last executing test programs: 2m21.100903288s ago: executing program 3 (id=1736): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000711209000000000095000000000000a9badf866256303c805818cc1257d603538ee7ed1eed4e9b638301a20d612c3420c5af64f32c88ce10"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x380cc52, &(0x7f00000020c0)={[{@nocompress}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@showassoc}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@cruft}, {@unhide}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x1}}, {@map_off}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket(0x2, 0x5, 0x0) r2 = socket(0x1d, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32], 0xa8}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x65, 0x10, 0x0, 0x20000000) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2000000000000000000000000700000001440c05"], 0x20}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m20.238202505s ago: executing program 3 (id=1756): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 2m20.218586174s ago: executing program 1 (id=1757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @remote}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711093000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x10001}, 0x18) r4 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x11e1, 0x100, 0x0, 0x3a9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) unshare(0x28000600) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000052000100000000000000000002"], 0x18}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = dup3(r3, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r10) 2m20.060579824s ago: executing program 3 (id=1760): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x37}, 0x3}}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='f2fs_sync_fs\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) syz_io_uring_setup(0x33e7, &(0x7f0000000100)={0x0, 0x7e51, 0x800, 0x3, 0x100}, &(0x7f0000000180), &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c832, 0xffffffffffffffff, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001480)=[{0xc0, 0x84, 0x8, "4344c07c3cd41039d21c81047c884caf8ef14b6fb520c1ca62e1d92da87d3f784e4b1f23cb6550d3344437c5de634832abfde662e2f568cc0fb4f79708d48cc603d56e2b16d694e175d127b4ef506e57a6322487df958ead4ba2293b8adf22185fb942fce945465e778c997feca73c9e688828720c63c0501decd2ac07411cdeb5cdbc8a5e4aed5df48b1ce2076bb5f3f265ddbd4373d7f6afe1acd5cff256dd88d79fd158b49f391519ef8a037d"}, {0x18, 0x84, 0x0, 'b'}], 0xd8}, 0x41) socket(0x28, 0x5, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28fc000014001901000000000000000228"], 0x28}}, 0x0) 2m19.442566532s ago: executing program 3 (id=1770): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x406, &(0x7f0000000280)={[{@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x8, 0x307, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2m19.189459271s ago: executing program 3 (id=1777): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) 2m18.805597969s ago: executing program 3 (id=1779): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 2m18.766691809s ago: executing program 32 (id=1779): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 2m17.063537733s ago: executing program 1 (id=1804): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r0, &(0x7f0000000f80)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1c) 2m16.902297872s ago: executing program 1 (id=1808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f62, 0x10100, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x5, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20300000000003cb70400000000000085000000c30000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000000)='./file0\x00', 0x20200, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 2m16.566134621s ago: executing program 1 (id=1814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x406, &(0x7f0000000280)={[{@sysvgroups}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/file0\x00') unlink(&(0x7f0000000180)='./file1\x00') r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 2m15.873160138s ago: executing program 1 (id=1818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001540)='kfree\x00', r0}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c00038018"], 0x4c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 2m14.883427394s ago: executing program 1 (id=1829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_pidfd_open(0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 2m14.726156474s ago: executing program 33 (id=1829): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_pidfd_open(0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 3.761762804s ago: executing program 0 (id=4411): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004430000f100035b43f0355a68928b8bcc7ca8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 3.650945094s ago: executing program 0 (id=4412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x800, 0x1, 0x0) 3.562527504s ago: executing program 0 (id=4414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5ff53a6f626a6563746f1d2fbab6decf3b4509f70e5f3522d75f723a6b6c6f67645f7661725f72756e5f7474656c6570617468792f6d697373696f6e2d636f6e74726f6c10352030"], 0x5f) 3.459631454s ago: executing program 0 (id=4417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRESOCT=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) rename(&(0x7f0000000040)='./file1\x00', 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) signalfd4(r3, &(0x7f0000000240)={[0x8]}, 0x8, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x12, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000001640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='jbd2_checkpoint_stats\x00', r9}, 0x18) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d2000007000000007911a800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.459570359s ago: executing program 5 (id=4434): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.749084426s ago: executing program 6 (id=4441): creat(&(0x7f00000001c0)='./file1\x00', 0xd0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) 1.731870367s ago: executing program 6 (id=4442): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x1e00, 0x0, 0x0, 0x0) 1.675552656s ago: executing program 6 (id=4443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008000"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r4, &(0x7f0000000440)='&', 0x1, 0x0, 0x0, 0x0) 1.582947566s ago: executing program 5 (id=4444): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x75, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x44, 0x30, 0x8d, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0xf}}, {{{0x9, 0x5, 0x81, 0x3, 0x608, 0x6, 0xf2, 0xf8}}}}}]}}]}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="dc9ebe30", 0x4}], 0x2}, 0x0) 1.580436666s ago: executing program 6 (id=4445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$eJzs3c9rHFUcAPDvbLL9rU2hFPUggR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/gyYvH4j/gX1HQQpES9OAlMpvZdNPdTbbJtkm7nw9M8t7M7L757sz38WbfLhvAwBrN/hQiXo2Ib5OIwy3bhiPfOLq63/LD61PZksTKymd/J5Hk65r7J/n/g3nllYj4/euIk4X2dmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sw7kxPvv/du32J98/y/P3x696Mz3xxf/v6X+0duJ3E2DuXbWuPYhhutldEYzV+TYpx9bMfxPjS2myQ7fQBsyVCe58XI+oDDMZRnPfDi+yoiVoABlch/GFDNcUDz3r5P98HPjQcfrt4Atcc/vPreSOxr3BsdWE7W3Rll97sjfWg/a+O3v+7czpbo3/sQAJu6cTMiTg8Pt/d/Sd7/bd3pHvZ5vA39Hzw7d7Pxz1udxj+FtfFPdBj/HOyQu1uxef4X7vehma6y8d8HHce/a5NWI0N57aXGmK+YXLxUSbO+7eWIOBHFvVl9o/mcM8v3Vtav+XWt1Dr+y5as/eZYMD+O+8N71z96ulwvbzfupgc3I17rOP5N1s5/0uH8Z6/H+R7bOJbeeb3bts3jf7pWfo54o+P5fzSjlWw8PznWuB7GmldFu39uHfujW/s9xF/sY7htsvN/YOP4R5LW+dpat2fqPm/0077/0m7btnr970k+b5T35Ouulev1+fGIPckn7esnHj22WW/un8V/4vjG/V+n639/RHzRNeL1bh291XXXnb7+s/inn+j8P3nh3sdf/tit/d7O/9uN0ol8TS/9X68HuJ3XDgAAAAAAAHabQkQciqRQWisXCqXS6uc7jsaBQqVaq5+8WF24PB2N78qORLHQnOk+3PJ5iPH887DN+sRj9cmIOBIR3w3tb9RLU9XK9E4HDwAAAAAAAAAAAAAAAAAAALvEwYh9nb7/n/lzaKePDnjq2n66QeLDwOj+0y35ln780hOwK3XPf+BFJ/9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAPrq/Llz2bKy/PD6VFafvrq4MFu9emo6rc2W5hamSlPV+SulmWp1ppKWpqpzmz1fpVq9Mj4RC9fG6mmtPlZbXLowV124XL9waa48k15Ii88kKgAAAAAAAAAAAAAAAAAAAHi+1BaXZsuVSjqvoLClwvDuOAyFPhd2umcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEf+DwAA//9MBzmC") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f62, 0x10100, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20300000000003cb70400000000000085000000c30000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000000)='./file0\x00', 0x20200, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 1.531608996s ago: executing program 6 (id=4446): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="14419e5465f0006fc8afa8e488a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.511207086s ago: executing program 6 (id=4447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYRESOCT=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) signalfd4(r3, &(0x7f0000000240)={[0x8]}, 0x8, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x12, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000001640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='jbd2_checkpoint_stats\x00', r9}, 0x18) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d2000007000000007911a800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 966.373904ms ago: executing program 0 (id=4452): creat(&(0x7f00000001c0)='./file1\x00', 0xd0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0xc0000484) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) 879.212243ms ago: executing program 4 (id=4453): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x1e00, 0x0, 0x0, 0x0) 627.567352ms ago: executing program 2 (id=4454): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_retopts={{0x10}}], 0x10}, 0x40000) 626.834702ms ago: executing program 4 (id=4455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008000"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r4, &(0x7f0000000440)='&', 0x1, 0x0, 0x0, 0x0) 583.694272ms ago: executing program 0 (id=4456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0xc, 0x81001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex_waitv(&(0x7f0000001440)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x20c00) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0xa6c, 0x1, &(0x7f00000000c0)="5b526cd7d3ed93757d7d467ced1a84adff73dca046980cbf81699433e7902abbe9f5eb6557f1e993eb0ab13aadca"}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) signalfd(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(r7) faccessat2(0xffffffffffffffff, 0x0, 0x81, 0x1100) signalfd(r2, 0x0, 0x0) 562.906832ms ago: executing program 2 (id=4457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0xc, 0x81001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 508.105332ms ago: executing program 2 (id=4458): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4a5, 0x40840) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) rt_sigaction(0x21, &(0x7f0000000240)={&(0x7f0000000080)="3ee5000f1c507265400f18a3090000000f0d5de96564670f72f41799f2400f9ccbc421bd755828c423f56ce58cc462159a18", 0x80000001, 0x0, {[0x177]}}, 0x0, 0x8, &(0x7f00000003c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000000)={0x1, 0x2, 0x8}) 485.122102ms ago: executing program 5 (id=4459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="601000000005010400000000000000005600000654020100010000000300000000c2010003001b0073"], 0x1060}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 446.512652ms ago: executing program 5 (id=4460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xe}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x800, 0x1, 0x0) 320.597591ms ago: executing program 5 (id=4461): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 320.057851ms ago: executing program 2 (id=4462): getxattr(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7476757342b429e172149c052a7d2f2c2a2f2d3a7b85232e7d003a225c50a82df86efe7fb793aebfa472591d64f0885a66973c97d4d4445db86614cb1988bcf6bc7a7ad22677ef8d94fb23fdcdf45dc311f27ac0df0a490e4fa856cb363f1c6e061cd338137171df6b4798bd2dde1ca37b4a9da784a6bbb3071eadc87a6220a63e2e3605cbfbae12f99810120e59f4649315b42609032b033f2e4993ead493fa81abc5f5f56c671a9f3ca5938615a0f0313285df46f860f2e3fb9e6df70424bda304ac0a2d4045b0fb763430dccc48c4616ee6f40742126fdab3bbd464d6a74e"], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) openat$cgroup_procs(r0, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000002040)=[{0xe, 0xb, 0x8}]}, 0x10) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x296440, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000009c0)=r8, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="1b8408217f05"], 0xffdd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xde, &(0x7f00000000c0)=""/222, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xc, 0x5, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[r0, r5, r6, r7, r10], &(0x7f0000000400)=[{0x0, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x1, 0xa}, {0x3, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x6}, {0x2, 0x1, 0xf}, {0xfffffffd, 0x3, 0x0, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x4, 0x1, 0xe, 0x3}], 0x10, 0x200, @void, @value}, 0x94) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x8000) 256.357501ms ago: executing program 5 (id=4463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0xa041) 255.836361ms ago: executing program 4 (id=4464): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000100000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) chdir(0x0) open(0x0, 0x591002, 0x0) iopl(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000ff0000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 235.023001ms ago: executing program 2 (id=4465): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffff6}, 0x18) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 219.927531ms ago: executing program 4 (id=4466): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 200.15185ms ago: executing program 2 (id=4467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_clone3(&(0x7f00000002c0)={0xa000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0xf}, &(0x7f0000000100)=""/41, 0x29, &(0x7f0000000240)=""/69, &(0x7f0000000140)=[0x0, 0x0], 0x2}, 0x58) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r8, 0x540b, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000003c0)={0x868, 0x1c, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x50, 0x0, 0x0, @ipv4=@local}, @generic="62ff61dbb87b18e93d14722aaa1450e06d142923fbd4a1a7e0621402d41fdd6f7cb5f1e545aeeae69cc448c01af2c1d0f44f3b41d649a27cc4de8279908dfbf65b1a47ff32dc065862ec2518a6e8d790aba968ad103457a7bb5f48b57409327581fcca72cbf629a1472a1eb9c3b69057a88bf25116a295089de4a4131a5a3f1dd94408bcaffaa6f3f27c8fe8bd9ece5e32a4c27b8b73ceb3096fc3693d68f5589bce8c7ee801a1c1dba3e8ef1efed310c587e358b033c06073b5a2478a6140586a0b4d3eb6d194d9813f6d5b11e597b7e365d9de25", @generic="2467ffde42f989f68af7460d9ad6ed8ffec17a4da44ef52207ea01b53fe754084522ac5df4ef60b3122a0e394012553a9a9be92323d41172f5e06d2928047b12a25458edfda4607e0ab80d6cc6836d31eecad0400db78817333c90101d", @typed={0xff, 0x9c, 0x0, 0x0, @binary="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"}, @nested={0x269, 0xd1, 0x0, 0x1, [@typed={0xbe, 0x54, 0x0, 0x0, @binary="c7ca3999b4eb48b6b019809333b1361212ea31e0a761ec27c7d8e6a2dc581aabacbbc3bb98cc700d3b2e69a41d8365929195c9d4f4cd6179517162f56a167c268bb3ffe94f84d1a512a31462f5d0d4bb044b38c75dc24e0fddac07d9fa082a89c51c12b733ed96617edd551448916a639ab53364aecddf5df3a368ef8da171083768695a0cd0f8a8ec9469d3719f09b575a5dd8596f3209eb6a7eed16a9211fc754413adc23d0e6b6ff1860b5864f6fde41409809fa860fe2aa5"}, @nested={0x4, 