 0x4, 0x0, 0x101, 0x7, 0x3f, 0x1, 0x655, 0x8c5f, 0x6, 0x7, 0x1, 0xb, 0x7077, 0x10, 0x0, 0x0, 0xffff, 0x200, 0x63a08ec6, 0x800, 0xa373762, 0x9, 0x6, 0x9, 0xffff2cbd, 0x6, 0x6, 0x4, 0xfffffffb, 0x7, 0x8, 0x1, 0xffff, 0x8, 0x7, 0x5, 0x5, 0x5a, 0x1, 0x0, 0x1, 0x3, 0x6, 0x3, 0x5, 0x597, 0x1, 0x1, 0x2, 0x8, 0x0, 0x8, 0x100, 0x6, 0xfffffff7, 0xa, 0x6, 0x401, 0x3, 0x0, 0x5, 0x5, 0x7ff, 0x1, 0x7, 0x2, 0x3ac, 0x1, 0x0, 0xe559, 0xb, 0x7fffffff, 0x39, 0x125e, 0x6, 0x1, 0xc5d5, 0x7, 0xffff051b, 0x1, 0x0, 0x200, 0x8, 0xb5, 0x8001, 0x7, 0x4, 0x3, 0x2, 0xc4a, 0x0, 0xc, 0x5, 0x800, 0x4c18575, 0xe, 0x2, 0x78000, 0x1000, 0x2e, 0x3, 0x6, 0x0, 0x88, 0x401, 0x8, 0xa, 0x94f, 0x3, 0xcf0, 0x22, 0x3, 0x0, 0x9, 0x277, 0x10, 0x40, 0x6, 0x3, 0x9, 0x7, 0x1800000, 0x7fffffff, 0x8, 0x2e, 0x10000, 0x5, 0x8, 0xc0000000, 0x8, 0x8, 0xa8, 0xf, 0x4040, 0xfffffffb, 0x6a11, 0xc14, 0x6, 0xfffffffb, 0x1, 0x0, 0x9, 0x2, 0xb, 0x3, 0x1, 0xb, 0x4, 0x6, 0x3, 0x9, 0x2, 0xfffffe01, 0xa22, 0x7, 0xfffc, 0x6, 0x5c5e, 0x7, 0x4, 0x8, 0x5, 0x5, 0x9, 0x6, 0x5, 0x6, 0x2, 0x5, 0x0, 0x64, 0xb, 0x2, 0x3, 0x5, 0x42a1d4b5, 0x6, 0x4, 0x4, 0x5, 0x6, 0x834f, 0x4, 0x80000000, 0x5, 0x2, 0x101, 0x0, 0xbffffffe, 0xb, 0x8001, 0x8000, 0xfffffffd, 0x6, 0x80000001, 0x7a39f194, 0xcf, 0x5e249f10, 0x6, 0x1, 0x5e1b, 0x6, 0x80000000, 0x3, 0x8, 0x4, 0x6, 0x4c7, 0x3, 0xf0, 0xfffffffd, 0x0, 0x1, 0x8, 0x7, 0x6, 0x2, 0x4, 0xd56, 0xd, 0x275c, 0x9, 0x3ff, 0xfffff292, 0x3, 0x3, 0xffffff80, 0xf, 0xd9, 0x7a, 0x6, 0x7, 0x6, 0x1]}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0xbd, 0x6ae, 0x3, 0x2, 0x3, 0xffffffff, 0x4, 0x0, 0x6, 0x3, 0x1000, 0x0, 0x2, 0x1, 0xe6, 0x1, 0xa54f, 0x400, 0x5, 0x6, 0x0, 0x9, 0x4, 0x1, 0x1, 0x8, 0x8, 0xfffffffa, 0x0, 0x7fffffff, 0x2ecd, 0x0, 0x3e04, 0x0, 0x2, 0x9, 0x9, 0xffff7589, 0xf69, 0x6, 0x0, 0x200, 0x4b883584, 0x7f, 0x9, 0x0, 0x8, 0x6, 0x0, 0x5, 0x261, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0xb0, 0x4, 0x1, 0x4, 0x7, 0x5, 0x0, 0x8, 0x1, 0x800, 0x8, 0x62a, 0xfffffff7, 0xfffffff7, 0x9, 0xffffff7f, 0x9, 0x8, 0xe5f, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0xa, 0x7, 0x8, 0xfffffff8, 0xb, 0x9, 0x4, 0xac39, 0x6, 0x82, 0x0, 0x1ff, 0x3, 0x0, 0xfa7, 0x4, 0xffffffff, 0xab6, 0xb, 0x101, 0x9, 0x8, 0x2, 0x7, 0x4, 0x2, 0x10001, 0x4, 0x9, 0x8000, 0x0, 0x40, 0x80000000, 0x9, 0x40, 0x0, 0x6ab, 0x4, 0x3, 0x8, 0x8, 0x1, 0x3, 0x8, 0x4, 0x10, 0x3, 0x2, 0x2, 0x5, 0x23, 0x8, 0x7, 0x6d, 0x9, 0x5, 0x4, 0x4, 0x100, 0x101, 0xb, 0x8f, 0x5, 0x30000000, 0x1, 0x2, 0x7, 0x3f3a, 0x10001, 0x7, 0x80000000, 0xb3, 0x8, 0x7, 0x10, 0x1, 0x80000000, 0x1, 0xd, 0x8000, 0x5, 0x2, 0x1, 0x1, 0x6, 0xff, 0xfffffffe, 0x6, 0x3, 0x1ddbd6c1, 0x6a, 0x8, 0xf1ef, 0x7fffffff, 0xd, 0x7, 0x4, 0x6a3b, 0xb, 0x3, 0x1ff, 0x9, 0x1, 0x1, 0x7, 0x8, 0xffff5522, 0x8, 0x8, 0x7, 0x7, 0x4, 0xa, 0x3, 0x7, 0x6, 0x8, 0x6, 0x6, 0x0, 0x2, 0x9, 0x7, 0x7f, 0x50, 0x4038f2eb, 0x8, 0x4, 0x2, 0xfff, 0x1, 0x12000000, 0x8, 0xff3, 0x1, 0x4, 0x0, 0x12f, 0xed2, 0x0, 0x401, 0xfffffc01, 0xc, 0xc307, 0x10000, 0x6, 0xb4, 0x9, 0x0, 0x3, 0x401, 0x8, 0x40, 0x7, 0x4, 0x0, 0x86ae, 0x51, 0x10000, 0x4, 0x8, 0xe276, 0x4, 0xc9af, 0x10001, 0x6, 0x6, 0x9, 0x2, 0x6, 0x8, 0x7, 0xfe8a, 0x5, 0xf]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xf}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0xf, 0xfffffff7, 0x9, 0x80000000, 0xb0f, 0xfda, 0x9, 0x5, 0x2, 0x6, 0xe, 0x7fff, 0xc, 0x7, 0x4, 0x9, 0x7, 0x6, 0xe064, 0x1, 0x69c875c, 0x401, 0x2, 0x4, 0x7, 0x9, 0x9, 0x401, 0xffffff86, 0x9, 0x4bc6f870, 0x2c, 0x7, 0x0, 0x5, 0xffdeffff, 0x5, 0x2, 0x3, 0x2, 0x1, 0x7, 0x7ff, 0x7, 0x101, 0x7, 0x81, 0x800, 0x3, 0x10000007, 0xffffffff, 0x9, 0x4, 0xc03e, 0xfffffffd, 0x9, 0x3, 0x6, 0x1, 0xb88, 0x1, 0x5, 0x4, 0x100, 0xc4c2, 0x3, 0x599a5c0a, 0x1, 0xe, 0x2, 0x1, 0x3, 0x90, 0x0, 0x3a3, 0x8, 0xff, 0xffffffff, 0x6, 0xe, 0x2, 0x5, 0x5, 0x4ca, 0x7f9c, 0x1, 0x2, 0x7, 0x7, 0x9d3, 0xd0, 0xffff, 0x1, 0x9, 0x5, 0x26a4, 0xd1d0, 0x9, 0xfffffff1, 0xffffff96, 0x0, 0x800, 0x78, 0xf, 0x80, 0x7fffffff, 0x2, 0x5, 0x3, 0x1, 0x4, 0x8000, 0xfffffffd, 0x2, 0xd, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x1, 0x1e, 0x6624, 0x3, 0x800, 0x8, 0x8, 0x5, 0xf0, 0x80, 0x9, 0xffffff02, 0x8001, 0x3f85, 0x40, 0x7, 0x0, 0xfffffffd, 0x9, 0x92600, 0xfffffffc, 0x800, 0xe, 0x7, 0x2b2374bd, 0x1, 0x2ae, 0x5f, 0x26, 0xfffffffd, 0x1, 0x0, 0x7fff, 0x8, 0x853, 0x2, 0xee89, 0x1, 0xc6e6, 0x6, 0x6, 0x5, 0x9, 0x7ff, 0x40, 0x6, 0xfffff6b9, 0x9, 0x6, 0x8, 0x0, 0xd, 0x4, 0x10000, 0xffff, 0x4, 0x2, 0x0, 0x9, 0x9, 0x10001, 0x6, 0x2, 0x9, 0x6, 0x3ff, 0x10, 0x3fb, 0x6, 0x4, 0x40, 0x8, 0x7, 0xd8, 0x1, 0x401, 0xd, 0x800, 0x8001, 0x2, 0x1, 0x0, 0x1, 0x3ff, 0x10, 0xfffffff9, 0x2, 0xffffffff, 0x401, 0x9, 0x4, 0x8, 0xa52, 0x400, 0x1, 0xfffffff9, 0xffffffff, 0x9, 0x2, 0x40, 0x9, 0x6, 0x3f0a, 0x1, 0x7, 0x2, 0x9, 0xfffffffe, 0x401, 0x90, 0x9, 0x7, 0xb4, 0xe, 0x7fffffff, 0x2, 0x7, 0x32, 0x90, 0x5, 0x1, 0x7, 0x2, 0x27, 0x7, 0x6, 0x0, 0x10000, 0x7f, 0x0, 0x81, 0x71d3, 0x9, 0xa, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x1068}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0), 0x1, 0x51c, &(0x7f0000000780)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1000000000000000000000000000000000000000d3be24"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x16) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000340)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 378.762822ms ago: executing program 1 (id=1763): epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$inet6(0xa, 0x3, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @remote, @private=0xa010104}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 355.520151ms ago: executing program 1 (id=1764): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 296.024561ms ago: executing program 1 (id=1765): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r3, 0x0, 0x40000000009}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100001000044d900000000000000000a20000000000a03000000000060000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2c001280140001800c000100636f756e746572000400028014000180090001006c617374000000000400028008000340000001", @ANYRESDEC], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20050800) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x3, &(0x7f00000002c0)=[{0x3, 0x4, 0x80, 0x4d}, {0x8, 0x5, 0x54, 0x8}, {0x7ca, 0x0, 0x7f, 0x5}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) fcntl$notify(r5, 0x402, 0x5) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) fcntl$dupfd(r7, 0x0, r7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10000000) 295.244991ms ago: executing program 1 (id=1766): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x0, 0xfffffdfd}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000006c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRESDEC=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="9419a9ca946946333fe6df1b0000000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="67fd31dd4c4a8d7fedbc5be3a78a75d5c0cb93c14bb0a7ce3680e760ea13b1e4631783f718dbfaa2ad219a4696e6c5e7ab6b1411d741c68764732a8b14273eebbd671b145c68163bd9cab2d56ec61d6eb6aa2861b4e1cfa725b6845698a35e9498f11f2daebd12b96decc67e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000005fd5d990000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0x7005, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0xbf}], 0x1) 0s ago: executing program 3 (id=1767): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000280)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000001000100811202000000000095000400030000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000020000018791100"/21, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058477e977c7c369c83f33b2feb1a05fdd93b432cc8089dc52e5e21079bc2f9773bc6dfe36ac9d5ef5e11eb52d3b4f131b538d9dde8f9101426bcee49c269695ddf398f3738ceb8f5f1eec96be9e1d8f87f7fd19d3d190bb09f7f2b00dd0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0xb29, 0x0, 0xfffffffe, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x2000c10c) fdatasync(r3) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x40000000) syz_emit_ethernet(0x46, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@dax}]}, 0x8, 0x5fb, &(0x7f0000000ac0)="$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") kernel console output (not intermixed with test programs): 5 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 67.967480][ T29] audit: type=1326 audit(1734797706.101:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 67.990947][ T29] audit: type=1326 audit(1734797706.101:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.014436][ T29] audit: type=1326 audit(1734797706.101:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.037805][ T29] audit: type=1326 audit(1734797706.101:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.061130][ T29] audit: type=1326 audit(1734797706.101:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.084513][ T29] audit: type=1326 audit(1734797706.101:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.107827][ T29] audit: type=1326 audit(1734797706.101:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.131224][ T29] audit: type=1326 audit(1734797706.101:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4740 comm="syz.0.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 68.157161][ T4741] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 68.186940][ T4747] netlink: 'syz.0.441': attribute type 29 has an invalid length. [ 68.237054][ T4751] netlink: 32 bytes leftover after parsing attributes in process `syz.4.443'. [ 68.245996][ T4751] netlink: 7 bytes leftover after parsing attributes in process `syz.4.443'. [ 68.253065][ T4732] Set syz1 is full, maxelem 65536 reached [ 68.333267][ T4756] can0: slcan on ptm0. [ 68.345047][ T4756] netlink: 5 bytes leftover after parsing attributes in process `syz.4.446'. [ 68.354105][ T4756] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 68.362820][ T4756] 0ªX¹¦Dö»: entered allmulticast mode [ 68.456633][ T4755] can0 (unregistered): slcan off ptm0. [ 68.549769][ T4777] netlink: 148 bytes leftover after parsing attributes in process `syz.4.452'. [ 68.570054][ T4776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.579800][ T4776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.083449][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.092094][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.106071][ T4782] FAULT_INJECTION: forcing a failure. [ 69.106071][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 69.118977][ T4782] CPU: 1 UID: 0 PID: 4782 Comm: syz.2.456 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 69.129602][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.139677][ T4782] Call Trace: [ 69.143024][ T4782] [ 69.146005][ T4782] dump_stack_lvl+0xf2/0x150 [ 69.150651][ T4782] dump_stack+0x15/0x1a [ 69.154966][ T4782] should_fail_ex+0x223/0x230 [ 69.159657][ T4782] should_failslab+0x8f/0xb0 [ 69.164285][ T4782] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 69.170638][ T4782] ? sidtab_sid2str_get+0xb8/0x140 [ 69.175782][ T4782] kmemdup_noprof+0x2a/0x60 [ 69.180353][ T4782] sidtab_sid2str_get+0xb8/0x140 [ 69.185302][ T4782] security_sid_to_context_core+0x1eb/0x2f0 [ 69.191215][ T4782] security_sid_to_context+0x27/0x30 [ 69.196533][ T4782] selinux_lsmprop_to_secctx+0x2c/0x40 [ 69.202044][ T4782] security_lsmprop_to_secctx+0x4a/0x90 [ 69.207748][ T4782] audit_log_task_context+0x93/0x1c0 [ 69.213066][ T4782] audit_log_task+0xf9/0x1c0 [ 69.217677][ T4782] audit_seccomp+0x68/0x130 [ 69.222233][ T4782] __seccomp_filter+0x6fa/0x1180 [ 69.227257][ T4782] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.233036][ T4782] ? vfs_write+0x596/0x920 [ 69.237555][ T4782] ? putname+0xcf/0xf0 [ 69.241676][ T4782] __secure_computing+0x9f/0x1c0 [ 69.246643][ T4782] syscall_trace_enter+0xd1/0x1f0 [ 69.251695][ T4782] ? fpregs_assert_state_consistent+0x83/0xa0 [ 69.257847][ T4782] do_syscall_64+0xaa/0x1c0 [ 69.262360][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 69.267042][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 69.271730][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.277669][ T4782] RIP: 0033:0x7fe11cd55d29 [ 69.282134][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.301848][ T4782] RSP: 002b:00007fe11b3c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 69.310271][ T4782] RAX: ffffffffffffffda RBX: 00007fe11cf45fa0 RCX: 00007fe11cd55d29 [ 69.318352][ T4782] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 69.326378][ T4782] RBP: 00007fe11b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.334470][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.342666][ T4782] R13: 0000000000000000 R14: 00007fe11cf45fa0 R15: 00007ffe8d86c6c8 [ 69.350704][ T4782] [ 69.518658][ T4793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.460'. [ 69.534378][ T4793] @: renamed from vlan0 (while UP) [ 70.396806][ T4794] lo speed is unknown, defaulting to 1000 [ 70.649700][ T4813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.658813][ T4813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.736959][ T4817] netlink: 148 bytes leftover after parsing attributes in process `syz.4.468'. [ 70.821309][ T4821] netlink: 'syz.2.470': attribute type 29 has an invalid length. [ 70.841615][ T4821] netlink: 'syz.2.470': attribute