last executing test programs: 2.697326809s ago: executing program 3 (id=2173): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xa) close_range(r0, r0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) io_submit(r1, 0x3, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="f70954fdd771a25a53c6455b70f6e106a7b890c5d70be1789f66be4abdc66ed15a4c8507877d6668c43af25f2d83a476b4d33ad455d2f95237b43d1222275dbff4f0dc347d9f2ad6b9790595b84be7961a576c94b9e7d9c2e5025168acf50e7e7f99ec3c692e1e7cca95cff47d9a664dcc05cde86a5aec163d9bfe1b3478de7f6d0d428f340f58ea99b4c4080ed55de74260996aad121f00ad", 0x99, 0x1, 0x0, 0x1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x3, r2, &(0x7f0000000180)="0e083f4edc723598042c84bc87135ac8d3b450c06ebee434b5124313b77232361699187e4d67a611670476c92a4632872b19410ae66e4469", 0x38, 0x23, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f0000000200)="a0095d7848b1f1a6555b211ab9106fed5a17904287b8e8bc4de96be7b70c539abad6a24fb8bf64ecc04cc38e2c31c1d72ee40388f5ad5a258a034b01591e129c3fb3cc6c37212d79246a6352ca553a73f7d45c3f346494142fad22a6d9cae70e725b662644bdf8af30eb7c6bc5dd3e89c4647eec6cebc341b1e39cb5f00230ebadc4682759a32f93c40db96ec3dee58492ea2cb9652c2324f9dd9b3a0d4116ac42ae67107cf58280532b00b50ea658e595aa1febba4d80215da0d755e67e6f784390f98a083005b42ae1c9abbba4003f3c5788e75d58ced563", 0xd9, 0x32f0, 0x0, 0x1}]) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@v2={0x2000000, [{0x1, 0x8}, {0x3, 0x1}]}, 0x14, 0x1) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x43}, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000480)={0x7f, 0x3ff, 0x7, 0xeea, 0x9, [{0x5, 0x8, 0x8, '\x00', 0x130c}, {0x1, 0x5, 0x1, '\x00', 0x2505}, {0x6, 0x4, 0x1, '\x00', 0x80}, {0x8, 0x3, 0x3, '\x00', 0x2808}, {0xee3d, 0x7fffffff, 0x7, '\x00', 0x1000}, {0x7, 0x5, 0x9, '\x00', 0x8}, {0x400, 0x1, 0x8000000000000000, '\x00', 0x83f17a77640bc0d}, {0x0, 0x3, 0x3ba, '\x00', 0x2200}, {0x9, 0x5, 0x4, '\x00', 0x2000}]}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000006c0)={0xf6, 0xb5eb, 0x0, 0x4, 0x5, [{0x10000, 0xffff, 0x53f2, '\x00', 0x488}, {0x9, 0x0, 0xfff, '\x00', 0x2100}, {0x10001, 0x4, 0xf8d5, '\x00', 0x400}, {0x2, 0x9, 0x400, '\x00', 0x4}, {0x56ec, 0x3, 0x9, '\x00', 0x400}]}) r4 = socket$rds(0x15, 0x5, 0x0) connect$rds(r4, &(0x7f0000000800)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r4, 0x31572000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000000840)={"5b484b5d1773c26d71059cec4df4fd66", 0x0, 0x0, {0x2000000000000000, 0x1}, {0x6, 0x1}, 0x2, [0xe000000000000000, 0x8, 0x8000000000000000, 0x0, 0x6f, 0x6, 0x9, 0x1, 0x9, 0x3, 0x9, 0x2, 0x2800000000000, 0xec00000000000000]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000940)={{r2}, r5, 0x1e, @unused=[0x200, 0x81, 0x8], @name="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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x3c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "d86a1e5d3ddf5403dbee11e9dfc98868"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000002) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000001c00)={&(0x7f0000001ac0), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x7c, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xf}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x30}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xeb}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xe}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff7, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000001c40)={0x0, 0x3fb, [0x200, 0xff, 0x3, 0x5, 0x80, 0x8000000000000001]}) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001c80), 0x80280, 0x0) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000001cc0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r10, 0x5386, &(0x7f0000001d00)) sendmsg$nl_route(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0xffffffff, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x40044) writev(r4, &(0x7f0000003040)=[{&(0x7f0000001e40)="a7bd4b82227fb8465d9d17d7e0918970f82c9596e3c2ec252afa320ab625824a34a20587c943cd9f7636a21f07fcb2290c8102fe042fc0c571ab01211ee29974b87e21aff3ed7be686da53f0f62299e6e5bf7c6ae2c057aa7c560c506e3f91cd8887b65509abb9ba93d1cda38435fc2d8728cf19ce773f2c4afa0b1cf19c7a660920a975cd5301ce799b400ee6bdace8b6cdd4786697bf1a9a3cfe3214f912b6ae1785b2d71860de0f5f1d42a4397ef17240160795eafbe833fc17bfac32b33a844abf0ac5d7e6a06ca2f6eef0f957c462", 0xd1}, {&(0x7f0000001f40)="9e545d288f58c638e24c93bd0d1563b4316b92303b1c644835d8dc5ef7f82e3ab6ae921da57fe1b2a8098236c69c59bbbbb79b3f5ebaa0358705123f78d3aa540e135e3a6401dc5ef5411b3a2077d8c1281ca2752ab6c0c998340cba5d415b359629ffc8b93e9503025cae69e88abf54e1d8e27f45bc0fa9550d99c873b8321bdbf04b7e90d9eb563ae4affc257eace5b277360d7f6e09a25a32b0caafbe944f3982f2b79dcc64cad5e9", 0xaa}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="e1c2e266761747bd22241287da40dc214f0ce8649d5cd0f267589a93302733918020a9", 0x23}], 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003340)={r10, 0xe0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000030c0)=[0x0, 0x0, 0x0], &(0x7f0000003100)=[0x0, 0x0], 0x0, 0xb6, &(0x7f0000003140), 0x0, 0x10, &(0x7f0000003180), &(0x7f00000031c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000003200)}}, 0x10) sendmsg$nl_route(r10, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)=@newneigh={0x40, 0x1c, 0x200, 0x70bd26, 0x25dfdbfc, {0x1c, 0x0, 0x0, r11, 0x8, 0x1a1, 0x4}, [@NDA_LLADDR={0xa}, @NDA_IFINDEX={0x8, 0x8, r11}, @NDA_LINK_NETNSID={0x8, 0xa, 0xa638}, @NDA_DST_IPV4={0x8, 0x1, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x910}, 0x4014) 2.300532611s ago: executing program 2 (id=2180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0600000001000000000000000000000000960000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f000000000800000008"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0xdc, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4044}, 0x4004005) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r7, 0x400, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x7, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r0, @ANYBLOB="00000300000085000000860000009500"/25], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000181100003d938abd23088d50a807dadd4b1838e1270c5721927b6c2251937fe2a93f83dc456e8fc5fc175741a55be1132bf4ff10b6f964bb12439500"/89, @ANYRES32=r11, @ANYRES16=r11], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x63, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r13, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2.221185231s ago: executing program 3 (id=2181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = socket$tipc(0x1e, 0x5, 0x0) ioperm(0x4, 0x2, 0x6a0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="db2e000000000000000000000500000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x9, 0x0) setreuid(0x0, 0xee01) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) mq_open(0x0, 0x80, 0x20, 0x0) bind$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xe2b7, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x6, 0x5, "51af"}]}]}, 0x44}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0a00000003000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRESHEX, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 2.009728772s ago: executing program 2 (id=2182): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) (fail_nth: 1) 1.482807394s ago: executing program 2 (id=2187): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000000300)='inet_sock_set_state\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0xa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000980)=@tcp}, 0x20) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000600)={[{@dots}, {@nodots}, {@nodots}, {@dots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d4}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@debug}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@errors_continue}, {@dots}, {@nodots}]}, 0x1, 0x1f0, &(0x7f0000000240)="$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") bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000340)={r4, &(0x7f00000000c0), 0x0}, 0x17) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)=ANY=[], 0x90) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2, {0x40}, {}, @time=@time={0x9, 0x4}}, {0x8, 0x0, 0x54, 0x0, @time={0x80000000, 0x7fff}, {0x0, 0xfc}, {0x1}, @note={0x9, 0x40, 0x6, 0x1, 0x5}}], 0x38) read$snapshot(r6, 0x0, 0xffffffbf) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x11, @private=0xa010103, 0x4e20, 0x0, 'lc\x00', 0x22, 0x6a5a1119, 0x3f}, 0x2c) 1.148758585s ago: executing program 2 (id=2192): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffd}]}]}]}}]}, 