0xa9}, @generic="42a49ae33a2200024baa62997bcfd9b97f9de4753f6d4319a2207b9085dd679c19529fad180c5df27fb2e33750642d1f2d319dd065b2c35ab78b42aa89b800b049565ce0100265d482d70e1dc7220f61005cda3b8e248d8539955f908845e39fb0491f9e19dea98d8bd8d927965361a5352da0a544688b6e3014fc453e056cda8135ba4f6d84ee51fbb78015c2a674eae08ccad5aed0806e09713946886b603df8d1143e6c1da0db53214c554d6d08f3342c381890aa6040ab355d80ca9ad13d956a89a8434235749b25e7a46134423b754f9cfc8b50dd872cbdfa3dfbe63948ebbe008654ce2f4bcf1989763e876fa5a9c6d50ae91ea3", @nested={0x4, 0x4c}, @nested={0x4, 0x87}, @nested={0x4, 0x116}, @generic="ab55a876ef3f0844757f7c6b17eaa49a137bc1a94ea91696f2daf6c315337e097867455672e203651e36400032fe7848cb5875ae67945afca45fd3e0b42536bc26131cc8cd20303fea5940c7cfbdd090456e2d1928a587759bfd4ae30dcd74341c4dca80dd041e3e4a237c73b9bcec3d0033c44089f54ff08219a71ea33c436e302e4239a79c169eddc0dfb127cff599001e", @typed={0x4, 0x66}, @nested={0x4, 0xdc}, @nested={0x4, 0x13e}]}, @nested={0x18, 0x29, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3a}}]}, @nested={0x23d, 0xdf, 0x0, 0x1, [@nested={0x4, 0x126}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x1000}, @generic="f2abc8be0087ea49524379e0825005bab993292d54f80f0a0501cc02b29f147b06e37663bd937c341d5cc32b0f560b590010d0f1e82c9c47ad6f6cf00c2f3d36c760d62b5e87cf37f5ecd6486a05a67e579d596af038601522d6c9337a45348ea75b3d62c0b0ac84817aeaae0fa1eea3fce7d62b44fe97c6b8337589df523000847e7ba07b4a6036523da33a0376512c024d64ebbd2e862146010ebe86b5b197a0a3bd651281ebc5dbe55d4753173e033239c8b0690a52ecb45e0710710e61fe994b94273c79828da0bb5f77c3d71fb971c83121ac83c055434a40b8056655b4e34243da8485bbc876", @typed={0x4, 0x125}, @generic="f386b871b35f7b4e0b49837c58d60c36563f3ad033f47cfbc4e52f8b8c659e83d65988e8dff947de6f4e9274a776c888a9fd9aa90113a9c83f39c35da19c664e2ae1c24aa63f304ad24fd4f86abdef807c0b7aef6d3c77f13324e06bdc1550ae7b26fbc2b4430e8a4cdcd7cc257349", @typed={0x8, 0x2b, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x55}, @typed={0x8, 0xe2, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x29, 0x0, 0x0, @uid=r3}, @generic="d0d962fb8e62b4e09923f000174584dfc45187d6cc82274fe3bd7ceb9eb40d3f7f8882fe6aa33adb149a746c3c34f9ef9b285db627c7844fcae3f6accc464753be1ab4652017d79f02530b7e6f48d3ade8efbfdd7ce64979c00e4b185fc1e7c2e22e2bde8bf3f8691a1dfbed904cc78e5f422b87e6a9c4672086a10da618990c6d35b50317a36a6fb742ae6ec3613a8568594b5e66556834ba25f0093c1e9551dda4ced8135d8c3ef2fbcd2f045dfe476f"]}, @generic="c136b5ee020240d4765fa857a7382212bef1aa909129a76f6560286375ca11c2b748c6340c5b1c6397cc1892a4f8798af70b1fe6713b86cb1eb37a0ad20354355e4a56d13782346dc3b9267fc84f906214fa2158691bcce0fcef74136671e08fb62dfd0eae2f9d67cae1d30f0d8b7e19c7f3a1228e6c8979e924dcd0d516a9a66d15dd4ade768f21ae4da339cfc589c51e9b5f0b32264fd3e70f1d92773c40d149683374b8022f9e16f729a8c443d19b2dbb03e8d09e1b8a5d1e6afe0f4eb8ad1388784d81368eba60afc25762f6", @generic="d8d4e51d5bb1611c89c60bc23a6de2a43feb372a6987476a11f4bfeae23daff11c991f37e8ab6d27c5851b9760bd5a26e8f30e76f74496c2a5102a69494e9e910cdcf41e4cd490a96fc9654628b52e8cad5ee607825ccb4fd13c3eb4244637bd7afd0a4397a8f83b63f18bdbb530880e627c8fc73b649996f69f47bb", @typed={0xf, 0x45, 0x0, 0x0, @str='],}\xc2:)&%.,\x00'}]}, 0x868}, {&(0x7f0000000c40)={0x28, 0x15, 0x30c, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x124, 0x0, 0x0, @u32=0x3}]}, 0x28}, {&(0x7f0000000c80)={0x228, 0x2b, 0x800, 0x70bd28, 0x25dfdbff, "", [@nested={0x1ae, 0xfa, 0x0, 0x1, [@typed={0xc, 0x88, 0x0, 0x0, @u64=0x1}, @generic="e19fc3bfd2f505d09710130eb5be17adea9b36e6e1fdde25cd7cea9224e6cf5ccca969bde233a91d9aa50a8d7af1e36b0646612df9d6df32c99f39416e7a0a30ab94253aac0924f99b6b791685b0cf49662db59ac3825082fd6986b60512e109beecd70ff2a05c7b70038f6c89d4c2b5577ce65f3a5fcebcaf80cd94d2391a32176682a02875844fba418b9cd7567ce43fe31bf244cefa23fef02a9469ff8b2ff24b42bdccf017d5d88a0069a84e687b0663296550f036778c8af2603314200cc65b10fe957fe6b6767f1259f5a99ff8dc5b19d8decbf8c1dc3d09ef9ac55a6b02a702", @generic="3dc9b5676cac5c74186c046bd711522c59029415", @typed={0x91, 0x13a, 0x0, 0x0, @binary="ba5401b15f386cafee9165182d7d1f82b75c328eeb448a8e92fdca454d98026ac3e9e707eacc3764d107873631b127f42868077de2b97e978b02a2eef2ce54bf5bfbc92a5c9467566e18a7a3d8bbfc51194e63e5ba17a7918dc367b3014543324cb6c8251eb443b370c7104148a35fc3dc9a2f944ac62a04d1cdf8ee24de9b9e515a9865b056a335b6aafa52cb"}, @generic="030505b632bba85905303f", @typed={0x8, 0x101, 0x0, 0x0, @u32=0x629a}]}, @generic="299888450207bd1b7afbbecb9666205c7eb94b099b65d208db6724edddf81f7f08b101df61dc2eab8101995b0d930e5a714e8ae2df7703da4c8556e98f588d16c9cd4df902f1e674baac5876db802eeb43a9626dbdfcf58d132e23bdb33af3fb1aacd21b1c"]}, 0x228}], 0x3, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r8, r0, r1, r0]}}], 0x60}, 0x20000000) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 199.59574ms ago: executing program 4 (id=4468): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000005c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x100, @loopback, 0x5}}}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4004550c, 0x0) 0s ago: executing program 4 (id=4469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) eventfd2(0xc, 0x81001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x764922f6ef795283}, 0x8, 0x0, 0x9, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kernel console output (not intermixed with test programs): 4][T12925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.670311][T12925] RSP: 002b:00007f677ae11038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 220.678759][T12925] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a5d29 [ 220.686756][T12925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.694787][T12925] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 220.702788][T12925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.710783][T12925] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 220.718883][T12925] [ 221.152615][T12944] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.3501'. [ 221.227836][T12954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3508'. [ 221.447569][T12976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3514'. [ 221.717848][T12985] lo speed is unknown, defaulting to 1000 [ 221.815167][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 221.815184][ T29] audit: type=1326 audit(1735613690.388:18314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.845200][ T29] audit: type=1326 audit(1735613690.388:18315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.870378][ T29] audit: type=1326 audit(1735613690.444:18316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.894091][ T29] audit: type=1326 audit(1735613690.444:18317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.917709][ T29] audit: type=1326 audit(1735613690.444:18318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.941307][ T29] audit: type=1326 audit(1735613690.444:18319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.964979][ T29] audit: type=1326 audit(1735613690.444:18320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 221.988748][ T29] audit: type=1326 audit(1735613690.444:18321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 222.012532][ T29] audit: type=1326 audit(1735613690.444:18322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 222.036311][ T29] audit: type=1326 audit(1735613690.444:18323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12994 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 222.421532][T13040] __nla_validate_parse: 1 callbacks suppressed [ 222.421552][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3541'. [ 222.939269][T13067] lo speed is unknown, defaulting to 1000 [ 223.482411][T13079] rdma_op ffff888104a16980 conn xmit_rdma 0000000000000000 [ 223.697331][T13093] FAULT_INJECTION: forcing a failure. [ 223.697331][T13093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 223.710747][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.5.3561 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 223.721541][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.731671][T13093] Call Trace: [ 223.734951][T13093] [ 223.737881][T13093] dump_stack_lvl+0xf2/0x150 [ 223.742534][T13093] dump_stack+0x15/0x1a [ 223.746756][T13093] should_fail_ex+0x223/0x230 [ 223.751438][T13093] should_fail_alloc_page+0xfd/0x110 [ 223.756815][T13093] __alloc_pages_noprof+0x109/0x340 [ 223.762143][T13093] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 223.767574][T13093] alloc_pages_noprof+0xe1/0x100 [ 223.772589][T13093] pte_alloc_one+0x31/0x110 [ 223.777109][T13093] __pte_alloc+0x33/0x2a0 [ 223.781460][T13093] handle_mm_fault+0x1b4a/0x2ac0 [ 223.786420][T13093] exc_page_fault+0x3b9/0x650 [ 223.791149][T13093] asm_exc_page_fault+0x26/0x30 [ 223.796016][T13093] RIP: 0033:0x7ff987088c46 [ 223.800499][T13093] Code: f0 72 6e 48 63 cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 223.820151][T13093] RSP: 002b:00007ff9858364a0 EFLAGS: 00010246 [ 223.826283][T13093] RAX: 0000000000000001 RBX: 00007ff985836540 RCX: 0000000000000101 [ 223.834285][T13093] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ff9858365e0 [ 223.842255][T13093] RBP: 0000000000000102 R08: 00007ff97d417000 R09: 0000000000000000 [ 223.850396][T13093] R10: 0000000000000000 R11: 00007ff985836550 R12: 0000000000000001 [ 223.858364][T13093] R13: 00007ff987259040 R14: 0000000000000000 R15: 00007ff9858365e0 [ 223.866427][T13093] [ 223.869930][T13093] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 223.985272][T13106] FAULT_INJECTION: forcing a failure. [ 223.985272][T13106] name failslab, interval 1, probability 0, space 0, times 0 [ 223.998045][T13106] CPU: 1 UID: 0 PID: 13106 Comm: syz.6.3566 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 224.008861][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.018971][T13106] Call Trace: [ 224.022271][T13106] [ 224.025244][T13106] dump_stack_lvl+0xf2/0x150 [ 224.029881][T13106] dump_stack+0x15/0x1a [ 224.034065][T13106] should_fail_ex+0x223/0x230 [ 224.038771][T13106] should_failslab+0x8f/0xb0 [ 224.043491][T13106] kmem_cache_alloc_noprof+0x52/0x320 [ 224.048957][T13106] ? getname_kernel+0x3d/0x1e0 [ 224.053761][T13106] getname_kernel+0x3d/0x1e0 [ 224.058410][T13106] kern_path+0x21/0x120 [ 224.062609][T13106] bpf_uprobe_multi_link_attach+0x1ed/0x850 [ 224.068610][T13106] link_create+0x627/0x660 [ 224.073171][T13106] __sys_bpf+0x430/0x7a0 [ 224.077440][T13106] __x64_sys_bpf+0x43/0x50 [ 224.081984][T13106] x64_sys_call+0x2914/0x2dc0 [ 224.086700][T13106] do_syscall_64+0xc9/0x1c0 [ 224.091321][T13106] ? clear_bhb_loop+0x55/0xb0 [ 224.096003][T13106] ? clear_bhb_loop+0x55/0xb0 [ 224.100795][T13106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.106809][T13106] RIP: 0033:0x7f677c7a5d29 [ 224.111269][T13106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.130894][T13106] RSP: 002b:00007f677ae11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.139321][T13106] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a5d29 [ 224.147374][T13106] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c [ 224.155396][T13106] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 224.163394][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.171449][T13106] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 224.179442][T13106] [ 224.348741][T13123] FAULT_INJECTION: forcing a failure. [ 224.348741][T13123] name failslab, interval 1, probability 0, space 0, times 0 [ 224.361728][T13123] CPU: 0 UID: 0 PID: 13123 Comm: syz.5.3575 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 224.372509][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.382649][T13123] Call Trace: [ 224.385948][T13123] [ 224.388896][T13123] dump_stack_lvl+0xf2/0x150 [ 224.393580][T13123] dump_stack+0x15/0x1a [ 224.397873][T13123] should_fail_ex+0x223/0x230 [ 224.402556][T13123] should_failslab+0x8f/0xb0 [ 224.407209][T13123] kmem_cache_alloc_noprof+0x52/0x320 [ 224.412598][T13123] ? skb_clone+0x154/0x1f0 [ 224.417020][T13123] skb_clone+0x154/0x1f0 [ 224.421375][T13123] pfkey_sendmsg+0x2de/0x970 [ 224.426063][T13123] ? selinux_socket_sendmsg+0x185/0x1c0 [ 224.431671][T13123] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 224.436887][T13123] __sock_sendmsg+0x140/0x180 [ 224.441578][T13123] ____sys_sendmsg+0x312/0x410 [ 224.446371][T13123] __sys_sendmsg+0x19d/0x230 [ 224.450983][T13123] __x64_sys_sendmsg+0x46/0x50 [ 224.455772][T13123] x64_sys_call+0x2734/0x2dc0 [ 224.460456][T13123] do_syscall_64+0xc9/0x1c0 [ 224.465015][T13123] ? clear_bhb_loop+0x55/0xb0 [ 224.469702][T13123] ? clear_bhb_loop+0x55/0xb0 [ 224.474919][T13123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.480875][T13123] RIP: 0033:0x7ff9871c5d29 [ 224.485354][T13123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.505124][T13123] RSP: 002b:00007ff985837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.513653][T13123] RAX: ffffffffffffffda RBX: 00007ff9873b5fa0 RCX: 00007ff9871c5d29 [ 224.521656][T13123] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000006 [ 224.529627][T13123] RBP: 00007ff985837090 R08: 0000000000000000 R09: 0000000000000000 [ 224.537672][T13123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.545721][T13123] R13: 0000000000000000 R14: 00007ff9873b5fa0 R15: 00007fff091b3ff8 [ 224.553701][T13123] [ 224.803950][T13139] pim6reg1: entered promiscuous mode [ 224.809341][T13139] pim6reg1: entered allmulticast mode [ 224.935704][T12889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.947235][T12889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.958878][T12889] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.970191][T12889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.293272][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 225.400896][T13165] FAULT_INJECTION: forcing a failure. [ 225.400896][T13165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.414283][T13165] CPU: 0 UID: 0 PID: 13165 Comm: syz.6.3590 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 225.425143][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 225.435262][T13165] Call Trace: [ 225.438552][T13165] [ 225.441503][T13165] dump_stack_lvl+0xf2/0x150 [ 225.446171][T13165] dump_stack+0x15/0x1a [ 225.450363][T13165] should_fail_ex+0x223/0x230 [ 225.455075][T13165] should_fail+0xb/0x10 [ 225.459355][T13165] should_fail_usercopy+0x1a/0x20 [ 225.464478][T13165] _copy_to_user+0x20/0xa0 [ 225.468933][T13165] snd_seq_ioctl+0x219/0x2a0 [ 225.473567][T13165] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 225.478728][T13165] __se_sys_ioctl+0xc9/0x140 [ 225.483363][T13165] __x64_sys_ioctl+0x43/0x50 [ 225.487965][T13165] x64_sys_call+0x1690/0x2dc0 [ 225.492669][T13165] do_syscall_64+0xc9/0x1c0 [ 225.497201][T13165] ? clear_bhb_loop+0x55/0xb0 [ 225.501956][T13165] ? clear_bhb_loop+0x55/0xb0 [ 225.506677][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.512658][T13165] RIP: 0033:0x7f677c7a5d29 [ 225.517086][T13165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.536772][T13165] RSP: 002b:00007f677adcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.545200][T13165] RAX: ffffffffffffffda RBX: 00007f677c996160 RCX: 00007f677c7a5d29 [ 225.553178][T13165] RDX: 0000000000000000 RSI: 0000000080045300 RDI: 0000000000000004 [ 225.561177][T13165] RBP: 00007f677adcf090 R08: 0000000000000000 R09: 0000000000000000 [ 225.569275][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.577262][T13165] R13: 