type 29 has an invalid length. [ 71.368174][ T4844] tipc: Enabling of bearer rejected, failed to enable media [ 71.970947][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.985778][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.177146][ T4887] netlink: 148 bytes leftover after parsing attributes in process `syz.0.491'. [ 72.654858][ T4908] tipc: Enabling of bearer rejected, failed to enable media [ 72.980853][ T4912] netlink: 'syz.0.502': attribute type 5 has an invalid length. [ 72.989862][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 72.989879][ T29] audit: type=1326 audit(1734797711.161:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.020751][ T29] audit: type=1326 audit(1734797711.191:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.044262][ T29] audit: type=1326 audit(1734797711.191:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.067620][ T29] audit: type=1326 audit(1734797711.191:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.085295][ T4912] lo speed is unknown, defaulting to 1000 [ 73.091325][ T29] audit: type=1326 audit(1734797711.191:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.120503][ T29] audit: type=1326 audit(1734797711.191:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.143845][ T29] audit: type=1326 audit(1734797711.191:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.167314][ T29] audit: type=1326 audit(1734797711.191:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.207361][ T29] audit: type=1326 audit(1734797711.241:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.230759][ T29] audit: type=1326 audit(1734797711.241:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 73.361432][ T4922] lo speed is unknown, defaulting to 1000 [ 73.428885][ T4926] lo speed is unknown, defaulting to 1000 [ 73.551659][ T4932] netlink: 'syz.3.510': attribute type 12 has an invalid length. [ 73.668116][ T4944] netlink: 148 bytes leftover after parsing attributes in process `syz.3.512'. [ 74.427185][ T4969] FAULT_INJECTION: forcing a failure. [ 74.427185][ T4969] name failslab, interval 1, probability 0, space 0, times 0 [ 74.439863][ T4969] CPU: 0 UID: 0 PID: 4969 Comm: syz.2.522 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 74.450497][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.460643][ T4969] Call Trace: [ 74.464013][ T4969] [ 74.466997][ T4969] dump_stack_lvl+0xf2/0x150 [ 74.471654][ T4969] dump_stack+0x15/0x1a [ 74.475849][ T4969] should_fail_ex+0x223/0x230 [ 74.480563][ T4969] should_failslab+0x8f/0xb0 [ 74.485241][ T4969] __kmalloc_noprof+0xab/0x3f0 [ 74.490113][ T4969] ? fib6_info_alloc+0x2c/0x90 [ 74.494900][ T4969] fib6_info_alloc+0x2c/0x90 [ 74.499515][ T4969] ip6_route_info_create+0x34c/0xba0 [ 74.504837][ T4969] ? nla_memcpy+0x7a/0x90 [ 74.509250][ T4969] inet6_rtm_newroute+0x3b8/0x1260 [ 74.514427][ T4969] ? __kfree_skb+0x102/0x150 [ 74.519025][ T4969] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 74.524516][ T4969] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 74.530091][ T4969] rtnetlink_rcv_msg+0x6aa/0x710 [ 74.535039][ T4969] ? ref_tracker_free+0x3a5/0x410 [ 74.540221][ T4969] ? __dev_queue_xmit+0x186/0x2090 [ 74.545395][ T4969] netlink_rcv_skb+0x12c/0x230 [ 74.550176][ T4969] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.555646][ T4969] rtnetlink_rcv+0x1c/0x30 [ 74.560147][ T4969] netlink_unicast+0x599/0x670 [ 74.564919][ T4969] netlink_sendmsg+0x5cc/0x6e0 [ 74.569700][ T4969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.574997][ T4969] __sock_sendmsg+0x140/0x180 [ 74.579694][ T4969] ____sys_sendmsg+0x312/0x410 [ 74.584499][ T4969] __sys_sendmsg+0x19d/0x230 [ 74.589128][ T4969] __x64_sys_sendmsg+0x46/0x50 [ 74.594093][ T4969] x64_sys_call+0x2734/0x2dc0 [ 74.598807][ T4969] do_syscall_64+0xc9/0x1c0 [ 74.603401][ T4969] ? clear_bhb_loop+0x55/0xb0 [ 74.608081][ T4969] ? clear_bhb_loop+0x55/0xb0 [ 74.612792][ T4969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.618779][ T4969] RIP: 0033:0x7fe11cd55d29 [ 74.623204][ T4969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.642854][ T4969] RSP: 002b:00007fe11b3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.651349][ T4969] RAX: ffffffffffffffda RBX: 00007fe11cf45fa0 RCX: 00007fe11cd55d29 [ 74.659327][ T4969] RDX: 0000000000000880 RSI: 0000000020000000 RDI: 0000000000000007 [ 74.667317][ T4969] RBP: 00007fe11b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 74.675291][ T4969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.683267][ T4969] R13: 0000000000000000 R14: 00007fe11cf45fa0 R15: 00007ffe8d86c6c8 [ 74.691283][ T4969] [ 74.735807][ T4973] netlink: 'syz.1.523': attribute type 12 has an invalid length. [ 74.971069][ T4989] netlink: 'syz.1.531': attribute type 12 has an invalid length. [ 74.979352][ T4992] IPv6: Can't replace route, no match found [ 75.069871][ T4998] lo speed is unknown, defaulting to 1000 [ 75.371559][ T5000] netlink: 148 bytes leftover after parsing attributes in process `syz.1.534'. [ 75.409877][ T5003] vlan2: entered allmulticast mode [ 75.481169][ T5003] netlink: 132 bytes leftover after parsing attributes in process `syz.4.536'. [ 75.771878][ T5033] FAULT_INJECTION: forcing a failure. [ 75.771878][ T5033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.785011][ T5033] CPU: 0 UID: 0 PID: 5033 Comm: syz.3.548 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 75.795624][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.805727][ T5033] Call Trace: [ 75.809003][ T5033] [ 75.811932][ T5033] dump_stack_lvl+0xf2/0x150 [ 75.816619][ T5033] dump_stack+0x15/0x1a [ 75.820836][ T5033] should_fail_ex+0x223/0x230 [ 75.825595][ T5033] should_fail+0xb/0x10 [ 75.829794][ T5033] should_fail_usercopy+0x1a/0x20 [ 75.834953][ T5033] _copy_from_user+0x1e/0xb0 [ 75.839709][ T5033] sctp_setsockopt+0xbe/0xea0 [ 75.844436][ T5033] sock_common_setsockopt+0x64/0x80 [ 75.849871][ T5033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 75.855839][ T5033] __sys_setsockopt+0x187/0x200 [ 75.860757][ T5033] __x64_sys_setsockopt+0x66/0x80 [ 75.865813][ T5033] x64_sys_call+0x282e/0x2dc0 [ 75.870605][ T5033] do_syscall_64+0xc9/0x1c0 [ 75.875134][ T5033] ? clear_bhb_loop+0x55/0xb0 [ 75.879931][ T5033] ? clear_bhb_loop+0x55/0xb0 [ 75.884643][ T5033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.890597][ T5033] RIP: 0033:0x7fc893de5d29 [ 75.895046][ T5033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.914723][ T5033] RSP: 002b:00007fc892457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.923246][ T5033] RAX: ffffffffffffffda RBX: 00007fc893fd5fa0 RCX: 00007fc893de5d29 [ 75.931246][ T5033] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000006 [ 75.939310][ T5033] RBP: 00007fc892457090 R08: 0000000000000009 R09: 0000000000000000 [ 75.947334][ T5033] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 75.955321][ T5033] R13: 0000000000000000 R14: 00007fc893fd5fa0 R15: 00007ffe31b5f058 [ 75.963361][ T5033] [ 75.972914][ T5039] FAULT_INJECTION: forcing a failure. [ 75.972914][ T5039] name failslab, interval 1, probability 0, space 0, times 0 [ 75.985659][ T5039] CPU: 1 UID: 0 PID: 5039 Comm: syz.4.551 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 75.996270][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.006712][ T5039] Call Trace: [ 76.010019][ T5039] [ 76.012985][ T5039] dump_stack_lvl+0xf2/0x150 [ 76.017655][ T5039] dump_stack+0x15/0x1a [ 76.021848][ T5039] should_fail_ex+0x223/0x230 [ 76.026674][ T5039] ? audit_log_d_path+0x96/0x250 [ 76.031636][ T5039] should_failslab+0x8f/0xb0 [ 76.036241][ T5039] __kmalloc_cache_noprof+0x4e/0x320 [ 76.041541][ T5039] audit_log_d_path+0x96/0x250 [ 76.046538][ T5039] ? __rcu_read_unlock+0x4e/0x70 [ 76.051521][ T5039] audit_log_d_path_exe+0x42/0x70 [ 76.056610][ T5039] audit_log_task+0x192/0x1c0 [ 76.061325][ T5039] audit_seccomp+0x68/0x130 [ 76.065849][ T5039] __seccomp_filter+0x6fa/0x1180 [ 76.070860][ T5039] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 76.076526][ T5039] ? vfs_write+0x596/0x920 [ 76.081033][ T5039] ? __schedule+0x6fa/0x930 [ 76.085597][ T5039] __secure_computing+0x9f/0x1c0 [ 76.090610][ T5039] syscall_trace_enter+0xd1/0x1f0 [ 76.095668][ T5039] do_syscall_64+0xaa/0x1c0 [ 76.100335][ T5039] ? clear_bhb_loop+0x55/0xb0 [ 76.105084][ T5039] ? clear_bhb_loop+0x55/0xb0 [ 76.109773][ T5039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.115703][ T5039] RIP: 0033:0x7fb0bd275d29 [ 76.120116][ T5039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.136026][ T5044] netlink: 148 bytes leftover after parsing attributes in process `syz.0.552'. [ 76.139814][ T5039] RSP: 002b:00007fb0bb8e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 76.139841][ T5039] RAX: ffffffffffffffda RBX: 00007fb0bd465fa0 RCX: 00007fb0bd275d29 [ 76.139858][ T5039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 76.173149][ T5039] RBP: 00007fb0bb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.181122][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.189110][ T5039] R13: 0000000000000000 R14: 00007fb0bd465fa0 R15: 00007ffee684d728 [ 76.197126][ T5039] [ 76.311956][ T5051] lo speed is unknown, defaulting to 1000 [ 76.375539][ T5054] lo speed is unknown, defaulting to 1000 [ 76.554042][ T5079] netlink: 148 bytes leftover after parsing attributes in process `syz.2.559'. [ 76.563390][ T5080] FAULT_INJECTION: forcing a failure. [ 76.563390][ T5080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.576540][ T5080] CPU: 1 UID: 0 PID: 5080 Comm: syz.3.560 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 76.587169][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 76.597246][ T5080] Call Trace: [ 76.600600][ T5080] [ 76.603561][ T5080] dump_stack_lvl+0xf2/0x150 [ 76.608285][ T5080] dump_stack+0x15/0x1a [ 76.612629][ T5080] should_fail_ex+0x223/0x230 [ 76.617339][ T5080] should_fail+0xb/0x10 [ 76.621530][ T5080] should_fail_usercopy+0x1a/0x20 [ 76.626622][ T5080] _copy_from_user+0x1e/0xb0 [ 76.631273][ T5080] copy_msghdr_from_user+0x54/0x2a0 [ 76.636508][ T5080] ? __fget_files+0x17c/0x1c0 [ 76.641233][ T5080] __sys_sendmmsg+0x1e8/0x4b0 [ 76.645958][ T5080] __x64_sys_sendmmsg+0x57/0x70 [ 76.650929][ T5080] x64_sys_call+0x29aa/0x2dc0 [ 76.655674][ T5080] do_syscall_64+0xc9/0x1c0 [ 76.660199][ T5080] ? clear_bhb_loop+0x55/0xb0 [ 76.665035][ T5080] ? clear_bhb_loop+0x55/0xb0 [ 76.669753][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.675689][ T5080] RIP: 0033:0x7fc893de5d29 [ 76.680121][ T5080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.700029][ T5080] RSP: 002b:00007fc892436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 76.708496][ T5080] RAX: ffffffffffffffda RBX: 00007fc893fd6080 RCX: 00007fc893de5d29 [ 76.716484][ T5080] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003 [ 76.724484][ T5080] RBP: 00007fc892436090 R08: 0000000000000000 R09: 0000000000000000 [ 76.732521][ T5080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.740515][ T5080] R13: 0000000000000000 R14: 00007fc893fd6080 R15: 00007ffe31b5f058 [ 76.748518][ T5080] [ 77.490297][ T5224] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.512517][ T5229] netlink: 'syz.0.570': attribute type 29 has an invalid length. [ 77.540667][ T5229] netlink: 'syz.0.570': attribute type 29 has an invalid length. [ 77.636319][ T5243] netlink: 148 bytes leftover after parsing attributes in process `syz.3.572'. [ 77.673843][ T5245] lo speed is unknown, defaulting to 1000 [ 77.696706][ T5241] Falling back ldisc for ttyS3. [ 77.722045][ T5249] netlink: 148 bytes leftover after parsing attributes in process `syz.4.576'. [ 77.775344][ T5252] netlink: 'syz.0.577': attribute type 12 has an invalid length. [ 77.801978][ T5254] SELinux: failed to load policy [ 77.967589][ T5271] netlink: 56 bytes leftover after parsing attributes in process `syz.1.583'. [ 77.989642][ T5271] lo speed is unknown, defaulting to 1000 [ 77.997507][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 77.997523][ T29] audit: type=1326 audit(1734797716.161:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.027115][ T29] audit: type=1326 audit(1734797716.161:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.050491][ T29] audit: type=1326 audit(1734797716.171:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c3da6cce7 code=0x7ffc0000 [ 78.050523][ T29] audit: type=1326 audit(1734797716.171:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c3da11f29 code=0x7ffc0000 [ 78.050548][ T29] audit: type=1326 audit(1734797716.171:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5264 comm="syz.0.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 78.050573][ T29] audit: type=1326 audit(1734797716.171:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.051118][ T29] audit: type=1326 audit(1734797716.171:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.051214][ T29] audit: type=1326 audit(1734797716.171:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.051288][ T29] audit: type=1326 audit(1734797716.171:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.051321][ T29] audit: type=1326 audit(1734797716.171:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5272 comm="syz.2.