last executing test programs: 1.579610634s ago: executing program 1 (id=7544): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r6}, &(0x7f00000011c0), &(0x7f0000001200)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x6, 0x2, 0x9, 0x10, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4e0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x4, 0x0, 0x5, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0xa, &(0x7f0000000340)=""/10, 0x41100, 0x30, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x10, 0x2, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r1, r6, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r1], &(0x7f00000006c0)=[{0x1, 0x1, 0x0, 0xb}, {0x5, 0x3, 0xe, 0x6}, {0x5, 0x4, 0x0, 0x3}], 0x10, 0x6, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x0) r10 = dup3(r3, r0, 0x0) ppoll(&(0x7f00000000c0)=[{r10, 0x4411}], 0x1, 0x0, 0x0, 0x0) 1.470587896s ago: executing program 3 (id=7546): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x1100, 0x5dd8, 0x0, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r2, r2) 1.441391517s ago: executing program 3 (id=7547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setaffinity(0x0, 0x0, 0x0) 1.422252487s ago: executing program 3 (id=7548): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 1.403729677s ago: executing program 3 (id=7549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) (async) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) (async) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000140)={[{@nobarrier}, {@grpid}]}, 0x22, 0x63f, &(0x7f0000000d80)="$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") r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBLED(r5, 0x4b65, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) (async) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) (async) lseek(0xffffffffffffffff, 0x10001, 0x0) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.335467418s ago: executing program 1 (id=7550): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') preadv(r2, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}, {&(0x7f00000000c0)=""/133, 0x85}], 0x2, 0x10007, 0x7) 1.273126029s ago: executing program 1 (id=7551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="187bd80000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x20000000000001de, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) accept4$vsock_stream(r4, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 1.19870852s ago: executing program 0 (id=7553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.057452913s ago: executing program 0 (id=7556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) clock_getres(0x6, &(0x7f0000000040)) 1.028825913s ago: executing program 2 (id=7558): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2104, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getrlimit(0x8, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='cpuhp_enter\x00', 0xffffffffffffffff, 0x0, 0x5ed0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a09040000000500000000020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0x70}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000000c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000480)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r8, &(0x7f0000001940)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1, 0x5a, 0x0) write$tun(r4, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.002457364s ago: executing program 0 (id=7559): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000800)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) (async) r2 = eventfd2(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) mq_unlink(0x0) (async) read$eventfd(r2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfff}, 0x18) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000c0000001800038014000380100001800400030008000100020000002000018008000300020000001400020076657468315f766972745f77696669"], 0x4c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="cc1500003c25e0dd440000000200000005"], 0x15cc}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) (async) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async, rerun: 64) bind$bt_hci(r12, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (rerun: 64) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r13, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r13, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 933.245315ms ago: executing program 0 (id=7560): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x60281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d3cd1b0f200002000fdf700071400"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_pts(r0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001240)={{r6}, &(0x7f00000011c0), &(0x7f0000001200)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x6, 0x2, 0x9, 0x10, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4e0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x2, 0x4, 0x0, 0x5, 0x50, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0xa, &(0x7f0000000340)=""/10, 0x41100, 0x30, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x10, 0x2, 0xfffffffc}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r1, r6, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, r1], &(0x7f00000006c0)=[{0x1, 0x1, 0x0, 0xb}, {0x5, 0x3, 0xe, 0x6}, {0x5, 0x4, 0x0, 0x3}], 0x10, 0x6, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x0) r10 = dup3(r3, r0, 0x0) ppoll(&(0x7f00000000c0)=[{r10, 0x4411}], 0x1, 0x0, 0x0, 0x0) 932.962065ms ago: executing program 3 (id=7561): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_clone3(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x4800000009) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r5, 0x0, 0x200000000000006}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000000)=@sg0, 0x0, &(0x7f0000000040)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 823.202437ms ago: executing program 4 (id=7564): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) sendfile(r0, r1, 0x0, 0x10ffff) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x101e00, 0xf36, 0x5, "f694b8000000000000cc29e1f5eba328020016"}) 810.643336ms ago: executing program 2 (id=7565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000340)=0x10, 0x0) write(r5, &(0x7f0000000380)="058aa0f2626bd98d014235", 0xb) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 745.265728ms ago: executing program 4 (id=7566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 744.908868ms ago: executing program 2 (id=7567): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 64) gettid() (async, rerun: 64) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x10000021, 0x4, @thr={&(0x7f0000000000)="d710cbbd4eba30b2694f60919a08c00a6a7e8c9f613d3ffc4b19924a2b2bfbea6df3d13578e04f5ae542f68d63a3d1827d3bc1f2f9c2e6c7f0d68426ea19d0a55ad2da752243a06c711889eca66d05afccba559a3ca83bafc826a1de6eeb2d0a7b6c2470d17a33308d2e0e662f9131be8702fad9ac094a9c69220876fdcd17136f44212cb86c", &(0x7f00000000c0)="e6d65b20b02f1e6bf0a747161dba80a2620408f13bde1e1a686aa152692b30395af1b36f6c46d25105e49517151793eb48fc510853f53eb4a9c2adc26f4b2cf720013fe9e41fa192b672479ba5fa952a89"}}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) timer_gettime(r1, &(0x7f0000000140)) (async) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x9f6) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6e090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e804183f005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async, rerun: 32) sendmsg$tipc(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x10) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x18) (async) eventfd2(0x9, 0x80800) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 714.116638ms ago: executing program 4 (id=7568): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x100000c, 0x42031, 0xffffffffffffffff, 0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)=@newtaction={0x44, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ife={0x2c, 0xd, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="d87d9d40de412361fed78809c3870416e72286af7b72fe8e0821ca70af6f58b4fa7b01e657cc59bdefe31436862f96ac2f3d1bc92e948ea39b7a", @ANYRESDEC=r1, @ANYRESHEX, @ANYRES32, @ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) getpgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 712.192388ms ago: executing program 2 (id=7569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) clock_getres(0x6, &(0x7f0000000040)) 666.023889ms ago: executing program 2 (id=7570): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000003040)={{0x1, 0x1, 0x18}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) umount2(&(0x7f00000009c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 635.78542ms ago: executing program 2 (id=7571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x783, &(0x7f0000001000)="$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") gettid() mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp']) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x80, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 598.2297ms ago: executing program 4 (id=7572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_macvtap\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x44042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9135}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0x7, 0x1, 0x4, 0x10, 0xffffffffffffffef}, @jmp={0x5, 0x1, 0x5, 0x2, 0x6, 0x40, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff11e7, 0x0, 0x0, 0x0, 0xcc}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x8, 0xe0, &(0x7f0000000400)=""/224, 0x41100, 0x48, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000500)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x81, 0xfffffffb}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000580)=[{0x3, 0x4, 0x3, 0x9}, {0x4, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xa, 0x4}, {0x0, 0x4, 0x10}, {0x4, 0x4, 0x5}, {0x4, 0x2, 0xe, 0x1}, {0x4, 0x5, 0x6, 0xc}, {0x0, 0x2, 0xa}, {0x2, 0x2, 0xa, 0x4}, {0x0, 0x2, 0xf}], 0x10, 0x9, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) fcntl$setsig(r8, 0xa, 0x28) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000000700)={@multicast1, @dev={0xac, 0x14, 0x14, 0x26}}, 0x8) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r11, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000080)={0x2, 0x15, 0x3, 0x1005, 0x0, 0x10001, 0x0}) pipe2(&(0x7f0000000000), 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCPKT(r13, 0x5420, &(0x7f00000000c0)=0x3) sendfile(r7, r13, 0x0, 0xff) ioctl$TCSETS(r13, 0x5402, &(0x7f0000000140)={0x766, 0x1, 0x100000, 0xf76, 0x1, "f694b80000220400000000000000a328020016"}) 550.779111ms ago: executing program 0 (id=7573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$nfs(&(0x7f0000000040)='\x02%_\x84)-\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x12000, &(0x7f0000000240)={[{'kfree\x00'}, {'kfree\x00'}, {'-!$&$(\\/,$'}, {'\x00'}, {'GPL\x00'}], [{@hash}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r2, 0x6, 0x17, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000480)={{r1}, "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"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x7, 0x0, &(0x7f0000000180)={0x2, 0x0, 0xfff6, 0x90, 0x7995}, 0x8, 0x2, 0x0, 0x48000000, 0x3, 0x0, 0x0}) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @mcast2, 0x9}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x4008844) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) 393.945033ms ago: executing program 4 (id=7574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) 393.253674ms ago: executing program 1 (id=7575): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000006000000000000008510000002000000850000000500000095000000000000009500a50500000000a84b3b694d837d755b0a539177de8d22352f2fe805d8fa5402c431df7e04a83e2f43715ad50d43a8ca98a34675bcc3dfc6bc52eb6ec02caacda8e5b5e4c295b338f42577ec07ca9c26aad343ce51d11c6c8ac9e3174fb0de43d83cce3f3b4792198e69b620cad0470cae84e2e43346d9ab4e65f0f293e1065e0d18d1100331be0480473c33d90e4df70fddf6270ba829a87b4fac16a4cf68976633f6835bbfdaafeb74364b48c7bcc1252b7da7246941340cd0"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB='\b\x00N'], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 325.074715ms ago: executing program 4 (id=7576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f00001ea000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000200)=0x5, 0x9, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 321.338045ms ago: executing program 1 (id=7577): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f00001ea000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000200)=0x5, 0x9, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (fail_nth: 1) 288.608835ms ago: executing program 0 (id=7578): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 360.35µs ago: executing program 1 (id=7579): syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff3f03046940480b061b86dd60108f8400183afffe8000000000000000000000000000bbfe8000000000000000000000000000aa8800907800000000fe00000000aa"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000ffe2ffff000000000000000105000000080000000000000000000005"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff3f03046940480b061b86dd60108f8400183afffe8000000000000000000000000000bbfe8000000000000000000000000000aa8800907800000000fe00000000aa"], 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000ffe2ffff000000000000000105000000080000000000000000000005"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) 0s ago: executing program 3 (id=7580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) clock_getres(0x6, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 0200000003700 R09: 0000000000000000 [ 440.906248][T21849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.906269][T21849] R13: 0000000000000000 R14: 00007f907b0f5fa0 R15: 00007ffe35c01b88 [ 440.906345][T21849] [ 441.136179][T21851] FAULT_INJECTION: forcing a failure. [ 441.136179][T21851] name failslab, interval 1, probability 0, space 0, times 0 [ 441.148926][T21851] CPU: 0 UID: 0 PID: 21851 Comm: syz.2.6617 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 441.148978][T21851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 441.148992][T21851] Call Trace: [ 441.148999][T21851] [ 441.149006][T21851] dump_stack_lvl+0xf6/0x150 [ 441.149026][T21851] dump_stack+0x15/0x1a [ 441.149053][T21851] should_fail_ex+0x261/0x270 [ 441.149078][T21851] should_failslab+0x8f/0xb0 [ 441.149246][T21851] __kmalloc_cache_noprof+0x55/0x320 [ 441.149271][T21851] ? tcf_action_init_1+0x118/0x4c0 [ 441.149303][T21851] tcf_action_init_1+0x118/0x4c0 [ 