0000000000000001 R14: 00007f677c996160 R15: 00007fff3479aee8 [ 225.585262][T13165] [ 225.890454][T13199] block device autoloading is deprecated and will be removed. [ 226.177945][T13225] syz.4.3615[13225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.178079][T13225] syz.4.3615[13225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.195730][T13225] syz.4.3615[13225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.209019][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3615'. [ 226.319331][T13232] FAULT_INJECTION: forcing a failure. [ 226.319331][T13232] name failslab, interval 1, probability 0, space 0, times 0 [ 226.332120][T13232] CPU: 0 UID: 0 PID: 13232 Comm: syz.4.3619 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 226.342950][T13232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.353024][T13232] Call Trace: [ 226.356343][T13232] [ 226.359361][T13232] dump_stack_lvl+0xf2/0x150 [ 226.364068][T13232] dump_stack+0x15/0x1a [ 226.368332][T13232] should_fail_ex+0x223/0x230 [ 226.373036][T13232] should_failslab+0x8f/0xb0 [ 226.377666][T13232] kmem_cache_alloc_node_noprof+0x59/0x320 [ 226.383658][T13232] ? __alloc_skb+0x10b/0x310 [ 226.388285][T13232] __alloc_skb+0x10b/0x310 [ 226.392721][T13232] ? audit_log_start+0x34c/0x6b0 [ 226.397684][T13232] audit_log_start+0x368/0x6b0 [ 226.402474][T13232] ? complete_walk+0x114/0x1f0 [ 226.407303][T13232] ? __rcu_read_unlock+0x4e/0x70 [ 226.412290][T13232] audit_seccomp+0x4b/0x130 [ 226.416811][T13232] __seccomp_filter+0x6fa/0x1180 [ 226.422245][T13232] ? __rcu_read_unlock+0x4e/0x70 [ 226.425414][T13219] lo speed is unknown, defaulting to 1000 [ 226.427199][T13232] ? mntput_no_expire+0x70/0x3c0 [ 226.437941][T13232] ? __rcu_read_unlock+0x4e/0x70 [ 226.442926][T13232] __secure_computing+0x9f/0x1c0 [ 226.447984][T13232] syscall_trace_enter+0xd1/0x1f0 [ 226.453057][T13232] ? fpregs_assert_state_consistent+0x83/0xa0 [ 226.459172][T13232] do_syscall_64+0xaa/0x1c0 [ 226.463780][T13232] ? clear_bhb_loop+0x55/0xb0 [ 226.468486][T13232] ? clear_bhb_loop+0x55/0xb0 [ 226.473252][T13232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.479234][T13232] RIP: 0033:0x7efd142c473c [ 226.483683][T13232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.503357][T13232] RSP: 002b:00007efd12937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.511794][T13232] RAX: ffffffffffffffda RBX: 00007efd144b5fa0 RCX: 00007efd142c473c [ 226.519790][T13232] RDX: 000000000000000f RSI: 00007efd129370a0 RDI: 0000000000000004 [ 226.527770][T13232] RBP: 00007efd12937090 R08: 0000000000000000 R09: 0000000000000000 [ 226.535746][T13232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.543854][T13232] R13: 0000000000000000 R14: 00007efd144b5fa0 R15: 00007ffe05bd0e88 [ 226.552055][T13232] [ 226.616275][T13239] FAULT_INJECTION: forcing a failure. [ 226.616275][T13239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.629472][T13239] CPU: 1 UID: 0 PID: 13239 Comm: syz.2.3622 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 226.640259][T13239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.650358][T13239] Call Trace: [ 226.653650][T13239] [ 226.656590][T13239] dump_stack_lvl+0xf2/0x150 [ 226.661245][T13239] dump_stack+0x15/0x1a [ 226.665431][T13239] should_fail_ex+0x223/0x230 [ 226.670165][T13239] should_fail+0xb/0x10 [ 226.674334][T13239] should_fail_usercopy+0x1a/0x20 [ 226.679375][T13239] _copy_to_user+0x20/0xa0 [ 226.683809][T13239] simple_read_from_buffer+0xa0/0x110 [ 226.689260][T13239] proc_fail_nth_read+0xf9/0x140 [ 226.694221][T13239] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.699789][T13239] vfs_read+0x1a2/0x700 [ 226.703960][T13239] ? __rcu_read_unlock+0x4e/0x70 [ 226.708933][T13239] ? __fget_files+0x17c/0x1c0 [ 226.713655][T13239] ksys_read+0xe8/0x1b0 [ 226.717862][T13239] __x64_sys_read+0x42/0x50 [ 226.722389][T13239] x64_sys_call+0x2874/0x2dc0 [ 226.727145][T13239] do_syscall_64+0xc9/0x1c0 [ 226.731671][T13239] ? clear_bhb_loop+0x55/0xb0 [ 226.736425][T13239] ? clear_bhb_loop+0x55/0xb0 [ 226.741127][T13239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.747140][T13239] RIP: 0033:0x7fc18013473c [ 226.751569][T13239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 226.771198][T13239] RSP: 002b:00007fc17e7a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.779649][T13239] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc18013473c [ 226.787745][T13239] RDX: 000000000000000f RSI: 00007fc17e7a70a0 RDI: 0000000000000007 [ 226.795814][T13239] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 226.803796][T13239] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000001 [ 226.811829][T13239] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 226.819824][T13239] [ 227.321538][T13260] usb usb1: usbfs: process 13260 (syz.4.3631) did not claim interface 0 before use [ 227.438248][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 227.438268][ T29] audit: type=1326 audit(1735613695.252:18978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13253 comm="syz.0.3628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 227.468363][ T29] audit: type=1326 audit(1735613695.290:18979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.492137][ T29] audit: type=1326 audit(1735613695.290:18980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.515840][ T29] audit: type=1326 audit(1735613695.290:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.539600][ T29] audit: type=1326 audit(1735613695.290:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.557706][T13268] FAULT_INJECTION: forcing a failure. [ 227.557706][T13268] name failslab, interval 1, probability 0, space 0, times 0 [ 227.563276][ T29] audit: type=1326 audit(1735613695.290:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.575895][T13268] CPU: 1 UID: 0 PID: 13268 Comm: syz.2.3634 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 227.599557][ T29] audit: type=1326 audit(1735613695.290:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.610139][T13268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.610156][T13268] Call Trace: [ 227.610165][T13268] [ 227.610174][T13268] dump_stack_lvl+0xf2/0x150 [ 227.633763][ T29] audit: type=1326 audit(1735613695.290:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.643907][T13268] dump_stack+0x15/0x1a [ 227.647212][ T29] audit: type=1326 audit(1735613695.290:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.650130][T13268] should_fail_ex+0x223/0x230 [ 227.654769][ T29] audit: type=1326 audit(1735613695.290:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13256 comm="syz.5.3629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 227.678222][T13268] should_failslab+0x8f/0xb0 [ 227.678263][T13268] kmem_cache_alloc_noprof+0x52/0x320 [ 227.744394][T13268] ? getname_kernel+0x3d/0x1e0 [ 227.749223][T13268] getname_kernel+0x3d/0x1e0 [ 227.753872][T13268] kern_path+0x21/0x120 [ 227.758078][T13268] bpf_uprobe_multi_link_attach+0x1ed/0x850 [ 227.764026][T13268] link_create+0x627/0x660 [ 227.768470][T13268] __sys_bpf+0x430/0x7a0 [ 227.772748][T13268] __x64_sys_bpf+0x43/0x50 [ 227.777204][T13268] x64_sys_call+0x2914/0x2dc0 [ 227.780039][T13275] block device autoloading is deprecated and will be removed. [ 227.781900][T13268] do_syscall_64+0xc9/0x1c0 [ 227.793890][T13268] ? clear_bhb_loop+0x55/0xb0 [ 227.798600][T13268] ? clear_bhb_loop+0x55/0xb0 [ 227.803391][T13268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.809424][T13268] RIP: 0033:0x7fc180135d29 [ 227.813900][T13268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.833743][T13268] RSP: 002b:00007fc17e7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.842186][T13268] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc180135d29 [ 227.850244][T13268] RDX: 000000000000003c RSI: 00000000200012c0 RDI: 000000000000001c [ 227.858236][T13268] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.866273][T13268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.874275][T13268] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 227.882281][T13268] [ 228.267791][T13307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.291786][T13307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.337766][T13316] FAULT_INJECTION: forcing a failure. [ 228.337766][T13316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.350885][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.4.3655 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 228.361678][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.371757][T13316] Call Trace: [ 228.375096][T13316] [ 228.378079][T13316] dump_stack_lvl+0xf2/0x150 [ 228.382756][T13316] dump_stack+0x15/0x1a [ 228.387093][T13316] should_fail_ex+0x223/0x230 [ 228.391806][T13316] should_fail+0xb/0x10 [ 228.396060][T13316] should_fail_usercopy+0x1a/0x20 [ 228.401122][T13316] _copy_from_user+0x1e/0xb0 [ 228.405848][T13316] copy_msghdr_from_user+0x54/0x2a0 [ 228.411079][T13316] ? __fget_files+0x17c/0x1c0 [ 228.415872][T13316] __sys_sendmsg+0x13e/0x230 [ 228.420564][T13316] __x64_sys_sendmsg+0x46/0x50 [ 228.425409][T13316] x64_sys_call+0x2734/0x2dc0 [ 228.430124][T13316] do_syscall_64+0xc9/0x1c0 [ 228.434650][T13316] ? clear_bhb_loop+0x55/0xb0 [ 228.439349][T13316] ? clear_bhb_loop+0x55/0xb0 [ 228.444047][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.449977][T13316] RIP: 0033:0x7efd142c5d29 [ 228.454407][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.474052][T13316] RSP: 002b:00007efd12937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.482558][T13316] RAX: ffffffffffffffda RBX: 00007efd144b5fa0 RCX: 00007efd142c5d29 [ 228.490783][T13316] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 228.498782][T13316] RBP: 00007efd12937090 R08: 0000000000000000 R09: 0000000000000000 [ 228.506774][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.514850][T13316] R13: 0000000000000000 R14: 00007efd144b5fa0 R15: 00007ffe05bd0e88 [ 228.522909][T13316] [ 229.733597][T13371] tipc: Started in network mode [ 229.738554][T13371] tipc: Node identity ac1414aa, cluster identity 4711 [ 229.745825][T13371] tipc: New replicast peer: 100.1.1.1 [ 229.751395][T13371] tipc: Enabled bearer , priority 10 [ 229.787740][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 229.802711][T13377] FAULT_INJECTION: forcing a failure. [ 229.802711][T13377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.815876][T13377] CPU: 0 UID: 0 PID: 13377 Comm: syz.4.3683 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 229.826737][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.836868][T13377] Call Trace: [ 229.840154][T13377] [ 229.843091][T13377] dump_stack_lvl+0xf2/0x150 [ 229.847761][T13377] dump_stack+0x15/0x1a [ 229.852035][T13377] should_fail_ex+0x223/0x230 [ 229.856750][T13377] should_fail+0xb/0x10 [ 229.861042][T13377] should_fail_usercopy+0x1a/0x20 [ 229.866106][T13377] _copy_from_iter+0xd5/0xd00 [ 229.870940][T13377] ? avc_has_perm+0xd4/0x160 [ 229.875684][T13377] ? skb_set_owner_w+0x164/0x1b0 [ 229.880803][T13377] ? __virt_addr_valid+0x1ed/0x250 [ 229.886022][T13377] ? __check_object_size+0x364/0x520 [ 229.891351][T13377] skb_copy_datagram_from_iter+0xb3/0x460 [ 229.897089][T13377] ? skb_put+0xba/0x100 [ 229.901257][T13377] packet_sendmsg+0x2785/0x3670 [ 229.906127][T13377] ? terminate_walk+0x260/0x280 [ 229.910991][T13377] ? avc_has_perm+0xd4/0x160 [ 229.915756][T13377] ? selinux_socket_sendmsg+0x185/0x1c0 [ 229.921395][T13377] ? __pfx_packet_sendmsg+0x10/0x10 [ 229.926681][T13377] __sock_sendmsg+0x140/0x180 [ 229.931426][T13377] __sys_sendto+0x1a8/0x230 [ 229.936017][T13377] __x64_sys_sendto+0x78/0x90 [ 229.940718][T13377] x64_sys_call+0x29fa/0x2dc0 [ 229.945492][T13377] do_syscall_64+0xc9/0x1c0 [ 229.950038][T13377] ? clear_bhb_loop+0x55/0xb0 [ 229.954732][T13377] ? clear_bhb_loop+0x55/0xb0 [ 229.959470][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.965409][T13377] RIP: 0033:0x7efd142c5d29 [ 229.969904][T13377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.989529][T13377] RSP: 002b:00007efd12937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 229.997958][T13377] RAX: ffffffffffffffda RBX: 00007efd144b5fa0 RCX: 00007efd142c5d29 [ 230.005944][T13377] RDX: 000000000000000e RSI: 00000000200002c0 RDI: 0000000000000006 [ 230.013918][T13377] RBP: 00007efd12937090 R08: 00000000200000c0 R09: 0000000000000014 [ 230.021894][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.029963][T13377] R13: 0000000000000000 R14: 00007efd144b5fa0 R15: 00007ffe05bd0e88 [ 230.037950][T13377] [ 230.274129][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3694'. [ 230.577546][T13418] netlink: 3576 bytes leftover after parsing attributes in process `syz.5.3701'. [ 230.827395][T13426] program syz.6.3704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.936969][ T3435] tipc: Node number set to 2886997162 [ 231.319694][T13453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13453 comm=syz.2.3717 [ 231.332359][T13453] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13453 comm=syz.2.3717 [ 231.559973][T13466] syz.4.3724[13466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.560037][T13466] syz.4.3724[13466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.571778][T13466] syz.4.3724[13466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.584657][T13466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.654503][T13466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.707502][T13466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.750766][T13466] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.906978][T13469] FAULT_INJECTION: forcing a failure. [ 231.906978][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 231.919748][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.6.3725 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 231.930638][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.940754][T13469] Call Trace: [ 231.944087][T13469] [ 231.947108][T13469] dump_stack_lvl+0xf2/0x150 [ 231.951791][T13469] dump_stack+0x15/0x1a [ 231.956049][T13469] should_fail_ex+0x223/0x230 [ 231.960746][T13469] ? audit_log_d_path+0x96/0x250 [ 231.965822][T13469] should_failslab+0x8f/0xb0 [ 231.970426][T13469] __kmalloc_cache_noprof+0x4e/0x320 [ 231.975759][T13469] audit_log_d_path+0x96/0x250 [ 231.980540][T13469] ? __rcu_read_unlock+0x4e/0x70 [ 231.985514][T13469] audit_log_d_path_exe+0x42/0x70 [ 231.990583][T13469] audit_log_task+0x192/0x1c0 [ 231.995305][T13469] audit_seccomp+0x68/0x130 [ 231.999963][T13469] __seccomp_filter+0x6fa/0x1180 [ 232.005035][T13469] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 232.010723][T13469] ? vfs_write+0x596/0x920 [ 232.015173][T13469] __secure_computing+0x9f/0x1c0 [ 232.020247][T13469] syscall_trace_enter+0xd1/0x1f0 [ 232.025351][T13469] ? fpregs_assert_state_consistent+0x83/0xa0 [ 232.031443][T13469] do_syscall_64+0xaa/0x1c0 [ 232.035990][T13469] ? clear_bhb_loop+0x55/0xb0 [ 232.040690][T13469] ? clear_bhb_loop+0x55/0xb0 [ 232.045379][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.051469][T13469] RIP: 0033:0x7f677c7a473c [ 232.055895][T13469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.075532][T13469] RSP: 002b:00007f677ae11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.084028][T13469] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a473c [ 232.092005][T13469] RDX: 000000000000000f RSI: 00007f677ae110a0 RDI: 0000000000000006 [ 232.100023][T13469] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 232.107995][T13469] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000002 [ 232.115970][T13469] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 232.123997][T13469] [ 232.204517][T13466] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.217033][T13466] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.228891][T13466] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.241341][T13466] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.473397][T13499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3739'. [ 232.569927][T13516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13516 comm=syz.2.3747 [ 232.582655][T13516] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13516 comm=syz.2.3747 [ 232.931295][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 232.931316][ T29] audit: type=1400 audit(1735613700.790:19605): avc: denied { write } for pid=13524 comm="syz.0.3751" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 232.968504][T13525] vhci_hcd: invalid port number 224 [ 232.975214][T13525] SELinux: syz.0.3751 (13525) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 233.005737][ T29] audit: type=1326 audit(1735613700.865:19606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.029606][ T29] audit: type=1326 audit(1735613700.865:19607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.053286][ T29] audit: type=1326 audit(1735613700.865:19608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.076968][ T29] audit: type=1326 audit(1735613700.865:19609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.100727][ T29] audit: type=1326 audit(1735613700.865:19610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.124371][ T29] audit: type=1326 audit(1735613700.865:19611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.147961][ T29] audit: type=1326 audit(1735613700.865:19612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.171593][ T29] audit: type=1326 audit(1735613700.865:19613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.195399][ T29] audit: type=1326 audit(1735613700.865:19614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13526 comm="syz.0.