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 78.068040][ T5273] netlink: 'syz.2.585': attribute type 29 has an invalid length. [ 78.261368][ T5274] netlink: 'syz.2.585': attribute type 29 has an invalid length. [ 78.453715][ T5283] xt_TCPMSS: Only works on TCP SYN packets [ 78.569390][ T5290] lo speed is unknown, defaulting to 1000 [ 78.814545][ T5293] smc: net device bond0 erased user defined pnetid SYZ0 [ 79.034794][ T5302] smc: net device bond0 applied user defined pnetid SYZ0 [ 79.489467][ T5319] netlink: 148 bytes leftover after parsing attributes in process `syz.2.597'. [ 79.523089][ T5320] lo speed is unknown, defaulting to 1000 [ 79.710715][ T5321] netlink: 'syz.4.598': attribute type 29 has an invalid length. [ 79.729463][ T5321] netlink: 'syz.4.598': attribute type 29 has an invalid length. [ 80.170024][ T5343] lo speed is unknown, defaulting to 1000 [ 80.349212][ T5346] sctp: [Deprecated]: syz.4.605 (pid 5346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.349212][ T5346] Use struct sctp_sack_info instead [ 80.480368][ T5345] lo speed is unknown, defaulting to 1000 [ 80.836736][ T5363] lo speed is unknown, defaulting to 1000 [ 80.921398][ T5367] siw: device registration error -23 [ 81.034005][ T5376] Cannot find del_set index 4 as target [ 81.068571][ T5377] tipc: Enabling of bearer rejected, failed to enable media [ 81.222608][ T5376] lo speed is unknown, defaulting to 1000 [ 81.235139][ T5391] netlink: 148 bytes leftover after parsing attributes in process `syz.2.618'. [ 81.792452][ T5402] lo speed is unknown, defaulting to 1000 [ 82.038886][ T5401] syz.3.623 (5401) used greatest stack depth: 9664 bytes left [ 82.058588][ T5404] netlink: 'syz.4.624': attribute type 12 has an invalid length. [ 82.113443][ T5408] FAULT_INJECTION: forcing a failure. [ 82.113443][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 82.126236][ T5408] CPU: 1 UID: 0 PID: 5408 Comm: syz.2.626 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 82.136849][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.147003][ T5408] Call Trace: [ 82.150291][ T5408] [ 82.153378][ T5408] dump_stack_lvl+0xf2/0x150 [ 82.158008][ T5408] dump_stack+0x15/0x1a [ 82.162195][ T5408] should_fail_ex+0x223/0x230 [ 82.167007][ T5408] should_failslab+0x8f/0xb0 [ 82.171640][ T5408] kmem_cache_alloc_noprof+0x52/0x320 [ 82.177089][ T5408] ? audit_log_start+0x34c/0x6b0 [ 82.182054][ T5408] audit_log_start+0x34c/0x6b0 [ 82.186836][ T5408] audit_seccomp+0x4b/0x130 [ 82.191348][ T5408] __seccomp_filter+0x6fa/0x1180 [ 82.196318][ T5408] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 82.202049][ T5408] ? vfs_write+0x596/0x920 [ 82.206524][ T5408] ? __schedule+0x6fa/0x930 [ 82.211131][ T5408] __secure_computing+0x9f/0x1c0 [ 82.216150][ T5408] syscall_trace_enter+0xd1/0x1f0 [ 82.221198][ T5408] do_syscall_64+0xaa/0x1c0 [ 82.225713][ T5408] ? clear_bhb_loop+0x55/0xb0 [ 82.230422][ T5408] ? clear_bhb_loop+0x55/0xb0 [ 82.235124][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.241140][ T5408] RIP: 0033:0x7fe11cd55d29 [ 82.245560][ T5408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.265201][ T5408] RSP: 002b:00007fe11b3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 82.273623][ T5408] RAX: ffffffffffffffda RBX: 00007fe11cf45fa0 RCX: 00007fe11cd55d29 [ 82.281603][ T5408] RDX: ffffffffffffffff RSI: 0000000020000000 RDI: ffffffffffffffff [ 82.289598][ T5408] RBP: 00007fe11b3c7090 R08: 0000000000000002 R09: 0000000000000000 [ 82.297584][ T5408] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 82.305652][ T5408] R13: 0000000000000000 R14: 00007fe11cf45fa0 R15: 00007ffe8d86c6c8 [ 82.313731][ T5408] [ 82.520198][ T5412] infiniband syz1: set active [ 82.524925][ T5412] infiniband syz1: added bond_slave_1 [ 82.648228][ T5432] lo speed is unknown, defaulting to 1000 [ 83.099972][ T5412] RDS/IB: syz1: added [ 83.144321][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 83.144335][ T29] audit: type=1326 audit(1734797721.311:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.176250][ T5412] smc: adding ib device syz1 with port count 1 [ 83.427009][ T5412] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 83.459994][ T29] audit: type=1326 audit(1734797721.351:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.483470][ T29] audit: type=1326 audit(1734797721.561:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.506887][ T29] audit: type=1326 audit(1734797721.561:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.530272][ T29] audit: type=1326 audit(1734797721.561:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.553582][ T29] audit: type=1326 audit(1734797721.561:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.617702][ T5444] FAULT_INJECTION: forcing a failure. [ 83.617702][ T5444] name failslab, interval 1, probability 0, space 0, times 0 [ 83.630425][ T5444] CPU: 1 UID: 0 PID: 5444 Comm: syz.1.633 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 83.641051][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.651156][ T5444] Call Trace: [ 83.654544][ T5444] [ 83.657491][ T5444] dump_stack_lvl+0xf2/0x150 [ 83.657947][ T29] audit: type=1326 audit(1734797721.831:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.662143][ T5444] dump_stack+0x15/0x1a [ 83.685462][ T29] audit: type=1326 audit(1734797721.831:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.689574][ T5444] should_fail_ex+0x223/0x230 [ 83.689608][ T5444] should_failslab+0x8f/0xb0 [ 83.722527][ T5444] __kmalloc_noprof+0xab/0x3f0 [ 83.723213][ T29] audit: type=1326 audit(1734797721.891:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.727311][ T5444] ? copy_splice_read+0xc7/0x5d0 [ 83.727346][ T5444] copy_splice_read+0xc7/0x5d0 [ 83.750915][ T29] audit: type=1326 audit(1734797721.891:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5438 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 83.755773][ T5444] ? __kmalloc_noprof+0x284/0x3f0 [ 83.788841][ T5444] ? alloc_pipe_info+0x1cb/0x360 [ 83.793825][ T5444] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 83.799838][ T5444] splice_direct_to_actor+0x28b/0x670 [ 83.805336][ T5444] ? __pfx_direct_splice_actor+0x10/0x10 [ 83.811002][ T5444] do_splice_direct+0xd7/0x150 [ 83.815964][ T5444] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 83.821961][ T5444] do_sendfile+0x398/0x660 [ 83.826410][ T5444] __x64_sys_sendfile64+0x110/0x150 [ 83.831725][ T5444] x64_sys_call+0xfbd/0x2dc0 [ 83.836374][ T5444] do_syscall_64+0xc9/0x1c0 [ 83.840987][ T5444] ? clear_bhb_loop+0x55/0xb0 [ 83.845693][ T5444] ? clear_bhb_loop+0x55/0xb0 [ 83.850396][ T5444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.856397][ T5444] RIP: 0033:0x7f1acbbb5d29 [ 83.860918][ T5444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.880537][ T5444] RSP: 002b:00007f1aca227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.889235][ T5444] RAX: ffffffffffffffda RBX: 00007f1acbda5fa0 RCX: 00007f1acbbb5d29 [ 83.897217][ T5444] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 83.905209][ T5444] RBP: 00007f1aca227090 R08: 0000000000000000 R09: 0000000000000000 [ 83.913244][ T5444] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 83.921215][ T5444] R13: 0000000000000000 R14: 00007f1acbda5fa0 R15: 00007ffda6d033e8 [ 83.929254][ T5444] [ 84.093365][ T5449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.102612][ T5458] netlink: 148 bytes leftover after parsing attributes in process `syz.0.637'. [ 84.167455][ T5454] tipc: Enabling of bearer rejected, failed to enable media [ 84.480990][ T5463] binfmt_misc: register: failed to install interpreter file ./bus/file0 [ 84.600333][ T5468] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 84.662863][ T5468] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 84.967078][ T5482] smc: net device bond0 erased user defined pnetid SYZ0 [ 84.974635][ T5482] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 85.005836][ T5478] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.035066][ T5478] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 85.090216][ T5477] lo speed is unknown, defaulting to 1000 [ 85.277328][ T5497] netlink: 'syz.3.649': attribute type 29 has an invalid length. [ 85.349515][ T5497] netlink: 'syz.3.649': attribute type 29 has an invalid length. [ 85.503289][ T5512] netlink: 'syz.0.655': attribute type 12 has an invalid length. [ 85.532266][ T5517] tipc: Enabling of bearer rejected, failed to enable media [ 85.569489][ T5522] netlink: 148 bytes leftover after parsing attributes in process `syz.4.654'. [ 85.620319][ T5526] netlink: 'syz.0.660': attribute type 12 has an invalid length. [ 85.732540][ T5534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.919183][ T5541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.928781][ T5541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.619799][ T5560] netlink: 'syz.4.671': attribute type 29 has an invalid length. [ 86.634495][ T5560] netlink: 'syz.4.671': attribute type 29 has an invalid length. [ 86.844277][ T5579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.853378][ T5579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.878472][ T5576] netlink: 'syz.4.679': attribute type 29 has an invalid length. [ 86.893711][ T5576] netlink: 'syz.4.679': attribute type 29 has an invalid length. [ 86.920030][ T5581] tipc: Enabling of bearer rejected, failed to enable media [ 87.049544][ T5590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.681'. [ 87.070987][ T5590] lo speed is unknown, defaulting to 1000 [ 87.497595][ T5601] sctp: [Deprecated]: syz.4.688 (pid 5601) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.497595][ T5601] Use struct sctp_sack_info instead [ 87.554291][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.564261][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.665900][ T5613] bridge_slave_1: left allmulticast mode [ 87.671682][ T5613] bridge_slave_1: left promiscuous mode [ 87.677430][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.690140][ T5613] bridge_slave_0: left allmulticast mode [ 87.695989][ T5613] bridge_slave_0: left promiscuous mode [ 87.701921][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.725006][ T5619] smc: net device bond0 erased user defined pnetid SYZ0 [ 87.732603][ T5619] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 87.759061][ T5621] netlink: 56 bytes leftover after parsing attributes in process `syz.2.692'. [ 87.794620][ T5621] lo speed is unknown, defaulting to 1000 [ 88.275181][ T29] kauditd_printk_skb: 1060 callbacks suppressed [ 88.275199][ T29] audit: type=1326 audit(1734797726.431:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.304964][ T29] audit: type=1326 audit(1734797726.431:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.360729][ T29] audit: type=1326 audit(1734797726.531:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.384196][ T29] audit: type=1326 audit(1734797726.531:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.420290][ T29] audit: type=1326 audit(1734797726.531:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.443738][ T29] audit: type=1326 audit(1734797726.531:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.467107][ T29] audit: type=1326 audit(1734797726.531:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.490600][ T29] audit: type=1326 audit(1734797726.531:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.514042][ T29] audit: type=1326 audit(1734797726.531:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.537415][ T29] audit: type=1326 audit(1734797726.531:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 88.568034][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.577565][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.707515][ T5650] tipc: Enabling of bearer rejected, failed to enable media [ 88.716065][ T5651] FAULT_INJECTION: forcing a failure. [ 88.716065][ T5651] name failslab, interval 1, probability 0, space 0, times 0 [ 88.729413][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.3.705 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 88.740033][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.750228][ T5651] Call Trace: [ 88.753517][ T5651] [ 88.756468][ T5651] dump_stack_lvl+0xf2/0x150 [ 88.761113][ T5651] dump_stack+0x15/0x1a [ 88.765298][ T5651] should_fail_ex+0x223/0x230 [ 88.770052][ T5651] should_failslab+0x8f/0xb0 [ 88.774819][ T5651] __kmalloc_node_noprof+0xad/0x410 [ 88.780107][ T5651] ? __vmalloc_node_range_noprof+0x3dc/0xe80 [ 88.786125][ T5651] __vmalloc_node_range_noprof+0x3dc/0xe80 [ 88.791974][ T5651] ? __rcu_read_unlock+0x4e/0x70 [ 88.796946][ T5651] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 88.802823][ T5651] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 88.808429][ T5651] __vmalloc_noprof+0x5e/0x70 [ 88.813144][ T5651] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 88.818796][ T5651] bpf_prog_alloc_no_stats+0x49/0x380 [ 88.824198][ T5651] ? bpf_prog_alloc+0x28/0x150 [ 88.829021][ T5651] bpf_prog_alloc+0x3a/0x150 [ 88.833648][ T5651] bpf_prog_load+0x4d1/0x1070 [ 88.838351][ T5651] ? __rcu_read_unlock+0x4e/0x70 [ 88.843327][ T5651] __sys_bpf+0x463/0x7a0 [ 88.847593][ T5651] __x64_sys_bpf+0x43/0x50 [ 88.852035][ T5651] x64_sys_call+0x2914/0x2dc0 [ 88.856957][ T5651] do_syscall_64+0xc9/0x1c0 [ 88.861474][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 88.866212][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 88.870910][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.876906][ T5651] RIP: 0033:0x7fc893de5d29 [ 88.881369][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.901047][ T5651] RSP: 002b:00007fc892457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.909463][ T5651] RAX: ffffffffffffffda RBX: 00007fc893fd5fa0 RCX: 00007fc893de5d29 [ 88.917483][ T5651] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 88.925549][ T5651] RBP: 00007fc892457090 R08: 0000000000000000 R09: 0000000000000000 [ 88.933609][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.941586][ T5651] R13: 0000000000000000 R14: 00007fc893fd5fa0 R15: 00007ffe31b5f058 [ 88.949793][ T5651] [ 88.953108][ T5651] syz.3.705: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 88.970973][ T5651] CPU: 1 UID: 0 PID: 5651 Comm: syz.3.705 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 88.981600][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.991682][ T5651] Call Trace: [ 88.994978][ T5651] [ 88.997942][ T5651] dump_stack_lvl+0xf2/0x150 [ 89.002640][ T5651] dump_stack+0x15/0x1a [ 89.006956][ T5651] warn_alloc+0x145/0x1b0 [ 89.011385][ T5651] ? warn_alloc+0x4/0x1b0 [ 89.015774][ T5651] __vmalloc_node_range_noprof+0x473/0xe80 [ 89.021618][ T5651] ? __rcu_read_unlock+0x4e/0x70 [ 89.026623][ T5651] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 89.032707][ T5651] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 89.038323][ T5651] __vmalloc_noprof+0x5e/0x70 [ 89.043039][ T5651] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 89.048630][ T5651] bpf_prog_alloc_no_stats+0x49/0x380 [ 89.054030][ T5651] ? bpf_prog_alloc+0x28/0x150 [ 89.058822][ T5651] bpf_prog_alloc+0x3a/0x150 [ 89.063426][ T5651] bpf_prog_load+0x4d1/0x1070 [ 89.068115][ T5651] ? __rcu_read_unlock+0x4e/0x70 [ 89.073133][ T5651] __sys_bpf+0x463/0x7a0 [ 89.077395][ T5651] __x64_sys_bpf+0x43/0x50 [ 89.081857][ T5651] x64_sys_call+0x2914/0x2dc0 [ 89.086650][ T5651] do_syscall_64+0xc9/0x1c0 [ 89.091238][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 89.095925][ T5651] ? clear_bhb_loop+0x55/0xb0 [ 89.100615][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.106605][ T5651] RIP: 0033:0x7fc893de5d29 [ 89.111055][ T5651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.130874][ T5651] RSP: 002b:00007fc892457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.139351][ T5651] RAX: ffffffffffffffda RBX: 00007fc893fd5fa0 RCX: 00007fc893de5d29 [ 89.147324][ T5651] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 89.155360][ T5651] RBP: 00007fc892457090 R08: 0000000000000000 R09: 0000000000000000 [ 89.163335][ T5651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.171347][ T5651] R13: 0000000000000000 R14: 00007fc893fd5fa0 R15: 00007ffe31b5f058 [ 89.179337][ T5651] [ 89.183417][ T5651] Mem-Info: [ 89.187028][ T5651] active_anon:3021 inactive_anon:1 isolated_anon:0 [ 89.187028][ T5651] active_file:4430 inactive_file:20411 isolated_file:0 [ 89.187028][ T5651] unevictable:28 dirty:581 writeback:0 [ 89.187028][ T5651] slab_reclaimable:2717 slab_unreclaimable:16399 [ 89.187028][ T5651] mapped:28845 shmem:218 pagetables:739 [ 89.187028][ T5651] sec_pagetables:0 bounce:0 [ 89.187028][ T5651] kernel_misc_reclaimable:0 [ 89.187028][ T5651] free:1882155 free_pcp:11054 free_cma:0 [ 89.233048][ T5651] Node 0 active_anon:12084kB inactive_anon:4kB active_file:17720kB inactive_file:81644kB unevictable:112kB isolated(anon):0kB isolated(file):0kB mapped:115380kB dirty:2324kB writeback:0kB shmem:872kB writeback_tmp:0kB kernel_stack:2896kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no [ 89.262068][ T5651] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 89.300346][ T5651] lowmem_reserve[]: 0 2866 7844 0 [ 89.306400][ T5651] Node 0 DMA32 free:2950284kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953916kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 89.336067][ T5651] lowmem_reserve[]: 0 0 4978 0 [ 89.342148][ T5651] Node 0 Normal free:4562976kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:16028kB inactive_anon:4kB active_file:17720kB inactive_file:81644kB unevictable:112kB writepending:2324kB present:5242880kB managed:5098208kB mlocked:112kB bounce:0kB free_pcp:36364kB local_pcp:35932kB free_cma:0kB [ 89.374038][ T5651] lowmem_reserve[]: 0 0 0 0 [ 89.379488][ T5651] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 89.394048][ T5651] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950284kB [ 89.412268][ T5651] Node 0 Normal: 6*4kB (UE) 261*8kB (UE) 267*16kB (UME) 262*32kB (UM) 151*64kB (UME) 63*128kB (UME) 51*256kB (UM) 17*512kB (UME) 28*1024kB (UM) 17*2048kB (UM) 1083*4096kB (UM) = 4553712kB [ 89.432817][ T5651] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 89.442668][ T5651] 25128 total pagecache pages [ 89.447757][ T5651] 1 pages in swap cache [ 89.452338][ T5651] Free swap = 124476kB [ 89.457065][ T5651] Total swap = 124996kB [ 89.462027][ T5651] 2097051 pages RAM [ 89.466605][ T5651] 0 pages HighMem/MovableOnly [ 89.471481][ T5651] 80180 pages reserved [ 89.789250][ T5667] lo speed is unknown, defaulting to 1000 [ 90.582155][ T5672] netlink: 148 bytes leftover after parsing attributes in process `syz.3.710'. [ 91.426298][ T5670] lo speed is unknown, defaulting to 1000 [ 91.912708][ T5684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.926031][ T5682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.713'. [ 92.150095][ T5698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.159027][ T5698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.217634][ T5699] lo speed is unknown, defaulting to 1000 [ 92.522568][ T5701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.569729][ T5701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.798399][ T5703] netlink: 'syz.4.723': attribute type 12 has an invalid length. [ 92.888393][ T5709] 9pnet_fd: Insufficient options for proto=fd [ 92.919236][ T5713] Cannot find del_set index 4 as target [ 93.148119][ T5719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5719 comm=syz.2.730 [ 93.242766][ T5726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.276539][ T5726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.290793][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 93.290810][ T29] audit: type=1326 audit(1734797731.461:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.323877][ T29] audit: type=1326 audit(1734797731.491:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.347393][ T29] audit: type=1326 audit(1734797731.491:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.371150][ T29] audit: type=1326 audit(1734797731.491:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.394649][ T29] audit: type=1326 audit(1734797731.491:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.418075][ T29] audit: type=1326 audit(1734797731.491:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.441434][ T29] audit: type=1326 audit(1734797731.491:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.451394][ T5738] $Hÿ: renamed from bond0 (while UP) [ 93.464741][ T29] audit: type=1326 audit(1734797731.491:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.464840][ T29] audit: type=1326 audit(1734797731.491:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.517050][ T29] audit: type=1326 audit(1734797731.491:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5725 comm="syz.2.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 93.571529][ T5738] $Hÿ: entered promiscuous mode [ 93.576741][ T5738] bond_slave_0: entered promiscuous mode [ 93.582563][ T5738] bond_slave_1: entered promiscuous mode [ 93.775990][ T5747] lo speed is unknown, defaulting to 1000 [ 94.880421][ T5762] FAULT_INJECTION: forcing a failure. [ 94.880421][ T5762] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 94.893870][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz.3.743 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 94.904483][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.914578][ T5762] Call Trace: [ 94.917910][ T5762] [ 94.920855][ T5762] dump_stack_lvl+0xf2/0x150 [ 94.925525][ T5762] dump_stack+0x15/0x1a [ 94.929714][ T5762] should_fail_ex+0x223/0x230 [ 94.934432][ T5762] should_fail_alloc_page+0xfd/0x110 [ 94.939745][ T5762] __alloc_pages_noprof+0x109/0x340 [ 94.945019][ T5762] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 94.950439][ T5762] folio_alloc_mpol_noprof+0x36/0x70 [ 94.955744][ T5762] shmem_get_folio_gfp+0x3d1/0xd90 [ 94.960890][ T5762] shmem_fault+0xfa/0x250 [ 94.965241][ T5762] __do_fault+0xb6/0x200 [ 94.969588][ T5762] handle_mm_fault+0xe98/0x2ac0 [ 94.974515][ T5762] ? __rcu_read_lock+0x36/0x50 [ 94.979385][ T5762] __get_user_pages+0xf2c/0x2670 [ 94.984424][ T5762] __mm_populate+0x25b/0x3b0 [ 94.989056][ T5762] do_mlock+0x415/0x510 [ 94.993317][ T5762] ? ksys_write+0x176/0x1b0 [ 94.997882][ T5762] __x64_sys_mlock+0x36/0x40 [ 95.002528][ T5762] x64_sys_call+0x26b2/0x2dc0 [ 95.007235][ T5762] do_syscall_64+0xc9/0x1c0 [ 95.011765][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 95.016463][ T5762] ? clear_bhb_loop+0x55/0xb0 [ 95.021177][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.027210][ T5762] RIP: 0033:0x7fc893de5d29 [ 95.031675][ T5762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.051492][ T5762] RSP: 002b:00007fc892436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 95.060020][ T5762] RAX: ffffffffffffffda RBX: 00007fc893fd6080 RCX: 00007fc893de5d29 [ 95.068067][ T5762] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 95.076070][ T5762] RBP: 00007fc892436090 R08: 0000000000000000 R09: 0000000000000000 [ 95.084173][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.091301][ T5767] FAULT_INJECTION: forcing a failure. [ 95.091301][ T5767] name failslab, interval 1, probability 0, space 0, times 0 [ 95.092165][ T5762] R13: 0000000000000001 R14: 00007fc893fd6080 R15: 00007ffe31b5f058 [ 95.092191][ T5762] [ 95.116272][ T5767] CPU: 0 UID: 0 PID: 5767 Comm: syz.4.745 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 95.127024][ T5767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.137101][ T5767] Call Trace: [ 95.140402][ T5767] [ 95.143339][ T5767] dump_stack_lvl+0xf2/0x150 [ 95.148239][ T5767] dump_stack+0x15/0x1a [ 95.152540][ T5767] should_fail_ex+0x223/0x230 [ 95.157263][ T5767] should_failslab+0x8f/0xb0 [ 95.161930][ T5767] kmem_cache_alloc_node_noprof+0x59/0x320 [ 95.167809][ T5767] ? __alloc_skb+0x10b/0x310 [ 95.172500][ T5767] __alloc_skb+0x10b/0x310 [ 95.176934][ T5767] netlink_alloc_large_skb+0xad/0xe0 [ 95.182274][ T5767] netlink_sendmsg+0x3b4/0x6e0 [ 95.187113][ T5767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.192422][ T5767] __sock_sendmsg+0x140/0x180 [ 95.197207][ T5767] ____sys_sendmsg+0x312/0x410 [ 95.201992][ T5767] __sys_sendmsg+0x19d/0x230 [ 95.206626][ T5767] __x64_sys_sendmsg+0x46/0x50 [ 95.211592][ T5767] x64_sys_call+0x2734/0x2dc0 [ 95.216288][ T5767] do_syscall_64+0xc9/0x1c0 [ 95.220965][ T5767] ? clear_bhb_loop+0x55/0xb0 [ 95.225750][ T5767] ? clear_bhb_loop+0x55/0xb0 [ 95.230438][ T5767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.236365][ T5767] RIP: 0033:0x7fb0bd275d29 [ 95.240821][ T5767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.260529][ T5767] RSP: 002b:00007fb0bb8e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.268953][ T5767] RAX: ffffffffffffffda RBX: 00007fb0bd465fa0 RCX: 00007fb0bd275d29 [ 95.276954][ T5767] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 95.285004][ T5767] RBP: 00007fb0bb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.292981][ T5767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.300987][ T5767] R13: 0000000000000000 R14: 00007fb0bd465fa0 R15: 00007ffee684d728 [ 95.308970][ T5767] [ 95.325947][ T5739] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.333236][ T5739] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 95.370254][ T5768] Cannot find del_set index 4 as target [ 95.699252][ T5807] Cannot find del_set index 4 as target [ 95.905102][ T5815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.757'. [ 96.379371][ T5822] lo speed is unknown, defaulting to 1000 [ 96.958629][ T5833] netlink: 'syz.4.767': attribute type 29 has an invalid length. [ 97.017067][ T5833] netlink: 'syz.4.767': attribute type 29 has an invalid length. [ 97.110058][ T5844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 97.172902][ T5848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.181590][ T5848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.446190][ T5856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.774'. [ 98.250461][ T5879] FAULT_INJECTION: forcing a failure. [ 98.250461][ T5879] name failslab, interval 1, probability 0, space 0, times 0 [ 98.263258][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz.4.782 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 98.273876][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.284033][ T5879] Call Trace: [ 98.287320][ T5879] [ 98.290264][ T5879] dump_stack_lvl+0xf2/0x150 [ 98.294983][ T5879] dump_stack+0x15/0x1a [ 