0x9c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1.103364935s ago: executing program 4 (id=2195): r0 = socket(0x11, 0x800000003, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) mknod$loop(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.036206606s ago: executing program 2 (id=2198): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfd}}}}}]}}]}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="080001"], 0x90}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xc) 982.109776ms ago: executing program 4 (id=2200): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000680)=ANY=[@ANYBLOB="696f636861727365743d757466382c73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174653d312c73686f77657865632c666c7573682c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c757466383d302c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c0007e04b8d803a26a5195a4312f9f7bf37aef5894e06c45c4acb8e5c2852eaae4256bb98c43a1a4c136645f64400184c3d21e9d42b34aca2edf8a25833d69237c3819077c31e7284ed64018fb7f4281d247c7596063d354034c6d2188c44af04ed1d294505156bda07335c3fcfae714ba7be4e51d91fc0413fda00cf10890183bad036f1968b3792e30ed77893fb3e919e4ccf5dfecadb7a5720a25415fe1c87f5eb736a1a53bd6f71476ec0bcbffc0dd2b50bd5fb7627dc299dfe7b049d7ec3f9eafb5ba20f38ae1d28ba33942100cb8c704987df6d6526cb0649"], 0x1, 0x278, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rpc_clnt_new\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=winnt,utfck=strict,discard,utf8=1,nfs,shortname=win95,shortname=lower,utf8=1,utf8=0,uni_xlate=1,rodir,shortname=lower,\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfd, 0x299, &(0x7f0000000280)="$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") mount$nfs(&(0x7f0000000100)=',..', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 872.337637ms ago: executing program 1 (id=2202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (fail_nth: 6) 868.001816ms ago: executing program 3 (id=2203): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) io_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) keyctl$chown(0x6, 0x0, 0x0, 0x0) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r6, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000000)) tkill(r5, 0x7) 639.793777ms ago: executing program 1 (id=2204): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback, 0x2}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r2}, &(0x7f0000000180), &(0x7f0000000300)='%pB \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) mq_open(0x0, 0x7a5bf5f2caf89514, 0x20, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc4580000540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f0000000180)="aced847e5fd8b0e8a1096327ebc0fabfc1f32967df7463a2dbc0b809a1d96c605b2d3b79e646fe00f9801da97426629fb672a897db1d8ecc339bb391e5e22d1ddd16724192ed44f4473538a3052f56f669e03515c58c36b5b831401a2b90aa261457bf638680dc7dcc1c6906a4972d6b05d8c83c524cad01850db00201116087c43b1c10740c103ea287c487249051e2ae22c6ee0fab9a7c9cf173b5a8e983173bd962d181853574569243d517ebc5bff6d454e40a82440194969a6de30b615010b7a20595f42104", 0xc8}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e80)=@newtaction={0x894, 0x30, 0xffff, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xcfe, 0x0, 0x0, 0x0, 0x0, 0xcd19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x40, 0x228, 0x4, 0x1, 0x9, 0x2, 0x0, 0xfff, 0xbd, 0x100, 0x7, 0x998, 0x9, 0x5, 0x5, 0x7, 0x1, 0x3, 0x2, 0x100, 0x9, 0xf54, 0xfffffff9, 0x2, 0x7, 0x2, 0x9, 0xa018, 0x2cf, 0x0, 0x7, 0xfffffff9, 0x4, 0x4, 0x0, 0x4, 0xfffffffa, 0x7, 0x6, 0xd4, 0x7, 0x9993, 0x57c6, 0xff, 0x3, 0xa2e, 0x7, 0x276400, 0xdb6, 0x6, 0x8, 0xcf1, 0x101, 0xb, 0x4, 0x2, 0x908, 0xbeed, 0x90, 0x8, 0x2, 0x6, 0x0, 0x10001, 0x81, 0x6, 0xecd, 0x2, 0x4, 0x70, 0x0, 0x7fff, 0x8000, 0x7f, 0x2, 0xffff, 0xff, 0x79, 0x11ac18e0, 0x8, 0x9, 0x0, 0x2, 0x7, 0xfffffff7, 0x6, 0x2, 0x1, 0x5, 0x95a0, 0x7, 0x5, 0x1, 0xfffffffc, 0xf54, 0xd71, 0x2, 0x4, 0x100, 0x9, 0x1, 0x8, 0x3, 0x8, 0x5075, 0x0, 0x4, 0x0, 0x3, 0x8, 0x10, 0x6, 0x8, 0x10001, 0x10001, 0x200, 0x8, 0x7ff, 0x2, 0x0, 0x7, 0x6, 0x8, 0xf, 0x4f8, 0x6, 0x800, 0x6, 0x8, 0x6, 0xa618, 0x9, 0x1, 0xd, 0x4, 0x101, 0x0, 0x8, 0xffffffff, 0x2, 0x5, 0x10, 0x0, 0x7, 0x9, 0x0, 0x33b, 0xba, 0x24, 0x0, 0x2, 0x6, 0x200, 0x8001, 0x80, 0xb, 0x100, 0x2, 0xc964, 0x6, 0x3, 0x7ff, 0x2, 0x0, 0xfffffff8, 0x9bc7, 0x2, 0x1000, 0x4, 0xffffffff, 0x1, 0x5, 0x5, 0x6, 0x0, 0x1501, 0xf19a, 0x0, 0x8, 0xc7, 0x1, 0x8, 0x209d30f8, 0x2, 0x7, 0x1, 0xfffffff6, 0x6, 0x0, 0x277ca520, 0x200, 0x8, 0x4, 0xfffffffc, 0x9, 0x3, 0x2200, 0x4, 0x80000001, 0x1, 0x9, 0xfffff000, 0x7, 0x8, 0x8, 0x1, 0x91a, 0x9, 0x948, 0x7f, 0x80000001, 0x7, 0x5, 0xc3, 0x28000000, 0x3, 0x56, 0x5136, 0x2, 0xb9, 0xf, 0xcf, 0x4, 0x0, 0x2, 0xfff, 0x40, 0xffffffff, 0x3, 0xfffffbff, 0x5, 0xa, 0x9, 0x7b, 0x1, 0x2, 0x80000000, 0x3, 0x80, 0xf6c, 0x6, 0x708, 0xffff, 0x88b, 0x5, 0x5, 0x2, 0x30, 0x3, 0xa, 0x5, 0xff, 0x5, 0x1cd, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x300, 0x1, 0xffffffffffffff7f, 0xfffffffffffffffc, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x164, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}]}]}, 0x164}}, 0x4005) gettid() 592.205087ms ago: executing program 4 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) open(&(0x7f0000000100)='./bus\x00', 0x101c42, 0x0) io_setup(0xba, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 570.105627ms ago: executing program 1 (id=2210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb1ec4caff447b87c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0), 0x0, 0xeb, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x94, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xf, r6, 0x8c8f, &(0x7f0000000040)="9e54d9") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000000001f84e2031efda51a97a8000000000000000000b7080000000000007b8af85db5ace0d663851e58534fcef48d22ff00000000b7080000000000007b8af0ff00000000bfa10016982e000000000007010000f8ffffffbfa400000000000007040000f0", @ANYRES32=r7, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='sched_switch\x00', r8, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) shmdt(0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket(0x2, 0x80805, 0x0) listen(r9, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000010c0)=',*[\\/&)\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 527.374558ms ago: executing program 3 (id=2212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x0, 0x4}}], 0x48, 0x40841}, 0x0) (fail_nth: 9) 524.113338ms ago: executing program 0 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfe, 0x1, 0xfe, 0x2, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xe8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 435.220688ms ago: executing program 1 (id=2214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='dax_writeback_one\x00', r2, 0x0, 0xffff}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) r5 = semget$private(0x0, 0x4000000009, 0x0) semop(r5, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r5, &(0x7f0000000200), 0x53) semop(r5, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semctl$IPC_RMID(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) 432.765478ms ago: executing program 4 (id=2215): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000180)={'erspan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000000)={0x7, 'netdevsim0\x00', {0xfffffe01}, 0x1800}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x9c, 0x30, 0x1, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffff}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 204.315149ms ago: executing program 3 (id=2216): r0 = syz_open_procfs(0x0, 0x0) epoll_create1(0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x47) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000009196bd"], 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x21, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x855f}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @generic={0x9, 0xc, 0x4, 0x6, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @btf_id={0x18, 0xd0b27eaf50174d86, 0x3, 0x0, 0x4}, @generic={0xc9, 0x2, 0x2, 0x9, 0x9}]}, &(0x7f0000000000)='syzkaller\x00', 0x400, 0x64, &(0x7f0000000180)=""/100, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x10, 0x1b480998, 0xa}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)=[r6], &(0x7f0000000400)=[{0x5, 0x5, 0x10, 0xa}], 0x10, 0x80000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYBLOB="1c10509a5ad0b5b91c9b9573f5c757aaac2aca05eaf386902e22ebf5d7311dddf4165ddf00b35fab7bc1f780ee7318f40a281086834811a9f56bd810", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) 203.855689ms ago: executing program 0 (id=2217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='objagg_obj_put\x00', r2, 