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 233.340033][T13539] lo speed is unknown, defaulting to 1000 [ 233.395666][T13541] lo speed is unknown, defaulting to 1000 [ 233.636379][T13572] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.649067][T13578] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3769'. [ 233.659678][T13567] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3769'. [ 233.670776][T13567] FAULT_INJECTION: forcing a failure. [ 233.670776][T13567] name failslab, interval 1, probability 0, space 0, times 0 [ 233.683567][T13567] CPU: 1 UID: 0 PID: 13567 Comm: syz.0.3769 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 233.694357][T13567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 233.704421][T13567] Call Trace: [ 233.707706][T13567] [ 233.710638][T13567] dump_stack_lvl+0xf2/0x150 [ 233.715312][T13567] dump_stack+0x15/0x1a [ 233.719524][T13567] should_fail_ex+0x223/0x230 [ 233.724243][T13567] should_failslab+0x8f/0xb0 [ 233.728891][T13567] kmem_cache_alloc_noprof+0x52/0x320 [ 233.734274][T13567] ? skb_clone+0x154/0x1f0 [ 233.738705][T13567] skb_clone+0x154/0x1f0 [ 233.742959][T13567] __netlink_deliver_tap+0x2bd/0x4f0 [ 233.748261][T13567] netlink_dump+0x78a/0x7e0 [ 233.752779][T13567] netlink_recvmsg+0x427/0x780 [ 233.757604][T13567] ? __pfx_netlink_recvmsg+0x10/0x10 [ 233.762906][T13567] sock_recvmsg+0x13f/0x170 [ 233.767427][T13567] ____sys_recvmsg+0xf9/0x280 [ 233.772159][T13567] __sys_recvmsg+0x1c0/0x260 [ 233.776773][T13567] __x64_sys_recvmsg+0x46/0x50 [ 233.781638][T13567] x64_sys_call+0xc64/0x2dc0 [ 233.786235][T13567] do_syscall_64+0xc9/0x1c0 [ 233.790777][T13567] ? clear_bhb_loop+0x55/0xb0 [ 233.795898][T13567] ? clear_bhb_loop+0x55/0xb0 [ 233.800587][T13567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.806582][T13567] RIP: 0033:0x7fd9b2065d29 [ 233.811060][T13567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.830746][T13567] RSP: 002b:00007fd9b06d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 233.839220][T13567] RAX: ffffffffffffffda RBX: 00007fd9b2255fa0 RCX: 00007fd9b2065d29 [ 233.847258][T13567] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 233.855236][T13567] RBP: 00007fd9b06d1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.863352][T13567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.871330][T13567] R13: 0000000000000000 R14: 00007fd9b2255fa0 R15: 00007ffce1448ee8 [ 233.879364][T13567] [ 233.911130][T13572] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.967185][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'. [ 233.988986][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'. [ 234.018917][T13572] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.071673][T13572] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.166617][T13572] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.179198][T13572] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.198310][T13572] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.213963][T13572] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.378241][T13619] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.3788'. [ 234.504462][T13630] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3793'. [ 234.514141][T13630] GUP no longer grows the stack in syz.6.3793 (13630): 20004000-20008000 (20002000) [ 234.523598][T13630] CPU: 1 UID: 0 PID: 13630 Comm: syz.6.3793 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 234.534446][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 234.544506][T13630] Call Trace: [ 234.547854][T13630] [ 234.550807][T13630] dump_stack_lvl+0xf2/0x150 [ 234.555579][T13630] dump_stack+0x15/0x1a [ 234.559823][T13630] __get_user_pages+0x209b/0x2670 [ 234.564911][T13630] ? __rcu_read_unlock+0x4e/0x70 [ 234.569862][T13630] get_user_pages_remote+0x1df/0x790 [ 234.575241][T13630] __access_remote_vm+0x15b/0x580 [ 234.580283][T13630] access_remote_vm+0x34/0x50 [ 234.584970][T13630] proc_pid_cmdline_read+0x3e6/0x660 [ 234.590271][T13630] vfs_readv+0x3e2/0x660 [ 234.594653][T13630] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 234.600510][T13630] __x64_sys_preadv+0xf4/0x1c0 [ 234.605364][T13630] x64_sys_call+0x2680/0x2dc0 [ 234.610077][T13630] do_syscall_64+0xc9/0x1c0 [ 234.614613][T13630] ? clear_bhb_loop+0x55/0xb0 [ 234.619348][T13630] ? clear_bhb_loop+0x55/0xb0 [ 234.624080][T13630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.630027][T13630] RIP: 0033:0x7f677c7a5d29 [ 234.634462][T13630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.654078][T13630] RSP: 002b:00007f677ae11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 234.662531][T13630] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a5d29 [ 234.670524][T13630] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 000000000000000c [ 234.678519][T13630] RBP: 00007f677c821b08 R08: 0000000000000000 R09: 0000000000000000 [ 234.686497][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.694470][T13630] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 234.702458][T13630] [ 234.832352][T13636] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.883523][T13636] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.925552][T13636] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.011183][T13636] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.059581][T13636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.070761][T13636] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.081832][T13636] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.093136][T13636] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.698465][T13676] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.772593][T13676] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.856725][T13676] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.909180][T13676] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.931425][T13681] syz.6.3813[13681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.931546][T13681] syz.6.3813[13681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.969796][T13676] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.992589][T13676] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.006013][T13676] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.031617][T13676] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.088022][T13689] 9pnet: Could not find request transport: 0xffffffffffffffff [ 236.224100][T13708] FAULT_INJECTION: forcing a failure. [ 236.224100][T13708] name failslab, interval 1, probability 0, space 0, times 0 [ 236.236862][T13708] CPU: 0 UID: 0 PID: 13708 Comm: +}[@ Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 236.247311][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 236.257452][T13708] Call Trace: [ 236.260742][T13708] [ 236.263691][T13708] dump_stack_lvl+0xf2/0x150 [ 236.268326][T13708] dump_stack+0x15/0x1a [ 236.272517][T13708] should_fail_ex+0x223/0x230 [ 236.277316][T13708] should_failslab+0x8f/0xb0 [ 236.281951][T13708] kmem_cache_alloc_noprof+0x52/0x320 [ 236.287382][T13708] ? radix_tree_node_alloc+0x8b/0x1e0 [ 236.292844][T13708] radix_tree_node_alloc+0x8b/0x1e0 [ 236.298090][T13708] idr_get_free+0x1f5/0x550 [ 236.302633][T13708] idr_alloc_u32+0xcb/0x180 [ 236.307218][T13708] tcf_idr_check_alloc+0x171/0x270 [ 236.312383][T13708] tcf_police_init+0x1d4/0xc80 [ 236.317172][T13708] tcf_action_init_1+0x339/0x490 [ 236.322192][T13708] ? tc_action_load_ops+0x1a9/0x410 [ 236.327444][T13708] tcf_action_init+0x1cc/0x610 [ 236.332267][T13708] tc_ctl_action+0x292/0x840 [ 236.336940][T13708] ? xa_load+0xb9/0xe0 [ 236.341109][T13708] ? __pfx_tc_ctl_action+0x10/0x10 [ 236.346388][T13708] rtnetlink_rcv_msg+0x6aa/0x710 [ 236.351354][T13708] ? ref_tracker_free+0x3a5/0x410 [ 236.356417][T13708] ? __dev_queue_xmit+0x186/0x2090 [ 236.361555][T13708] netlink_rcv_skb+0x12c/0x230 [ 236.366357][T13708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.371885][T13708] rtnetlink_rcv+0x1c/0x30 [ 236.376334][T13708] netlink_unicast+0x599/0x670 [ 236.381182][T13708] netlink_sendmsg+0x5cc/0x6e0 [ 236.385968][T13708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.391301][T13708] __sock_sendmsg+0x140/0x180 [ 236.396004][T13708] ____sys_sendmsg+0x312/0x410 [ 236.400861][T13708] __sys_sendmsg+0x19d/0x230 [ 236.405492][T13708] __x64_sys_sendmsg+0x46/0x50 [ 236.410340][T13708] x64_sys_call+0x2734/0x2dc0 [ 236.415028][T13708] do_syscall_64+0xc9/0x1c0 [ 236.419539][T13708] ? clear_bhb_loop+0x55/0xb0 [ 236.424225][T13708] ? clear_bhb_loop+0x55/0xb0 [ 236.429022][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.435015][T13708] RIP: 0033:0x7fc180135d29 [ 236.439517][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.459169][T13708] RSP: 002b:00007fc17e7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.467658][T13708] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc180135d29 [ 236.475699][T13708] RDX: 0000000000000000 RSI: 00000000200037c0 RDI: 0000000000000003 [ 236.483734][T13708] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.491791][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.499807][T13708] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 236.507798][T13708] [ 236.546235][T13719] netlink: 3576 bytes leftover after parsing attributes in process `syz.5.3830'. [ 237.164068][T13742] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3839'. [ 237.181008][T13742] team0 (unregistering): Port device team_slave_0 removed [ 237.193870][T13742] team0 (unregistering): Port device team_slave_1 removed [ 237.334495][T13749] syz.4.3842[13749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.334594][T13749] syz.4.3842[13749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.346487][T13749] syz.4.3842[13749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.359875][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3842'. [ 237.638778][T13761] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.3848'. [ 237.808371][T13775] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3854'. [ 238.300244][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 238.300263][ T29] audit: type=1400 audit(1735613705.813:20204): avc: denied { create } for pid=13785 comm="syz.0.3857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.405910][ T29] audit: type=1400 audit(1735613705.841:20205): avc: denied { append } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.428948][ T29] audit: type=1400 audit(1735613705.878:20206): avc: denied { create } for pid=13787 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.449576][ T29] audit: type=1400 audit(1735613705.878:20207): avc: denied { bind } for pid=13787 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.469595][ T29] audit: type=1400 audit(1735613705.878:20208): avc: denied { write } for pid=13787 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.472591][T13790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13790 comm=syz.0.3859 [ 238.489114][ T29] audit: type=1400 audit(1735613705.878:20209): avc: denied { create } for pid=13787 comm="syz.0.3858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 238.501714][T13790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13790 comm=syz.0.3859 [ 238.537243][ T29] audit: type=1400 audit(1735613706.037:20210): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 238.559499][ T29] audit: type=1400 audit(1735613706.037:20211): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.581393][ T29] audit: type=1400 audit(1735613706.037:20212): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.604419][ T29] audit: type=1400 audit(1735613706.037:20213): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 238.775197][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3865'. [ 238.779057][T13803] netlink: 3576 bytes leftover after parsing attributes in process `syz.0.3866'. [ 239.010455][T13824] FAULT_INJECTION: forcing a failure. [ 239.010455][T13824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.023612][T13824] CPU: 1 UID: 0 PID: 13824 Comm: syz.5.3875 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 239.034599][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.044744][T13824] Call Trace: [ 239.048024][T13824] [ 239.050951][T13824] dump_stack_lvl+0xf2/0x150 [ 239.055583][T13824] dump_stack+0x15/0x1a [ 239.059829][T13824] should_fail_ex+0x223/0x230 [ 239.064642][T13824] should_fail+0xb/0x10 [ 239.068854][T13824] should_fail_usercopy+0x1a/0x20 [ 239.073958][T13824] _copy_to_user+0x20/0xa0 [ 239.078453][T13824] simple_read_from_buffer+0xa0/0x110 [ 239.083842][T13824] proc_fail_nth_read+0xf9/0x140 [ 239.088856][T13824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.094412][T13824] vfs_read+0x1a2/0x700 [ 239.098631][T13824] ? __rcu_read_unlock+0x4e/0x70 [ 239.103676][T13824] ? __fget_files+0x17c/0x1c0 [ 239.108367][T13824] ksys_read+0xe8/0x1b0 [ 239.112701][T13824] __x64_sys_read+0x42/0x50 [ 239.117301][T13824] x64_sys_call+0x2874/0x2dc0 [ 239.122008][T13824] do_syscall_64+0xc9/0x1c0 [ 239.126519][T13824] ? clear_bhb_loop+0x55/0xb0 [ 239.131217][T13824] ? clear_bhb_loop+0x55/0xb0 [ 239.135907][T13824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.141815][T13824] RIP: 0033:0x7ff9871c473c [ 239.146254][T13824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.165919][T13824] RSP: 002b:00007ff985837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.174353][T13824] RAX: ffffffffffffffda RBX: 00007ff9873b5fa0 