98.299186][ T5879] should_fail_ex+0x223/0x230 [ 98.303879][ T5879] should_failslab+0x8f/0xb0 [ 98.308517][ T5879] kmem_cache_alloc_node_noprof+0x59/0x320 [ 98.314471][ T5879] ? __alloc_skb+0x10b/0x310 [ 98.319141][ T5879] __alloc_skb+0x10b/0x310 [ 98.323560][ T5879] ? audit_log_start+0x34c/0x6b0 [ 98.328507][ T5879] audit_log_start+0x368/0x6b0 [ 98.333322][ T5879] audit_seccomp+0x4b/0x130 [ 98.337838][ T5879] __seccomp_filter+0x6fa/0x1180 [ 98.342793][ T5879] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 98.348440][ T5879] ? vfs_write+0x596/0x920 [ 98.352866][ T5879] ? putname+0xcf/0xf0 [ 98.356957][ T5879] __secure_computing+0x9f/0x1c0 [ 98.361913][ T5879] syscall_trace_enter+0xd1/0x1f0 [ 98.366955][ T5879] ? fpregs_assert_state_consistent+0x83/0xa0 [ 98.373121][ T5879] do_syscall_64+0xaa/0x1c0 [ 98.377643][ T5879] ? clear_bhb_loop+0x55/0xb0 [ 98.382412][ T5879] ? clear_bhb_loop+0x55/0xb0 [ 98.387117][ T5879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.393046][ T5879] RIP: 0033:0x7fb0bd275d29 [ 98.397463][ T5879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.417304][ T5879] RSP: 002b:00007fb0bb8e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 98.425726][ T5879] RAX: ffffffffffffffda RBX: 00007fb0bd465fa0 RCX: 00007fb0bd275d29 [ 98.433699][ T5879] RDX: 0000000000000008 RSI: 00000000207aeff8 RDI: ffffffffffffffff [ 98.441676][ T5879] RBP: 00007fb0bb8e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.449655][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.457631][ T5879] R13: 0000000000000000 R14: 00007fb0bd465fa0 R15: 00007ffee684d728 [ 98.465660][ T5879] [ 98.468820][ T5879] audit_log_lost: 401 callbacks suppressed [ 98.468832][ T5879] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 98.482544][ T5879] audit: out of memory in audit_log_start [ 98.501258][ T29] audit: type=1326 audit(1734797736.671:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb0bd27473c code=0x7ffc0000 [ 98.524718][ T29] audit: type=1326 audit(1734797736.671:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0bd2747df code=0x7ffc0000 [ 98.547984][ T29] audit: type=1326 audit(1734797736.671:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0bd27498a code=0x7ffc0000 [ 98.571294][ T29] audit: type=1326 audit(1734797736.671:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 98.594622][ T29] audit: type=1326 audit(1734797736.671:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.4.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 98.621864][ T5881] Cannot find del_set index 4 as target [ 98.668379][ T29] audit: type=1326 audit(1734797736.841:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 98.700191][ T5891] xt_hashlimit: max too large, truncated to 1048576 [ 98.742892][ T5893] lo speed is unknown, defaulting to 1000 [ 98.945246][ T29] audit: type=1326 audit(1734797737.111:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 99.150327][ T29] audit: type=1326 audit(1734797737.141:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 99.273798][ T5897] lo speed is unknown, defaulting to 1000 [ 99.892608][ T5908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.790'. [ 100.054473][ T5912] netlink: 'syz.2.792': attribute type 29 has an invalid length. [ 100.131566][ T5912] netlink: 'syz.2.792': attribute type 29 has an invalid length. [ 100.437866][ T5929] tipc: Enabling of bearer rejected, failed to enable media [ 100.572807][ T5932] Cannot find del_set index 4 as target [ 100.830458][ T5932] lo speed is unknown, defaulting to 1000 [ 101.319199][ T5951] netlink: 'syz.2.806': attribute type 29 has an invalid length. [ 101.331650][ T5951] netlink: 'syz.2.806': attribute type 29 has an invalid length. [ 101.615328][ T5975] Cannot find del_set index 4 as target [ 101.683122][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.693392][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.749177][ T5989] netlink: 'syz.0.819': attribute type 29 has an invalid length. [ 101.761223][ T5989] netlink: 'syz.0.819': attribute type 29 has an invalid length. [ 101.843366][ T5975] lo speed is unknown, defaulting to 1000 [ 101.887005][ T6003] netlink: 148 bytes leftover after parsing attributes in process `syz.4.821'. [ 102.405395][ T6020] bridge0: port 3(netdevsim3) entered disabled state [ 102.415258][ T6020] netdevsim netdevsim2 netdevsim3 (unregistering): left allmulticast mode [ 102.423910][ T6020] netdevsim netdevsim2 netdevsim3 (unregistering): left promiscuous mode [ 102.432437][ T6020] bridge0: port 3(netdevsim3) entered disabled state [ 102.440365][ T6020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.467649][ T6028] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 102.488749][ T6028] team0: Device hsr_slave_0 failed to register rx_handler [ 102.528878][ T6020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.560961][ T6036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.569561][ T6036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.578328][ T6020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.649480][ T6020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.687018][ T6039] Cannot find del_set index 4 as target [ 102.705283][ T6020] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.716971][ T6020] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.728379][ T6020] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.739545][ T6020] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.828631][ T6047] Cannot find del_set index 4 as target [ 103.004170][ T6054] lo speed is unknown, defaulting to 1000 [ 103.098056][ T6055] lo speed is unknown, defaulting to 1000 [ 103.616711][ T6074] netlink: 148 bytes leftover after parsing attributes in process `syz.3.843'. [ 103.699624][ T6075] lo speed is unknown, defaulting to 1000 [ 104.147914][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 104.147932][ T29] audit: type=1326 audit(1734797742.321:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.177682][ T29] audit: type=1326 audit(1734797742.321:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.179058][ T29] audit: type=1326 audit(1734797742.321:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.224381][ T29] audit: type=1326 audit(1734797742.321:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.247976][ T29] audit: type=1326 audit(1734797742.321:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.271490][ T29] audit: type=1326 audit(1734797742.321:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.294825][ T29] audit: type=1326 audit(1734797742.321:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.318289][ T29] audit: type=1326 audit(1734797742.321:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.341709][ T29] audit: type=1326 audit(1734797742.321:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.365050][ T29] audit: type=1326 audit(1734797742.321:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6084 comm="syz.1.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 104.377521][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.408962][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.465426][ T6092] lo speed is unknown, defaulting to 1000 [ 104.514464][ T6099] FAULT_INJECTION: forcing a failure. [ 104.514464][ T6099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.527713][ T6099] CPU: 1 UID: 0 PID: 6099 Comm: syz.3.854 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 104.538397][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.548592][ T6099] Call Trace: [ 104.551906][ T6099] [ 104.554906][ T6099] dump_stack_lvl+0xf2/0x150 [ 104.559606][ T6099] dump_stack+0x15/0x1a [ 104.563765][ T6099] should_fail_ex+0x223/0x230 [ 104.568466][ T6099] should_fail+0xb/0x10 [ 104.572730][ T6099] should_fail_usercopy+0x1a/0x20 [ 104.577852][ T6099] _copy_from_iter+0xd5/0xd00 [ 104.582583][ T6099] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 104.588178][ T6099] copy_page_from_iter+0x14f/0x280 [ 104.593327][ T6099] tun_get_user+0x68b/0x25c0 [ 104.597928][ T6099] ? avc_has_perm+0xd4/0x160 [ 104.602534][ T6099] ? ref_tracker_alloc+0x1f5/0x2f0 [ 104.607710][ T6099] tun_chr_write_iter+0x188/0x240 [ 104.612748][ T6099] vfs_write+0x77f/0x920 [ 104.616995][ T6099] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 104.622561][ T6099] ksys_write+0xe8/0x1b0 [ 104.626906][ T6099] __x64_sys_write+0x42/0x50 [ 104.631545][ T6099] x64_sys_call+0x287e/0x2dc0 [ 104.636280][ T6099] do_syscall_64+0xc9/0x1c0 [ 104.640780][ T6099] ? clear_bhb_loop+0x55/0xb0 [ 104.645482][ T6099] ? clear_bhb_loop+0x55/0xb0 [ 104.650413][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.656393][ T6099] RIP: 0033:0x7fc893de47df [ 104.660846][ T6099] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 104.680462][ T6099] RSP: 002b:00007fc892457000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.688916][ T6099] RAX: ffffffffffffffda RBX: 00007fc893fd5fa0 RCX: 00007fc893de47df [ 104.696892][ T6099] RDX: 000000000000003a RSI: 00000000200005c0 RDI: 00000000000000c8 [ 104.704854][ T6099] RBP: 00007fc892457090 R08: 0000000000000000 R09: 0000000000000000 [ 104.712879][ T6099] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 104.720850][ T6099] R13: 0000000000000000 R14: 00007fc893fd5fa0 R15: 00007ffe31b5f058 [ 104.728908][ T6099] [ 105.053021][ T6115] lo speed is unknown, defaulting to 1000 [ 105.799634][ T6138] lo speed is unknown, defaulting to 1000 [ 106.067256][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.868'. [ 106.167569][ T6153] lo speed is unknown, defaulting to 1000 [ 106.309084][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.324937][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.391998][ T6169] batadv0: entered promiscuous mode [ 106.403804][ T6169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.869426][ T6193] tipc: Enabling of bearer rejected, failed to enable media [ 107.019902][ T6200] netlink: 'syz.3.892': attribute type 29 has an invalid length. [ 107.041123][ T6200] netlink: 'syz.3.892': attribute type 29 has an invalid length. [ 107.454459][ T6210] Cannot find del_set index 4 as target [ 107.532390][ T6218] lo speed is unknown, defaulting to 1000 [ 107.785669][ T6220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.806462][ T6220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.864108][ T6232] lo speed is unknown, defaulting to 1000 [ 108.463153][ T6263] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 108.474835][ T6263] netlink: 'syz.2.913': attribute type 29 has an invalid length. [ 108.496668][ T6265] Cannot find del_set index 4 as target [ 108.631661][ T6266] lo speed is unknown, defaulting to 1000 [ 109.158827][ T29] kauditd_printk_skb: 915 callbacks suppressed [ 109.158847][ T29] audit: type=1400 audit(1734797747.311:10334): avc: denied { bind } for pid=6287 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.185729][ T29] audit: type=1400 audit(1734797747.311:10335): avc: denied { setopt } for pid=6287 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 109.344174][ T6304] lo speed is unknown, defaulting to 1000 [ 109.588464][ T6303] lo speed is unknown, defaulting to 1000 [ 110.075338][ T29] audit: type=1400 audit(1734797748.241:10336): avc: denied { create } for pid=6317 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.126115][ T29] audit: type=1400 audit(1734797748.271:10337): avc: denied { create } for pid=6317 comm="syz.0.