0x0, 0x18470e27}, 0x18) 203.136579ms ago: executing program 4 (id=2218): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 177.205839ms ago: executing program 0 (id=2219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) tgkill(0x0, 0x0, 0x25) 175.840199ms ago: executing program 4 (id=2220): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x4e3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x5, 0x4, 0xff, 0x8}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "7c2796fb6fe5c8c9e69be3ddb3e82e2e"}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x27e4e3936126d9c1}}]}) (async) syz_usb_connect(0x5, 0x4e3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x4, 0x5, 0x4, 0xff, 0x8}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "7c2796fb6fe5c8c9e69be3ddb3e82e2e"}]}, 0x1, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x27e4e3936126d9c1}}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000600090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000600090000003c0003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 131.884549ms ago: executing program 0 (id=2221): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) r3 = io_uring_setup(0x3dd3, &(0x7f0000001100)) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000740)={0x42, 0x1, 0x2, 0x5f7, 0xf, "00000000fdfffffdffffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000080)=0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0x800000, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000008c0)=ANY=[@ANYBLOB="32080207"], 0x48) r7 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)='B', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r7) 94.311569ms ago: executing program 1 (id=2222): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0xb, 0x18, 0xffffffffffffffff, @void, @value}, 0x20) sendfile(r2, r1, 0x0, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x110) 85.318479ms ago: executing program 0 (id=2223): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16f9fffffffe00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000020000000000000000000bada5cfb7beb47b76f6f4000"/39], 0x48) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0x32, 0x1, 0x1ff, &(0x7f0000000400)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000740)=[0x0]}, 0x40) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff67) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r2, 0x0, 0x0}, 0x10) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002a73050ff7f593c0edc46aef0cc54381c7c5390b386b8ba6a7e6553fae6091e302001773661ad39c76a53862610e552f223158a9a588ea9ca6f61cf327894f3815336cc027cc17b46ba922d31b57153a9711ea45661949ea1a6f185935cf99c5f36c457cb41b705fb068d1048a4b5a276671fc64989baa660e35ec40b95683de35c4699ea46a4003041b201cb3e3b024896b41e0cd3fdcae98e3954fa318cbba62497ff476a8c332"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bond_slave_1\x00', 0x1000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600050018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000760a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000feffffff85000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) 34.940679ms ago: executing program 1 (id=2224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000c71e20917462ecffe440cdf289adc69c82613ac2a24f09d17c3d2e93dce6634e616f2a26e990d94d0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="dc457f00", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x20, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ebffddff00001000"/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r7}, 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') sendfile(r5, r5, 0x0, 0x100000008) 34.36784ms ago: executing program 0 (id=2225): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x2}, 0x0, 0x0) (fail_nth: 19) 31.36982ms ago: executing program 3 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0xb4dd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x1}], 0x7, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0xfffffffd, 0x1cb}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x40200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="f24686ecdb8e369e0000000010000000100000000500ee00030000000000000e97fe19abc9bc5ba8005f612e00"], &(0x7f0000000400)=""/217, 0x2d, 0xd9, 0x0, 0x7, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r6, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a8845cc000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r8) r9 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x14, 0x2f, &(0x7f0000002000)=ANY=[@ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000039f346939f1841585779", @ANYBLOB="fbe54862ec5bd4b4580bcb27ceb697c086c2ceb86e55c0d904015a27169ba961e89f76cd6f02faceb46e9c9b48ea3dbe97ebaa7d2c1a416687e4c57f13e7a669b3ccce15945487d011a3c3e6615e047a8bc36ea60e5a80fb6223263888c64895954b6052c05d7e231fb627bc92a427033f14a7e4a61e30a5cb6504e624f513", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000186500000900000000000000040000009500000000000000851000000000000018120000", @ANYBLOB="db69e6827ec1b5eb54f4bad962b163cde7db93eb8a58e4d1294a4a0dd0f586dd16625548a6f85f92", @ANYRES16=r8, @ANYRES8=r4, @ANYBLOB="000000950000000000000085000000bb0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x3e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2e, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) 0s ago: executing program 2 (id=2227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='dax_writeback_one\x00', r2, 0x0, 0xffff}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) r5 = semget$private(0x0, 0x4000000009, 0x0) semop(r5, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semop(r5, &(0x7f0000000200), 0x53) semop(r5, &(0x7f0000000380)=[{0x0, 0x7d12}], 0x1) semctl$IPC_RMID(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 7] kobject_set_name_vargs+0x44/0xe0 [ 100.458429][ T8017] dev_set_name+0x84/0xb0 [ 100.462821][ T8017] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 100.468233][ T8017] ? siw_newlink+0x31c/0x6e0 [ 100.472976][ T8017] ? xas_load+0x3ae/0x3d0 [ 100.477319][ T8017] ib_register_device+0x253/0xbf0 [ 100.482359][ T8017] ? xa_load+0xb9/0xe0 [ 100.486527][ T8017] ? ib_device_set_netdev+0x3c2/0x450 [ 100.491924][ T8017] siw_newlink+0x69a/0x6e0 [ 100.496475][ T8017] nldev_newlink+0x32f/0x360 [ 100.501106][ T8017] ? __pfx_nldev_newlink+0x10/0x10 [ 100.506230][ T8017] rdma_nl_rcv+0x46f/0x5a0 [ 100.510734][ T8017] ? _raw_spin_unlock_bh+0x36/0x40 [ 100.515939][ T8017] netlink_unicast+0x599/0x670 [ 100.520797][ T8017] netlink_sendmsg+0x5cc/0x6e0 [ 100.525680][ T8017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.530979][ T8017] __sock_sendmsg+0x140/0x180 [ 100.535672][ T8017] ____sys_sendmsg+0x312/0x410 [ 100.540457][ T8017] __sys_sendmsg+0x1d9/0x270 [ 100.545096][ T8017] __x64_sys_sendmsg+0x46/0x50 [ 100.549909][ T8017] x64_sys_call+0x2689/0x2d60 [ 100.554652][ T8017] do_syscall_64+0xc9/0x1c0 [ 100.559176][ T8017] ? clear_bhb_loop+0x55/0xb0 [ 100.563957][ T8017] ? clear_bhb_loop+0x55/0xb0 [ 100.568660][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.574732][ T8017] RIP: 0033:0x7f91b197e719 [ 100.579163][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.598792][ T8017] RSP: 002b:00007f91b05f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.607219][ T8017] RAX: ffffffffffffffda RBX: 00007f91b1b35f80 RCX: 00007f91b197e719 [ 100.615200][ T8017] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 100.623229][ T8017] RBP: 00007f91b05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.631206][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.639189][ T8017] R13: 0000000000000000 R14: 00007f91b1b35f80 R15: 00007ffdfd4883a8 [ 100.647177][ T8017] [ 100.650390][ T8017] siw: device registration error -12 [ 100.675205][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 100.701341][ T8021] can0: slcan on ttyS3. [ 100.791656][ T8037] loop3: detected capacity change from 0 to 512 [ 100.799898][ T8021] can0 (unregistered): slcan off ttyS3. [ 100.810927][ T8021] Falling back ldisc for ttyS3. [ 100.834444][ T8037] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #3: comm syz.3.1705: pblk 20 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 100.855300][ T8037] EXT4-fs error (device loop3): ext4_quota_enable:7056: comm syz.3.1705: Bad quota inode: 3, type: 0 [ 100.869367][ T8037] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 100.884858][ T8037] EXT4-fs (loop3): mount failed [ 100.885191][ T8054] Falling back ldisc for ttyS3. [ 100.895940][ T8053] FAULT_INJECTION: forcing a failure. [ 100.895940][ T8053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.909081][ T8053] CPU: 1 UID: 0 PID: 8053 Comm: syz.2.1711 