441.149416][T21851] ? strcmp+0x21/0x50 [ 441.149502][T21851] tcf_action_init+0x1ce/0x620 [ 441.149558][T21851] tc_ctl_action+0x2be/0x880 [ 441.149612][T21851] ? __rcu_read_unlock+0x34/0x70 [ 441.149652][T21851] ? __pfx_tc_ctl_action+0x10/0x10 [ 441.149681][T21851] rtnetlink_rcv_msg+0x6b7/0x740 [ 441.149745][T21851] ? ref_tracker_free+0x3b8/0x420 [ 441.149773][T21851] netlink_rcv_skb+0x12f/0x230 [ 441.149798][T21851] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.149830][T21851] rtnetlink_rcv+0x1c/0x30 [ 441.149894][T21851] netlink_unicast+0x605/0x6c0 [ 441.149917][T21851] netlink_sendmsg+0x609/0x720 [ 441.149967][T21851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.149999][T21851] __sock_sendmsg+0x140/0x180 [ 441.150073][T21851] ____sys_sendmsg+0x350/0x4e0 [ 441.150112][T21851] __sys_sendmsg+0x1a0/0x240 [ 441.150156][T21851] __x64_sys_sendmsg+0x46/0x50 [ 441.150190][T21851] x64_sys_call+0x26f3/0x2e10 [ 441.150281][T21851] do_syscall_64+0xc9/0x1c0 [ 441.150358][T21851] ? clear_bhb_loop+0x25/0x80 [ 441.150379][T21851] ? clear_bhb_loop+0x25/0x80 [ 441.150459][T21851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.150558][T21851] RIP: 0033:0x7f6c6d81e169 [ 441.150572][T21851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.150590][T21851] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.150607][T21851] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 441.150619][T21851] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 441.150633][T21851] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 441.150697][T21851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.150708][T21851] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 441.150728][T21851] [ 441.507605][T21865] __nla_validate_parse: 25 callbacks suppressed [ 441.507618][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.524231][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.543076][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.543191][T21867] macvtap0: refused to change device tx_queue_len [ 441.553231][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.603281][T21872] rdma_rxe: rxe_newlink: failed to add bond0 [ 441.622556][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.636926][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6621'. [ 441.768034][T21882] IPVS: stopping master sync thread 21883 ... [ 441.768827][T21883] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 441.896512][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 441.896525][ T29] audit: type=1400 audit(2000000010.860:27156): avc: denied { create } for pid=21885 comm="syz.4.6629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 441.958147][ T29] audit: type=1400 audit(2000000010.890:27157): avc: denied { sys_admin } for pid=21885 comm="syz.4.6629" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 441.958191][ T29] audit: type=1400 audit(2000000010.910:27158): avc: denied { unmount } for pid=21885 comm="syz.4.6629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 441.958341][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6629'. [ 442.194403][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6629'. [ 442.324384][T21898] FAULT_INJECTION: forcing a failure. [ 442.324384][T21898] name failslab, interval 1, probability 0, space 0, times 0 [ 442.337601][T21898] CPU: 0 UID: 0 PID: 21898 Comm: syz.3.6630 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 442.337629][T21898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.337689][T21898] Call Trace: [ 442.337696][T21898] [ 442.337703][T21898] dump_stack_lvl+0xf6/0x150 [ 442.337723][T21898] dump_stack+0x15/0x1a [ 442.337737][T21898] should_fail_ex+0x261/0x270 [ 442.337760][T21898] should_failslab+0x8f/0xb0 [ 442.337830][T21898] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 442.337857][T21898] ? kstrdup_const+0x3e/0x50 [ 442.337899][T21898] kstrdup+0x3d/0xd0 [ 442.337989][T21898] kstrdup_const+0x3e/0x50 [ 442.338012][T21898] __kernfs_new_node+0x44/0x380 [ 442.338081][T21898] ? mod_objcg_state+0x3f9/0x530 [ 442.338106][T21898] ? obj_cgroup_charge+0xc9/0x170 [ 442.338142][T21898] ? down_read+0x173/0x4c0 [ 442.338168][T21898] kernfs_new_node+0xd7/0x150 [ 442.338202][T21898] kernfs_create_link+0x6c/0x120 [ 442.338314][T21898] sysfs_do_create_link_sd+0x6b/0xf0 [ 442.338346][T21898] sysfs_create_link+0x51/0x70 [ 442.338439][T21898] driver_sysfs_add+0x54/0x160 [ 442.338461][T21898] really_probe+0x101/0x5d0 [ 442.338539][T21898] __driver_probe_device+0x12d/0x200 [ 442.338566][T21898] driver_probe_device+0x38/0x2f0 [ 442.338587][T21898] __device_attach_driver+0x216/0x320 [ 442.338613][T21898] ? __pfx___device_attach_driver+0x10/0x10 [ 442.338640][T21898] bus_for_each_drv+0x1cf/0x250 [ 442.338699][T21898] __device_attach+0x1d6/0x2b0 [ 442.338719][T21898] device_attach+0x17/0x20 [ 442.338853][T21898] proc_ioctl+0x343/0x420 [ 442.338900][T21898] usbdev_ioctl+0x1dd6/0x3e70 [ 442.338952][T21898] ? do_vfs_ioctl+0x977/0x1570 [ 442.338984][T21898] ? selinux_file_ioctl+0x2f9/0x380 [ 442.339010][T21898] ? __fget_files+0x186/0x1c0 [ 442.339027][T21898] ? __pfx_usbdev_ioctl+0x10/0x10 [ 442.339076][T21898] __se_sys_ioctl+0xc9/0x140 [ 442.339099][T21898] __x64_sys_ioctl+0x43/0x50 [ 442.339121][T21898] x64_sys_call+0x168d/0x2e10 [ 442.339219][T21898] do_syscall_64+0xc9/0x1c0 [ 442.339249][T21898] ? clear_bhb_loop+0x25/0x80 [ 442.339273][T21898] ? clear_bhb_loop+0x25/0x80 [ 442.339294][T21898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.339321][T21898] RIP: 0033:0x7f4092afe169 [ 442.339334][T21898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.339350][T21898] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.339367][T21898] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 442.339419][T21898] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000006 [ 442.339429][T21898] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 442.339440][T21898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.339450][T21898] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 442.339498][T21898] [ 442.339508][T21898] hub 2-0:1.0: really_probe: driver_sysfs_add failed [ 442.679838][T21907] hub 2-0:1.0: USB hub found [ 442.684548][T21907] hub 2-0:1.0: 8 ports detected [ 442.779488][ T29] audit: type=1400 audit(2000000011.720:27159): avc: denied { create } for pid=21908 comm="syz.2.6634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 442.812439][T21910] 9pnet_fd: Insufficient options for proto=fd [ 443.068376][ T29] audit: type=1326 audit(2000000012.030:27160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21922 comm="syz.3.6639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4092afe169 code=0x0 [ 443.108518][T21927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6641'. [ 443.131803][T21927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6641'. [ 443.173151][T21930] FAULT_INJECTION: forcing a failure. [ 443.173151][T21930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.186974][T21930] CPU: 0 UID: 0 PID: 21930 Comm: syz.2.6642 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 443.187119][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.187132][T21930] Call Trace: [ 443.187139][T21930] [ 443.187146][T21930] dump_stack_lvl+0xf6/0x150 [ 443.187167][T21930] dump_stack+0x15/0x1a [ 443.187181][T21930] should_fail_ex+0x261/0x270 [ 443.187249][T21930] should_fail_alloc_page+0xfd/0x110 [ 443.187288][T21930] __alloc_frozen_pages_noprof+0x11d/0x360 [ 443.187370][T21930] alloc_pages_mpol+0xb6/0x260 [ 443.187394][T21930] folio_alloc_mpol_noprof+0x36/0x80 [ 443.187420][T21930] shmem_get_folio_gfp+0x3c1/0xd30 [ 443.187520][T21930] shmem_fallocate+0x5b3/0x890 [ 443.187544][T21930] vfs_fallocate+0x368/0x3b0 [ 443.187591][T21930] __x64_sys_fallocate+0x78/0xc0 [ 443.187622][T21930] x64_sys_call+0x295f/0x2e10 [ 443.187645][T21930] do_syscall_64+0xc9/0x1c0 [ 443.187733][T21930] ? clear_bhb_loop+0x25/0x80 [ 443.187751][T21930] ? clear_bhb_loop+0x25/0x80 [ 443.187774][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.187852][T21930] RIP: 0033:0x7f6c6d81e169 [ 443.187864][T21930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.187879][T21930] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 443.187894][T21930] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 443.187904][T21930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 443.187915][T21930] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 443.187927][T21930] R10: 0000000008000c62 R11: 0000000000000246 R12: 0000000000000001 [ 443.187940][T21930] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 443.188033][T21930] [ 443.383885][ T29] audit: type=1400 audit(2000000012.160:27161): avc: denied { connect } for pid=21926 comm="syz.4.6641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 443.503107][ T29] audit: type=1326 audit(2000000012.460:27162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21935 comm="syz.2.6644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6d81e169 code=0x0 [ 443.534785][ T29] audit: type=1326 audit(2000000012.490:27163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21937 comm="syz.4.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 443.559278][ T29] audit: type=1326 audit(2000000012.490:27164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21937 comm="syz.4.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 443.582951][ T29] audit: type=1326 audit(2000000012.490:27165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21937 comm="syz.4.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 443.732921][T21948] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 443.743898][T21947] IPVS: stopping master sync thread 21948 ... [ 444.715225][T21992] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.931193][T22009] IPVS: stopping master sync thread 22010 ... [ 444.931144][T22010] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 445.282107][T22021] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.820196][T22050] xt_TPROXY: Can be used only with -p tcp or -p udp [ 446.135713][T22062] bond_slave_1: entered promiscuous mode [ 446.150006][T22061] bond_slave_1: left promiscuous mode [ 446.857425][T22088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.902224][T22088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.925561][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 446.925573][ T29] audit: type=1326 audit(2000000015.890:27307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 446.955492][ T29] audit: type=1326 audit(2000000015.890:27308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.012194][ T29] audit: type=1326 audit(2000000015.940:27309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.035795][ T29] audit: type=1326 audit(2000000015.940:27310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.059437][ T29] audit: type=1326 audit(2000000015.940:27311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.083156][ T29] audit: type=1326 audit(2000000015.940:27312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.106931][ T29] audit: type=1326 audit(2000000015.940:27313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.130542][ T29] audit: type=1326 audit(2000000015.940:27314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.154122][ T29] audit: type=1326 audit(2000000015.940:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.177803][ T29] audit: type=1326 audit(2000000015.940:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.3.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 447.213977][T22086] tipc: Enabled bearer , priority 0 [ 447.227027][T22087] tipc: Disabling bearer [ 447.384507][T22097] __nla_validate_parse: 9 callbacks suppressed [ 447.384552][T22097] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.6710'. [ 447.626924][T22109] wg2: entered promiscuous mode [ 447.631834][T22109] wg2: entered allmulticast mode [ 447.964792][T22125] rdma_rxe: rxe_newlink: failed to add bond0 [ 448.309442][T22132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.421248][T22143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6729'. [ 448.617551][T22152] netlink: 'syz.0.6728': attribute type 1 has an invalid length. [ 448.643969][T22156] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 448.661824][T22153] IPVS: stopping master sync thread 22156 ... [ 449.094877][ T3381] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 449.174189][ T3381] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 449.280696][T22170] FAULT_INJECTION: forcing a failure. [ 449.280696][T22170] name failslab, interval 1, probability 0, space 0, times 0 [ 449.293475][T22170] CPU: 0 UID: 0 PID: 22170 Comm: syz.2.6739 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 449.293559][T22170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.293601][T22170] Call Trace: [ 449.293607][T22170] [ 449.293615][T22170] dump_stack_lvl+0xf6/0x150 [ 449.293635][T22170] dump_stack+0x15/0x1a [ 449.293650][T22170] should_fail_ex+0x261/0x270 [ 449.293695][T22170] should_failslab+0x8f/0xb0 [ 449.293727][T22170] __kmalloc_cache_noprof+0x55/0x320 [ 449.293834][T22170] ? p9_client_create+0x5a/0xbb0 [ 449.293856][T22170] p9_client_create+0x5a/0xbb0 [ 449.293875][T22170] ? should_failslab+0x8f/0xb0 [ 449.293903][T22170] ? __kmalloc_node_track_caller_noprof+0x1ed/0x410 [ 449.293927][T22170] ? v9fs_session_init+0x7b/0xdb0 [ 449.293969][T22170] v9fs_session_init+0xfb/0xdb0 [ 449.293990][T22170] ? obj_cgroup_charge+0xc9/0x170 [ 449.294065][T22170] ? should_fail_ex+0xd7/0x270 [ 449.294088][T22170] ? should_failslab+0x8f/0xb0 [ 449.294117][T22170] ? __kmalloc_cache_noprof+0x18d/0x320 [ 449.294213][T22170] ? v9fs_mount+0x56/0x580 [ 449.294237][T22170] v9fs_mount+0x6c/0x580 [ 449.294263][T22170] ? __pfx_v9fs_mount+0x10/0x10 [ 449.294325][T22170] legacy_get_tree+0x77/0xd0 [ 449.294428][T22170] vfs_get_tree+0x56/0x1e0 [ 449.294455][T22170] do_new_mount+0x246/0x6b0 [ 449.294483][T22170] path_mount+0x49b/0xb30 [ 449.294529][T22170] __se_sys_mount+0x28f/0x2e0 [ 449.294559][T22170] __x64_sys_mount+0x67/0x80 [ 449.294587][T22170] x64_sys_call+0xd11/0x2e10 [ 449.294677][T22170] do_syscall_64+0xc9/0x1c0 [ 449.294703][T22170] ? clear_bhb_loop+0x25/0x80 [ 449.294725][T22170] ? clear_bhb_loop+0x25/0x80 [ 449.294772][T22170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.294790][T22170] RIP: 0033:0x7f6c6d81e169 [ 449.294802][T22170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.294817][T22170] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.294832][T22170] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 449.294842][T22170] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 449.294854][T22170] RBP: 00007f6c6be87090 R08: 0000200000000140 R09: 0000000000000000 [ 449.294929][T22170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.294939][T22170] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 449.294954][T22170] [ 449.565553][T22172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.653580][T22177] tipc: Enabling of bearer rejected, failed to enable media [ 449.782234][T22186] IPVS: stopping master sync thread 22188 ... [ 449.788507][T22188] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 449.923408][T22194] veth0_macvtap: left promiscuous mode [ 449.931809][T22194] macvtap0: refused to change device tx_queue_len [ 450.290987][T22198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6749'. [ 450.604471][T22202] random: crng reseeded on system resumption [ 450.749130][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'. [ 450.771175][T22209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 450.800551][T22213] FAULT_INJECTION: forcing a failure. [ 450.800551][T22213] name failslab, interval 1, probability 0, space 0, times 0 [ 450.813220][T22213] CPU: 1 UID: 0 PID: 22213 Comm: syz.3.6754 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 450.813327][T22213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.813378][T22213] Call Trace: [ 450.813385][T22213] [ 450.813392][T22213] dump_stack_lvl+0xf6/0x150 [ 450.813416][T22213] dump_stack+0x15/0x1a [ 450.813433][T22213] should_fail_ex+0x261/0x270 [ 450.813461][T22213] should_failslab+0x8f/0xb0 [ 450.813619][T22213] __kmalloc_cache_noprof+0x55/0x320 [ 450.813641][T22213] ? bpf_prog_alloc_no_stats+0xc3/0x390 [ 450.813735][T22213] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 450.813757][T22213] bpf_prog_alloc_no_stats+0xc3/0x390 [ 450.813789][T22213] bpf_prog_alloc+0x3a/0x150 [ 450.813805][T22213] bpf_prog_load+0x532/0x10e0 [ 450.813884][T22213] __sys_bpf+0x533/0x800 [ 450.813906][T22213] __x64_sys_bpf+0x43/0x50 [ 450.813922][T22213] x64_sys_call+0x23da/0x2e10 [ 450.813940][T22213] do_syscall_64+0xc9/0x1c0 [ 450.813965][T22213] ? clear_bhb_loop+0x25/0x80 [ 450.814056][T22213] ? clear_bhb_loop+0x25/0x80 [ 450.814074][T22213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.814091][T22213] RIP: 0033:0x7f4092afe169 [ 450.814103][T22213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.814117][T22213] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 450.814196][T22213] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 450.814206][T22213] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 450.814216][T22213] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 450.814279][T22213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.814288][T22213] R13: 0000000000000001 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 450.814303][T22213] [ 451.157752][T22236] random: crng reseeded on system resumption [ 451.178138][T22214] SELinux: policydb magic number 0x302001e does not match expected magic number 0xf97cff8c [ 451.199612][T22214] SELinux: failed to load policy [ 451.312219][T22245] FAULT_INJECTION: forcing a failure. [ 451.312219][T22245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.325616][T22245] CPU: 0 UID: 0 PID: 22245 Comm: syz.2.6767 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 451.325640][T22245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 451.325652][T22245] Call Trace: [ 451.325658][T22245] [ 451.325666][T22245] dump_stack_lvl+0xf6/0x150 [ 451.325691][T22245] dump_stack+0x15/0x1a [ 451.325768][T22245] should_fail_ex+0x261/0x270 [ 451.325798][T22245] should_fail_alloc_page+0xfd/0x110 [ 451.325829][T22245] __alloc_frozen_pages_noprof+0x11d/0x360 [ 451.325869][T22245] alloc_pages_mpol+0xb6/0x260 [ 451.325926][T22245] folio_alloc_mpol_noprof+0x36/0x80 [ 451.325952][T22245] shmem_get_folio_gfp+0x3c1/0xd30 [ 451.325988][T22245] shmem_fallocate+0x5b3/0x890 [ 451.326015][T22245] vfs_fallocate+0x368/0x3b0 [ 451.326049][T22245] __x64_sys_fallocate+0x78/0xc0 [ 451.326125][T22245] x64_sys_call+0x295f/0x2e10 [ 451.326144][T22245] do_syscall_64+0xc9/0x1c0 [ 451.326169][T22245] ? clear_bhb_loop+0x25/0x80 [ 451.326225][T22245] ? clear_bhb_loop+0x25/0x80 [ 451.326247][T22245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.326269][T22245] RIP: 0033:0x7f6c6d81e169 [ 451.326284][T22245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.326302][T22245] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 451.326375][T22245] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 451.326385][T22245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 451.326395][T22245] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 451.326407][T22245] R10: 0000000008000c62 R11: 0000000000000246 R12: 0000000000000001 [ 451.326419][T22245] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 451.326439][T22245] [ 451.587252][T22258] FAULT_INJECTION: forcing a failure. [ 451.587252][T22258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.600355][T22258] CPU: 1 UID: 0 PID: 22258 Comm: syz.1.6773 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 451.600386][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 451.600399][T22258] Call Trace: [ 451.600405][T22258] [ 451.600413][T22258] dump_stack_lvl+0xf6/0x150 [ 451.600442][T22258] dump_stack+0x15/0x1a [ 451.600486][T22258] should_fail_ex+0x261/0x270 [ 451.600579][T22258] should_fail+0xb/0x10 [ 451.600608][T22258] should_fail_usercopy+0x1a/0x20 [ 451.600643][T22258] _copy_to_user+0x20/0xa0 [ 451.600683][T22258] simple_read_from_buffer+0xb2/0x130 [ 451.600787][T22258] proc_fail_nth_read+0x103/0x140 [ 451.600813][T22258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.600843][T22258] vfs_read+0x1b2/0x710 [ 451.600875][T22258] ? __rcu_read_unlock+0x4e/0x70 [ 451.600918][T22258] ? __fget_files+0x186/0x1c0 [ 451.600943][T22258] ksys_read+0xeb/0x1b0 [ 451.600972][T22258] __x64_sys_read+0x42/0x50 [ 451.601032][T22258] x64_sys_call+0x2a3b/0x2e10 [ 451.601151][T22258] do_syscall_64+0xc9/0x1c0 [ 451.601182][T22258] ? clear_bhb_loop+0x25/0x80 [ 451.601205][T22258] ? clear_bhb_loop+0x25/0x80 [ 451.601231][T22258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.601257][T22258] RIP: 0033:0x7f907aeccb7c [ 451.601344][T22258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 451.601361][T22258] RSP: 002b:00007f9079537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.601379][T22258] RAX: ffffffffffffffda RBX: 00007f907b0f5fa0 RCX: 00007f907aeccb7c [ 451.601391][T22258] RDX: 000000000000000f RSI: 00007f90795370a0 RDI: 0000000000000003 [ 451.601467][T22258] RBP: 00007f9079537090 R08: 0000000000000000 R09: 0000000000000000 [ 451.601481][T22258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.601496][T22258] R13: 0000000000000001 R14: 00007f907b0f5fa0 R15: 00007ffe35c01b88 [ 451.601520][T22258] [ 451.847836][T22269] x_tables: duplicate underflow at hook 1 [ 451.885745][T22273] netlink: 'syz.2.6780': attribute type 1 has an invalid length. [ 451.919379][T22281] FAULT_INJECTION: forcing a failure. [ 451.919379][T22281] name failslab, interval 1, probability 0, space 0, times 0 [ 451.932026][T22281] CPU: 1 UID: 0 PID: 22281 Comm: syz.2.6783 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 451.932052][T22281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 451.932079][T22281] Call Trace: [ 451.932086][T22281] [ 451.932093][T22281] dump_stack_lvl+0xf6/0x150 [ 451.932144][T22281] dump_stack+0x15/0x1a [ 451.932159][T22281] should_fail_ex+0x261/0x270 [ 451.932211][T22281] should_failslab+0x8f/0xb0 [ 451.932239][T22281] kmem_cache_alloc_noprof+0x59/0x340 [ 451.932258][T22281] ? skb_clone+0x154/0x1f0 [ 451.932291][T22281] skb_clone+0x154/0x1f0 [ 451.932367][T22281] __netlink_deliver_tap+0x2bd/0x4f0 [ 451.932436][T22281] netlink_unicast+0x69e/0x6c0 [ 451.932471][T22281] netlink_sendmsg+0x609/0x720 [ 451.932498][T22281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.932526][T22281] __sock_sendmsg+0x140/0x180 [ 451.932542][T22281] ____sys_sendmsg+0x350/0x4e0 [ 451.932571][T22281] __sys_sendmsg+0x1a0/0x240 [ 451.932629][T22281] __x64_sys_sendmsg+0x46/0x50 [ 451.932657][T22281] x64_sys_call+0x26f3/0x2e10 [ 451.932678][T22281] do_syscall_64+0xc9/0x1c0 [ 451.932833][T22281] ? clear_bhb_loop+0x25/0x80 [ 451.932905][T22281] ? clear_bhb_loop+0x25/0x80 [ 451.932924][T22281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.932942][T22281] RIP: 0033:0x7f6c6d81e169 [ 451.932955][T22281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.932972][T22281] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.932988][T22281] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 451.933009][T22281] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 451.933060][T22281] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 451.933070][T22281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.933081][T22281] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 451.933097][T22281] [ 452.255692][T22300] FAULT_INJECTION: forcing a failure. [ 452.255692][T22300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.268834][T22300] CPU: 1 UID: 0 PID: 22300 Comm: syz.3.6790 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 452.268893][T22300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.268905][T22300] Call Trace: [ 452.268910][T22300] [ 452.268917][T22300] dump_stack_lvl+0xf6/0x150 [ 452.268941][T22300] dump_stack+0x15/0x1a [ 452.268960][T22300] should_fail_ex+0x261/0x270 [ 452.268991][T22300] should_fail+0xb/0x10 [ 452.269069][T22300] should_fail_usercopy+0x1a/0x20 [ 452.269100][T22300] _copy_from_iter+0xd8/0xd10 [ 452.269200][T22300] ? kmalloc_reserve+0x16e/0x190 [ 452.269221][T22300] ? __build_skb_around+0x199/0x1f0 [ 452.269242][T22300] ? __alloc_skb+0x227/0x320 [ 452.269263][T22300] ? __virt_addr_valid+0x1ed/0x250 [ 452.269393][T22300] ? __check_object_size+0x367/0x510 [ 452.269427][T22300] netlink_sendmsg+0x492/0x720 [ 452.269457][T22300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.269480][T22300] __sock_sendmsg+0x140/0x180 [ 452.269568][T22300] ____sys_sendmsg+0x350/0x4e0 [ 452.269604][T22300] __sys_sendmsg+0x1a0/0x240 [ 452.269698][T22300] __x64_sys_sendmsg+0x46/0x50 [ 452.269726][T22300] x64_sys_call+0x26f3/0x2e10 [ 452.269747][T22300] do_syscall_64+0xc9/0x1c0 [ 452.269780][T22300] ? clear_bhb_loop+0x25/0x80 [ 452.269833][T22300] ? clear_bhb_loop+0x25/0x80 [ 452.269852][T22300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.269872][T22300] RIP: 0033:0x7f4092afe169 [ 452.269889][T22300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.269909][T22300] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.269929][T22300] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 452.270002][T22300] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 452.270014][T22300] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 452.270025][T22300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.270039][T22300] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 452.270063][T22300] [ 452.517491][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 452.517505][ T29] audit: type=1326 audit(2000000021.480:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22306 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 452.547333][ T29] audit: type=1326 audit(2000000021.480:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22306 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 452.574329][ T29] audit: type=1326 audit(2000000021.480:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22306 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 452.598228][ T29] audit: type=1326 audit(2000000021.480:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22306 comm="syz.4.6793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 452.626466][T22308] macvtap0: refused to change device tx_queue_len [ 452.634788][T22310] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.753818][T22326] IPVS: stopping master sync thread 22327 ... [ 452.772259][T22331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6801'. [ 452.843573][ T29] audit: type=1326 audit(2000000021.800:27611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 452.889880][ T29] audit: type=1326 audit(2000000021.800:27612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 452.914165][ T29] audit: type=1326 audit(2000000021.800:27613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 452.937726][ T29] audit: type=1326 audit(2000000021.800:27614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 452.961917][ T29] audit: type=1326 audit(2000000021.800:27615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 452.986001][ T29] audit: type=1326 audit(2000000021.800:27616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22328 comm="syz.0.6800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 453.091655][T22343] FAULT_INJECTION: forcing a failure. [ 453.091655][T22343] name failslab, interval 1, probability 0, space 0, times 0 [ 453.104367][T22343] CPU: 1 UID: 0 PID: 22343 Comm: syz.1.6805 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 453.104395][T22343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.104408][T22343] Call Trace: [ 453.104414][T22343] [ 453.104421][T22343] dump_stack_lvl+0xf6/0x150 [ 453.104464][T22343] dump_stack+0x15/0x1a [ 453.104478][T22343] should_fail_ex+0x261/0x270 [ 453.104501][T22343] should_failslab+0x8f/0xb0 [ 453.104533][T22343] kmem_cache_alloc_noprof+0x59/0x340 [ 453.104556][T22343] ? alloc_empty_file+0x78/0x200 [ 453.104760][T22343] ? _raw_spin_unlock+0x26/0x50 [ 453.104782][T22343] alloc_empty_file+0x78/0x200 [ 453.104843][T22343] alloc_file_pseudo+0xcb/0x160 [ 453.104864][T22343] __shmem_file_setup+0x1bb/0x1f0 [ 453.104895][T22343] shmem_file_setup+0x3b/0x50 [ 453.104925][T22343] __se_sys_memfd_create+0x2e1/0x5a0 [ 453.105021][T22343] __x64_sys_memfd_create+0x31/0x40 [ 453.105065][T22343] x64_sys_call+0x1163/0x2e10 [ 453.105083][T22343] do_syscall_64+0xc9/0x1c0 [ 453.105111][T22343] ? clear_bhb_loop+0x25/0x80 [ 453.105182][T22343] ? clear_bhb_loop+0x25/0x80 [ 453.105200][T22343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.105300][T22343] RIP: 0033:0x7f907aece169 [ 453.105376][T22343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.105395][T22343] RSP: 002b:00007f9079536d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 453.105432][T22343] RAX: ffffffffffffffda RBX: 000000000000060d RCX: 00007f907aece169 [ 453.105445][T22343] RDX: 00007f9079536dec RSI: 0000000000000000 RDI: 00007f907af51404 [ 453.105457][T22343] RBP: 0000200000002240 R08: 00007f9079536b07 R09: 0000000000000000 [ 453.105543][T22343] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 453.105555][T22343] R13: 00007f9079536dec R14: 00007f9079536df0 R15: 00007ffe35c01b88 [ 453.105572][T22343] [ 