RCX: 00007ff9871c473c [ 239.182351][T13824] RDX: 000000000000000f RSI: 00007ff9858370a0 RDI: 0000000000000005 [ 239.190340][T13824] RBP: 00007ff985837090 R08: 0000000000000000 R09: 000000000000001c [ 239.198417][T13824] R10: 000000002200c851 R11: 0000000000000246 R12: 0000000000000001 [ 239.206397][T13824] R13: 0000000000000000 R14: 00007ff9873b5fa0 R15: 00007fff091b3ff8 [ 239.214391][T13824] [ 239.267448][T13830] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3878'. [ 239.486185][T13850] syz.0.3885[13850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.486242][T13850] syz.0.3885[13850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.497943][T13850] syz.0.3885[13850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.513132][T13850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 239.762433][T13852] 9pnet_fd: Insufficient options for proto=fd [ 240.046251][T13858] lo speed is unknown, defaulting to 1000 [ 240.229815][T13881] 9pnet_fd: Insufficient options for proto=fd [ 240.317763][T13888] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3901'. [ 240.461013][T13901] FAULT_INJECTION: forcing a failure. [ 240.461013][T13901] name failslab, interval 1, probability 0, space 0, times 0 [ 240.473848][T13901] CPU: 0 UID: 0 PID: 13901 Comm: syz.4.3906 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 240.484658][T13901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.494740][T13901] Call Trace: [ 240.498139][T13901] [ 240.501091][T13901] dump_stack_lvl+0xf2/0x150 [ 240.505762][T13901] dump_stack+0x15/0x1a [ 240.509961][T13901] should_fail_ex+0x223/0x230 [ 240.514739][T13901] should_failslab+0x8f/0xb0 [ 240.519384][T13901] kmem_cache_alloc_noprof+0x52/0x320 [ 240.524813][T13901] ? getname_flags+0x81/0x3b0 [ 240.529650][T13901] getname_flags+0x81/0x3b0 [ 240.534190][T13901] getname+0x17/0x20 [ 240.538137][T13901] path_setxattrat+0x23a/0x310 [ 240.543006][T13901] __x64_sys_lsetxattr+0x71/0x90 [ 240.548025][T13901] x64_sys_call+0x29c8/0x2dc0 [ 240.552754][T13901] do_syscall_64+0xc9/0x1c0 [ 240.557327][T13901] ? clear_bhb_loop+0x55/0xb0 [ 240.562028][T13901] ? clear_bhb_loop+0x55/0xb0 [ 240.566733][T13901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.572737][T13901] RIP: 0033:0x7efd142c5d29 [ 240.577175][T13901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.596938][T13901] RSP: 002b:00007efd12937038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 240.605378][T13901] RAX: ffffffffffffffda RBX: 00007efd144b5fa0 RCX: 00007efd142c5d29 [ 240.613383][T13901] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000020000080 [ 240.621526][T13901] RBP: 00007efd12937090 R08: 0000000000000000 R09: 0000000000000000 [ 240.629535][T13901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.637604][T13901] R13: 0000000000000001 R14: 00007efd144b5fa0 R15: 00007ffe05bd0e88 [ 240.645660][T13901] [ 240.762992][T13905] 9pnet_fd: Insufficient options for proto=fd [ 240.958974][T13909] macvlan0: entered allmulticast mode [ 240.964603][T13909] veth1_vlan: entered allmulticast mode [ 240.972508][T13909] macvlan0: left allmulticast mode [ 240.977709][T13909] veth1_vlan: left allmulticast mode [ 241.372415][T13954] FAULT_INJECTION: forcing a failure. [ 241.372415][T13954] name failslab, interval 1, probability 0, space 0, times 0 [ 241.385170][T13954] CPU: 1 UID: 0 PID: 13954 Comm: syz.4.3930 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 241.395989][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.406142][T13954] Call Trace: [ 241.409445][T13954] [ 241.412413][T13954] dump_stack_lvl+0xf2/0x150 [ 241.417259][T13954] dump_stack+0x15/0x1a [ 241.421460][T13954] should_fail_ex+0x223/0x230 [ 241.426190][T13954] should_failslab+0x8f/0xb0 [ 241.430810][T13954] kmem_cache_alloc_noprof+0x52/0x320 [ 241.436278][T13954] ? getname_flags+0x81/0x3b0 [ 241.441032][T13954] getname_flags+0x81/0x3b0 [ 241.445600][T13954] __x64_sys_unlink+0x21/0x40 [ 241.450377][T13954] x64_sys_call+0x2329/0x2dc0 [ 241.455092][T13954] do_syscall_64+0xc9/0x1c0 [ 241.459624][T13954] ? clear_bhb_loop+0x55/0xb0 [ 241.464391][T13954] ? clear_bhb_loop+0x55/0xb0 [ 241.469165][T13954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.475160][T13954] RIP: 0033:0x7efd142c5d29 [ 241.479603][T13954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.499233][T13954] RSP: 002b:00007efd12937038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 241.507681][T13954] RAX: ffffffffffffffda RBX: 00007efd144b5fa0 RCX: 00007efd142c5d29 [ 241.515666][T13954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.523644][T13954] RBP: 00007efd12937090 R08: 0000000000000000 R09: 0000000000000000 [ 241.531675][T13954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.539657][T13954] R13: 0000000000000000 R14: 00007efd144b5fa0 R15: 00007ffe05bd0e88 [ 241.547756][T13954] [ 241.753582][T13989] FAULT_INJECTION: forcing a failure. [ 241.753582][T13989] name failslab, interval 1, probability 0, space 0, times 0 [ 241.766422][T13989] CPU: 0 UID: 0 PID: 13989 Comm: syz.6.3944 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 241.777221][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.787385][T13989] Call Trace: [ 241.790689][T13989] [ 241.793692][T13989] dump_stack_lvl+0xf2/0x150 [ 241.798327][T13989] dump_stack+0x15/0x1a [ 241.802639][T13989] should_fail_ex+0x223/0x230 [ 241.807352][T13989] should_failslab+0x8f/0xb0 [ 241.811974][T13989] kmem_cache_alloc_node_noprof+0x59/0x320 [ 241.817824][T13989] ? __alloc_skb+0x10b/0x310 [ 241.822515][T13989] __alloc_skb+0x10b/0x310 [ 241.827063][T13989] ? audit_log_start+0x34c/0x6b0 [ 241.832083][T13989] audit_log_start+0x368/0x6b0 [ 241.836879][T13989] audit_seccomp+0x4b/0x130 [ 241.841521][T13989] __seccomp_filter+0x6fa/0x1180 [ 241.846599][T13989] __secure_computing+0x9f/0x1c0 [ 241.851580][T13989] syscall_trace_enter+0xd1/0x1f0 [ 241.856761][T13989] do_syscall_64+0xaa/0x1c0 [ 241.861300][T13989] ? clear_bhb_loop+0x55/0xb0 [ 241.866075][T13989] ? clear_bhb_loop+0x55/0xb0 [ 241.870833][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.876776][T13989] RIP: 0033:0x7f677c7a473c [ 241.881282][T13989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 241.901043][T13989] RSP: 002b:00007f677ae11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.909530][T13989] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a473c [ 241.917520][T13989] RDX: 000000000000000f RSI: 00007f677ae110a0 RDI: 0000000000000006 [ 241.925589][T13989] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 241.933576][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.941629][T13989] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 241.949693][T13989] [ 242.003705][T13994] tmpfs: Unknown parameter 'noqwap' [ 242.038501][T13994] pim6reg: entered allmulticast mode [ 242.051655][T13994] pim6reg: left allmulticast mode [ 242.070716][T14000] FAULT_INJECTION: forcing a failure. [ 242.070716][T14000] name failslab, interval 1, probability 0, space 0, times 0 [ 242.083509][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.2.3949 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 242.094381][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.104460][T14000] Call Trace: [ 242.107760][T14000] [ 242.110786][T14000] dump_stack_lvl+0xf2/0x150 [ 242.115423][T14000] dump_stack+0x15/0x1a [ 242.119670][T14000] should_fail_ex+0x223/0x230 [ 242.124448][T14000] should_failslab+0x8f/0xb0 [ 242.129134][T14000] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 242.135543][T14000] ? audit_log_vformat+0x23a/0x490 [ 242.140667][T14000] ? sidtab_sid2str_get+0xb8/0x140 [ 242.145814][T14000] kmemdup_noprof+0x2a/0x60 [ 242.150382][T14000] sidtab_sid2str_get+0xb8/0x140 [ 242.155421][T14000] security_sid_to_context_core+0x1eb/0x2f0 [ 242.161393][T14000] security_sid_to_context+0x27/0x30 [ 242.166713][T14000] avc_audit_post_callback+0x10d/0x530 [ 242.172194][T14000] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 242.178230][T14000] common_lsm_audit+0x90f/0x1010 [ 242.183177][T14000] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 242.189202][T14000] ? avc_denied+0xf1/0x110 [ 242.193672][T14000] slow_avc_audit+0xf9/0x140 [ 242.198341][T14000] avc_has_perm+0x129/0x160 [ 242.202941][T14000] selinux_socket_sendmsg+0x185/0x1c0 [ 242.208339][T14000] security_socket_sendmsg+0x47/0x80 [ 242.213676][T14000] __sock_sendmsg+0x2d/0x180 [ 242.218286][T14000] ____sys_sendmsg+0x312/0x410 [ 242.223063][T14000] __sys_sendmsg+0x19d/0x230 [ 242.227728][T14000] __x64_sys_sendmsg+0x46/0x50 [ 242.232506][T14000] x64_sys_call+0x2734/0x2dc0 [ 242.237333][T14000] do_syscall_64+0xc9/0x1c0 [ 242.241902][T14000] ? clear_bhb_loop+0x55/0xb0 [ 242.246617][T14000] ? clear_bhb_loop+0x55/0xb0 [ 242.251322][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.257335][T14000] RIP: 0033:0x7fc180135d29 [ 242.261786][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.281412][T14000] RSP: 002b:00007fc17e7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.289876][T14000] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc180135d29 [ 242.297869][T14000] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 242.305873][T14000] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 242.313887][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.322015][T14000] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 242.330112][T14000] [ 242.745999][T14053] batman_adv: batadv0: Interface deactivated: dummy0 [ 242.752867][T14053] batman_adv: batadv0: Removing interface: dummy0 [ 242.764746][T14053] bridge_slave_0: left allmulticast mode [ 242.770472][T14053] bridge_slave_0: left promiscuous mode [ 242.776419][T14053] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.785823][T14053] bridge_slave_1: left allmulticast mode [ 242.791495][T14053] bridge_slave_1: left promiscuous mode [ 242.797317][T14053] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.866860][T14053] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 242.874665][T14053] bond_slave_0: left promiscuous mode [ 242.883300][T14053] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 242.914145][T14053] bond_slave_1: left promiscuous mode [ 242.922654][T14053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.930127][T14053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.940058][T14053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.947616][T14053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.225096][T14058] random: crng reseeded on system resumption [ 243.282111][T14059] __nla_validate_parse: 1 callbacks suppressed [ 243.282126][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 243.378356][T14063] block device autoloading is deprecated and will be removed. [ 243.431398][T14065] bridge_slave_0: left allmulticast mode [ 243.437296][T14065] bridge_slave_0: left promiscuous mode [ 243.443210][T14065] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.532345][T14065] bridge_slave_1: left allmulticast mode [ 243.538065][T14065] bridge_slave_1: left promiscuous mode [ 243.543848][T14065] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.567255][T14065] bond0: (slave bond_slave_0): Releasing backup interface [ 243.577719][T14065] bond0: (slave bond_slave_1): Releasing backup interface [ 243.591516][T14065] team0: Port device team_slave_0 removed [ 243.603836][T14065] team0: Port device team_slave_1 removed [ 243.611026][T14065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.618512][T14065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.628413][T14065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.635928][T14065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.801814][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 243.801889][ T29] audit: type=1326 audit(1735613710.967:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 243.881800][T14077] bridge_slave_0: left allmulticast mode [ 243.887657][T14077] bridge_slave_0: left promiscuous mode [ 243.893504][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.012423][ T29] audit: type=1326 audit(1735613711.004:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.036251][ T29] audit: type=1326 audit(1735613711.004:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.059998][ T29] audit: type=1326 audit(1735613711.004:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.083674][ T29] audit: type=1326 audit(1735613711.004:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.107385][ T29] audit: type=1326 audit(1735613711.004:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.108785][T14077] bridge_slave_1: left allmulticast mode [ 244.131108][ T29] audit: type=1326 audit(1735613711.004:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14072 comm="syz.5.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 244.131148][ T29] audit: type=1326 audit(1735613711.070:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd142c5d29 code=0x7ffc0000 [ 244.131180][ T29] audit: type=1326 audit(1735613711.070:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd142c5d29 code=0x7ffc0000 [ 244.136907][T14077] bridge_slave_1: left promiscuous mode [ 244.160552][ T29] audit: type=1326 audit(1735613711.070:20716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.4.