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.146194][ T29] audit: type=1326 audit(1734797748.271:10338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.169849][ T29] audit: type=1326 audit(1734797748.271:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.193358][ T29] audit: type=1326 audit(1734797748.271:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.216783][ T29] audit: type=1326 audit(1734797748.271:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.240240][ T29] audit: type=1326 audit(1734797748.271:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.263847][ T29] audit: type=1326 audit(1734797748.271:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 110.480947][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 110.798822][ T6361] netlink: 'syz.2.943': attribute type 12 has an invalid length. [ 110.807716][ T6358] lo speed is unknown, defaulting to 1000 [ 110.904267][ T6364] lo speed is unknown, defaulting to 1000 [ 111.323670][ T6370] netlink: 132 bytes leftover after parsing attributes in process `syz.2.944'. [ 111.907794][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 111.999901][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 112.296613][ T6400] lo speed is unknown, defaulting to 1000 [ 112.509800][ T6402] netlink: 'syz.2.956': attribute type 12 has an invalid length. [ 112.545362][ T6404] netlink: 'syz.4.957': attribute type 13 has an invalid length. [ 112.582467][ T6404] 0ªX¹¦Dö»: refused to change device tx_queue_len [ 112.589075][ T6404] A link change request failed with some changes committed already. Interface 00ªX¹¦Dö» may have been left with an inconsistent configuration, please check. [ 112.633351][ T6407] netlink: 88 bytes leftover after parsing attributes in process `syz.2.958'. [ 112.642282][ T6407] netlink: 88 bytes leftover after parsing attributes in process `syz.2.958'. [ 112.651373][ T6407] netlink: 88 bytes leftover after parsing attributes in process `syz.2.958'. [ 112.883443][ T6413] lo speed is unknown, defaulting to 1000 [ 113.446793][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.455477][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.986210][ T6447] lo speed is unknown, defaulting to 1000 [ 114.198321][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 114.198338][ T29] audit: type=1400 audit(1734797752.371:11039): avc: denied { create } for pid=6453 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.231262][ T29] audit: type=1400 audit(1734797752.371:11040): avc: denied { connect } for pid=6453 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.232423][ T6454] netlink: 148 bytes leftover after parsing attributes in process `syz.3.975'. [ 114.250918][ T29] audit: type=1400 audit(1734797752.401:11041): avc: denied { create } for pid=6453 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.264305][ T6458] netlink: 148 bytes leftover after parsing attributes in process `syz.2.976'. [ 114.301005][ T29] audit: type=1400 audit(1734797752.401:11042): avc: denied { write } for pid=6453 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.320580][ T29] audit: type=1326 audit(1734797752.471:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 114.344097][ T29] audit: type=1326 audit(1734797752.471:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 114.367433][ T29] audit: type=1326 audit(1734797752.471:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 114.390913][ T29] audit: type=1326 audit(1734797752.471:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1acbbb7bbc code=0x7ffc0000 [ 114.414327][ T29] audit: type=1326 audit(1734797752.471:11047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1acbbb7af4 code=0x7ffc0000 [ 114.437718][ T29] audit: type=1326 audit(1734797752.471:11048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.1.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1acbbb7af4 code=0x7ffc0000 [ 114.461464][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.979'. [ 114.478749][ T6461] netlink: 'syz.1.977': attribute type 12 has an invalid length. [ 115.042789][ T6507] netlink: 'syz.3.992': attribute type 12 has an invalid length. [ 115.149068][ T6510] lo speed is unknown, defaulting to 1000 [ 115.784393][ T6535] FAULT_INJECTION: forcing a failure. [ 115.784393][ T6535] name failslab, interval 1, probability 0, space 0, times 0 [ 115.797281][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.3.999 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 115.807898][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.818029][ T6535] Call Trace: [ 115.821329][ T6535] [ 115.824367][ T6535] dump_stack_lvl+0xf2/0x150 [ 115.828996][ T6535] dump_stack+0x15/0x1a [ 115.833199][ T6535] should_fail_ex+0x223/0x230 [ 115.837906][ T6535] should_failslab+0x8f/0xb0 [ 115.842523][ T6535] __kmalloc_node_noprof+0xad/0x410 [ 115.847859][ T6535] ? __kvmalloc_node_noprof+0x72/0x170 [ 115.853436][ T6535] ? 0xffffffff81000000 [ 115.857603][ T6535] __kvmalloc_node_noprof+0x72/0x170 [ 115.862978][ T6535] newary+0xf7/0x500 [ 115.866901][ T6535] ? vfs_write+0x596/0x920 [ 115.871376][ T6535] ipcget+0x318/0x4c0 [ 115.875450][ T6535] ? __fget_files+0x17c/0x1c0 [ 115.880259][ T6535] ? fput+0x1c4/0x200 [ 115.884274][ T6535] __x64_sys_semget+0xf9/0x130 [ 115.889071][ T6535] x64_sys_call+0x2b9e/0x2dc0 [ 115.893874][ T6535] do_syscall_64+0xc9/0x1c0 [ 115.898444][ T6535] ? clear_bhb_loop+0x55/0xb0 [ 115.903158][ T6535] ? clear_bhb_loop+0x55/0xb0 [ 115.907897][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.913863][ T6535] RIP: 0033:0x7fc893de5d29 [ 115.918329][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.938013][ T6535] RSP: 002b:00007fc892457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 115.946445][ T6535] RAX: ffffffffffffffda RBX: 00007fc893fd5fa0 RCX: 00007fc893de5d29 [ 115.954421][ T6535] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 115.962411][ T6535] RBP: 00007fc892457090 R08: 0000000000000000 R09: 0000000000000000 [ 115.970390][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.978458][ T6535] R13: 0000000000000000 R14: 00007fc893fd5fa0 R15: 00007ffe31b5f058 [ 115.986465][ T6535] [ 116.059379][ T6548] netlink: 'syz.4.1004': attribute type 12 has an invalid length. [ 116.420478][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6590 comm=syz.0.1017 [ 116.433402][ T6590] netlink: 'syz.0.1017': attribute type 1 has an invalid length. [ 116.456934][ T6590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.505597][ T6595] netlink: 'syz.2.1019': attribute type 12 has an invalid length. [ 116.805199][ T6628] netlink: 'syz.0.1032': attribute type 12 has an invalid length. [ 116.898729][ T6631] lo speed is unknown, defaulting to 1000 [ 117.285703][ T6646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.294637][ T6646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.296157][ T6648] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1039'. [ 117.575770][ T6664] lo speed is unknown, defaulting to 1000 [ 117.770215][ T6682] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1050'. [ 117.873744][ T6691] netlink: 8 bytes leftover after parsing attributes in process `\'. [ 117.882062][ T6691] netlink: 24 bytes leftover after parsing attributes in process `\'. [ 117.935337][ T6691] netdevsim netdevsim4: Direct firmware load for ÿÿÿÿ failed with error -2 [ 118.062728][ T6707] lo speed is unknown, defaulting to 1000 [ 118.161317][ T6713] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1064'. [ 118.240688][ T6720] netlink: 'syz.3.1066': attribute type 12 has an invalid length. [ 118.293738][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.303643][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.704339][ T6750] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1077'. [ 118.762275][ T6756] netlink: 'syz.1.1080': attribute type 29 has an invalid length. [ 118.777261][ T6756] netlink: 'syz.1.1080': attribute type 29 has an invalid length. [ 118.819468][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 118.836873][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 119.034968][ T6776] netlink: 'syz.4.1088': attribute type 1 has an invalid length. [ 119.075016][ T6780] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1089'. [ 119.311268][ T6796] lo speed is unknown, defaulting to 1000 [ 120.515153][ T29] kauditd_printk_skb: 1080 callbacks suppressed [ 120.515173][ T29] audit: type=1326 audit(1734797758.681:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 120.545073][ T29] audit: type=1326 audit(1734797758.681:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 120.556434][ T6804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1095'. [ 120.568795][ T29] audit: type=1326 audit(1734797758.681:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6806 comm="syz.0.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 120.624763][ T29] audit: type=1326 audit(1734797758.781:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.648300][ T29] audit: type=1326 audit(1734797758.781:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.671884][ T29] audit: type=1326 audit(1734797758.781:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.695448][ T29] audit: type=1326 audit(1734797758.781:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.719135][ T29] audit: type=1326 audit(1734797758.781:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.742734][ T29] audit: type=1326 audit(1734797758.781:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.766274][ T29] audit: type=1326 audit(1734797758.781:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.1.1097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 120.811254][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.842244][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.251394][ T6845] FAULT_INJECTION: forcing a failure. [ 121.251394][ T6845] name failslab, interval 1, probability 0, space 0, times 0 [ 121.264151][ T6845] CPU: 0 UID: 60928 PID: 6845 Comm: syz.2.1110 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 121.275178][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.285334][ T6845] Call Trace: [ 121.288677][ T6845] [ 121.291625][ T6845] dump_stack_lvl+0xf2/0x150 [ 121.296248][ T6845] dump_stack+0x15/0x1a [ 121.300522][ T6845] should_fail_ex+0x223/0x230 [ 121.305303][ T6845] should_failslab+0x8f/0xb0 [ 121.309996][ T6845] kmem_cache_alloc_noprof+0x52/0x320 [ 121.315388][ T6845] ? getname_flags+0x81/0x3b0 [ 121.320169][ T6845] getname_flags+0x81/0x3b0 [ 121.324814][ T6845] user_path_at+0x26/0x120 [ 121.329307][ T6845] __se_sys_move_mount+0x13c/0x730 [ 121.334452][ T6845] ? fput+0x1c4/0x200 [ 121.338604][ T6845] __x64_sys_move_mount+0x67/0x80 [ 121.343692][ T6845] x64_sys_call+0x2608/0x2dc0 [ 121.348463][ T6845] do_syscall_64+0xc9/0x1c0 [ 121.352996][ T6845] ? clear_bhb_loop+0x55/0xb0 [ 121.357675][ T6845] ? clear_bhb_loop+0x55/0xb0 [ 121.362375][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.368387][ T6845] RIP: 0033:0x7fe11cd55d29 [ 121.372964][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.392597][ T6845] RSP: 002b:00007fe11b3c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 121.401031][ T6845] RAX: ffffffffffffffda RBX: 00007fe11cf45fa0 RCX: 00007fe11cd55d29 [ 121.409001][ T6845] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: 0000000000000003 [ 121.416987][ T6845] RBP: 00007fe11b3c7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.424965][ T6845] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 121.433034][ T6845] R13: 0000000000000000 R14: 00007fe11cf45fa0 R15: 00007ffe8d86c6c8 [ 121.441019][ T6845] [ 121.614819][ T6866] netlink: 'syz.4.1118': attribute type 29 has an invalid length. [ 121.628151][ T6866] netlink: 'syz.4.1118': attribute type 29 has an invalid length. [ 121.724550][ T6872] bridge_slave_0: left allmulticast mode [ 121.730280][ T6872] bridge_slave_0: left promiscuous mode [ 121.735991][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.761134][ T6872] bridge_slave_1: left allmulticast mode [ 121.766894][ T6872] bridge_slave_1: left promiscuous mode [ 121.772687][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.798973][ T6872] bond0: (slave bond_slave_0): Releasing backup interface [ 121.815445][ T6872] bond0: (slave bond_slave_1): Releasing backup interface [ 121.828269][ T6872] team0: Port device team_slave_0 removed [ 121.846148][ T6872] team0: Port device team_slave_1 removed [ 121.853158][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.860704][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.870132][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.877612][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.886189][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.899430][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.016846][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.025442][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.072209][ T6902] Cannot find del_set index 4 as target [ 122.255180][ T6902] lo speed is unknown, defaulting to 1000 [ 122.393806][ T6912] __nla_validate_parse: 2 callbacks suppressed [ 122.393821][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'. [ 122.411687][ T6910] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 122.411687][ T6910] program syz.2.1135 not setting count and/or reply_len properly [ 122.607239][ T6927] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1139'. [ 122.666441][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 122.864860][ T6940] Cannot find del_set index 4 as target [ 122.904941][ T6938] lo speed is unknown, defaulting to 1000 [ 123.043252][ T6940] lo speed is unknown, defaulting to 1000 [ 123.193767][ T6958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 123.314119][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 123.603941][ T6980] FAULT_INJECTION: forcing a failure. [ 123.603941][ T6980] name failslab, interval 1, probability 0, space 0, times 0 [ 123.616702][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.1.1164 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 123.627398][ T6980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.637472][ T6980] Call Trace: [ 123.640801][ T6980] [ 123.643772][ T6980] dump_stack_lvl+0xf2/0x150 [ 123.648393][ T6980] dump_stack+0x15/0x1a [ 123.652633][ T6980] should_fail_ex+0x223/0x230 [ 123.657387][ T6980] should_failslab+0x8f/0xb0 [ 123.661993][ T6980] __kmalloc_noprof+0xab/0x3f0 [ 123.666823][ T6980] ? security_sk_alloc+0x53/0x120 [ 123.671920][ T6980] security_sk_alloc+0x53/0x120 [ 123.676839][ T6980] sk_prot_alloc+0xc6/0x190 [ 123.681387][ T6980] sk_alloc+0x33/0x360 [ 123.685480][ T6980] unix_create1+0xa6/0x400 [ 123.690443][ T6980] unix_create+0x112/0x140 [ 123.694966][ T6980] __sock_create+0x2e9/0x5a0 [ 123.699598][ T6980] __sys_socketpair+0x1be/0x430 [ 123.704476][ T6980] __x64_sys_socketpair+0x52/0x60 [ 123.709520][ T6980] x64_sys_call+0x1cad/0x2dc0 [ 123.714203][ T6980] do_syscall_64+0xc9/0x1c0 [ 123.718791][ T6980] ? clear_bhb_loop+0x55/0xb0 [ 123.723556][ T6980] ? clear_bhb_loop+0x55/0xb0 [ 123.728243][ T6980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.734288][ T6980] RIP: 0033:0x7f1acbbb5d29 [ 123.738768][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.758434][ T6980] RSP: 002b:00007f1aca227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 123.766859][ T6980] RAX: ffffffffffffffda RBX: 00007f1acbda5fa0 RCX: 00007f1acbbb5d29 [ 123.775372][ T6980] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 123.783408][ T6980] RBP: 00007f1aca227090 R08: 0000000000000000 R09: 0000000000000000 [ 123.791387][ T6980] R10: 00000000200029c0 R11: 0000000000000246 R12: 0000000000000001 [ 123.799413][ T6980] R13: 0000000000000000 R14: 00007f1acbda5fa0 R15: 00007ffda6d033e8 [ 123.807408][ T6980] [ 124.068302][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'. [ 124.108978][ T7012] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20003 [ 124.173788][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 125.056241][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7085 comm=syz.0.1209 [ 125.135284][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 125.152419][ T7097] netlink: 'syz.0.1215': attribute type 12 has an invalid length. [ 125.301847][ T7122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7122 comm=syz.0.1226 [ 125.341048][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1229'. [ 125.376323][ T7130] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 125.461337][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7149 comm=syz.0.1239 [ 125.572469][ T29] kauditd_printk_skb: 1389 callbacks suppressed [ 125.572485][ T29] audit: type=1326 audit(1734797763.741:13528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.602477][ T29] audit: type=1326 audit(1734797763.741:13529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.625971][ T29] audit: type=1326 audit(1734797763.741:13530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.649534][ T29] audit: type=1326 audit(1734797763.741:13531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.673089][ T29] audit: type=1326 audit(1734797763.741:13532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.696965][ T29] audit: type=1326 audit(1734797763.741:13533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.720474][ T29] audit: type=1326 audit(1734797763.741:13534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.744089][ T29] audit: type=1326 audit(1734797763.741:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.767665][ T29] audit: type=1326 audit(1734797763.741:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.791251][ T29] audit: type=1326 audit(1734797763.741:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 125.872385][ T7165] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 125.980490][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.989165][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.313070][ T7191] lo speed is unknown, defaulting to 1000 [ 126.399175][ T7204] netlink: 'syz.3.1262': attribute type 12 has an invalid length. [ 126.474937][ T7186] lo speed is unknown, defaulting to 1000 [ 126.817485][ T7235] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 126.839523][ T7235] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 126.885076][ T7237] netlink: 'syz.2.1274': attribute type 12 has an invalid length. [ 126.952452][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.961986][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.972325][ T7245] tipc: Enabling of bearer rejected, failed to enable media [ 127.070867][ T7249] smc: net device bond0 erased user defined pnetid SYZ0 [ 127.078147][ T7249] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 127.430772][ T7255] netlink: 'syz.0.1281': attribute type 13 has an invalid length. [ 127.451081][ T7255] gretap0: refused to change device tx_queue_len [ 127.457513][ T7255] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.521605][ T7263] netlink: 'syz.0.1286': attribute type 29 has an invalid length. [ 127.534137][ T7263] netlink: 'syz.0.1286': attribute type 29 has an invalid length. [ 127.562820][ T7264] lo speed is unknown, defaulting to 1000 [ 127.900469][ T7283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1290'. [ 128.252041][ T7290] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1295'. [ 128.261106][ T7290] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1295'. [ 128.270125][ T7290] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1295'. [ 128.444737][ T7294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.453309][ T7294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.642922][ T7303] netlink: 'syz.2.1301': attribute type 12 has an invalid length. [ 128.742078][ T7311] lo speed is unknown, defaulting to 1000 [ 128.888769][ T7315] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 128.896947][ T7315] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 129.630823][ T7344] lo speed is unknown, defaulting to 1000 [ 129.905941][ T7342] netlink: 'syz.0.1316': attribute type 29 has an invalid length. [ 130.024072][ T7355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7355 comm=syz.4.1321 [ 130.113824][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 130.125441][ T7358] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 130.125441][ T7358] program syz.4.1323 not setting count and/or reply_len properly [ 130.390776][ T7377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1326'. [ 130.719119][ T29] kauditd_printk_skb: 952 callbacks suppressed [ 130.719136][ T29] audit: type=1326 audit(1734797768.891:14490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.749591][ T29] audit: type=1326 audit(1734797768.891:14491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.773407][ T29] audit: type=1326 audit(1734797768.891:14492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.785311][ T7389] lo speed is unknown, defaulting to 1000 [ 130.797162][ T29] audit: type=1326 audit(1734797768.891:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.826595][ T29] audit: type=1326 audit(1734797768.891:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.850258][ T29] audit: type=1326 audit(1734797768.891:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.868242][ T7388] validate_nla: 2 callbacks suppressed [ 130.868279][ T7388] netlink: 'syz.4.1335': attribute type 29 has an invalid length. [ 130.874184][ T29] audit: type=1326 audit(1734797768.891:14496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.911267][ T7388] netlink: 'syz.4.1335': attribute type 29 has an invalid length. [ 130.919472][ T29] audit: type=1326 audit(1734797768.891:14497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.943287][ T29] audit: type=1326 audit(1734797768.891:14498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 130.967045][ T29] audit: type=1326 audit(1734797768.891:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.4.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 131.070798][ T7396] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 131.134933][ T7403] netlink: 'syz.2.1339': attribute type 12 has an invalid length. [ 131.269405][ T7416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7416 comm=syz.3.1345 [ 131.439640][ T7429] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 132.239652][ T7433] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1347'. [ 132.258622][ T7432] lo speed is unknown, defaulting to 1000 [ 132.627003][ T7439] netlink: 'syz.2.1352': attribute type 12 has an invalid length. [ 132.679444][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1356'. [ 132.709364][ T7452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7452 comm=syz.4.1358 [ 132.740693][ T7458] netlink: 'syz.3.1360': attribute type 12 has an invalid length. [ 132.814090][ T7465] netlink: 'syz.2.1362': attribute type 10 has an invalid length. [ 132.826249][ T7465] team0: Device hsr_slave_0 failed to register rx_handler [ 133.006834][ T7474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1364'. [ 133.214050][ T7476] lo speed is unknown, defaulting to 1000 [ 133.797924][ T7488] Cannot find del_set index 4 as target [ 133.827000][ T7491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7491 comm=syz.4.1373 [ 133.845864][ T7495] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 134.007755][ T7508] lo speed is unknown, defaulting to 1000 [ 134.096714][ T7509] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 134.111406][ T7509] team0: Device hsr_slave_0 failed to register rx_handler [ 134.251538][ T7526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7526 comm=syz.4.1386 [ 134.608121][ T7561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7561 comm=syz.1.1399 [ 134.746036][ T7570] netlink: 'syz.4.1403': attribute type 12 has an invalid length. [ 134.896374][ T7578] lo speed is unknown, defaulting to 1000 [ 135.092079][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1405'. [ 135.294283][ T7584] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 135.302549][ T7584] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 135.432645][ T7588] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 135.441036][ T7588] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 135.628109][ T7596] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 135.710318][ T7609] netlink: 'syz.3.1414': attribute type 10 has an invalid length. [ 135.722346][ T7609] team0: Device hsr_slave_0 failed to register rx_handler [ 135.757407][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 135.757428][ T29] audit: type=1326 audit(1734797773.931:15459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.788674][ T29] audit: type=1326 audit(1734797773.961:15460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.812501][ T29] audit: type=1326 audit(1734797773.961:15461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.836101][ T29] audit: type=1326 audit(1734797773.961:15462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.859906][ T29] audit: type=1326 audit(1734797774.001:15463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.883484][ T29] audit: type=1326 audit(1734797774.001:15464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.907138][ T29] audit: type=1326 audit(1734797774.001:15465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.930751][ T29] audit: type=1326 audit(1734797774.001:15466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.954471][ T29] audit: type=1326 audit(1734797774.001:15467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 135.978027][ T29] audit: type=1326 audit(1734797774.001:15468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7613 comm="syz.4.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 136.124474][ T7631] lo speed is unknown, defaulting to 1000 [ 136.579054][ T7640] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003 [ 136.900613][ T7665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1435'. [ 137.476006][ T7690] netlink: 'syz.1.1450': attribute type 10 has an invalid length. [ 137.485331][ T7690] team0: Device hsr_slave_0 failed to register rx_handler [ 137.499197][ T7688] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 137.507534][ T7688] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 137.568284][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.578017][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.633880][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 137.644578][ T7698] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 137.644578][ T7698] program syz.0.1454 not setting count and/or reply_len properly [ 137.746241][ T7712] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 137.789545][ T7716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7716 comm=syz.4.1461 [ 137.870485][ T7725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7725 comm=syz.3.1466 [ 137.905596][ T7729] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 137.914102][ T7729] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 137.926124][ T7733] netlink: 'syz.0.1470': attribute type 12 has an invalid length. [ 137.938709][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 138.018028][ T7745] netlink: 'syz.4.1472': attribute type 10 has an invalid length. [ 138.028849][ T7745] team0: Device hsr_slave_0 failed to register rx_handler [ 138.105835][ T7756] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1480'. [ 138.131862][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 138.142571][ T7754] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 138.142571][ T7754] program syz.0.1479 not setting count and/or reply_len properly [ 138.425635][ T7769] lo speed is unknown, defaulting to 1000 [ 138.732522][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1487'. [ 138.763946][ T7777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1488'. [ 138.856279][ T7786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1492'. [ 138.907718][ T7787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 138.918842][ T7784] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 138.918842][ T7784] program syz.1.1491 not setting count and/or reply_len properly [ 139.073450][ T7802] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1496'. [ 139.196373][ T7806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1501'. [ 139.265089][ T7812] lo speed is unknown, defaulting to 1000 [ 139.423867][ T7825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1506'. [ 139.469304][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 139.493845][ T7824] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 139.493845][ T7824] program syz.2.1505 not setting count and/or reply_len properly [ 139.693352][ T7839] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 139.693352][ T7839] program syz.2.1509 not setting count and/or reply_len properly [ 139.761953][ T7843] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 139.770386][ T7843] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 140.004321][ T7857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7857 comm=syz.2.1515 [ 140.109190][ T7854] netlink: 'syz.0.1518': attribute type 29 has an invalid length. [ 140.296612][ T7854] netlink: 'syz.0.1518': attribute type 29 has an invalid length. [ 140.432999][ T7867] netlink: 'syz.4.1525': attribute type 12 has an invalid length. [ 140.547737][ T7874] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 140.556057][ T7874] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 140.683663][ T7887] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 140.703521][ T7887] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 140.783238][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 140.783254][ T29] audit: type=1326 audit(1734797778.951:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 140.817942][ T7905] netlink: 'syz.1.1539': attribute type 10 has an invalid length. [ 140.826123][ T29] audit: type=1326 audit(1734797778.951:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 140.831811][ T7905] team0: Device hsr_slave_0 failed to register rx_handler [ 140.849862][ T29] audit: type=1326 audit(1734797778.951:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7898 comm="syz.4.