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 100.919862][ T8053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.929932][ T8053] Call Trace: [ 100.933299][ T8053] [ 100.936254][ T8053] dump_stack_lvl+0xf2/0x150 [ 100.940893][ T8053] dump_stack+0x15/0x20 [ 100.945083][ T8053] should_fail_ex+0x223/0x230 [ 100.949865][ T8053] should_fail+0xb/0x10 [ 100.954090][ T8053] should_fail_usercopy+0x1a/0x20 [ 100.959139][ T8053] _copy_from_user+0x1e/0xb0 [ 100.963759][ T8053] tipc_setsockopt+0x27b/0x660 [ 100.968613][ T8053] ? __pfx_tipc_setsockopt+0x10/0x10 [ 100.973985][ T8053] __sys_setsockopt+0x1cc/0x240 [ 100.978935][ T8053] __x64_sys_setsockopt+0x66/0x80 [ 100.984126][ T8053] x64_sys_call+0x278d/0x2d60 [ 100.988837][ T8053] do_syscall_64+0xc9/0x1c0 [ 100.993368][ T8053] ? clear_bhb_loop+0x55/0xb0 [ 100.998155][ T8053] ? clear_bhb_loop+0x55/0xb0 [ 101.002914][ T8053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.008921][ T8053] RIP: 0033:0x7fe2156ae719 [ 101.013358][ T8053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.033133][ T8053] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.041573][ T8053] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 101.049570][ T8053] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000005 [ 101.057736][ T8053] RBP: 00007fe214321090 R08: 0000000000000010 R09: 0000000000000000 [ 101.065900][ T8053] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 101.073897][ T8053] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 101.081908][ T8053] [ 101.168332][ T8067] loop2: detected capacity change from 0 to 1024 [ 101.176569][ T8069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1717'. [ 101.199860][ T8067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.199896][ T8072] tipc: Started in network mode [ 101.199923][ T8072] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.223879][ T8072] tipc: New replicast peer: 100.1.1.1 [ 101.229442][ T8072] tipc: Enabled bearer , priority 10 [ 101.249706][ T8069] veth0_vlan: entered allmulticast mode [ 101.259159][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.310159][ T8086] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1722'. [ 101.332755][ T8088] lo speed is unknown, defaulting to 1000 [ 101.373692][ T8090] lo speed is unknown, defaulting to 1000 [ 101.451079][ T8104] netlink: 'syz.0.1729': attribute type 3 has an invalid length. [ 101.503050][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.512579][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.621159][ T8120] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1734'. [ 101.650598][ T8126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8126 comm=syz.2.1735 [ 101.710182][ T8135] loop2: detected capacity change from 0 to 512 [ 101.716582][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 101.725498][ T8135] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 101.748664][ T8135] loop2: detected capacity change from 0 to 256 [ 101.806079][ T8145] FAULT_INJECTION: forcing a failure. [ 101.806079][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 101.818764][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.4.1742 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 101.829534][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.839631][ T8145] Call Trace: [ 101.842968][ T8145] [ 101.845924][ T8145] dump_stack_lvl+0xf2/0x150 [ 101.850557][ T8145] dump_stack+0x15/0x20 [ 101.854722][ T8145] should_fail_ex+0x223/0x230 [ 101.859442][ T8145] ? skb_clone+0x154/0x1f0 [ 101.863907][ T8145] should_failslab+0x8f/0xb0 [ 101.868506][ T8145] kmem_cache_alloc_noprof+0x4c/0x290 [ 101.873958][ T8145] skb_clone+0x154/0x1f0 [ 101.878256][ T8145] dev_queue_xmit_nit+0x149/0x620 [ 101.883323][ T8145] dev_hard_start_xmit+0xcc/0x3f0 [ 101.888363][ T8145] ? validate_xmit_skb+0x61a/0x7d0 [ 101.893508][ T8145] __dev_queue_xmit+0xfba/0x2040 [ 101.898488][ T8145] ? __dev_queue_xmit+0x161/0x2040 [ 101.903654][ T8145] ? ref_tracker_alloc+0x1f5/0x2f0 [ 101.908779][ T8145] ? should_fail_ex+0xd7/0x230 [ 101.913637][ T8145] ? __skb_clone+0x2d0/0x2f0 [ 101.918244][ T8145] __netlink_deliver_tap+0x39f/0x4c0 [ 101.923533][ T8145] netlink_unicast+0x64a/0x670 [ 101.928395][ T8145] netlink_sendmsg+0x5cc/0x6e0 [ 101.933168][ T8145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.938511][ T8145] __sock_sendmsg+0x140/0x180 [ 101.943214][ T8145] __sys_sendto+0x1d6/0x260 [ 101.947786][ T8145] __x64_sys_sendto+0x78/0x90 [ 101.952477][ T8145] x64_sys_call+0x2959/0x2d60 [ 101.957169][ T8145] do_syscall_64+0xc9/0x1c0 [ 101.961787][ T8145] ? clear_bhb_loop+0x55/0xb0 [ 101.966477][ T8145] ? clear_bhb_loop+0x55/0xb0 [ 101.971172][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.977161][ T8145] RIP: 0033:0x7f22cebfe719 [ 101.981637][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.001275][ T8145] RSP: 002b:00007f22cd877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 102.009833][ T8145] RAX: ffffffffffffffda RBX: 00007f22cedb5f80 RCX: 00007f22cebfe719 [ 102.017861][ T8145] RDX: 000000000000001c RSI: 00000000200002c0 RDI: 0000000000000003 [ 102.025856][ T8145] RBP: 00007f22cd877090 R08: 0000000000000000 R09: 0000000000000000 [ 102.033846][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.041845][ T8145] R13: 0000000000000000 R14: 00007f22cedb5f80 R15: 00007ffe136567d8 [ 102.049927][ T8145] [ 102.055094][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1742'. [ 102.108878][ T8152] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1745'. [ 102.197521][ T8168] Falling back ldisc for ttyS3. [ 102.345209][ T8] tipc: Node number set to 2886997162 [ 102.755211][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 102.968338][ T8208] FAULT_INJECTION: forcing a failure. [ 102.968338][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 102.981090][ T8208] CPU: 0 UID: 0 PID: 8208 Comm: syz.4.1763 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 102.991930][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.001999][ T8208] Call Trace: [ 103.005286][ T8208] [ 103.008223][ T8208] dump_stack_lvl+0xf2/0x150 [ 103.012832][ T8208] dump_stack+0x15/0x20 [ 103.017001][ T8208] should_fail_ex+0x223/0x230 [ 103.021705][ T8208] ? resv_map_alloc+0x32/0x190 [ 103.026593][ T8208] should_failslab+0x8f/0xb0 [ 103.031281][ T8208] __kmalloc_cache_noprof+0x4b/0x2a0 [ 103.036645][ T8208] resv_map_alloc+0x32/0x190 [ 103.041331][ T8208] hugetlb_reserve_pages+0x265/0xbc0 [ 103.046643][ T8208] hugetlbfs_file_mmap+0x40e/0x4d0 [ 103.051800][ T8208] mmap_region+0xc83/0x1640 [ 103.056452][ T8208] do_mmap+0x718/0xb60 [ 103.060538][ T8208] vm_mmap_pgoff+0x133/0x290 [ 103.065301][ T8208] ksys_mmap_pgoff+0x2de/0x330 [ 103.070084][ T8208] x64_sys_call+0x1884/0x2d60 [ 103.074828][ T8208] do_syscall_64+0xc9/0x1c0 [ 103.079435][ T8208] ? clear_bhb_loop+0x55/0xb0 [ 103.084124][ T8208] ? clear_bhb_loop+0x55/0xb0 [ 103.088934][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.094940][ T8208] RIP: 0033:0x7f22cebfe719 [ 103.099464][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.119091][ T8208] RSP: 002b:00007f22cd877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 103.127566][ T8208] RAX: ffffffffffffffda RBX: 00007f22cedb5f80 RCX: 00007f22cebfe719 [ 103.135551][ T8208] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000 [ 103.143536][ T8208] RBP: 00007f22cd877090 R08: ffffffffffffffff R09: 0000000000000000 [ 103.151572][ T8208] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 103.159618][ T8208] R13: 0000000000000000 R14: 00007f22cedb5f80 R15: 00007ffe136567d8 [ 103.167616][ T8208] [ 103.194603][ T8210] FAULT_INJECTION: forcing a failure. [ 103.194603][ T8210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.207819][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.1.1764 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 103.218553][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.228658][ T8210] Call Trace: [ 103.231952][ T8210] [ 103.234900][ T8210] dump_stack_lvl+0xf2/0x150 [ 103.239578][ T8210] dump_stack+0x15/0x20 [ 103.243829][ T8210] should_fail_ex+0x223/0x230 [ 103.248551][ T8210] should_fail+0xb/0x10 [ 103.252798][ T8210] should_fail_usercopy+0x1a/0x20 [ 103.257850][ T8210] _copy_to_user+0x20/0xa0 [ 103.262361][ T8210] simple_read_from_buffer+0xa0/0x110 [ 103.267768][ T8210] proc_fail_nth_read+0xf9/0x140 [ 103.272772][ T8210] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.278457][ T8210] vfs_read+0x1a2/0x700 [ 103.282861][ T8210] ? __fget_files+0x1d4/0x210 [ 103.287601][ T8210] ksys_read+0xeb/0x1b0 [ 103.291787][ T8210] __x64_sys_read+0x42/0x50 [ 103.296348][ T8210] x64_sys_call+0x27d3/0x2d60 [ 103.301100][ T8210] do_syscall_64+0xc9/0x1c0 [ 103.305678][ T8210] ? clear_bhb_loop+0x55/0xb0 [ 103.310394][ T8210] ? clear_bhb_loop+0x55/0xb0 [ 103.315099][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.321075][ T8210] RIP: 0033:0x7fcecbb8d15c [ 103.325550][ T8210] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 103.345176][ T8210] RSP: 002b:00007fceca801030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.353601][ T8210] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8d15c [ 103.361589][ T8210] RDX: 000000000000000f RSI: 00007fceca8010a0 RDI: 000000000000000a [ 103.369682][ T8210] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 103.377659][ T8210] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 103.385717][ T8210] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 103.393709][ T8210] [ 103.486309][ T8224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8224 comm=syz.0.1771 [ 103.522826][ T8230] __nla_validate_parse: 1 callbacks suppressed [ 103.522844][ T8230] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1774'. [ 103.541439][ T8231] loop3: detected capacity change from 0 to 512 [ 103.548197][ T8231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.557416][ T8234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8234 comm=syz.1.1775 [ 103.596158][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 103.596174][ T29] audit: type=1400 audit(1731253990.309:125682): avc: denied { ioctl } for pid=8235 comm="syz.4.1777" path="socket:[19014]" dev="sockfs" ino=19014 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.652129][ T29] audit: type=1326 audit(1731253990.359:125683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.652602][ T8231] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.683225][ T29] audit: type=1326 audit(1731253990.399:125684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.707067][ T29] audit: type=1326 audit(1731253990.399:125685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.711650][ T8231] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1774: bg 0: block 248: padding at end of block bitmap is not set [ 103.730645][ T29] audit: type=1326 audit(1731253990.399:125686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.760182][ T8231] Quota error (device loop3): write_blk: dquota write failed [ 103.768546][ T29] audit: type=1326 audit(1731253990.399:125687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.775938][ T8231] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 103.799494][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 103.799487][ T29] audit: type=1326 audit(1731253990.399:125688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.809435][ T8231] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1774: Failed to acquire dquot type 1 [ 103.816279][ T29] audit: type=1326 audit(1731253990.399:125689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8243 comm="syz.4.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22cebfe719 code=0x7ffc0000 [ 103.842462][ T8231] EXT4-fs (loop3): 1 truncate cleaned up [ 103.855786][ T8253] loop4: detected capacity change from 0 to 128 [ 103.878111][ T8231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.900020][ T8253] vfat: Unknown parameter '000000000000000000000057q(:"'VyWd~9#' [ 103.951583][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.970712][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1784'. [ 104.009297][ T8256] FAULT_INJECTION: forcing a failure. [ 104.009297][ T8256] name failslab, interval 1, probability 0, space 0, times 0 [ 104.022002][ T8256] CPU: 1 UID: 0 PID: 8256 Comm: syz.1.1784 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 104.032720][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 104.042870][ T8256] Call Trace: [ 104.046155][ T8256] [ 104.049092][ T8256] dump_stack_lvl+0xf2/0x150 [ 104.053705][ T8256] dump_stack+0x15/0x20 [ 104.057871][ T8256] should_fail_ex+0x223/0x230 [ 104.062578][ T8256] ? __alloc_skb+0x10b/0x310 [ 104.067200][ T8256] should_failslab+0x8f/0xb0 [ 104.071829][ T8256] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 104.077686][ T8256] ? __rtnl_unlock+0x99/0xb0 [ 104.082372][ T8256] __alloc_skb+0x10b/0x310 [ 104.086897][ T8256] netlink_ack+0xef/0x4f0 [ 104.091234][ T8256] ? __dev_queue_xmit+0x161/0x2040 [ 104.096456][ T8256] ? ref_tracker_alloc+0x1f5/0x2f0 [ 104.101682][ T8256] netlink_rcv_skb+0x19c/0x230 [ 104.106479][ T8256] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 104.112045][ T8256] rtnetlink_rcv+0x1c/0x30 [ 104.116544][ T8256] netlink_unicast+0x599/0x670 [ 104.121413][ T8256] netlink_sendmsg+0x5cc/0x6e0 [ 104.126282][ T8256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.131740][ T8256] __sock_sendmsg+0x140/0x180 [ 104.136433][ T8256] __sys_sendto+0x1d6/0x260 [ 104.140980][ T8256] __x64_sys_sendto+0x78/0x90 [ 104.145689][ T8256] x64_sys_call+0x2959/0x2d60 [ 104.150444][ T8256] do_syscall_64+0xc9/0x1c0 [ 104.155041][ T8256] ? clear_bhb_loop+0x55/0xb0 [ 104.159791][ T8256] ? clear_bhb_loop+0x55/0xb0 [ 104.164539][ T8256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.170469][ T8256] RIP: 0033:0x7fcecbb8e719 [ 104.174919][ T8256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.194627][ T8256] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 104.203050][ T8256] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 104.211026][ T8256] RDX: 0000000000000078 RSI: 0000000020000000 RDI: 0000000000000004 [ 104.219082][ T8256] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 104.227068][ T8256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.235079][ T8256] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 104.243125][ T8256] [ 104.350174][ T8266] loop7: detected capacity change from 0 to 7 [ 104.356688][ T8266] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.364629][ T8266] Buffer I/O error on dev loop7, logical block 0, async page read [ 104.372626][ T8266] loop7: unable to read partition table [ 104.384858][ T8266] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 104.384858][ T8266] ) failed (rc=-5) [ 104.388259][ T8274] syz.0.1788[8274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.398731][ T8274] syz.0.1788[8274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.402962][ T8276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8276 comm=syz.1.1789 [ 104.410962][ T8274] syz.0.1788[8274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.483773][ T8293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8293 comm=syz.1.1795 [ 104.501206][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.515306][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.522706][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.530203][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.537684][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.545161][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.552735][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.560342][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.567949][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.575519][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.582928][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.590424][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.595722][ T8277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.598087][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.607947][ T8277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.613650][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.628942][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.636488][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.643900][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.651403][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.658842][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.666334][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.673742][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.681175][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.688696][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.696125][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.703590][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.711014][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.718541][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.726034][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.733439][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.740879][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.748317][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.755779][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 104.766114][ T8295] pim6reg1: entered promiscuous mode [ 104.771468][ T8295] pim6reg1: entered allmulticast mode [ 104.778280][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 104.800290][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 104.811967][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1796'. [ 104.835176][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.837952][ T8295] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.894955][ T8295] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.920063][ T8310] loop2: detected capacity change from 0 to 512 [ 104.927595][ T8308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8308 comm=syz.0.1800 [ 104.947867][ T8312] loop3: detected capacity change from 0 to 1024 [ 104.957573][ T8295] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.971457][ T8310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.984570][ T8310] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.000040][ T8312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.028978][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.044813][ T8312] EXT4-fs (loop3): shut down requested (0) [ 105.052325][ T8295] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.079975][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.119541][ T8295] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.131127][ T8327] loop2: detected capacity change from 0 to 1024 [ 105.138605][ T8295] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.150970][ T8295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.163158][ T8295] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.174486][ T8327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.203276][ T8327] EXT4-fs (loop2): shut down requested (0) [ 105.224365][ T8344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8344 comm=syz.3.1813 [ 105.266871][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.267853][ T8340] loop4: detected capacity change from 0 to 512 [ 105.286767][ T8349] vhci_hcd: invalid port number 0 [ 105.300855][ T8353] smc: net device bond0 applied user defined pnetid SYZ0 [ 105.309825][ T8353] smc: net device bond0 erased user defined pnetid SYZ0 [ 105.318417][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.343847][ T8352] bridge0: entered promiscuous mode [ 105.349269][ T8340] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.352853][ T8355] loop3: detected capacity change from 0 to 1024 [ 105.360800][ T8352] macvlan2: entered promiscuous mode [ 105.370931][ T8340] sg_write: data in/out 231/8 bytes for SCSI command 0xeb-- guessing data in; [ 105.370931][ T8340] program syz.4.1812 not setting count and/or reply_len properly [ 105.401690][ T8355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.418538][ T8355] EXT4-fs (loop3): shut down requested (0) [ 105.454042][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.463744][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.499799][ T8372] loop3: detected capacity change from 0 to 1024 [ 105.529071][ T8372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.555749][ T8361] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 105.560016][ T8372] EXT4-fs (loop3): shut down requested (0) [ 105.577174][ T8361] loop2: detected capacity change from 0 to 764 [ 105.589604][ T8361] Symlink component flag not implemented [ 105.595733][ T8361] Symlink component flag not implemented (129) [ 105.604064][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.614862][ T8361] rock: directory entry would overflow storage [ 105.621125][ T8361] rock: sig=0x4f50, size=4, remaining=3 [ 105.626798][ T8361] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 105.662884][ T8389] loop3: detected capacity change from 0 to 1024 [ 105.678066][ T8389] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1829: Failed to acquire dquot type 0 [ 105.696934][ T8389] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 105.711852][ T8389] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.1829: corrupted inode contents [ 105.724169][ T8389] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #13: comm syz.3.1829: mark_inode_dirty error [ 105.736192][ T8389] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.1829: corrupted inode contents [ 105.748389][ T8389] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.1829: mark_inode_dirty error [ 105.748989][ T8396] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1832'. [ 105.761071][ T8389] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.1829: corrupted inode contents [ 105.781837][ T8389] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 105.790933][ T8389] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #13: comm syz.3.1829: corrupted inode contents [ 105.804896][ T8389] EXT4-fs error (device loop3): ext4_truncate:4208: inode #13: comm syz.3.1829: mark_inode_dirty error [ 105.817533][ T8389] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 105.827543][ T8389] EXT4-fs (loop3): 1 truncate cleaned up [ 105.843312][ T8389] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1829: Failed to acquire dquot type 0 [ 105.864700][ T8389] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 105.875193][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 105.892160][ T8389] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.918800][ T8401] FAULT_INJECTION: forcing a failure. [ 105.918800][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 105.931581][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.1.1834 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 105.942289][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.952482][ T8401] Call Trace: [ 105.955768][ T8401] [ 105.958713][ T8401] dump_stack_lvl+0xf2/0x150 [ 105.963361][ T8401] dump_stack+0x15/0x20 [ 105.967715][ T8401] should_fail_ex+0x223/0x230 [ 105.972451][ T8401] ? sidtab_sid2str_get+0xb8/0x140 [ 105.977606][ T8401] should_failslab+0x8f/0xb0 [ 105.980859][ T8403] loop2: detected capacity change from 0 to 8192 [ 105.982237][ T8401] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 105.994920][ T8401] ? vsnprintf+0xdd8/0xe30 [ 105.999355][ T8401] kmemdup_noprof+0x2a/0x60 [ 106.003892][ T8401] sidtab_sid2str_get+0xb8/0x140 [ 106.008892][ T8401] security_sid_to_context_core+0x1eb/0x2f0 [ 106.014881][ T8401] security_sid_to_context+0x27/0x30 [ 106.020241][ T8401] selinux_secid_to_secctx+0x22/0x30 [ 106.025560][ T8401] security_secid_to_secctx+0x48/0x90 [ 106.030997][ T8401] audit_log_task_context+0x8c/0x1b0 [ 106.036366][ T8401] audit_log_task+0xfb/0x180 [ 106.041064][ T8401] audit_seccomp+0x68/0x130 [ 106.045750][ T8401] __seccomp_filter+0x6fa/0x1180 [ 106.050712][ T8401] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 106.056428][ T8401] ? selinux_file_alloc_security+0xa0/0xc0 [ 106.062245][ T8401] ? percpu_counter_add_batch+0xc6/0x140 [ 106.068386][ T8401] ? errseq_sample+0x2f/0x40 [ 106.073071][ T8401] ? file_init_path+0x267/0x290 [ 106.078004][ T8401] __secure_computing+0x9f/0x1c0 [ 106.083001][ T8401] syscall_trace_enter+0xd1/0x1f0 [ 106.088049][ T8401] ? __se_sys_timerfd_create+0x25c/0x270 [ 106.093703][ T8401] ? fpregs_assert_state_consistent+0x83/0xa0 [ 106.099797][ T8401] do_syscall_64+0xaa/0x1c0 [ 106.104382][ T8401] ? clear_bhb_loop+0x55/0xb0 [ 106.109203][ T8401] ? clear_bhb_loop+0x55/0xb0 [ 106.113890][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.119818][ T8401] RIP: 0033:0x7fcecbb8d15c [ 106.124380][ T8401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 106.143999][ T8401] RSP: 002b:00007fceca801030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.152442][ T8401] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8d15c [ 106.160421][ T8401] RDX: 000000000000000f RSI: 00007fceca8010a0 RDI: 0000000000000005 [ 106.168397][ T8401] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 106.176455][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.184430][ T8401] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 106.192489][ T8401] [ 106.202219][ T8403] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.227746][ T8403] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 106.234720][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 106.236362][ T8403] FAT-fs (loop2): Filesystem has been set read-only [ 106.243752][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.257819][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.265357][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.272909][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 