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efd142c5d29 code=0x7ffc0000 [ 244.184375][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.296473][T14077] bond0: (slave bond_slave_0): Releasing backup interface [ 244.307035][T14077] bond0: (slave bond_slave_1): Releasing backup interface [ 244.326009][T14077] team0: Port device team_slave_0 removed [ 244.336481][T14077] team0: Port device team_slave_1 removed [ 244.343445][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.350909][T14077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.362004][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.369627][T14077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.660683][T14095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3982'. [ 244.708015][T14095] Cannot find del_set index 0 as target [ 244.724425][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 244.758027][T14095] bond1: entered promiscuous mode [ 244.763301][T14095] bond1: entered allmulticast mode [ 244.769217][T14095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.831107][T14103] random: crng reseeded on system resumption [ 244.943569][T14105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3985'. [ 245.094354][T14111] FAULT_INJECTION: forcing a failure. [ 245.094354][T14111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.107629][T14111] CPU: 0 UID: 0 PID: 14111 Comm: syz.0.3988 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 245.118453][T14111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.128540][T14111] Call Trace: [ 245.131844][T14111] [ 245.134890][T14111] dump_stack_lvl+0xf2/0x150 [ 245.139591][T14111] dump_stack+0x15/0x1a [ 245.143904][T14111] should_fail_ex+0x223/0x230 [ 245.148680][T14111] should_fail+0xb/0x10 [ 245.152935][T14111] should_fail_usercopy+0x1a/0x20 [ 245.158028][T14111] _copy_to_iter+0xd5/0xd00 [ 245.162612][T14111] copy_page_to_iter+0x171/0x2b0 [ 245.167661][T14111] shmem_file_read_iter+0x2c1/0x540 [ 245.172912][T14111] aio_read+0x1e0/0x2e0 [ 245.177128][T14111] io_submit_one+0xade/0x1230 [ 245.181913][T14111] __se_sys_io_submit+0xf5/0x280 [ 245.186998][T14111] __x64_sys_io_submit+0x43/0x50 [ 245.192051][T14111] x64_sys_call+0x2c20/0x2dc0 [ 245.196842][T14111] do_syscall_64+0xc9/0x1c0 [ 245.201386][T14111] ? clear_bhb_loop+0x55/0xb0 [ 245.206086][T14111] ? clear_bhb_loop+0x55/0xb0 [ 245.210817][T14111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.216782][T14111] RIP: 0033:0x7fd9b2065d29 [ 245.221288][T14111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.241060][T14111] RSP: 002b:00007fd9b06d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 245.249575][T14111] RAX: ffffffffffffffda RBX: 00007fd9b2255fa0 RCX: 00007fd9b2065d29 [ 245.257581][T14111] RDX: 0000000020001d00 RSI: 0000000000000002 RDI: 00007fd9b0698000 [ 245.265660][T14111] RBP: 00007fd9b06d1090 R08: 0000000000000000 R09: 0000000000000000 [ 245.273660][T14111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.281671][T14111] R13: 0000000000000000 R14: 00007fd9b2255fa0 R15: 00007ffce1448ee8 [ 245.289802][T14111] [ 245.458740][T14126] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 246.341862][T14157] FAULT_INJECTION: forcing a failure. [ 246.341862][T14157] name failslab, interval 1, probability 0, space 0, times 0 [ 246.354588][T14157] CPU: 1 UID: 0 PID: 14157 Comm: syz.6.4005 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 246.365384][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.375472][T14157] Call Trace: [ 246.378789][T14157] [ 246.381725][T14157] dump_stack_lvl+0xf2/0x150 [ 246.386433][T14157] dump_stack+0x15/0x1a [ 246.390613][T14157] should_fail_ex+0x223/0x230 [ 246.395317][T14157] should_failslab+0x8f/0xb0 [ 246.400003][T14157] kmem_cache_alloc_node_noprof+0x59/0x320 [ 246.405817][T14157] ? __alloc_skb+0x10b/0x310 [ 246.410421][T14157] __alloc_skb+0x10b/0x310 [ 246.414928][T14157] ? audit_log_start+0x34c/0x6b0 [ 246.419960][T14157] audit_log_start+0x368/0x6b0 [ 246.424839][T14157] ? complete_walk+0x114/0x1f0 [ 246.429629][T14157] ? __rcu_read_unlock+0x4e/0x70 [ 246.434626][T14157] audit_seccomp+0x4b/0x130 [ 246.439189][T14157] __seccomp_filter+0x6fa/0x1180 [ 246.444180][T14157] ? __rcu_read_unlock+0x4e/0x70 [ 246.449260][T14157] ? mntput_no_expire+0x70/0x3c0 [ 246.454369][T14157] ? __rcu_read_unlock+0x4e/0x70 [ 246.459588][T14157] __secure_computing+0x9f/0x1c0 [ 246.464651][T14157] syscall_trace_enter+0xd1/0x1f0 [ 246.469728][T14157] ? fpregs_assert_state_consistent+0x83/0xa0 [ 246.475888][T14157] do_syscall_64+0xaa/0x1c0 [ 246.480406][T14157] ? clear_bhb_loop+0x55/0xb0 [ 246.485263][T14157] ? clear_bhb_loop+0x55/0xb0 [ 246.489965][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.495950][T14157] RIP: 0033:0x7f677c7a473c [ 246.500380][T14157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.520063][T14157] RSP: 002b:00007f677ae11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.529067][T14157] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a473c [ 246.537057][T14157] RDX: 000000000000000f RSI: 00007f677ae110a0 RDI: 0000000000000003 [ 246.545078][T14157] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 246.553070][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.561077][T14157] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 246.569116][T14157] [ 246.580839][T14161] serio: Serial port ptm0 [ 247.144691][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.153724][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.164897][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.186843][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.195850][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.205123][T14181] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4015'. [ 247.239890][T14181] netlink: 'syz.6.4015': attribute type 21 has an invalid length. [ 247.247928][T14181] netlink: 'syz.6.4015': attribute type 20 has an invalid length. [ 247.255798][T14181] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.316418][T14199] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 247.449694][T14211] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.508649][T14211] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.578981][T14218] netlink: 'syz.4.4029': attribute type 21 has an invalid length. [ 247.586893][T14218] netlink: 'syz.4.4029': attribute type 20 has an invalid length. [ 247.594814][T14218] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.628180][T14211] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.670524][T14229] batadv_slave_0: entered promiscuous mode [ 247.681108][T14229] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 247.701225][T14211] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.840392][T14211] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.882578][T14211] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.920615][T14211] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.942568][T14211] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.171468][T14246] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.227866][T14246] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.261111][T14251] netlink: 'syz.2.4042': attribute type 21 has an invalid length. [ 248.269000][T14251] netlink: 'syz.2.4042': attribute type 20 has an invalid length. [ 248.276940][T14251] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.288706][T14246] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.344132][T14246] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.414139][T14246] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.427641][T14246] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.446120][T14246] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.457835][T14246] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.663692][T14280] __nla_validate_parse: 16 callbacks suppressed [ 248.663712][T14280] netlink: 3576 bytes leftover after parsing attributes in process `syz.5.4056'. [ 248.816241][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4061'. [ 248.825262][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4061'. [ 248.874019][T14299] netlink: 3576 bytes leftover after parsing attributes in process `syz.5.4064'. [ 248.899078][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 250.367009][T14316] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 250.643416][T14326] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.677774][T14330] FAULT_INJECTION: forcing a failure. [ 250.677774][T14330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.690958][T14330] CPU: 0 UID: 0 PID: 14330 Comm: syz.0.4077 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 250.701740][T14330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.711801][T14330] Call Trace: [ 250.715080][T14330] [ 250.718013][T14330] dump_stack_lvl+0xf2/0x150 [ 250.722629][T14330] dump_stack+0x15/0x1a [ 250.726804][T14330] should_fail_ex+0x223/0x230 [ 250.731623][T14330] should_fail+0xb/0x10 [ 250.735787][T14330] should_fail_usercopy+0x1a/0x20 [ 250.740835][T14330] _copy_from_user+0x1e/0xb0 [ 250.745475][T14330] sg_io+0x1fd/0x450 [ 250.749476][T14330] scsi_ioctl+0xe9d/0x1540 [ 250.753916][T14330] sg_ioctl+0xd00/0x1870 [ 250.758199][T14330] ? __fget_files+0x17c/0x1c0 [ 250.762978][T14330] ? __pfx_sg_ioctl+0x10/0x10 [ 250.767660][T14330] __se_sys_ioctl+0xc9/0x140 [ 250.772263][T14330] __x64_sys_ioctl+0x43/0x50 [ 250.776868][T14330] x64_sys_call+0x1690/0x2dc0 [ 250.781587][T14330] do_syscall_64+0xc9/0x1c0 [ 250.786158][T14330] ? clear_bhb_loop+0x55/0xb0 [ 250.790910][T14330] ? clear_bhb_loop+0x55/0xb0 [ 250.795747][T14330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.801718][T14330] RIP: 0033:0x7fd9b2065d29 [ 250.806198][T14330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.825889][T14330] RSP: 002b:00007fd9b06d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.834313][T14330] RAX: ffffffffffffffda RBX: 00007fd9b2255fa0 RCX: 00007fd9b2065d29 [ 250.842370][T14330] RDX: 0000000020000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 250.850356][T14330] RBP: 00007fd9b06d1090 R08: 0000000000000000 R09: 0000000000000000 [ 250.858400][T14330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.866419][T14330] R13: 0000000000000000 R14: 00007fd9b2255fa0 R15: 00007ffce1448ee8 [ 250.874419][T14330] [ 250.907910][T14326] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.943102][T14339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14339 comm=syz.0.4081 [ 250.955703][T14339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14339 comm=syz.0.4081 [ 250.957971][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 250.958017][ T29] audit: type=1400 audit(1735613717.655:21053): avc: denied { write } for pid=14332 comm="syz.4.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.994945][ T29] audit: type=1400 audit(1735613717.674:21054): avc: denied { setopt } for pid=14332 comm="syz.4.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 251.017723][T14326] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.111227][T14326] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.122848][ T29] audit: type=1326 audit(1735613717.814:21055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.149876][ T29] audit: type=1326 audit(1735613717.814:21056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.173643][ T29] audit: type=1326 audit(1735613717.814:21057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.197336][ T29] audit: type=1326 audit(1735613717.814:21058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.197450][ T29] audit: type=1326 audit(1735613717.814:21059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.197487][ T29] audit: type=1326 audit(1735613717.814:21060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.197522][ T29] audit: type=1326 audit(1735613717.814:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.197554][ T29] audit: type=1326 audit(1735613717.814:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14346 comm="syz.0.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9b2065d29 code=0x7ffc0000 [ 251.246761][T14326] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.249853][T14326] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.338176][T14326] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.349631][T14326] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.056485][T14386] lo speed is unknown, defaulting to 1000 [ 253.586626][T14394] veth0_vlan: left allmulticast mode [ 253.602424][T14394] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.610895][T14394] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.619513][T14394] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.628134][T14394] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.638145][T14394] bond1: left promiscuous mode [ 253.642959][T14394] bond1: left allmulticast mode [ 253.694128][T14396] FAULT_INJECTION: forcing a failure. [ 253.694128][T14396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.707489][T14396] CPU: 0 UID: 0 PID: 14396 Comm: syz.5.4104 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 253.718357][T14396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.728489][T14396] Call Trace: [ 253.731847][T14396] [ 253.734833][T14396] dump_stack_lvl+0xf2/0x150 [ 253.739530][T14396] dump_stack+0x15/0x1a [ 253.743744][T14396] should_fail_ex+0x223/0x230 [ 253.748437][T14396] should_fail+0xb/0x10 [ 253.752610][T14396] should_fail_usercopy+0x1a/0x20 [ 253.757680][T14396] _copy_from_iter+0xd5/0xd00 [ 253.762375][T14396] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 253.768089][T14396] copy_page_from_iter+0x14f/0x280 [ 253.773295][T14396] tun_get_user+0x68b/0x25c0 [ 253.777988][T14396] ? avc_has_perm+0xd4/0x160 [ 253.782686][T14396] ? ref_tracker_alloc+0x1f5/0x2f0 [ 253.787841][T14396] tun_chr_write_iter+0x188/0x240 [ 253.793017][T14396] vfs_write+0x77f/0x920 [ 253.797356][T14396] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 253.802944][T14396] ksys_write+0xe8/0x1b0 [ 253.807261][T14396] __x64_sys_write+0x42/0x50 [ 253.811871][T14396] x64_sys_call+0x287e/0x2dc0 [ 253.816617][T14396] do_syscall_64+0xc9/0x1c0 [ 253.821138][T14396] ? clear_bhb_loop+0x55/0xb0 [ 253.825835][T14396] ? clear_bhb_loop+0x55/0xb0 [ 253.830522][T14396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.836471][T14396] RIP: 0033:0x7ff9871c47df [ 253.840923][T14396] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 253.860693][T14396] RSP: 002b:00007ff985837000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 253.869116][T14396] RAX: ffffffffffffffda RBX: 00007ff9873b5fa0 RCX: 00007ff9871c47df [ 253.877102][T14396] RDX: 0000000000000041 RSI: 0000000020000080 RDI: 00000000000000c8 [ 253.885149][T14396] RBP: 00007ff985837090 R08: 0000000000000000 R09: 0000000000000000 [ 253.893133][T14396] R10: 0000000000000041 R11: 0000000000000293 R12: 0000000000000001 [ 253.901119][T14396] R13: 0000000000000000 R14: 00007ff9873b5fa0 R15: 00007fff091b3ff8 [ 253.909277][T14396] [ 255.357040][T14466] syz.2.4135[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.357184][T14466] syz.2.4135[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.370436][T14466] syz.2.4135[14466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.406076][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.426749][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.436225][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.455503][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.464656][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.473990][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.492802][T14476] netlink: 'syz.0.4137': attribute type 21 has an invalid length. [ 255.500687][T14476] netlink: 'syz.0.4137': attribute type 20 has an invalid length. [ 255.503613][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.508575][T14476] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.517695][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.536396][T14473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4137'. [ 255.592177][T14479] syz.0.4138[14479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.592299][T14479] syz.0.4138[14479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.604915][T14479] syz.0.4138[14479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.822611][T14491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14491 comm=syz.6.4144 [ 255.847025][T14491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14491 comm=syz.6.4144 [ 255.892429][T14497] syz.0.4147[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.892605][T14497] syz.0.4147[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.904237][T14497] syz.0.4147[14497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.098852][T14507] netlink: 'syz.6.4149': attribute type 4 has an invalid length. [ 256.268642][T14522] syz.5.4155[14522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.320771][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 256.320791][ T29] audit: type=1326 audit(1735613722.669:21588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.403733][ T29] audit: type=1326 audit(1735613722.716:21589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.427429][ T29] audit: type=1326 audit(1735613722.716:21590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.451192][ T29] audit: type=1326 audit(1735613722.716:21591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.474811][ T29] audit: type=1326 audit(1735613722.716:21592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.498440][ T29] audit: type=1326 audit(1735613722.716:21593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.522370][ T29] audit: type=1326 audit(1735613722.725:21594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.546061][ T29] audit: type=1326 audit(1735613722.725:21595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.569833][ T29] audit: type=1326 audit(1735613722.734:21596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.593475][ T29] audit: type=1326 audit(1735613722.734:21597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14524 comm="syz.5.