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0bd275d29 code=0x7ffc0000 [ 140.886790][ T7907] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 140.886790][ T7907] program syz.0.1542 not setting count and/or reply_len properly [ 140.918004][ T29] audit: type=1326 audit(1734797779.081:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 140.934442][ T7913] lo speed is unknown, defaulting to 1000 [ 140.941657][ T29] audit: type=1326 audit(1734797779.081:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 140.970944][ T29] audit: type=1326 audit(1734797779.091:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 140.994515][ T29] audit: type=1326 audit(1734797779.091:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 141.018194][ T29] audit: type=1326 audit(1734797779.091:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7906 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 141.137133][ T29] audit: type=1326 audit(1734797779.301:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3da75d29 code=0x7ffc0000 [ 141.160821][ T29] audit: type=1326 audit(1734797779.301:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7923 comm="syz.0.1548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c3da74690 code=0x7ffc0000 [ 141.275782][ T7931] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 141.287103][ T7931] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ1 [ 141.298349][ T7932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7932 comm=syz.3.1544 [ 141.794517][ T7949] smc: net device bond0 applied user defined pnetid SYZ0 [ 141.812405][ T7952] netlink: 'syz.1.1557': attribute type 10 has an invalid length. [ 141.843470][ T7949] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 141.851652][ T7952] team0: Device hsr_slave_0 failed to register rx_handler [ 141.869203][ T7957] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 141.869203][ T7957] program syz.2.1561 not setting count and/or reply_len properly [ 142.056910][ T7976] lo speed is unknown, defaulting to 1000 [ 142.099073][ T7977] lo speed is unknown, defaulting to 1000 [ 142.736210][ T8028] lo speed is unknown, defaulting to 1000 [ 142.897302][ T8050] netlink: 'syz.2.1599': attribute type 29 has an invalid length. [ 142.928092][ T8050] netlink: 'syz.2.1599': attribute type 29 has an invalid length. [ 143.063617][ T8066] smc: net device bond0 erased user defined pnetid SYZ0 [ 143.071229][ T8066] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 143.129314][ T8076] __nla_validate_parse: 15 callbacks suppressed [ 143.129331][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'. [ 143.144604][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1611'. [ 143.222224][ T8086] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20003 [ 143.263162][ T8088] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1615'. [ 143.447542][ T8081] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.454628][ T8081] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 143.504105][ T8100] lo speed is unknown, defaulting to 1000 [ 143.861254][ T8114] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 143.861254][ T8114] program syz.3.1625 not setting count and/or reply_len properly [ 143.885501][ T8118] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20003 [ 143.905021][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1627'. [ 143.914028][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 144.060975][ T8137] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1631'. [ 144.137895][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 144.149842][ T8148] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 144.149842][ T8148] program syz.3.1635 not setting count and/or reply_len properly [ 144.180353][ T8149] tipc: Enabling of bearer rejected, failed to enable media [ 144.495402][ T8169] lo speed is unknown, defaulting to 1000 [ 144.856937][ T8197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8197 comm=syz.2.1656 [ 144.898925][ T8200] smc: net device bond0 erased user defined pnetid SYZ0 [ 144.905936][ T8200] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 144.948206][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1659'. [ 144.993927][ T8207] lo speed is unknown, defaulting to 1000 [ 145.158990][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1658'. [ 145.553488][ T8230] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1666'. [ 145.584970][ T8229] lo speed is unknown, defaulting to 1000 [ 145.873175][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 145.873192][ T29] audit: type=1326 audit(1734797784.041:16853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 145.903100][ T29] audit: type=1326 audit(1734797784.041:16854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 145.933275][ T8249] smc: net device bond0 applied user defined pnetid SYZ0 [ 145.960384][ T8249] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 145.989374][ T29] audit: type=1326 audit(1734797784.041:16855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 146.012972][ T29] audit: type=1326 audit(1734797784.041:16856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 146.036495][ T29] audit: type=1326 audit(1734797784.041:16857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.2.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe11cd55d29 code=0x7ffc0000 [ 146.421211][ T8264] lo speed is unknown, defaulting to 1000 [ 146.647386][ T29] audit: type=1326 audit(1734797784.811:16858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 146.671035][ T29] audit: type=1326 audit(1734797784.811:16859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 146.694572][ T29] audit: type=1326 audit(1734797784.811:16860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 146.839882][ T29] audit: type=1326 audit(1734797784.901:16861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 146.863455][ T29] audit: type=1326 audit(1734797784.911:16862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.1.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1acbbb5d29 code=0x7ffc0000 [ 146.889605][ T8267] lo speed is unknown, defaulting to 1000 [ 147.719922][ T8302] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 147.719922][ T8302] program syz.4.1690 not setting count and/or reply_len properly [ 147.787878][ T8313] lo speed is unknown, defaulting to 1000 [ 148.440963][ T8384] __nla_validate_parse: 2 callbacks suppressed [ 148.440979][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'. [ 148.553561][ T8394] lo speed is unknown, defaulting to 1000 [ 148.645531][ T8399] smc: net device bond0 erased user defined pnetid SYZ0 [ 148.653701][ T8399] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 148.743067][ T8405] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1729'. [ 149.156085][ T8415] lo speed is unknown, defaulting to 1000 [ 149.565305][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1736'. [ 149.686835][ T8435] netlink: 'syz.2.1743': attribute type 12 has an invalid length. [ 149.925355][ T8451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1742'. [ 150.012336][ T8452] netlink: 'syz.3.1748': attribute type 10 has an invalid length. [ 150.047836][ T8452] team0: Device hsr_slave_0 failed to register rx_handler [ 150.561680][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 150.583736][ T8455] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 150.583736][ T8455] program syz.1.1749 not setting count and/or reply_len properly [ 150.614275][ T8462] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 150.614275][ T8462] program syz.4.1752 not setting count and/or reply_len properly [ 150.645226][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 150.743470][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 150.827790][ T8492] netlink: 'syz.1.1765': attribute type 12 has an invalid length. [ 150.889742][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 150.889759][ T29] audit: type=1326 audit(1734797789.061:17170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 150.922112][ T29] audit: type=1326 audit(1734797789.061:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 150.945680][ T29] audit: type=1326 audit(1734797789.061:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 150.969217][ T29] audit: type=1326 audit(1734797789.061:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 150.992828][ T29] audit: type=1326 audit(1734797789.061:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.016391][ T29] audit: type=1326 audit(1734797789.061:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.039956][ T29] audit: type=1326 audit(1734797789.061:17176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.063486][ T29] audit: type=1326 audit(1734797789.061:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.087021][ T29] audit: type=1326 audit(1734797789.061:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.110552][ T29] audit: type=1326 audit(1734797789.061:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8481 comm="syz.3.1762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc893de5d29 code=0x7ffc0000 [ 151.158427][ T8498] ================================================================== [ 151.166535][ T8498] BUG: KCSAN: data-race in print_cpu / tick_nohz_stop_idle [ 151.173779][ T8498] [ 151.176111][ T8498] read-write to 0xffff888237d20578 of 8 bytes by interrupt on cpu 1: [ 151.184175][ T8498] tick_nohz_stop_idle+0xaa/0x110 [ 151.189242][ T8498] tick_irq_enter+0xa2/0x150 [ 151.193849][ T8498] sysvec_apic_timer_interrupt+0x66/0x80 [ 151.199491][ T8498] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 151.205472][ T8498] acpi_safe_halt+0x21/0x30 [ 151.209982][ T8498] acpi_idle_do_entry+0x1d/0x30 [ 151.214836][ T8498] acpi_idle_enter+0x96/0xb0 [ 151.219437][ T8498] cpuidle_enter_state+0xc5/0x260 [ 151.224486][ T8498] cpuidle_enter+0x40/0x70 [ 151.228934][ T8498] do_idle+0x192/0x230 [ 151.233016][ T8498] cpu_startup_entry+0x25/0x30 [ 151.237791][ T8498] start_secondary+0x96/0xa0 [ 151.242384][ T8498] common_startup_64+0x12c/0x137 [ 151.247343][ T8498] [ 151.249662][ T8498] read to 0xffff888237d20578 of 8 bytes by task 8498 on cpu 0: [ 151.257205][ T8498] print_cpu+0x562/0x670 [ 151.261481][ T8498] timer_list_show+0x115/0x180 [ 151.266269][ T8498] seq_read_iter+0x2d1/0x930 [ 151.270008][ T8500] lo speed is unknown, defaulting to 1000 [ 151.270865][ T8498] proc_reg_read_iter+0x118/0x190 [ 151.281653][ T8498] copy_splice_read+0x3a0/0x5d0 [ 151.286608][ T8498] splice_direct_to_actor+0x269/0x670 [ 151.292010][ T8498] do_splice_direct+0xd7/0x150 [ 151.296798][ T8498] do_sendfile+0x398/0x660 [ 151.301236][ T8498] __x64_sys_sendfile64+0x110/0x150 [ 151.306470][ T8498] x64_sys_call+0xfbd/0x2dc0 [ 151.311087][ T8498] do_syscall_64+0xc9/0x1c0 [ 151.315610][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.321545][ T8498] [ 151.323873][ T8498] value changed: 0x00000006b4952831 -> 0x00000006b497d060 [ 151.330995][ T8498] [ 151.333323][ T8498] Reported by Kernel Concurrency Sanitizer on: [ 151.339481][ T8498] CPU: 0 UID: 0 PID: 8498 Comm: syz.3.1767 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 151.350177][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.360253][ T8498] ==================================================================