453.322397][T22345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.565230][T22378] rdma_rxe: rxe_newlink: failed to add bond0 [ 453.582018][T22380] bond1: entered promiscuous mode [ 453.587224][T22380] bond1: entered allmulticast mode [ 453.674554][T22380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.688393][T22380] bond1 (unregistering): Released all slaves [ 453.913440][T22431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 453.940689][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6816'. [ 454.061199][T22441] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 454.073336][T22440] IPVS: stopping master sync thread 22441 ... [ 454.429858][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.439026][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.460040][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.484824][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.520115][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.544587][T22446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6823'. [ 454.869917][T22472] FAULT_INJECTION: forcing a failure. [ 454.869917][T22472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.883033][T22472] CPU: 1 UID: 0 PID: 22472 Comm: syz.0.6832 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 454.883058][T22472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 454.883070][T22472] Call Trace: [ 454.883076][T22472] [ 454.883082][T22472] dump_stack_lvl+0xf6/0x150 [ 454.883123][T22472] dump_stack+0x15/0x1a [ 454.883192][T22472] should_fail_ex+0x261/0x270 [ 454.883244][T22472] should_fail+0xb/0x10 [ 454.883330][T22472] should_fail_usercopy+0x1a/0x20 [ 454.883356][T22472] strncpy_from_user+0x25/0x230 [ 454.883375][T22472] ? getname_flags+0x81/0x3b0 [ 454.883395][T22472] getname_flags+0xb0/0x3b0 [ 454.883436][T22472] user_path_at+0x26/0x140 [ 454.883458][T22472] __se_sys_mount+0x25e/0x2e0 [ 454.883490][T22472] __x64_sys_mount+0x67/0x80 [ 454.883533][T22472] x64_sys_call+0xd11/0x2e10 [ 454.883604][T22472] do_syscall_64+0xc9/0x1c0 [ 454.883631][T22472] ? clear_bhb_loop+0x25/0x80 [ 454.883650][T22472] ? clear_bhb_loop+0x25/0x80 [ 454.883669][T22472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.883688][T22472] RIP: 0033:0x7f5562efe169 [ 454.883701][T22472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.883763][T22472] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.883801][T22472] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 454.883860][T22472] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 454.883873][T22472] RBP: 00007f5561567090 R08: 0000200000000300 R09: 0000000000000000 [ 454.883885][T22472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.883896][T22472] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 454.883915][T22472] [ 455.230683][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6839'. [ 455.319916][T22497] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 455.342913][T22496] IPVS: stopping master sync thread 22497 ... [ 456.159413][T22516] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 456.452058][T22532] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.550959][T20220] block device autoloading is deprecated and will be removed. [ 456.632060][T22545] IPVS: stopping master sync thread 22546 ... [ 456.632062][T22546] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 456.651280][T22547] macvtap0: refused to change device tx_queue_len [ 457.289876][T22560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.311269][T22560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.333304][T22560] tipc: Enabled bearer , priority 0 [ 457.346805][T22560] tipc: Disabling bearer [ 457.444471][T22564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.458236][T22564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.472246][T22564] FAULT_INJECTION: forcing a failure. [ 457.472246][T22564] name failslab, interval 1, probability 0, space 0, times 0 [ 457.484993][T22564] CPU: 1 UID: 0 PID: 22564 Comm: syz.2.6868 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 457.485022][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.485036][T22564] Call Trace: [ 457.485043][T22564] [ 457.485051][T22564] dump_stack_lvl+0xf6/0x150 [ 457.485076][T22564] dump_stack+0x15/0x1a [ 457.485093][T22564] should_fail_ex+0x261/0x270 [ 457.485139][T22564] should_failslab+0x8f/0xb0 [ 457.485167][T22564] __kvmalloc_node_noprof+0x12c/0x520 [ 457.485189][T22564] ? xt_alloc_table_info+0x3d/0x80 [ 457.485224][T22564] ? should_fail_ex+0xd7/0x270 [ 457.485253][T22564] xt_alloc_table_info+0x3d/0x80 [ 457.485271][T22564] do_ip6t_set_ctl+0x667/0x8c0 [ 457.485296][T22564] ? kstrtouint+0x7b/0xc0 [ 457.485352][T22564] ? __rcu_read_unlock+0x4e/0x70 [ 457.485441][T22564] nf_setsockopt+0x195/0x1b0 [ 457.485471][T22564] ipv6_setsockopt+0x10f/0x130 [ 457.485572][T22564] udpv6_setsockopt+0x95/0xb0 [ 457.485598][T22564] sock_common_setsockopt+0x64/0x80 [ 457.485620][T22564] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 457.485643][T22564] __sys_setsockopt+0x187/0x200 [ 457.485671][T22564] __x64_sys_setsockopt+0x66/0x80 [ 457.485744][T22564] x64_sys_call+0x2a09/0x2e10 [ 457.485764][T22564] do_syscall_64+0xc9/0x1c0 [ 457.485792][T22564] ? clear_bhb_loop+0x25/0x80 [ 457.485814][T22564] ? clear_bhb_loop+0x25/0x80 [ 457.485837][T22564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.485926][T22564] RIP: 0033:0x7f6c6d81e169 [ 457.485942][T22564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.485961][T22564] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.485981][T22564] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 457.486079][T22564] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 457.486091][T22564] RBP: 00007f6c6be87090 R08: 00000000000003e8 R09: 0000000000000000 [ 457.486108][T22564] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.486119][T22564] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 457.486139][T22564] [ 457.861188][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 457.861205][ T29] audit: type=1326 audit(2000000026.820:27892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 457.891642][ T29] audit: type=1326 audit(2000000026.820:27893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 457.915763][ T29] audit: type=1326 audit(2000000026.820:27894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 457.939562][ T29] audit: type=1326 audit(2000000026.820:27895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 457.963602][ T29] audit: type=1326 audit(2000000026.820:27896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 457.987663][ T29] audit: type=1326 audit(2000000026.820:27897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 458.011273][ T29] audit: type=1326 audit(2000000026.820:27898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 458.035192][ T29] audit: type=1326 audit(2000000026.820:27899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 458.058896][ T29] audit: type=1326 audit(2000000026.820:27900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 458.082945][ T29] audit: type=1326 audit(2000000026.820:27901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22575 comm="syz.1.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 458.288164][T22594] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 458.299175][T22593] IPVS: stopping master sync thread 22594 ... [ 458.310468][T22595] veth0_macvtap: left promiscuous mode [ 458.318022][T22595] macvtap0: refused to change device tx_queue_len [ 458.351227][T22597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6880'. [ 458.610171][T22607] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6884'. [ 458.638322][T22611] random: crng reseeded on system resumption [ 459.107967][T22620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=22620 comm=syz.2.6890 [ 459.121028][T22620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=22620 comm=syz.2.6890 [ 459.136801][T22620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=22620 comm=syz.2.6890 [ 459.236242][T22626] FAULT_INJECTION: forcing a failure. [ 459.236242][T22626] name failslab, interval 1, probability 0, space 0, times 0 [ 459.248901][T22626] CPU: 1 UID: 0 PID: 22626 Comm: syz.2.6892 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 459.248935][T22626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.248948][T22626] Call Trace: [ 459.248955][T22626] [ 459.248962][T22626] dump_stack_lvl+0xf6/0x150 [ 459.248986][T22626] dump_stack+0x15/0x1a [ 459.249004][T22626] should_fail_ex+0x261/0x270 [ 459.249086][T22626] should_failslab+0x8f/0xb0 [ 459.249112][T22626] kmem_cache_alloc_noprof+0x59/0x340 [ 459.249196][T22626] ? audit_log_start+0x37f/0x6e0 [ 459.249214][T22626] ? __rcu_read_unlock+0x4e/0x70 [ 459.249238][T22626] audit_log_start+0x37f/0x6e0 [ 459.249259][T22626] audit_seccomp+0x4b/0x130 [ 459.249279][T22626] __seccomp_filter+0x694/0x10e0 [ 459.249351][T22626] __secure_computing+0x7e/0x160 [ 459.249375][T22626] syscall_trace_enter+0xcf/0x1f0 [ 459.249405][T22626] ? fpregs_assert_state_consistent+0x83/0xa0 [ 459.249516][T22626] do_syscall_64+0xaa/0x1c0 [ 459.249545][T22626] ? clear_bhb_loop+0x25/0x80 [ 459.249564][T22626] ? clear_bhb_loop+0x25/0x80 [ 459.249582][T22626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.249670][T22626] RIP: 0033:0x7f6c6d81cb7c [ 459.249683][T22626] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 459.249699][T22626] RSP: 002b:00007f6c6be87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.249786][T22626] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81cb7c [ 459.249797][T22626] RDX: 000000000000000f RSI: 00007f6c6be870a0 RDI: 0000000000000004 [ 459.249806][T22626] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 459.249816][T22626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.249826][T22626] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 459.249842][T22626] [ 459.633519][T22641] rdma_rxe: rxe_newlink: failed to add bond0 [ 459.971319][T22654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6903'. [ 460.040622][T22659] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 460.051794][T22658] IPVS: stopping master sync thread 22659 ... [ 460.154643][T22661] ipvlan0: entered promiscuous mode [ 460.159902][T22661] ipvlan0: entered allmulticast mode [ 460.165345][T22661] bridge0: entered allmulticast mode [ 460.175707][T22661] batman_adv: batadv0: Adding interface: ipvlan0 [ 460.182099][T22661] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.208392][T22661] batman_adv: batadv0: Interface activated: ipvlan0 [ 460.344873][T22669] FAULT_INJECTION: forcing a failure. [ 460.344873][T22669] name failslab, interval 1, probability 0, space 0, times 0 [ 460.358286][T22669] CPU: 0 UID: 0 PID: 22669 Comm: syz.3.6908 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 460.358377][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.358391][T22669] Call Trace: [ 460.358398][T22669] [ 460.358406][T22669] dump_stack_lvl+0xf6/0x150 [ 460.358432][T22669] dump_stack+0x15/0x1a [ 460.358454][T22669] should_fail_ex+0x261/0x270 [ 460.358480][T22669] should_failslab+0x8f/0xb0 [ 460.358535][T22669] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 460.358557][T22669] ? __alloc_skb+0x10d/0x320 [ 460.358613][T22669] __alloc_skb+0x10d/0x320 [ 460.358636][T22669] netlink_alloc_large_skb+0xad/0xe0 [ 460.358668][T22669] netlink_sendmsg+0x3da/0x720 [ 460.358702][T22669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.358726][T22669] __sock_sendmsg+0x140/0x180 [ 460.358812][T22669] ____sys_sendmsg+0x350/0x4e0 [ 460.358867][T22669] __sys_sendmsg+0x1a0/0x240 [ 460.358910][T22669] __x64_sys_sendmsg+0x46/0x50 [ 460.358945][T22669] x64_sys_call+0x26f3/0x2e10 [ 460.358970][T22669] do_syscall_64+0xc9/0x1c0 [ 460.359048][T22669] ? clear_bhb_loop+0x25/0x80 [ 460.359067][T22669] ? clear_bhb_loop+0x25/0x80 [ 460.359159][T22669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.359182][T22669] RIP: 0033:0x7f4092afe169 [ 460.359241][T22669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.359258][T22669] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.359274][T22669] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 460.359288][T22669] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000006 [ 460.359301][T22669] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 460.359329][T22669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.359340][T22669] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 460.359357][T22669] [ 460.586298][T22675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.702504][T22689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6915'. [ 460.714067][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.723164][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.745620][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.754668][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.868994][T22704] macvtap0: refused to change device tx_queue_len [ 460.873886][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.884687][T22692] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6918'. [ 460.950586][T22709] FAULT_INJECTION: forcing a failure. [ 460.950586][T22709] name failslab, interval 1, probability 0, space 0, times 0 [ 460.963366][T22709] CPU: 1 UID: 0 PID: 22709 Comm: syz.2.6924 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 460.963455][T22709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.963468][T22709] Call Trace: [ 460.963473][T22709] [ 460.963479][T22709] dump_stack_lvl+0xf6/0x150 [ 460.963506][T22709] dump_stack+0x15/0x1a [ 460.963530][T22709] should_fail_ex+0x261/0x270 [ 460.963620][T22709] should_failslab+0x8f/0xb0 [ 460.963652][T22709] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 460.963677][T22709] ? __alloc_skb+0x10d/0x320 [ 460.963702][T22709] __alloc_skb+0x10d/0x320 [ 460.963719][T22709] ? audit_log_start+0x37f/0x6e0 [ 460.963743][T22709] audit_log_start+0x39a/0x6e0 [ 460.963768][T22709] ? kstrtouint+0x7b/0xc0 [ 460.963851][T22709] audit_seccomp+0x4b/0x130 [ 460.963870][T22709] __seccomp_filter+0x694/0x10e0 [ 460.963901][T22709] ? vfs_write+0x669/0x950 [ 460.963946][T22709] __secure_computing+0x7e/0x160 [ 460.963970][T22709] syscall_trace_enter+0xcf/0x1f0 [ 460.963998][T22709] do_syscall_64+0xaa/0x1c0 [ 460.964024][T22709] ? clear_bhb_loop+0x25/0x80 [ 460.964055][T22709] ? clear_bhb_loop+0x25/0x80 [ 460.964074][T22709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.964119][T22709] RIP: 0033:0x7f6c6d81e169 [ 460.964131][T22709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.964149][T22709] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000008c [ 460.964208][T22709] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 460.964221][T22709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 460.964233][T22709] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 460.964243][T22709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.964254][T22709] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 460.964269][T22709] [ 461.178687][T22712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=22712 comm=syz.3.6925 [ 461.216406][T22717] FAULT_INJECTION: forcing a failure. [ 461.216406][T22717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.229499][T22717] CPU: 1 UID: 0 PID: 22717 Comm: syz.3.6927 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 461.229556][T22717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 461.229567][T22717] Call Trace: [ 461.229573][T22717] [ 461.229630][T22717] dump_stack_lvl+0xf6/0x150 [ 461.229656][T22717] dump_stack+0x15/0x1a [ 461.229675][T22717] should_fail_ex+0x261/0x270 [ 461.229759][T22717] should_fail+0xb/0x10 [ 461.229785][T22717] should_fail_usercopy+0x1a/0x20 [ 461.229815][T22717] _copy_from_user+0x1c/0xa0 [ 461.229860][T22717] kstrtouint_from_user+0x84/0x100 [ 461.229895][T22717] ? 