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 256.751066][T14537] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.809439][T14537] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.864200][T14537] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.909298][T14544] lo speed is unknown, defaulting to 1000 [ 256.917973][T14537] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.941260][T14547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14547 comm=syz.6.4166 [ 256.953894][T14547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14547 comm=syz.6.4166 [ 256.991802][T14537] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.015967][T14537] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.037930][T14537] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.059993][T14537] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.413722][T14573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14573 comm=syz.0.4177 [ 257.426422][T14573] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14573 comm=syz.0.4177 [ 257.510584][T14585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4182'. [ 257.548902][T14585] netlink: 'syz.4.4182': attribute type 21 has an invalid length. [ 257.556933][T14585] netlink: 'syz.4.4182': attribute type 20 has an invalid length. [ 257.589512][T14596] block device autoloading is deprecated and will be removed. [ 257.631591][T14598] netlink: 'syz.0.4187': attribute type 21 has an invalid length. [ 257.678993][T14604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14604 comm=syz.0.4189 [ 257.691662][T14604] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14604 comm=syz.0.4189 [ 257.838691][T14620] netlink: 'syz.0.4197': attribute type 21 has an invalid length. [ 257.846642][T14620] netlink: 'syz.0.4197': attribute type 20 has an invalid length. [ 258.077796][T14633] netlink: 'syz.4.4200': attribute type 39 has an invalid length. [ 258.640247][T14636] block device autoloading is deprecated and will be removed. [ 259.641015][T14651] netlink: 'syz.0.4208': attribute type 21 has an invalid length. [ 259.722382][T14662] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.790152][T14670] FAULT_INJECTION: forcing a failure. [ 259.790152][T14670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.803354][T14670] CPU: 0 UID: 0 PID: 14670 Comm: syz.2.4216 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 259.814284][T14670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.824447][T14670] Call Trace: [ 259.827783][T14670] [ 259.830800][T14670] dump_stack_lvl+0xf2/0x150 [ 259.835727][T14670] dump_stack+0x15/0x1a [ 259.839977][T14670] should_fail_ex+0x223/0x230 [ 259.844692][T14670] should_fail+0xb/0x10 [ 259.849007][T14670] should_fail_usercopy+0x1a/0x20 [ 259.854057][T14670] _copy_from_user+0x1e/0xb0 [ 259.858734][T14670] copy_msghdr_from_user+0x54/0x2a0 [ 259.863950][T14670] ? __fget_files+0x17c/0x1c0 [ 259.868732][T14670] __sys_sendmsg+0x13e/0x230 [ 259.873425][T14670] __x64_sys_sendmsg+0x46/0x50 [ 259.878275][T14670] x64_sys_call+0x2734/0x2dc0 [ 259.882972][T14670] do_syscall_64+0xc9/0x1c0 [ 259.887539][T14670] ? clear_bhb_loop+0x55/0xb0 [ 259.892307][T14670] ? clear_bhb_loop+0x55/0xb0 [ 259.897109][T14670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.903080][T14670] RIP: 0033:0x7fc180135d29 [ 259.907525][T14670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.927148][T14670] RSP: 002b:00007fc17e7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.935570][T14670] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc180135d29 [ 259.943656][T14670] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000007 [ 259.951710][T14670] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.959687][T14670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.967664][T14670] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 259.975649][T14670] [ 260.336759][T14720] FAULT_INJECTION: forcing a failure. [ 260.336759][T14720] name failslab, interval 1, probability 0, space 0, times 0 [ 260.349524][T14720] CPU: 1 UID: 0 PID: 14720 Comm: syz.6.4239 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 260.360345][T14720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.370428][T14720] Call Trace: [ 260.373721][T14720] [ 260.376671][T14720] dump_stack_lvl+0xf2/0x150 [ 260.381318][T14720] dump_stack+0x15/0x1a [ 260.385583][T14720] should_fail_ex+0x223/0x230 [ 260.390281][T14720] should_failslab+0x8f/0xb0 [ 260.394893][T14720] kmem_cache_alloc_noprof+0x52/0x320 [ 260.400350][T14720] ? dst_alloc+0xc0/0x100 [ 260.404749][T14720] dst_alloc+0xc0/0x100 [ 260.409009][T14720] rt_dst_clone+0x3b/0x2f0 [ 260.413519][T14720] NF_HOOK+0x68/0x1f0 [ 260.417516][T14720] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 260.423177][T14720] ip_mc_output+0x207/0x350 [ 260.427691][T14720] ? __pfx_dst_output+0x10/0x10 [ 260.432663][T14720] ? __pfx_ip_mc_output+0x10/0x10 [ 260.437700][T14720] ip_send_skb+0x12f/0x140 [ 260.442142][T14720] udp_send_skb+0x6a6/0x9f0 [ 260.446752][T14720] udp_sendmsg+0x1257/0x12f0 [ 260.451435][T14720] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 260.457079][T14720] ? __pfx_udp_sendmsg+0x10/0x10 [ 260.462025][T14720] inet_sendmsg+0xaf/0xd0 [ 260.466484][T14720] __sock_sendmsg+0x102/0x180 [ 260.471210][T14720] ____sys_sendmsg+0x312/0x410 [ 260.476096][T14720] __sys_sendmmsg+0x227/0x4b0 [ 260.480812][T14720] __x64_sys_sendmmsg+0x57/0x70 [ 260.485676][T14720] x64_sys_call+0x29aa/0x2dc0 [ 260.490363][T14720] do_syscall_64+0xc9/0x1c0 [ 260.494909][T14720] ? clear_bhb_loop+0x55/0xb0 [ 260.499596][T14720] ? clear_bhb_loop+0x55/0xb0 [ 260.504286][T14720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.510210][T14720] RIP: 0033:0x7f677c7a5d29 [ 260.514689][T14720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.534492][T14720] RSP: 002b:00007f677ae11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.542982][T14720] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a5d29 [ 260.551018][T14720] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 260.559001][T14720] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 260.566989][T14720] R10: 0000000000000840 R11: 0000000000000246 R12: 0000000000000001 [ 260.574969][T14720] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 260.582954][T14720] [ 260.657266][T14727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.666532][T14727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.689329][T14733] IPv6: Can't replace route, no match found [ 260.834839][T14745] __nla_validate_parse: 31 callbacks suppressed [ 260.834858][T14745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4248'. [ 260.855398][T14747] FAULT_INJECTION: forcing a failure. [ 260.855398][T14747] name failslab, interval 1, probability 0, space 0, times 0 [ 260.868109][T14747] CPU: 0 UID: 0 PID: 14747 Comm: syz.6.4249 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 260.878898][T14747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.878937][T14747] Call Trace: [ 260.879022][T14747] [ 260.879032][T14747] dump_stack_lvl+0xf2/0x150 [ 260.879110][T14747] dump_stack+0x15/0x1a [ 260.879146][T14747] should_fail_ex+0x223/0x230 [ 260.879176][T14747] ? inet6_rtm_newroute+0x647/0x1260 [ 260.879208][T14747] should_failslab+0x8f/0xb0 [ 260.879245][T14747] __kmalloc_cache_noprof+0x4e/0x320 [ 260.879334][T14747] inet6_rtm_newroute+0x647/0x1260 [ 260.879410][T14747] ? __rcu_read_unlock+0x34/0x70 [ 260.879449][T14747] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 260.879497][T14747] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 260.879531][T14747] rtnetlink_rcv_msg+0x6aa/0x710 [ 260.879556][T14747] ? ref_tracker_free+0x3a5/0x410 [ 260.879579][T14747] ? __dev_queue_xmit+0x186/0x2090 [ 260.879607][T14747] netlink_rcv_skb+0x12c/0x230 [ 260.879647][T14747] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.879714][T14747] rtnetlink_rcv+0x1c/0x30 [ 260.879735][T14747] netlink_unicast+0x599/0x670 [ 260.879836][T14747] netlink_sendmsg+0x5cc/0x6e0 [ 260.879868][T14747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.879895][T14747] __sock_sendmsg+0x140/0x180 [ 260.879943][T14747] ____sys_sendmsg+0x312/0x410 [ 260.879976][T14747] __sys_sendmsg+0x19d/0x230 [ 260.880086][T14747] __x64_sys_sendmsg+0x46/0x50 [ 260.880117][T14747] x64_sys_call+0x2734/0x2dc0 [ 261.014067][T14747] do_syscall_64+0xc9/0x1c0 [ 261.014095][T14747] ? clear_bhb_loop+0x55/0xb0 [ 261.014119][T14747] ? clear_bhb_loop+0x55/0xb0 [ 261.014141][T14747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.014186][T14747] RIP: 0033:0x7f677c7a5d29 [ 261.014203][T14747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.014223][T14747] RSP: 002b:00007f677ae11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.014243][T14747] RAX: ffffffffffffffda RBX: 00007f677c995fa0 RCX: 00007f677c7a5d29 [ 261.014258][T14747] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 261.014271][T14747] RBP: 00007f677ae11090 R08: 0000000000000000 R09: 0000000000000000 [ 261.014331][T14747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.014344][T14747] R13: 0000000000000000 R14: 00007f677c995fa0 R15: 00007fff3479aee8 [ 261.014364][T14747] [ 261.128077][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'. [ 261.128111][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'. [ 261.180302][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'. [ 261.189328][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4253'. [ 261.207469][T14759] validate_nla: 2 callbacks suppressed [ 261.207485][T14759] netlink: 'syz.6.4254': attribute type 21 has an invalid length. [ 261.221434][T14759] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4254'. [ 261.321656][T14778] vhci_hcd: invalid port number 157 [ 261.326995][T14778] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 261.461757][T14788] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 261.477544][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 261.486568][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 261.528294][T14795] FAULT_INJECTION: forcing a failure. [ 261.528294][T14795] name failslab, interval 1, probability 0, space 0, times 0 [ 261.540999][T14795] CPU: 0 UID: 0 PID: 14795 Comm: syz.5.4268 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 261.551799][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.562017][T14795] Call Trace: [ 261.565357][T14795] [ 261.568373][T14795] dump_stack_lvl+0xf2/0x150 [ 261.573009][T14795] dump_stack+0x15/0x1a [ 261.577221][T14795] should_fail_ex+0x223/0x230 [ 261.582022][T14795] should_failslab+0x8f/0xb0 [ 261.586647][T14795] kmem_cache_alloc_noprof+0x52/0x320 [ 261.592069][T14795] ? getname_flags+0x81/0x3b0 [ 261.596837][T14795] getname_flags+0x81/0x3b0 [ 261.601447][T14795] __x64_sys_mknod+0x40/0x60 [ 261.606071][T14795] x64_sys_call+0x16be/0x2dc0 [ 261.610778][T14795] do_syscall_64+0xc9/0x1c0 [ 261.615369][T14795] ? clear_bhb_loop+0x55/0xb0 [ 261.620083][T14795] ? clear_bhb_loop+0x55/0xb0 [ 261.624826][T14795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.630789][T14795] RIP: 0033:0x7ff9871c5d29 [ 261.635261][T14795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.654926][T14795] RSP: 002b:00007ff985837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 261.663361][T14795] RAX: ffffffffffffffda RBX: 00007ff9873b5fa0 RCX: 00007ff9871c5d29 [ 261.671351][T14795] RDX: 0000000000000000 RSI: 0000000008001420 RDI: 0000000020000040 [ 261.679342][T14795] RBP: 00007ff985837090 R08: 0000000000000000 R09: 0000000000000000 [ 261.687413][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.695490][T14795] R13: 0000000000000000 R14: 00007ff9873b5fa0 R15: 00007fff091b3ff8 [ 261.703563][T14795] [ 261.706874][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 261.706889][ T29] audit: type=1326 audit(1735613727.561:21984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.769890][ T29] audit: type=1326 audit(1735613727.739:21985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.793579][ T29] audit: type=1326 audit(1735613727.739:21986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.817267][ T29] audit: type=1326 audit(1735613727.757:21987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.840891][ T29] audit: type=1326 audit(1735613727.757:21988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.864510][ T29] audit: type=1326 audit(1735613727.757:21989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc180134690 code=0x7ffc0000 [ 261.888239][ T29] audit: type=1326 audit(1735613727.757:21990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.911942][ T29] audit: type=1326 audit(1735613727.757:21991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.935527][ T29] audit: type=1326 audit(1735613727.757:21992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 261.959135][ T29] audit: type=1326 audit(1735613727.757:21993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14791 comm="syz.2.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc180135d29 code=0x7ffc0000 [ 262.050153][T14807] FAULT_INJECTION: forcing a failure. [ 262.050153][T14807] name failslab, interval 1, probability 0, space 0, times 0 [ 262.062879][T14807] CPU: 1 UID: 0 PID: 14807 Comm: syz.5.4274 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 262.073664][T14807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.083805][T14807] Call Trace: [ 262.087093][T14807] [ 262.090032][T14807] dump_stack_lvl+0xf2/0x150 [ 262.094744][T14807] dump_stack+0x15/0x1a [ 262.098923][T14807] should_fail_ex+0x223/0x230 [ 262.103617][T14807] should_failslab+0x8f/0xb0 [ 262.108240][T14807] kmem_cache_alloc_noprof+0x52/0x320 [ 262.113622][T14807] ? vm_area_alloc+0xac/0x130 [ 262.118479][T14807] vm_area_alloc+0xac/0x130 [ 262.123042][T14807] __mmap_region+0x6b5/0x1400 [ 262.127773][T14807] ? bpf_trace_run2+0x123/0x1d0 [ 262.132826][T14807] mmap_region+0x164/0x1e0 [ 262.137262][T14807] do_mmap+0x718/0xb60 [ 262.141400][T14807] vm_mmap_pgoff+0x133/0x290 [ 262.146090][T14807] ksys_mmap_pgoff+0x2de/0x330 [ 262.151037][T14807] x64_sys_call+0x1940/0x2dc0 [ 262.155789][T14807] do_syscall_64+0xc9/0x1c0 [ 262.160347][T14807] ? clear_bhb_loop+0x55/0xb0 [ 262.165032][T14807] ? clear_bhb_loop+0x55/0xb0 [ 262.169716][T14807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.175668][T14807] RIP: 0033:0x7ff9871c5d29 [ 262.180095][T14807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.199845][T14807] RSP: 002b:00007ff985837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.208268][T14807] RAX: ffffffffffffffda RBX: 00007ff9873b5fa0 RCX: 00007ff9871c5d29 [ 262.216245][T14807] RDX: 000000000000000b RSI: 0000000000ff5000 RDI: 0000000020000000 [ 262.224277][T14807] RBP: 00007ff985837090 R08: ffffffffffffffff R09: 0000000000200000 [ 262.232261][T14807] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000002 [ 262.240239][T14807] R13: 0000000000000000 R14: 00007ff9873b5fa0 R15: 00007fff091b3ff8 [ 262.248227][T14807] [ 262.324863][T14818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4280'. [ 262.333868][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4280'. [ 262.425019][T14826] block device autoloading is deprecated and will be removed. [ 262.615688][T14847] bpf_get_probe_write_proto: 11 callbacks suppressed [ 262.615706][T14847] syz.2.4292[14847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.631908][T14847] syz.2.4292[14847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.652617][T14847] syz.2.4292[14847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.694186][T14851] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.877605][T14860] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 262.877605][T14860] n'º|$@OOݱµ’-®+·el' [ 262.893243][T14862] netlink: 'syz.5.4299': attribute type 10 has an invalid length. [ 262.947765][T14867] block device autoloading is deprecated and will be removed. [ 262.967398][T14870] loop5: detected capacity change from 0 to 1764 [ 262.974157][T14870] iso9660: Unknown parameter 'noc' [ 262.989216][T14870] block device autoloading is deprecated and will be removed. [ 262.996888][T14870] syz.5.4303: attempt to access beyond end of device [ 262.996888][T14870] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 263.038815][T14873] syz.0.4304[14873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.038932][T14873] syz.0.4304[14873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.050786][T14873] syz.0.4304[14873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.066243][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.087747][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.121237][T14875] netlink: 'syz.5.4305': attribute type 21 has an invalid length. [ 263.185877][T14885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.244846][T14891] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 263.254126][T14885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.320298][T14885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.391052][T14898] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.403249][T14885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.426802][T14898] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.459009][T14903] netlink: 'syz.4.4317': attribute type 21 has an invalid length. [ 263.466911][T14903] netlink: 'syz.4.4317': attribute type 20 has an invalid length. [ 263.555285][T14885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.566788][T14885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.578523][T14885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.590079][T14885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.599488][T14898] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.825641][T14898] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.925383][T14898] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.977439][T14898] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.035918][T14898] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.074295][T14898] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.278631][T14922] loop5: detected capacity change from 0 to 2048 [ 264.303486][T14922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.331183][ T8057] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 264.351178][ T8057] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.389523][T14932] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.587747][T14934] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ1844674407370955161518446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 264.587747][T14934] n'º|$@OOݱµ’-®+·el' [ 264.609866][T14934] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 264.721919][T14945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14945 comm=syz.5.4334 [ 264.734644][T14945] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14945 comm=syz.5.4334 [ 264.769335][T14947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14947 comm=syz.5.4335 [ 264.781938][T14947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14947 comm=syz.5.4335 [ 265.053694][T14977] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 265.088287][T14985] bond1: entered promiscuous mode [ 265.093517][T14985] bond1: entered allmulticast mode [ 265.100022][T14985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.110738][T14985] bond1 (unregistering): Released all slaves [ 265.137965][T14994] FAULT_INJECTION: forcing a failure. [ 265.137965][T14994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.151160][T14994] CPU: 1 UID: 0 PID: 14994 Comm: syz.2.4341 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 265.162012][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.172097][T14994] Call Trace: [ 265.175407][T14994] [ 265.178415][T14994] dump_stack_lvl+0xf2/0x150 [ 265.183123][T14994] dump_stack+0x15/0x1a [ 265.187316][T14994] should_fail_ex+0x223/0x230 [ 265.192072][T14994] should_fail+0xb/0x10 [ 265.196259][T14994] should_fail_usercopy+0x1a/0x20 [ 265.201404][T14994] _copy_from_user+0x1e/0xb0 [ 265.206033][T14994] __se_sys_mount+0x119/0x2d0 [ 265.210752][T14994] ? __bpf_trace_sys_enter+0x10/0x30 [ 265.216104][T14994] __x64_sys_mount+0x67/0x80 [ 265.220741][T14994] x64_sys_call+0x2c84/0x2dc0 [ 265.225525][T14994] do_syscall_64+0xc9/0x1c0 [ 265.230062][T14994] ? clear_bhb_loop+0x55/0xb0 [ 265.234767][T14994] ? clear_bhb_loop+0x55/0xb0 [ 265.239547][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.245712][T14994] RIP: 0033:0x7fc180135d29 [ 265.250203][T14994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.269833][T14994] RSP: 002b:00007fc17e786038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.278282][T14994] RAX: ffffffffffffffda RBX: 00007fc180326080 RCX: 00007fc180135d29 [ 265.286264][T14994] RDX: 0000000020000040 RSI: 0000000020000180 RDI: 0000000000000000 [ 265.294241][T14994] RBP: 00007fc17e786090 R08: 0000000020000580 R09: 0000000000000000 [ 265.302294][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.310275][T14994] R13: 0000000000000000 R14: 00007fc180326080 R15: 00007ffc6287efd8 [ 265.318274][T14994] [ 265.423526][T15011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15011 comm=syz.6.4348 [ 265.436280][T15011] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15011 comm=syz.6.4348 [ 265.506074][T15021] netlink: 'syz.0.4353': attribute type 21 has an invalid length. [ 265.514106][T15021] netlink: 'syz.0.4353': attribute type 20 has an invalid length. [ 265.942884][T15064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15064 comm=syz.5.4360 [ 265.955595][T15064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15064 comm=syz.5.4360 [ 266.075323][T15082] siw: device registration error -23 [ 266.429123][T15088] netlink: 'syz.6.4365': attribute type 21 has an invalid length. [ 266.437089][T15088] netlink: 'syz.6.4365': attribute type 20 has an invalid length. [ 266.517006][T15099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15099 comm=syz.0.4371 [ 266.517263][T15100] block device autoloading is deprecated and will be removed. [ 266.529679][T15099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15099 comm=syz.0.4371 [ 266.741661][T15114] netlink: 'syz.2.4377': attribute type 21 has an invalid length. [ 266.749540][T15114] netlink: 'syz.2.4377': attribute type 20 has an invalid length. [ 266.816409][T15124] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.893947][T15130] block device autoloading is deprecated and will be removed. [ 267.094612][T15150] netlink: 'syz.4.4393': attribute type 21 has an invalid length. [ 267.102511][T15150] netlink: 'syz.4.4393': attribute type 20 has an invalid length. [ 267.142558][T15158] block device autoloading is deprecated and will be removed. [ 267.165354][T15156] __nla_validate_parse: 8 callbacks suppressed [ 267.165370][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'. [ 267.180610][T15156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'. [ 267.225971][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4398'. [ 267.234921][T15160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4398'. [ 267.298696][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 267.298712][ T29] audit: type=1400 audit(1735613732.940:22517): avc: denied { setopt } for pid=15164 comm="syz.4.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.326118][ T29] audit: type=1400 audit(1735613732.940:22518): avc: denied { ioctl } for pid=15164 comm="syz.4.4400" path="socket:[46685]" dev="sockfs" ino=46685 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.351018][ T29] audit: type=1400 audit(1735613732.940:22519): avc: denied { write } for pid=15164 comm="syz.4.4400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.567625][ T29] audit: type=1400 audit(1735613733.192:22520): avc: denied { getopt } for pid=15175 comm="syz.6.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.725519][T15187] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 268.278627][T15201] syz.5.4416[15201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.280178][T15201] syz.5.4416[15201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.292313][T15201] syz.5.4416[15201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.679586][T15221] netlink: 3576 bytes leftover after parsing attributes in process `syz.5.4425'. [ 268.772907][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4423'. [ 268.781912][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4423'. [ 268.877161][ T29] audit: type=1326 audit(1735613734.417:22521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 268.909032][T15229] sd 0:0:1:0: device reset [ 268.913997][ T29] audit: type=1326 audit(1735613734.417:22522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 268.937744][ T29] audit: type=1326 audit(1735613734.446:22523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 268.961519][ T29] audit: type=1326 audit(1735613734.446:22524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 268.985286][ T29] audit: type=1326 audit(1735613734.446:22525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 269.009099][ T29] audit: type=1326 audit(1735613734.446:22526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.4428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff9871c5d29 code=0x7ffc0000 [ 269.887256][T15252] netlink: 3576 bytes leftover after parsing attributes in process `syz.6.4437'. [ 270.093379][T15265] selinux_netlink_send: 10 callbacks suppressed [ 270.093399][T15265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15265 comm=syz.6.4443 [ 270.112471][T15265] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15265 comm=syz.6.4443 [ 270.153021][T15268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.162418][T15268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.171356][T15268] netlink: 'syz.5.4444': attribute type 21 has an invalid length. [ 270.224448][T15268] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4444'. [ 270.346480][T15278] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.4448'. [ 270.497981][T15284] FAULT_INJECTION: forcing a failure. [ 270.497981][T15284] name failslab, interval 1, probability 0, space 0, times 0 [ 270.510808][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.2.4451 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 270.521595][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.531679][T15284] Call Trace: [ 270.534972][T15284] [ 270.537918][T15284] dump_stack_lvl+0xf2/0x150 [ 270.542557][T15284] dump_stack+0x15/0x1a [ 270.546775][T15284] should_fail_ex+0x223/0x230 [ 270.551530][T15284] should_failslab+0x8f/0xb0 [ 270.556205][T15284] kmem_cache_alloc_node_noprof+0x59/0x320 [ 270.562046][T15284] ? __alloc_skb+0x10b/0x310 [ 270.566669][T15284] __alloc_skb+0x10b/0x310 [ 270.571196][T15284] alloc_uevent_skb+0x5b/0x120 [ 270.576032][T15284] kobject_uevent_net_broadcast+0x242/0x420 [ 270.581972][T15284] kobject_uevent_env+0x415/0x550 [ 270.587063][T15284] kobject_uevent+0x1c/0x30 [ 270.591680][T15284] device_del+0x6fa/0x780 [ 270.596067][T15284] ? __try_to_del_timer_sync+0x14c/0x170 [ 270.601746][T15284] device_unregister+0x15/0x40 [ 270.606727][T15284] wakeup_source_sysfs_remove+0x25/0x30 [ 270.612312][T15284] wakeup_source_unregister+0xee/0x110 [ 270.617853][T15284] ep_destroy_wakeup_source+0x3a/0x50 [ 270.623306][T15284] ep_modify+0xa9/0x430 [ 270.627503][T15284] do_epoll_ctl+0x4bb/0x930 [ 270.632108][T15284] __x64_sys_epoll_ctl+0xc6/0xf0 [ 270.637202][T15284] x64_sys_call+0x1361/0x2dc0 [ 270.641995][T15284] do_syscall_64+0xc9/0x1c0 [ 270.646577][T15284] ? clear_bhb_loop+0x55/0xb0 [ 270.651283][T15284] ? clear_bhb_loop+0x55/0xb0 [ 270.655992][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.661935][T15284] RIP: 0033:0x7fc180135d29 [ 270.666458][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.686171][T15284] RSP: 002b:00007fc17e7a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 270.694611][T15284] RAX: ffffffffffffffda RBX: 00007fc180325fa0 RCX: 00007fc180135d29 [ 270.702641][T15284] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000005 [ 270.710682][T15284] RBP: 00007fc17e7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.718806][T15284] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 270.726826][T15284] R13: 0000000000000000 R14: 00007fc180325fa0 R15: 00007ffc6287efd8 [ 270.734862][T15284] [ 271.354951][T15300] sd 0:0:1:0: device reset [ 271.423937][T15303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15303 comm=syz.4.4455 [ 271.436547][T15303] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15303 comm=syz.4.4455 [ 271.534203][T15319] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 271.542932][T15320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.594094][T15320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.637266][T15320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.690524][T15320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.739861][T15322] ================================================================== [ 271.747986][T15322] BUG: KCSAN: data-race in _free_event / perf_pending_task [ 271.755279][T15322] [ 271.757601][T15322] write to 0xffff888132843348 of 4 bytes by task 15323 on cpu 1: [ 271.765373][T15322] perf_pending_task+0xe8/0x220 [ 271.770268][T15322] task_work_run+0x13a/0x1a0 [ 271.774861][T15322] irqentry_exit_to_user_mode+0xe5/0x120 [ 271.780524][T15322] irqentry_exit+0x12/0x50 [ 271.784967][T15322] sysvec_apic_timer_interrupt+0x44/0x80 [ 271.790617][T15322] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.796701][T15322] [ 271.799019][T15322] read to 0xffff888132843348 of 4 bytes by task 15322 on cpu 0: [ 271.806643][T15322] _free_event+0x3d/0xa10 [ 271.810977][T15322] perf_event_release_kernel+0x61a/0x670 [ 271.816623][T15322] perf_release+0x1f/0x30 [ 271.820950][T15322] __fput+0x17a/0x6d0 [ 271.824934][T15322] ____fput+0x1c/0x30 [ 271.828913][T15322] task_work_run+0x13a/0x1a0 [ 271.833518][T15322] syscall_exit_to_user_mode+0xa8/0x120 [ 271.839078][T15322] do_syscall_64+0xd6/0x1c0 [ 271.843580][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.849491][T15322] [ 271.851808][T15322] value changed: 0x142c23d4 -> 0x00000000 [ 271.857533][T15322] [ 271.859851][T15322] Reported by Kernel Concurrency Sanitizer on: [ 271.865994][T15322] CPU: 0 UID: 0 PID: 15322 Comm: syz.4.4469 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0 [ 271.876750][T15322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 271.886820][T15322] ================================================================== [ 271.903917][T15320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.915444][T15320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.927086][T15320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.937994][T15320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0