0xffffffff81000000 [ 461.229910][T22717] ? selinux_file_permission+0x22d/0x360 [ 461.229977][T22717] proc_fail_nth_write+0x54/0x160 [ 461.229999][T22717] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 461.230018][T22717] vfs_write+0x295/0x950 [ 461.230045][T22717] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.230070][T22717] ? __fget_files+0x186/0x1c0 [ 461.230150][T22717] ksys_write+0xeb/0x1b0 [ 461.230229][T22717] __x64_sys_write+0x42/0x50 [ 461.230299][T22717] x64_sys_call+0x2a45/0x2e10 [ 461.230382][T22717] do_syscall_64+0xc9/0x1c0 [ 461.230418][T22717] ? clear_bhb_loop+0x25/0x80 [ 461.230444][T22717] ? clear_bhb_loop+0x25/0x80 [ 461.230470][T22717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.230563][T22717] RIP: 0033:0x7f4092afcc1f [ 461.230577][T22717] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 461.230626][T22717] RSP: 002b:00007f4091167030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 461.230647][T22717] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4092afcc1f [ 461.230659][T22717] RDX: 0000000000000001 RSI: 00007f40911670a0 RDI: 0000000000000006 [ 461.230722][T22717] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 461.230736][T22717] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 461.230751][T22717] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 461.230798][T22717] [ 461.484698][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.493204][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.516185][T22728] tipc: Enabled bearer , priority 0 [ 461.536695][T22728] tipc: Disabling bearer [ 461.775644][T22732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.784136][T22732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.907983][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 462.907996][ T29] audit: type=1326 audit(2000000031.870:28012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.1.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 463.073339][T22767] xt_hashlimit: size too large, truncated to 1048576 [ 463.081659][ T29] audit: type=1326 audit(2000000031.900:28013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.1.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 463.081693][ T29] audit: type=1326 audit(2000000031.900:28014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.1.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 463.081754][ T29] audit: type=1326 audit(2000000031.900:28015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.1.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 463.081781][ T29] audit: type=1326 audit(2000000031.900:28016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22762 comm="syz.1.6942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 463.642151][T22777] xt_TPROXY: Can be used only with -p tcp or -p udp [ 463.936054][ T29] audit: type=1326 audit(2000000032.900:28017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22789 comm="syz.0.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 463.964522][T22790] __nla_validate_parse: 1 callbacks suppressed [ 463.964537][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6953'. [ 463.986226][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6953'. [ 463.997361][ T29] audit: type=1326 audit(2000000032.920:28018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22789 comm="syz.0.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 464.021048][ T29] audit: type=1326 audit(2000000032.920:28019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22789 comm="syz.0.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 464.044708][ T29] audit: type=1326 audit(2000000032.920:28020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22789 comm="syz.0.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 464.068313][ T29] audit: type=1326 audit(2000000032.920:28021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22789 comm="syz.0.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 464.092794][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6953'. [ 464.570405][T22822] FAULT_INJECTION: forcing a failure. [ 464.570405][T22822] name failslab, interval 1, probability 0, space 0, times 0 [ 464.583174][T22822] CPU: 1 UID: 0 PID: 22822 Comm: syz.2.6965 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 464.583203][T22822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.583216][T22822] Call Trace: [ 464.583222][T22822] [ 464.583229][T22822] dump_stack_lvl+0xf6/0x150 [ 464.583319][T22822] dump_stack+0x15/0x1a [ 464.583337][T22822] should_fail_ex+0x261/0x270 [ 464.583365][T22822] should_failslab+0x8f/0xb0 [ 464.583394][T22822] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 464.583440][T22822] ? __alloc_skb+0x10d/0x320 [ 464.583525][T22822] __alloc_skb+0x10d/0x320 [ 464.583551][T22822] ? audit_log_start+0x37f/0x6e0 [ 464.583573][T22822] audit_log_start+0x39a/0x6e0 [ 464.583597][T22822] ? kstrtouint+0x7b/0xc0 [ 464.583666][T22822] audit_seccomp+0x4b/0x130 [ 464.583688][T22822] __seccomp_filter+0x694/0x10e0 [ 464.583720][T22822] ? vfs_write+0x669/0x950 [ 464.583775][T22822] __secure_computing+0x7e/0x160 [ 464.583803][T22822] syscall_trace_enter+0xcf/0x1f0 [ 464.583835][T22822] do_syscall_64+0xaa/0x1c0 [ 464.583903][T22822] ? clear_bhb_loop+0x25/0x80 [ 464.583925][T22822] ? clear_bhb_loop+0x25/0x80 [ 464.583947][T22822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.583965][T22822] RIP: 0033:0x7f6c6d81e169 [ 464.583979][T22822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.584043][T22822] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000008c [ 464.584062][T22822] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 464.584074][T22822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 464.584086][T22822] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 464.584098][T22822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.584110][T22822] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 464.584127][T22822] [ 464.799082][T22824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 464.996106][T22836] FAULT_INJECTION: forcing a failure. [ 464.996106][T22836] name failslab, interval 1, probability 0, space 0, times 0 [ 465.008778][T22836] CPU: 0 UID: 0 PID: 22836 Comm: syz.0.6971 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 465.008809][T22836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.008822][T22836] Call Trace: [ 465.008828][T22836] [ 465.008833][T22836] dump_stack_lvl+0xf6/0x150 [ 465.008853][T22836] dump_stack+0x15/0x1a [ 465.008940][T22836] should_fail_ex+0x261/0x270 [ 465.008963][T22836] should_failslab+0x8f/0xb0 [ 465.009043][T22836] __kmalloc_cache_noprof+0x55/0x320 [ 465.009064][T22836] ? p9_client_create+0x5a/0xbb0 [ 465.009155][T22836] p9_client_create+0x5a/0xbb0 [ 465.009174][T22836] ? __kmalloc_node_track_caller_noprof+0x36c/0x410 [ 465.009203][T22836] ? v9fs_session_init+0x7b/0xdb0 [ 465.009232][T22836] v9fs_session_init+0xfb/0xdb0 [ 465.009267][T22836] ? obj_cgroup_charge+0xc9/0x170 [ 465.009290][T22836] ? __kmalloc_cache_noprof+0x292/0x320 [ 465.009450][T22836] ? v9fs_mount+0x56/0x580 [ 465.009523][T22836] v9fs_mount+0x6c/0x580 [ 465.009568][T22836] ? __pfx_v9fs_mount+0x10/0x10 [ 465.009597][T22836] legacy_get_tree+0x77/0xd0 [ 465.009689][T22836] vfs_get_tree+0x56/0x1e0 [ 465.009799][T22836] do_new_mount+0x246/0x6b0 [ 465.009839][T22836] path_mount+0x49b/0xb30 [ 465.009894][T22836] __se_sys_mount+0x28f/0x2e0 [ 465.009921][T22836] __x64_sys_mount+0x67/0x80 [ 465.009971][T22836] x64_sys_call+0xd11/0x2e10 [ 465.010068][T22836] do_syscall_64+0xc9/0x1c0 [ 465.010093][T22836] ? clear_bhb_loop+0x25/0x80 [ 465.010145][T22836] ? clear_bhb_loop+0x25/0x80 [ 465.010163][T22836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.010181][T22836] RIP: 0033:0x7f5562efe169 [ 465.010199][T22836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.010286][T22836] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.010379][T22836] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 465.010457][T22836] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000000000000000 [ 465.010468][T22836] RBP: 00007f5561567090 R08: 0000200000000080 R09: 0000000000000000 [ 465.010478][T22836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.010489][T22836] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 465.010506][T22836] [ 465.290614][T22844] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 465.338436][T22850] xt_TPROXY: Can be used only with -p tcp or -p udp [ 465.481573][T22860] FAULT_INJECTION: forcing a failure. [ 465.481573][T22860] name failslab, interval 1, probability 0, space 0, times 0 [ 465.494230][T22860] CPU: 0 UID: 0 PID: 22860 Comm: syz.0.6982 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 465.494260][T22860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.494334][T22860] Call Trace: [ 465.494340][T22860] [ 465.494391][T22860] dump_stack_lvl+0xf6/0x150 [ 465.494419][T22860] dump_stack+0x15/0x1a [ 465.494435][T22860] should_fail_ex+0x261/0x270 [ 465.494460][T22860] should_failslab+0x8f/0xb0 [ 465.494494][T22860] __kmalloc_cache_noprof+0x55/0x320 [ 465.494519][T22860] ? p9_client_create+0x5a/0xbb0 [ 465.494615][T22860] p9_client_create+0x5a/0xbb0 [ 465.494644][T22860] ? should_failslab+0x8f/0xb0 [ 465.494746][T22860] ? __kmalloc_node_track_caller_noprof+0x1ed/0x410 [ 465.494777][T22860] ? v9fs_session_init+0x7b/0xdb0 [ 465.494853][T22860] v9fs_session_init+0xfb/0xdb0 [ 465.494894][T22860] ? obj_cgroup_charge+0xc9/0x170 [ 465.494982][T22860] ? should_fail_ex+0xd7/0x270 [ 465.495009][T22860] ? should_failslab+0x8f/0xb0 [ 465.495115][T22860] ? __kmalloc_cache_noprof+0x18d/0x320 [ 465.495136][T22860] ? v9fs_mount+0x56/0x580 [ 465.495191][T22860] v9fs_mount+0x6c/0x580 [ 465.495222][T22860] ? __pfx_v9fs_mount+0x10/0x10 [ 465.495254][T22860] legacy_get_tree+0x77/0xd0 [ 465.495355][T22860] vfs_get_tree+0x56/0x1e0 [ 465.495386][T22860] do_new_mount+0x246/0x6b0 [ 465.495444][T22860] path_mount+0x49b/0xb30 [ 465.495478][T22860] __se_sys_mount+0x28f/0x2e0 [ 465.495511][T22860] __x64_sys_mount+0x67/0x80 [ 465.495612][T22860] x64_sys_call+0xd11/0x2e10 [ 465.495631][T22860] do_syscall_64+0xc9/0x1c0 [ 465.495656][T22860] ? clear_bhb_loop+0x25/0x80 [ 465.495675][T22860] ? clear_bhb_loop+0x25/0x80 [ 465.495763][T22860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.495780][T22860] RIP: 0033:0x7f5562efe169 [ 465.495810][T22860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.495829][T22860] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.495848][T22860] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 465.495874][T22860] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 465.495884][T22860] RBP: 00007f5561567090 R08: 0000200000000880 R09: 0000000000000000 [ 465.495894][T22860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.495904][T22860] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 465.495920][T22860] [ 465.818390][T22862] FAULT_INJECTION: forcing a failure. [ 465.818390][T22862] name failslab, interval 1, probability 0, space 0, times 0 [ 465.831101][T22862] CPU: 1 UID: 0 PID: 22862 Comm: syz.1.6983 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 465.831153][T22862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 465.831164][T22862] Call Trace: [ 465.831192][T22862] [ 465.831199][T22862] dump_stack_lvl+0xf6/0x150 [ 465.831223][T22862] dump_stack+0x15/0x1a [ 465.831240][T22862] should_fail_ex+0x261/0x270 [ 465.831268][T22862] should_failslab+0x8f/0xb0 [ 465.831329][T22862] __kmalloc_cache_noprof+0x55/0x320 [ 465.831349][T22862] ? alloc_fdtable+0x74/0x1b0 [ 465.831511][T22862] alloc_fdtable+0x74/0x1b0 [ 465.831543][T22862] dup_fd+0x508/0x580 [ 465.831578][T22862] copy_files+0x98/0xe0 [ 465.831605][T22862] copy_process+0xc60/0x1f60 [ 465.831641][T22862] kernel_clone+0x168/0x5d0 [ 465.831673][T22862] __x64_sys_clone+0xe9/0x120 [ 465.831707][T22862] x64_sys_call+0x2dc9/0x2e10 [ 465.831726][T22862] do_syscall_64+0xc9/0x1c0 [ 465.831751][T22862] ? clear_bhb_loop+0x25/0x80 [ 465.831894][T22862] ? clear_bhb_loop+0x25/0x80 [ 465.831915][T22862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.831935][T22862] RIP: 0033:0x7f907aece169 [ 465.831947][T22862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.831962][T22862] RSP: 002b:00007f9079536fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 465.831977][T22862] RAX: ffffffffffffffda RBX: 00007f907b0f5fa0 RCX: 00007f907aece169 [ 465.832008][T22862] RDX: 0000000000000000 RSI: 0000000000000090 RDI: 00000000630c1000 [ 465.832021][T22862] RBP: 00007f9079537090 R08: 0000000000000000 R09: 0000000000000000 [ 465.832033][T22862] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 465.832044][T22862] R13: 0000000000000000 R14: 00007f907b0f5fa0 R15: 00007ffe35c01b88 [ 465.832064][T22862] [ 465.836219][T22873] rdma_rxe: rxe_newlink: failed to add bond0 [ 466.091521][T22881] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 466.104603][ T1039] IPVS: starting estimator thread 0... [ 466.142352][T22887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 466.185609][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6992'. [ 466.194616][T22885] IPVS: using max 2736 ests per chain, 136800 per kthread [ 466.243317][T22896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.252048][T22896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.267696][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6996'. [ 466.276931][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6996'. [ 466.285916][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6996'. [ 466.312354][T22908] netlink: 72 bytes leftover after parsing attributes in process `+}[@'. [ 466.407843][T22919] xt_connbytes: Forcing CT accounting to be enabled [ 466.424481][T22919] set match dimension is over the limit! [ 466.508164][T22922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7003'. [ 466.718843][T22946] No such timeout policy "syz1" [ 466.765930][T22954] IPVS: stopping master sync thread 22957 ... [ 466.791523][T22959] rdma_rxe: rxe_newlink: failed to add bond0 [ 466.925333][T22973] macvtap0: refused to change device tx_queue_len [ 467.440159][T22990] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 467.451190][T22988] IPVS: stopping master sync thread 22990 ... [ 467.540214][T23000] ip6t_srh: unknown srh match flags 4000 [ 467.601448][T23001] random: crng reseeded on system resumption [ 467.853417][T23016] rdma_rxe: rxe_newlink: failed to add bond0 [ 467.965483][T23025] macvtap0: refused to change device tx_queue_len [ 468.255241][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 468.255258][ T29] audit: type=1326 audit(2000000037.220:28258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.287713][ T29] audit: type=1326 audit(2000000037.220:28259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.311429][ T29] audit: type=1326 audit(2000000037.220:28260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.335119][ T29] audit: type=1326 audit(2000000037.220:28261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.358694][ T29] audit: type=1326 audit(2000000037.220:28262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23033 comm="syz.1.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.449358][ T29] audit: type=1326 audit(2000000037.410:28263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23040 comm="syz.1.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.474789][ T29] audit: type=1326 audit(2000000037.410:28264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23040 comm="syz.1.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.498997][ T29] audit: type=1326 audit(2000000037.410:28265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23040 comm="syz.1.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.522684][ T29] audit: type=1326 audit(2000000037.410:28266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23040 comm="syz.1.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 468.553406][ T29] audit: type=1400 audit(2000000037.510:28267): avc: denied { ioctl } for pid=23044 comm="syz.3.7054" path="socket:[85273]" dev="sockfs" ino=85273 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 468.627218][T23055] netlink: 'syz.0.7059': attribute type 1 has an invalid length. [ 468.647595][T23055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.695147][T23063] IPVS: stopping master sync thread 23064 ... [ 468.701257][T23064] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 468.756267][T23070] FAULT_INJECTION: forcing a failure. [ 468.756267][T23070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.769550][T23070] CPU: 0 UID: 0 PID: 23070 Comm: syz.0.7065 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 468.769641][T23070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.769652][T23070] Call Trace: [ 468.769729][T23070] [ 468.769735][T23070] dump_stack_lvl+0xf6/0x150 [ 468.769755][T23070] dump_stack+0x15/0x1a [ 468.769769][T23070] should_fail_ex+0x261/0x270 [ 468.769792][T23070] should_fail_alloc_page+0xfd/0x110 [ 468.769903][T23070] __alloc_frozen_pages_noprof+0x11d/0x360 [ 468.769962][T23070] alloc_pages_mpol+0xb6/0x260 [ 468.769992][T23070] vma_alloc_folio_noprof+0x19c/0x300 [ 468.770026][T23070] handle_mm_fault+0xdda/0x2e80 [ 468.770059][T23070] ? mas_walk+0x204/0x320 [ 468.770090][T23070] ? __rcu_read_unlock+0x4e/0x70 [ 468.770200][T23070] exc_page_fault+0x3b9/0x6a0 [ 468.770229][T23070] ? do_syscall_64+0xd6/0x1c0 [ 468.770273][T23070] asm_exc_page_fault+0x26/0x30 [ 468.770292][T23070] RIP: 0033:0x7f5562eab78b [ 468.770369][T23070] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 468.770387][T23070] RSP: 002b:00007f5561564e10 EFLAGS: 00010246 [ 468.770404][T23070] RAX: 00007f5561566f30 RBX: 00007f55630f3620 RCX: 0000000000000000 [ 468.770456][T23070] RDX: 00007f5561566f78 RSI: 00007f5562f5dbd8 RDI: 00007f5561564e30 [ 468.770470][T23070] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 468.770484][T23070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.770495][T23070] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 468.770514][T23070] [ 468.770522][T23070] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 469.551851][T23120] bridge0: port 3(bond0) entered blocking state [ 469.558332][T23120] bridge0: port 3(bond0) entered disabled state [ 469.573084][T23120] bond0: entered allmulticast mode [ 469.578342][T23120] bond_slave_1: entered allmulticast mode [ 469.588750][T23120] bond0: entered promiscuous mode [ 469.593811][T23120] bond_slave_1: entered promiscuous mode [ 469.599927][T23120] bridge0: port 3(bond0) entered blocking state [ 469.606352][T23120] bridge0: port 3(bond0) entered forwarding state [ 469.616626][T23125] bond0: left allmulticast mode [ 469.621499][T23125] bond_slave_1: left allmulticast mode [ 469.627135][T23125] bond0: left promiscuous mode [ 469.631908][T23125] bond_slave_1: left promiscuous mode [ 469.638087][T23125] bridge0: port 3(bond0) entered disabled state [ 469.932192][T23144] FAULT_INJECTION: forcing a failure. [ 469.932192][T23144] name failslab, interval 1, probability 0, space 0, times 0 [ 469.945076][T23144] CPU: 1 UID: 0 PID: 23144 Comm: syz.0.7093 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 469.945146][T23144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 469.945159][T23144] Call Trace: [ 469.945165][T23144] [ 469.945172][T23144] dump_stack_lvl+0xf6/0x150 [ 469.945196][T23144] dump_stack+0x15/0x1a [ 469.945283][T23144] should_fail_ex+0x261/0x270 [ 469.945313][T23144] should_failslab+0x8f/0xb0 [ 469.945345][T23144] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 469.945370][T23144] ? __alloc_skb+0x10d/0x320 [ 469.945461][T23144] __alloc_skb+0x10d/0x320 [ 469.945479][T23144] ? avc_has_perm+0xd6/0x150 [ 469.945502][T23144] alloc_skb_with_frags+0x80/0x460 [ 469.945594][T23144] ? __rcu_read_unlock+0x4e/0x70 [ 469.945624][T23144] ? avc_has_perm_noaudit+0x1cc/0x210 [ 469.945680][T23144] ? ref_tracker_alloc+0x1ff/0x310 [ 469.945782][T23144] sock_alloc_send_pskb+0x437/0x500 [ 469.945866][T23144] ? __rcu_read_unlock+0x4e/0x70 [ 469.945935][T23144] raw_sendmsg+0x1af/0x510 [ 469.945952][T23144] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 469.945994][T23144] ieee802154_sock_sendmsg+0x4e/0x60 [ 469.946016][T23144] __sock_sendmsg+0x140/0x180 [ 469.946105][T23144] ____sys_sendmsg+0x350/0x4e0 [ 469.946192][T23144] __sys_sendmsg+0x1a0/0x240 [ 469.946237][T23144] __x64_sys_sendmsg+0x46/0x50 [ 469.946316][T23144] x64_sys_call+0x26f3/0x2e10 [ 469.946336][T23144] do_syscall_64+0xc9/0x1c0 [ 469.946364][T23144] ? clear_bhb_loop+0x25/0x80 [ 469.946419][T23144] ? clear_bhb_loop+0x25/0x80 [ 469.946443][T23144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.946465][T23144] RIP: 0033:0x7f5562efe169 [ 469.946480][T23144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.946511][T23144] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.946530][T23144] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 469.946542][T23144] RDX: 0000000020040814 RSI: 0000200000000080 RDI: 0000000000000007 [ 469.946552][T23144] RBP: 00007f5561567090 R08: 0000000000000000 R09: 0000000000000000 [ 469.946562][T23144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.946571][T23144] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 469.946618][T23144] [ 470.262210][T23151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.284894][T23151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.300998][T23151] tipc: Enabled bearer , priority 0 [ 470.315222][T23151] tipc: Disabling bearer [ 470.409733][T23163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 470.425066][T23162] IPVS: stopping master sync thread 23163 ... [ 470.446048][T23167] rdma_rxe: rxe_newlink: failed to add bond0 [ 470.547280][T23169] netlink: 'syz.3.7103': attribute type 17 has an invalid length. [ 470.555208][T23169] netlink: 'syz.3.7103': attribute type 41 has an invalid length. [ 470.996897][T23199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.216722][T23206] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 471.662502][T23226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.088723][T23242] macvtap0: refused to change device tx_queue_len [ 472.400481][T23252] SELinux: syz.2.7136 (23252) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 472.431224][T23252] __nla_validate_parse: 24 callbacks suppressed [ 472.431236][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7136'. [ 472.465687][T23258] FAULT_INJECTION: forcing a failure. [ 472.465687][T23258] name failslab, interval 1, probability 0, space 0, times 0 [ 472.478377][T23258] CPU: 0 UID: 0 PID: 23258 Comm: syz.3.7139 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 472.478461][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.478475][T23258] Call Trace: [ 472.478482][T23258] [ 472.478490][T23258] dump_stack_lvl+0xf6/0x150 [ 472.478516][T23258] dump_stack+0x15/0x1a [ 472.478568][T23258] should_fail_ex+0x261/0x270 [ 472.478678][T23258] should_failslab+0x8f/0xb0 [ 472.478711][T23258] __kmalloc_cache_noprof+0x55/0x320 [ 472.478735][T23258] ? audit_log_d_path+0x8e/0x150 [ 472.478761][T23258] audit_log_d_path+0x8e/0x150 [ 472.478785][T23258] audit_log_d_path_exe+0x42/0x70 [ 472.478875][T23258] audit_log_task+0x1f1/0x250 [ 472.478894][T23258] audit_seccomp+0x68/0x130 [ 472.478967][T23258] __seccomp_filter+0x694/0x10e0 [ 472.478995][T23258] ? vfs_write+0x669/0x950 [ 472.479021][T23258] ? putname+0xe1/0x100 [ 472.479123][T23258] __secure_computing+0x7e/0x160 [ 472.479172][T23258] syscall_trace_enter+0xcf/0x1f0 [ 472.479200][T23258] ? fpregs_assert_state_consistent+0x83/0xa0 [ 472.479228][T23258] do_syscall_64+0xaa/0x1c0 [ 472.479255][T23258] ? clear_bhb_loop+0x25/0x80 [ 472.479274][T23258] ? clear_bhb_loop+0x25/0x80 [ 472.479354][T23258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.479375][T23258] RIP: 0033:0x7f4092afe169 [ 472.479387][T23258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.479402][T23258] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 472.479420][T23258] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 472.479433][T23258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 472.479443][T23258] RBP: 00007f4091167090 R08: 0000000000001000 R09: 0000000000000000 [ 472.479502][T23258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.479512][T23258] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 472.479532][T23258] [ 472.805203][T23266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.084312][T23296] macvtap0: refused to change device tx_queue_len [ 473.126247][T23295] netlink: 'syz.2.7154': attribute type 21 has an invalid length. [ 473.144685][T23295] netlink: 'syz.2.7154': attribute type 1 has an invalid length. [ 473.152450][T23295] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7154'. [ 473.388045][T23322] xt_hashlimit: max too large, truncated to 1048576 [ 473.798105][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 473.798119][ T29] audit: type=1326 audit(2000000042.629:28662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.828577][ T29] audit: type=1326 audit(2000000042.629:28663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.852882][ T29] audit: type=1326 audit(2000000042.629:28664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.876574][ T29] audit: type=1326 audit(2000000042.629:28665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.900950][ T29] audit: type=1326 audit(2000000042.629:28666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.924708][ T29] audit: type=1326 audit(2000000042.629:28667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 473.949108][ T29] audit: type=1326 audit(2000000042.629:28668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11f415cad0 code=0x7ffc0000 [ 473.972673][ T29] audit: type=1326 audit(2000000042.629:28669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f11f415cc1f code=0x7ffc0000 [ 473.996870][ T29] audit: type=1326 audit(2000000042.629:28670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f11f415cc1f code=0x7ffc0000 [ 474.020261][ T29] audit: type=1326 audit(2000000042.629:28671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23356 comm="syz.4.7179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 474.283989][T23383] FAULT_INJECTION: forcing a failure. [ 474.283989][T23383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.297177][T23383] CPU: 1 UID: 0 PID: 23383 Comm: syz.2.7190 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 474.297212][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.297225][T23383] Call Trace: [ 474.297231][T23383] [ 474.297238][T23383] dump_stack_lvl+0xf6/0x150 [ 474.297262][T23383] dump_stack+0x15/0x1a [ 474.297277][T23383] should_fail_ex+0x261/0x270 [ 474.297315][T23383] should_fail+0xb/0x10 [ 474.297402][T23383] should_fail_usercopy+0x1a/0x20 [ 474.297547][T23383] strncpy_from_user+0x25/0x230 [ 474.297565][T23383] ? getname_flags+0x81/0x3b0 [ 474.297636][T23383] getname_flags+0xb0/0x3b0 [ 474.297667][T23383] user_path_at+0x26/0x140 [ 474.297694][T23383] __se_sys_mount+0x25e/0x2e0 [ 474.297726][T23383] __x64_sys_mount+0x67/0x80 [ 474.297840][T23383] x64_sys_call+0xd11/0x2e10 [ 474.297858][T23383] do_syscall_64+0xc9/0x1c0 [ 474.297883][T23383] ? clear_bhb_loop+0x25/0x80 [ 474.297941][T23383] ? clear_bhb_loop+0x25/0x80 [ 474.297962][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.298039][T23383] RIP: 0033:0x7f6c6d81e169 [ 474.298053][T23383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.298070][T23383] RSP: 002b:00007f6c6be87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 474.298086][T23383] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81e169 [ 474.298096][T23383] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 474.298106][T23383] RBP: 00007f6c6be87090 R08: 0000200000000680 R09: 0000000000000000 [ 474.298116][T23383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.298199][T23383] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 474.298215][T23383] [ 474.619472][T23399] FAULT_INJECTION: forcing a failure. [ 474.619472][T23399] name failslab, interval 1, probability 0, space 0, times 0 [ 474.632781][T23399] CPU: 0 UID: 0 PID: 23399 Comm: syz.0.7196 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 474.632804][T23399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.632862][T23399] Call Trace: [ 474.632868][T23399] [ 474.632876][T23399] dump_stack_lvl+0xf6/0x150 [ 474.632958][T23399] dump_stack+0x15/0x1a [ 474.632971][T23399] should_fail_ex+0x261/0x270 [ 474.633000][T23399] should_failslab+0x8f/0xb0 [ 474.633032][T23399] __kmalloc_noprof+0xad/0x410 [ 474.633061][T23399] ? security_msg_msg_alloc+0x44/0x100 [ 474.633139][T23399] ? should_fail_ex+0xd7/0x270 [ 474.633167][T23399] security_msg_msg_alloc+0x44/0x100 [ 474.633190][T23399] load_msg+0x234/0x2f0 [ 474.633278][T23399] do_mq_timedsend+0x248/0x6a0 [ 474.633312][T23399] __x64_sys_mq_timedsend+0xcf/0x160 [ 474.633339][T23399] x64_sys_call+0x2c25/0x2e10 [ 474.633362][T23399] do_syscall_64+0xc9/0x1c0 [ 474.633392][T23399] ? clear_bhb_loop+0x25/0x80 [ 474.633449][T23399] ? clear_bhb_loop+0x25/0x80 [ 474.633469][T23399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.633486][T23399] RIP: 0033:0x7f5562efe169 [ 474.633498][T23399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.633513][T23399] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 474.633528][T23399] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 474.633539][T23399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 474.633598][T23399] RBP: 00007f5561567090 R08: 0000000000000000 R09: 0000000000000000 [ 474.633610][T23399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.633622][T23399] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 474.633699][T23399] [ 475.365169][T23429] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7209'. [ 475.374403][T23429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7209'. [ 475.392114][T23431] veth0_macvtap: left promiscuous mode [ 475.399356][T23431] macvtap0: refused to change device tx_queue_len [ 475.499698][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.508915][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.525238][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.548186][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.594965][T23439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 475.613336][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.644209][T23435] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7210'. [ 475.868251][T23451] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 476.060343][T23464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.336956][T23501] netlink: 'syz.1.7234': attribute type 21 has an invalid length. [ 476.347912][T23501] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 476.577476][T23514] vlan0: entered allmulticast mode [ 476.582665][T23514] bond0: entered allmulticast mode [ 476.587810][T23514] bond_slave_0: entered allmulticast mode [ 476.593711][T23514] bond_slave_1: entered allmulticast mode [ 476.866095][T23523] macvtap0: refused to change device tx_queue_len [ 477.242356][T23545] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 477.242757][T23544] IPVS: stopping master sync thread 23545 ... [ 478.517829][T23607] FAULT_INJECTION: forcing a failure. [ 478.517829][T23607] name failslab, interval 1, probability 0, space 0, times 0 [ 478.529150][T23608] __nla_validate_parse: 14 callbacks suppressed [ 478.529166][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 478.531280][T23607] CPU: 0 UID: 0 PID: 23607 Comm: syz.3.7275 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 478.531314][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 478.531400][T23607] Call Trace: [ 478.531408][T23607] [ 478.531416][T23607] dump_stack_lvl+0xf6/0x150 [ 478.531446][T23607] dump_stack+0x15/0x1a [ 478.531466][T23607] should_fail_ex+0x261/0x270 [ 478.531505][T23607] should_failslab+0x8f/0xb0 [ 478.531547][T23607] __kmalloc_cache_noprof+0x55/0x320 [ 478.531574][T23607] ? audit_log_d_path+0x8e/0x150 [ 478.531605][T23607] audit_log_d_path+0x8e/0x150 [ 478.531682][T23607] audit_log_d_path_exe+0x42/0x70 [ 478.531711][T23607] audit_log_task+0x1f1/0x250 [ 478.531738][T23607] audit_seccomp+0x68/0x130 [ 478.531761][T23607] __seccomp_filter+0x694/0x10e0 [ 478.531831][T23607] ? vfs_write+0x669/0x950 [ 478.531896][T23607] ? putname+0xe1/0x100 [ 478.531926][T23607] __secure_computing+0x7e/0x160 [ 478.531963][T23607] syscall_trace_enter+0xcf/0x1f0 [ 478.531997][T23607] ? fpregs_assert_state_consistent+0x83/0xa0 [ 478.532120][T23607] do_syscall_64+0xaa/0x1c0 [ 478.532157][T23607] ? clear_bhb_loop+0x25/0x80 [ 478.532242][T23607] ? clear_bhb_loop+0x25/0x80 [ 478.532268][T23607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.532367][T23607] RIP: 0033:0x7f4092afe169 [ 478.532385][T23607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.532407][T23607] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 478.532429][T23607] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 478.532455][T23607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 478.532469][T23607] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 478.532489][T23607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.532503][T23607] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 478.532534][T23607] [ 478.780537][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 478.854163][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 478.898972][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 478.980913][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 479.000173][T23608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7273'. [ 479.012028][T23627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.051753][T23627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.064027][T23627] tipc: Enabled bearer , priority 0 [ 479.076239][T23627] tipc: Disabling bearer [ 479.166167][T23630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7283'. [ 479.267829][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 479.267840][ T29] audit: type=1326 audit(2000000047.696:29064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23637 comm="syz.4.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 479.303282][ T29] audit: type=1326 audit(2000000047.733:29065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23637 comm="syz.4.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 479.327033][ T29] audit: type=1326 audit(2000000047.733:29066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23637 comm="syz.4.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 479.351270][ T29] audit: type=1326 audit(2000000047.733:29067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23637 comm="syz.4.7286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 479.437697][T23646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7290'. [ 479.478882][T23648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.787128][T23658] 9p: Unknown uid 00000000004294967295 [ 479.861303][ T29] audit: type=1400 audit(2000000048.250:29068): avc: denied { mount } for pid=23657 comm="syz.4.7296" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 479.956789][ T29] audit: type=1326 audit(2000000048.333:29069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23663 comm="syz.4.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 479.981200][ T29] audit: type=1326 audit(2000000048.333:29070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23663 comm="syz.4.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 480.004869][ T29] audit: type=1326 audit(2000000048.333:29071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23663 comm="syz.4.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f415e169 code=0x7ffc0000 [ 480.258193][ T29] audit: type=1326 audit(2000000048.619:29072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23689 comm="syz.1.7309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 480.281841][ T29] audit: type=1326 audit(2000000048.619:29073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23689 comm="syz.1.7309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907aece169 code=0x7ffc0000 [ 480.380680][T23710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7308'. [ 480.878221][T23778] macvtap0: refused to change device tx_queue_len [ 481.164240][T23790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7322'. [ 481.206069][T23792] xt_TPROXY: Can be used only with -p tcp or -p udp [ 481.276528][T23798] unsupported nlmsg_type 40 [ 481.323150][T23806] netlink: 'syz.0.7329': attribute type 21 has an invalid length. [ 481.331221][T23806] netlink: 'syz.0.7329': attribute type 1 has an invalid length. [ 481.345497][T23809] tipc: Enabling of bearer rejected, failed to enable media [ 481.428727][T23818] FAULT_INJECTION: forcing a failure. [ 481.428727][T23818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.442386][T23818] CPU: 0 UID: 0 PID: 23818 Comm: syz.0.7334 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 481.442409][T23818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 481.442420][T23818] Call Trace: [ 481.442426][T23818] [ 481.442433][T23818] dump_stack_lvl+0xf6/0x150 [ 481.442466][T23818] dump_stack+0x15/0x1a [ 481.442484][T23818] should_fail_ex+0x261/0x270 [ 481.442510][T23818] should_fail+0xb/0x10 [ 481.442529][T23818] should_fail_usercopy+0x1a/0x20 [ 481.442631][T23818] _copy_from_user+0x1c/0xa0 [ 481.442659][T23818] ucma_write+0xdc/0x250 [ 481.442706][T23818] vfs_writev+0x3f3/0x880 [ 481.442753][T23818] ? get_pid_task+0x94/0xd0 [ 481.442776][T23818] ? __pfx_ucma_write+0x10/0x10 [ 481.442805][T23818] do_writev+0xf7/0x230 [ 481.442873][T23818] __x64_sys_writev+0x45/0x50 [ 481.442906][T23818] x64_sys_call+0x1d68/0x2e10 [ 481.442929][T23818] do_syscall_64+0xc9/0x1c0 [ 481.442992][T23818] ? clear_bhb_loop+0x25/0x80 [ 481.443010][T23818] ? clear_bhb_loop+0x25/0x80 [ 481.443028][T23818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.443106][T23818] RIP: 0033:0x7f5562efe169 [ 481.443119][T23818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.443133][T23818] RSP: 002b:00007f5561567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 481.443149][T23818] RAX: ffffffffffffffda RBX: 00007f5563125fa0 RCX: 00007f5562efe169 [ 481.443158][T23818] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000005 [ 481.443168][T23818] RBP: 00007f5561567090 R08: 0000000000000000 R09: 0000000000000000 [ 481.443178][T23818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.443187][T23818] R13: 0000000000000000 R14: 00007f5563125fa0 R15: 00007ffd7ec725d8 [ 481.443205][T23818] [ 481.923777][T23833] xt_TPROXY: Can be used only with -p tcp or -p udp [ 482.178217][T23841] netlink: 'syz.4.7342': attribute type 21 has an invalid length. [ 482.189646][T23841] netlink: 'syz.4.7342': attribute type 1 has an invalid length. [ 483.609609][T23912] xt_hashlimit: max too large, truncated to 1048576 [ 483.995894][T23937] __nla_validate_parse: 11 callbacks suppressed [ 483.995910][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.011251][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.034357][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.043469][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.083409][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.092546][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7378'. [ 484.271486][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7384'. [ 484.904402][T23970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 484.956576][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 484.956592][ T29] audit: type=1326 audit(2000000052.957:29454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 484.986355][ T29] audit: type=1326 audit(2000000052.957:29455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.090922][T23982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7394'. [ 485.100397][T23982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7394'. [ 485.125705][ T29] audit: type=1326 audit(2000000053.003:29456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.149380][ T29] audit: type=1326 audit(2000000053.003:29457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.173000][ T29] audit: type=1326 audit(2000000053.003:29458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.196741][ T29] audit: type=1326 audit(2000000053.003:29459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.220350][ T29] audit: type=1326 audit(2000000053.003:29460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.243882][ T29] audit: type=1326 audit(2000000053.003:29461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.267448][ T29] audit: type=1326 audit(2000000053.003:29462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.291051][ T29] audit: type=1326 audit(2000000053.003:29463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23974 comm="syz.0.7393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5562efe169 code=0x7ffc0000 [ 485.324851][T23982] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7394'. [ 485.605070][T24002] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 485.724173][T24008] netlink: 'syz.3.7403': attribute type 21 has an invalid length. [ 485.860579][T24008] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 486.126644][ T48] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 486.210309][T24025] bridge0: port 3(bond0) entered blocking state [ 486.216742][T24025] bridge0: port 3(bond0) entered disabled state [ 486.235431][T24025] bond0: entered allmulticast mode [ 486.240653][T24025] bond_slave_1: entered allmulticast mode [ 486.278350][T24025] bond0: entered promiscuous mode [ 486.283559][T24025] bond_slave_1: entered promiscuous mode [ 486.289640][T24025] bridge0: port 3(bond0) entered blocking state [ 486.296036][T24025] bridge0: port 3(bond0) entered forwarding state [ 487.395113][T24089] xt_hashlimit: max too large, truncated to 1048576 [ 487.453939][T24095] netlink: 'syz.3.7436': attribute type 1 has an invalid length. [ 487.583663][T24109] netlink: 'syz.3.7447': attribute type 21 has an invalid length. [ 487.593366][T24109] netlink: 'syz.3.7447': attribute type 1 has an invalid length. [ 487.608205][T24117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.622549][T24117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.637369][T24117] tipc: Enabled bearer , priority 0 [ 487.652811][T24117] tipc: Disabling bearer [ 487.663858][T24126] tipc: New replicast peer: 10.1.1.2 [ 487.669207][T24126] tipc: Enabled bearer , priority 10 [ 487.672285][T24127] xt_hashlimit: max too large, truncated to 1048576 [ 487.714801][T24129] FAULT_INJECTION: forcing a failure. [ 487.714801][T24129] name failslab, interval 1, probability 0, space 0, times 0 [ 487.727454][T24129] CPU: 0 UID: 0 PID: 24129 Comm: syz.3.7456 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 487.727481][T24129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.727493][T24129] Call Trace: [ 487.727498][T24129] [ 487.727504][T24129] dump_stack_lvl+0xf6/0x150 [ 487.727524][T24129] dump_stack+0x15/0x1a [ 487.727559][T24129] should_fail_ex+0x261/0x270 [ 487.727599][T24129] should_failslab+0x8f/0xb0 [ 487.727630][T24129] kmem_cache_alloc_noprof+0x59/0x340 [ 487.727648][T24129] ? getname_flags+0x81/0x3b0 [ 487.727668][T24129] getname_flags+0x81/0x3b0 [ 487.727684][T24129] user_path_at+0x26/0x140 [ 487.727706][T24129] __se_sys_mount+0x25e/0x2e0 [ 487.727787][T24129] __x64_sys_mount+0x67/0x80 [ 487.727817][T24129] x64_sys_call+0xd11/0x2e10 [ 487.727840][T24129] do_syscall_64+0xc9/0x1c0 [ 487.727906][T24129] ? clear_bhb_loop+0x25/0x80 [ 487.727925][T24129] ? clear_bhb_loop+0x25/0x80 [ 487.727947][T24129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.727969][T24129] RIP: 0033:0x7f4092afe169 [ 487.728060][T24129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.728078][T24129] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 487.728097][T24129] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 487.728176][T24129] RDX: 0000200000001440 RSI: 0000200000001400 RDI: 0000000000000000 [ 487.728189][T24129] RBP: 00007f4091167090 R08: 0000200000000080 R09: 0000000000000000 [ 487.728201][T24129] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 487.728213][T24129] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 487.728242][T24129] [ 487.930982][T24130] IPVS: stopping master sync thread 24133 ... [ 487.932617][T24133] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 488.158469][T24151] netlink: 'syz.2.7466': attribute type 21 has an invalid length. [ 488.171062][T24151] netlink: 'syz.2.7466': attribute type 1 has an invalid length. [ 488.268545][T24167] macvtap0: refused to change device tx_queue_len [ 488.281447][T24163] netlink: 'syz.4.7471': attribute type 21 has an invalid length. [ 488.298917][T24163] netlink: 'syz.4.7471': attribute type 1 has an invalid length. [ 488.521695][T24197] netlink: 'syz.4.7483': attribute type 21 has an invalid length. [ 488.561041][T24197] netlink: 'syz.4.7483': attribute type 1 has an invalid length. [ 488.665765][T24208] FAULT_INJECTION: forcing a failure. [ 488.665765][T24208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.678908][T24208] CPU: 1 UID: 0 PID: 24208 Comm: syz.2.7487 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 488.678937][T24208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 488.678950][T24208] Call Trace: [ 488.678956][T24208] [ 488.678963][T24208] dump_stack_lvl+0xf6/0x150 [ 488.678987][T24208] dump_stack+0x15/0x1a [ 488.679005][T24208] should_fail_ex+0x261/0x270 [ 488.679028][T24208] should_fail+0xb/0x10 [ 488.679047][T24208] should_fail_usercopy+0x1a/0x20 [ 488.679133][T24208] _copy_to_user+0x20/0xa0 [ 488.679179][T24208] simple_read_from_buffer+0xb2/0x130 [ 488.679207][T24208] proc_fail_nth_read+0x103/0x140 [ 488.679251][T24208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 488.679272][T24208] vfs_read+0x1b2/0x710 [ 488.679300][T24208] ? __rcu_read_unlock+0x4e/0x70 [ 488.679424][T24208] ? __rcu_read_unlock+0x4e/0x70 [ 488.679466][T24208] ? __fget_files+0x186/0x1c0 [ 488.679489][T24208] ksys_read+0xeb/0x1b0 [ 488.679521][T24208] __x64_sys_read+0x42/0x50 [ 488.679590][T24208] x64_sys_call+0x2a3b/0x2e10 [ 488.679611][T24208] do_syscall_64+0xc9/0x1c0 [ 488.679658][T24208] ? clear_bhb_loop+0x25/0x80 [ 488.679677][T24208] ? clear_bhb_loop+0x25/0x80 [ 488.679699][T24208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.679741][T24208] RIP: 0033:0x7f6c6d81cb7c [ 488.679757][T24208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 488.679777][T24208] RSP: 002b:00007f6c6be87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.679796][T24208] RAX: ffffffffffffffda RBX: 00007f6c6da45fa0 RCX: 00007f6c6d81cb7c [ 488.679882][T24208] RDX: 000000000000000f RSI: 00007f6c6be870a0 RDI: 0000000000000003 [ 488.679895][T24208] RBP: 00007f6c6be87090 R08: 0000000000000000 R09: 0000000000000000 [ 488.679910][T24208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.679923][T24208] R13: 0000000000000000 R14: 00007f6c6da45fa0 R15: 00007ffeb5327038 [ 488.679961][T24208] [ 488.882679][ T3379] tipc: Node number set to 2349775996 [ 489.070865][T24230] xt_hashlimit: max too large, truncated to 1048576 [ 489.139254][T24234] netlink: 'syz.3.7496': attribute type 21 has an invalid length. [ 489.147227][T24234] netlink: 'syz.3.7496': attribute type 1 has an invalid length. [ 489.189981][T24239] bridge0: port 3(bond0) entered blocking state [ 489.196298][T24239] bridge0: port 3(bond0) entered disabled state [ 489.204321][T24239] bond0: entered allmulticast mode [ 489.209516][T24239] bond_slave_1: entered allmulticast mode [ 489.216659][T24239] bond0: entered promiscuous mode [ 489.221705][T24239] bond_slave_1: entered promiscuous mode [ 489.228060][T24239] bridge0: port 3(bond0) entered blocking state [ 489.234402][T24239] bridge0: port 3(bond0) entered forwarding state [ 489.244256][T24241] bridge0: port 3(bond0) entered blocking state [ 489.250581][T24241] bridge0: port 3(bond0) entered disabled state [ 489.270380][T24241] bond0: entered promiscuous mode [ 489.275448][T24241] bond_slave_0: entered promiscuous mode [ 489.281585][T24241] bond_slave_1: entered promiscuous mode [ 489.288162][T24246] FAULT_INJECTION: forcing a failure. [ 489.288162][T24246] name failslab, interval 1, probability 0, space 0, times 0 [ 489.301517][T24246] CPU: 0 UID: 0 PID: 24246 Comm: syz.3.7501 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 489.301559][T24246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.301572][T24246] Call Trace: [ 489.301578][T24246] [ 489.301585][T24246] dump_stack_lvl+0xf6/0x150 [ 489.301653][T24246] dump_stack+0x15/0x1a [ 489.301671][T24246] should_fail_ex+0x261/0x270 [ 489.301700][T24246] should_failslab+0x8f/0xb0 [ 489.301734][T24246] __kmalloc_cache_noprof+0x55/0x320 [ 489.301755][T24246] ? getname_flags+0x1ef/0x3b0 [ 489.301848][T24246] getname_flags+0x1ef/0x3b0 [ 489.301869][T24246] __se_sys_acct+0x40/0x4a0 [ 489.301983][T24246] __x64_sys_acct+0x1f/0x30 [ 489.302002][T24246] x64_sys_call+0x1871/0x2e10 [ 489.302025][T24246] do_syscall_64+0xc9/0x1c0 [ 489.302057][T24246] ? clear_bhb_loop+0x25/0x80 [ 489.302088][T24246] ? clear_bhb_loop+0x25/0x80 [ 489.302111][T24246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.302132][T24246] RIP: 0033:0x7f4092afe169 [ 489.302176][T24246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.302196][T24246] RSP: 002b:00007f4091167038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 489.302216][T24246] RAX: ffffffffffffffda RBX: 00007f4092d25fa0 RCX: 00007f4092afe169 [ 489.302229][T24246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000002180 [ 489.302242][T24246] RBP: 00007f4091167090 R08: 0000000000000000 R09: 0000000000000000 [ 489.302255][T24246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.302265][T24246] R13: 0000000000000000 R14: 00007f4092d25fa0 R15: 00007ffe8bd0d528 [ 489.302288][T24246] [ 489.307155][T24241] bridge0: port 3(bond0) entered blocking state [ 489.483979][T24241] bridge0: port 3(bond0) entered forwarding state [ 489.598916][T24281] __nla_validate_parse: 31 callbacks suppressed [ 489.598929][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.614235][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.644052][T24280] netlink: 'syz.3.7510': attribute type 21 has an invalid length. [ 489.667544][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.680128][T24280] netlink: 'syz.3.7510': attribute type 1 has an invalid length. [ 489.687863][T24280] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7510'. [ 489.707934][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.740923][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.761888][T24281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7508'. [ 489.903864][T24291] xt_TPROXY: Can be used only with -p tcp or -p udp [ 489.924701][T24295] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7513'. [ 490.085878][T24309] bridge0: port 3(bond0) entered blocking state [ 490.092312][T24309] bridge0: port 3(bond0) entered disabled state [ 490.123049][T24309] bond0: entered allmulticast mode [ 490.128238][T24309] bond_slave_1: entered allmulticast mode [ 490.140240][T24309] bond0: entered promiscuous mode [ 490.145290][T24309] bond_slave_1: entered promiscuous mode [ 490.152054][T24309] bridge0: port 3(bond0) entered blocking state [ 490.158335][T24309] bridge0: port 3(bond0) entered forwarding state [ 490.224527][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7524'. [ 490.243264][T24321] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7523'. [ 490.408939][T24330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.444473][T24330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.479360][ T29] kauditd_printk_skb: 679 callbacks suppressed [ 490.479373][ T29] audit: type=1326 audit(2000000058.043:30143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.519912][T24330] tipc: Enabled bearer , priority 0 [ 490.522397][ T29] audit: type=1326 audit(2000000058.089:30144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.550181][ T29] audit: type=1326 audit(2000000058.089:30145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.573880][ T29] audit: type=1326 audit(2000000058.089:30146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.597514][ T29] audit: type=1326 audit(2000000058.089:30147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.621144][ T29] audit: type=1326 audit(2000000058.089:30148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.644810][ T29] audit: type=1326 audit(2000000058.089:30149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.668414][ T29] audit: type=1326 audit(2000000058.089:30150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.692014][ T29] audit: type=1326 audit(2000000058.089:30151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.715658][ T29] audit: type=1326 audit(2000000058.089:30152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24329 comm="syz.3.7527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4092afe169 code=0x7ffc0000 [ 490.740625][T24330] tipc: Disabling bearer [ 490.932093][T24362] rdma_rxe: rxe_newlink: failed to add bond0 [ 492.053664][T24427] IPVS: stopping master sync thread 24428 ... [ 492.059912][T24428] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 492.219204][T24444] bridge0: port 3(bond0) entered blocking state [ 492.225574][T24444] bridge0: port 3(bond0) entered disabled state [ 492.250847][T24444] bond0: entered allmulticast mode [ 492.262317][T24444] bond0: entered promiscuous mode [ 492.301166][T24450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.380951][T24450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.453818][T24450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.533117][T24450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.614255][T24467] FAULT_INJECTION: forcing a failure. [ 492.614255][T24467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.627561][T24467] CPU: 1 UID: 0 PID: 24467 Comm: syz.1.7577 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 492.627586][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 492.627599][T24467] Call Trace: [ 492.627606][T24467] [ 492.627614][T24467] dump_stack_lvl+0xf6/0x150 [ 492.627638][T24467] dump_stack+0x15/0x1a [ 492.627653][T24467] should_fail_ex+0x261/0x270 [ 492.627742][T24467] should_fail+0xb/0x10 [ 492.627765][T24467] should_fail_usercopy+0x1a/0x20 [ 492.627791][T24467] _copy_from_user+0x1c/0xa0 [ 492.627856][T24467] get_user_ifreq+0x8c/0x160 [ 492.627887][T24467] inet_ioctl+0x2ca/0x3b0 [ 492.627916][T24467] sock_do_ioctl+0x86/0x270 [ 492.628025][T24467] sock_ioctl+0x436/0x630 [ 492.628057][T24467] ? __pfx_sock_ioctl+0x10/0x10 [ 492.628087][T24467] __se_sys_ioctl+0xc9/0x140 [ 492.628115][T24467] __x64_sys_ioctl+0x43/0x50 [ 492.628159][T24467] x64_sys_call+0x168d/0x2e10 [ 492.628177][T24467] do_syscall_64+0xc9/0x1c0 [ 492.628205][T24467] ? clear_bhb_loop+0x25/0x80 [ 492.628224][T24467] ? clear_bhb_loop+0x25/0x80 [ 492.628299][T24467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.628317][T24467] RIP: 0033:0x7f907aece169 [ 492.628329][T24467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.628344][T24467] RSP: 002b:00007f9079537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.628359][T24467] RAX: ffffffffffffffda RBX: 00007f907b0f5fa0 RCX: 00007f907aece169 [ 492.628369][T24467] RDX: 0000200000000540 RSI: 000000000000891c RDI: 000000000000000a [ 492.628379][T24467] RBP: 00007f9079537090 R08: 0000000000000000 R09: 0000000000000000 [ 492.628436][T24467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.628448][T24467] R13: 0000000000000000 R14: 00007f907b0f5fa0 R15: 00007ffe35c01b88 [ 492.628468][T24467] [ 492.857541][T24450] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.882447][T24450] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.896852][T24480] ================================================================== [ 492.904942][T24480] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 492.912673][T24480] [ 492.914987][T24480] write to 0xffff8881044d9360 of 8 bytes by task 24477 on cpu 1: [ 492.922693][T24480] mas_wr_store_entry+0x1266/0x2460 [ 492.927892][T24480] mas_store_prealloc+0x6d5/0x960 [ 492.932922][T24480] commit_merge+0x685/0x710 [ 492.937432][T24480] vma_expand+0x241/0x320 [ 492.941771][T24480] vma_merge_new_range+0x2c2/0x340 [ 492.946886][T24480] mmap_region+0x805/0x1490 [ 492.951382][T24480] do_mmap+0x9ef/0xc80 [ 492.955452][T24480] vm_mmap_pgoff+0x16d/0x2d0 [ 492.960045][T24480] ksys_mmap_pgoff+0xd0/0x340 [ 492.964732][T24480] x64_sys_call+0x1945/0x2e10 [ 492.969411][T24480] do_syscall_64+0xc9/0x1c0 [ 492.973918][T24480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.979814][T24480] [ 492.982139][T24480] read to 0xffff8881044d9360 of 8 bytes by task 24480 on cpu 0: [ 492.989860][T24480] mtree_range_walk+0x1b3/0x460 [ 492.994727][T24480] mas_walk+0x16e/0x320 [ 492.998894][T24480] lock_vma_under_rcu+0xa7/0x340 [ 493.003839][T24480] exc_page_fault+0x150/0x6a0 [ 493.008513][T24480] asm_exc_page_fault+0x26/0x30 [ 493.013354][T24480] [ 493.015666][T24480] value changed: 0x00007f90794d4fff -> 0x00007f90794b3fff [ 493.022764][T24480] [ 493.025078][T24480] Reported by Kernel Concurrency Sanitizer on: [ 493.031219][T24480] CPU: 0 UID: 0 PID: 24480 Comm: syz.1.7579 Not tainted 6.15.0-rc2-syzkaller-00042-g1a1d569a75f3 #0 PREEMPT(voluntary) [ 493.043712][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 493.053769][T24480] ================================================================== [ 493.063480][T24450] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.077846][T24450] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0