106.280401][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.287845][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.295321][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.302723][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.310168][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.317809][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.325406][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.332802][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.340313][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.347761][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.355298][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.362783][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.370257][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.377770][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.385226][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.392643][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.400083][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.407723][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.415255][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.422656][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.430090][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.437605][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.445014][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.452533][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.459664][ T8419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.459938][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.459963][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.469697][ T8419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.475758][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.498498][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.505916][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.513469][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.521085][ T3390] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 106.529899][ T3390] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.603855][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 106.616214][ T8436] syz.0.1844[8436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.616324][ T8436] syz.0.1844[8436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.643998][ T8436] syz.0.1844[8436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.654203][ T8443] 9pnet_fd: Insufficient options for proto=fd [ 106.669164][ T8446] 9pnet_fd: Insufficient options for proto=fd [ 106.686580][ T8440] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 106.690627][ T8443] 9pnet_fd: Insufficient options for proto=fd [ 106.771752][ T8464] FAULT_INJECTION: forcing a failure. [ 106.771752][ T8464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.784893][ T8464] CPU: 0 UID: 0 PID: 8464 Comm: syz.2.1853 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 106.795589][ T8464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.805671][ T8464] Call Trace: [ 106.808971][ T8464] [ 106.811923][ T8464] dump_stack_lvl+0xf2/0x150 [ 106.816542][ T8464] dump_stack+0x15/0x20 [ 106.820824][ T8464] should_fail_ex+0x223/0x230 [ 106.825567][ T8464] should_fail+0xb/0x10 [ 106.829758][ T8464] should_fail_usercopy+0x1a/0x20 [ 106.834876][ T8464] _copy_from_iter+0xd5/0xd00 [ 106.839582][ T8464] ? kmalloc_reserve+0x16e/0x190 [ 106.844573][ T8464] ? __build_skb_around+0x196/0x1f0 [ 106.849903][ T8464] ? __alloc_skb+0x21f/0x310 [ 106.854531][ T8464] ? __virt_addr_valid+0x1ed/0x250 [ 106.859701][ T8464] ? __check_object_size+0x364/0x520 [ 106.865058][ T8464] netlink_sendmsg+0x460/0x6e0 [ 106.869989][ T8464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.875298][ T8464] __sock_sendmsg+0x140/0x180 [ 106.880037][ T8464] ____sys_sendmsg+0x312/0x410 [ 106.884837][ T8464] __sys_sendmsg+0x1d9/0x270 [ 106.889532][ T8464] __x64_sys_sendmsg+0x46/0x50 [ 106.894334][ T8464] x64_sys_call+0x2689/0x2d60 [ 106.899083][ T8464] do_syscall_64+0xc9/0x1c0 [ 106.903620][ T8464] ? clear_bhb_loop+0x55/0xb0 [ 106.908321][ T8464] ? clear_bhb_loop+0x55/0xb0 [ 106.913030][ T8464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.919003][ T8464] RIP: 0033:0x7fe2156ae719 [ 106.923444][ T8464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.943083][ T8464] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.951714][ T8464] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 106.959709][ T8464] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 106.967734][ T8464] RBP: 00007fe214321090 R08: 0000000000000000 R09: 0000000000000000 [ 106.975767][ T8464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.983828][ T8464] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 106.991841][ T8464] [ 106.995050][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.091319][ T8511] FAULT_INJECTION: forcing a failure. [ 107.091319][ T8511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.104494][ T8511] CPU: 0 UID: 0 PID: 8511 Comm: syz.1.1860 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 107.115201][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.125278][ T8511] Call Trace: [ 107.128613][ T8511] [ 107.131590][ T8511] dump_stack_lvl+0xf2/0x150 [ 107.136254][ T8511] dump_stack+0x15/0x20 [ 107.140546][ T8511] should_fail_ex+0x223/0x230 [ 107.145272][ T8511] should_fail+0xb/0x10 [ 107.149527][ T8511] should_fail_usercopy+0x1a/0x20 [ 107.154589][ T8511] _copy_from_user+0x1e/0xb0 [ 107.159218][ T8511] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 107.164444][ T8511] map_update_elem+0x195/0x470 [ 107.169320][ T8511] __sys_bpf+0x713/0x7a0 [ 107.173593][ T8511] __x64_sys_bpf+0x43/0x50 [ 107.178100][ T8511] x64_sys_call+0x2625/0x2d60 [ 107.182807][ T8511] do_syscall_64+0xc9/0x1c0 [ 107.187395][ T8511] ? clear_bhb_loop+0x55/0xb0 [ 107.192149][ T8511] ? clear_bhb_loop+0x55/0xb0 [ 107.196854][ T8511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.202876][ T8511] RIP: 0033:0x7fcecbb8e719 [ 107.207316][ T8511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.226961][ T8511] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.235399][ T8511] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 107.243470][ T8511] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 107.251475][ T8511] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 107.259551][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.267574][ T8511] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 107.275629][ T8511] [ 107.424988][ T8555] loop2: detected capacity change from 0 to 1024 [ 107.452852][ T8564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 107.492290][ T8555] EXT4-fs (loop2): shut down requested (0) [ 107.517199][ T8579] ip6gre1: entered allmulticast mode [ 107.655008][ T8582] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 107.681681][ T8582] loop2: detected capacity change from 0 to 764 [ 107.698777][ T8582] Symlink component flag not implemented [ 107.704525][ T8582] Symlink component flag not implemented (129) [ 107.713507][ T8582] rock: directory entry would overflow storage [ 107.719727][ T8582] rock: sig=0x4f50, size=4, remaining=3 [ 107.725394][ T8582] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 107.800142][ T8611] loop2: detected capacity change from 0 to 2048 [ 107.915984][ T8636] FAULT_INJECTION: forcing a failure. [ 107.915984][ T8636] name failslab, interval 1, probability 0, space 0, times 0 [ 107.928774][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz.2.1875 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 107.936693][ T8643] Falling back ldisc for ttyS3. [ 107.939457][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.939476][ T8636] Call Trace: [ 107.939484][ T8636] [ 107.960703][ T8636] dump_stack_lvl+0xf2/0x150 [ 107.965322][ T8636] dump_stack+0x15/0x20 [ 107.969522][ T8636] should_fail_ex+0x223/0x230 [ 107.974242][ T8636] ? vm_area_dup+0x98/0x130 [ 107.978776][ T8636] should_failslab+0x8f/0xb0 [ 107.983470][ T8636] kmem_cache_alloc_noprof+0x4c/0x290 [ 107.989018][ T8636] vm_area_dup+0x98/0x130 [ 107.993399][ T8636] copy_mm+0x60b/0x10e0 [ 107.997595][ T8636] copy_process+0xd5b/0x1f90 [ 108.002223][ T8636] kernel_clone+0x167/0x5e0 [ 108.006755][ T8636] ? vfs_write+0x596/0x920 [ 108.011279][ T8636] __x64_sys_clone+0xe8/0x120 [ 108.016149][ T8636] x64_sys_call+0x2d23/0x2d60 [ 108.020999][ T8636] do_syscall_64+0xc9/0x1c0 [ 108.025538][ T8636] ? clear_bhb_loop+0x55/0xb0 [ 108.030243][ T8636] ? clear_bhb_loop+0x55/0xb0 [ 108.035001][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.041002][ T8636] RIP: 0033:0x7fe2156ae719 [ 108.045442][ T8636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.065123][ T8636] RSP: 002b:00007fe214320fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 108.073569][ T8636] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 108.081568][ T8636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 108.089565][ T8636] RBP: 00007fe214321090 R08: 0000000000000000 R09: 0000000000000000 [ 108.097611][ T8636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.105611][ T8636] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 108.113616][ T8636] [ 108.117199][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 108.162257][ T8666] loop2: detected capacity change from 0 to 512 [ 108.172337][ T8666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 108.180377][ T8666] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 108.195639][ T8666] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 108.202396][ T8666] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm \: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 108.219958][ T8666] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm \: couldn't read orphan inode 13 (err -117) [ 108.231563][ T8666] EXT4-fs mount: 4 callbacks suppressed [ 108.231582][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 108.261705][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.485910][ T8700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1878'. [ 108.504723][ T8700] loop2: detected capacity change from 0 to 2048 [ 108.558048][ T8704] sd 0:0:1:0: device reset [ 108.627443][ T8710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=8710 comm=syz.1.1884 [ 108.654859][ T8712] sd 0:0:1:0: device reset [ 108.693025][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 108.693043][ T29] audit: type=1326 audit(1731253995.399:126235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.723205][ T29] audit: type=1326 audit(1731253995.399:126236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.746905][ T29] audit: type=1326 audit(1731253995.399:126237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.770715][ T29] audit: type=1400 audit(1731253995.399:126238): avc: denied { listen } for pid=8715 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.790578][ T29] audit: type=1326 audit(1731253995.399:126239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.814317][ T29] audit: type=1326 audit(1731253995.399:126240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.837866][ T29] audit: type=1326 audit(1731253995.399:126241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.861675][ T29] audit: type=1326 audit(1731253995.399:126242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.885225][ T29] audit: type=1326 audit(1731253995.399:126243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.908784][ T29] audit: type=1326 audit(1731253995.399:126244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8715 comm="syz.1.1887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fcecbb8e719 code=0x7ffc0000 [ 108.960456][ T8726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8726 comm=syz.1.1890 [ 109.039325][ T8741] sd 0:0:1:0: device reset [ 109.054965][ T8743] netlink: 'syz.1.1897': attribute type 21 has an invalid length. [ 109.068556][ T8747] loop4: detected capacity change from 0 to 512 [ 109.073623][ T8743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1897'. [ 109.075085][ T8747] EXT4-fs: Ignoring removed oldalloc option [ 109.093110][ T8747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.116143][ T8747] EXT4-fs (loop4): 1 truncate cleaned up [ 109.122151][ T8747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.155168][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 109.183238][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.214903][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1900'. [ 109.303051][ T8761] syz.2.1902[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.303345][ T8761] syz.2.1902[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.314962][ T8761] syz.2.1902[8761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.433781][ T8775] syz.0.1909[8775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.456076][ T8775] syz.0.1909[8775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.466297][ T8777] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1910'. [ 109.475781][ T8775] syz.0.1909[8775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.492067][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1911'. [ 109.677727][ T8804] FAULT_INJECTION: forcing a failure. [ 109.677727][ T8804] name failslab, interval 1, probability 0, space 0, times 0 [ 109.690431][ T8804] CPU: 1 UID: 0 PID: 8804 Comm: syz.4.1921 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 109.701195][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.711279][ T8804] Call Trace: [ 109.714570][ T8804] [ 109.717518][ T8804] dump_stack_lvl+0xf2/0x150 [ 109.722203][ T8804] dump_stack+0x15/0x20 [ 109.726405][ T8804] should_fail_ex+0x223/0x230 [ 109.731136][ T8804] ? _sctp_make_chunk+0xba/0x210 [ 109.736144][ T8804] should_failslab+0x8f/0xb0 [ 109.740802][ T8804] kmem_cache_alloc_noprof+0x4c/0x290 [ 109.746225][ T8804] _sctp_make_chunk+0xba/0x210 [ 109.751013][ T8804] sctp_make_init+0x3d3/0x1180 [ 109.755797][ T8804] sctp_sf_do_prm_asoc+0x7f/0x1e0 [ 109.760856][ T8804] sctp_do_sm+0xb8/0x31a0 [ 109.765197][ T8804] ? __rcu_read_unlock+0x4e/0x70 [ 109.770152][ T8804] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 109.776137][ T8804] sctp_primitive_ASSOCIATE+0x72/0x90 [ 109.781542][ T8804] sctp_sendmsg_to_asoc+0x97b/0xbe0 [ 109.786769][ T8804] sctp_sendmsg+0x136f/0x1920 [ 109.791496][ T8804] ? __pfx_sctp_sendmsg+0x10/0x10 [ 109.796540][ T8804] inet_sendmsg+0xc5/0xd0 [ 109.800977][ T8804] __sock_sendmsg+0x102/0x180 [ 109.805694][ T8804] ____sys_sendmsg+0x312/0x410 [ 109.810532][ T8804] __sys_sendmsg+0x1d9/0x270 [ 109.815151][ T8804] __x64_sys_sendmsg+0x46/0x50 [ 109.819929][ T8804] x64_sys_call+0x2689/0x2d60 [ 109.824630][ T8804] do_syscall_64+0xc9/0x1c0 [ 109.829144][ T8804] ? clear_bhb_loop+0x55/0xb0 [ 109.833868][ T8804] ? clear_bhb_loop+0x55/0xb0 [ 109.838552][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.844526][ T8804] RIP: 0033:0x7f22cebfe719 [ 109.848948][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.868615][ T8804] RSP: 002b:00007f22cd877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.877087][ T8804] RAX: ffffffffffffffda RBX: 00007f22cedb5f80 RCX: 00007f22cebfe719 [ 109.885185][ T8804] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000005 [ 109.893161][ T8804] RBP: 00007f22cd877090 R08: 0000000000000000 R09: 0000000000000000 [ 109.901149][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.909127][ T8804] R13: 0000000000000000 R14: 00007f22cedb5f80 R15: 00007ffe136567d8 [ 109.917191][ T8804] [ 109.949905][ T8811] syz.3.1924[8811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.195179][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 110.221546][ T8825] loop4: detected capacity change from 0 to 1024 [ 110.248891][ T8825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.265035][ T8825] EXT4-fs (loop4): shut down requested (0) [ 110.285564][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.405225][ T8842] loop2: detected capacity change from 0 to 2048 [ 110.418261][ T8842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.457049][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.482283][ T8853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 110.493235][ T8851] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1940'. [ 110.529842][ T8855] FAULT_INJECTION: forcing a failure. [ 110.529842][ T8855] name failslab, interval 1, probability 0, space 0, times 0 [ 110.542599][ T8855] CPU: 0 UID: 0 PID: 8855 Comm: syz.4.1941 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 110.553356][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.563435][ T8855] Call Trace: [ 110.566765][ T8855] [ 110.569705][ T8855] dump_stack_lvl+0xf2/0x150 [ 110.574313][ T8855] dump_stack+0x15/0x20 [ 110.578481][ T8855] should_fail_ex+0x223/0x230 [ 110.583279][ T8855] ? resv_map_alloc+0x32/0x190 [ 110.588064][ T8855] should_failslab+0x8f/0xb0 [ 110.592747][ T8855] __kmalloc_cache_noprof+0x4b/0x2a0 [ 110.598142][ T8855] resv_map_alloc+0x32/0x190 [ 110.602816][ T8855] hugetlb_reserve_pages+0x265/0xbc0 [ 110.608130][ T8855] hugetlbfs_file_mmap+0x40e/0x4d0 [ 110.613293][ T8855] mmap_region+0xc83/0x1640 [ 110.617870][ T8855] do_mmap+0x718/0xb60 [ 110.621959][ T8855] vm_mmap_pgoff+0x133/0x290 [ 110.626567][ T8855] ksys_mmap_pgoff+0x2de/0x330 [ 110.631348][ T8855] x64_sys_call+0x1884/0x2d60 [ 110.636116][ T8855] do_syscall_64+0xc9/0x1c0 [ 110.640633][ T8855] ? clear_bhb_loop+0x55/0xb0 [ 110.645388][ T8855] ? clear_bhb_loop+0x55/0xb0 [ 110.650157][ T8855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.656149][ T8855] RIP: 0033:0x7f22cebfe719 [ 110.660569][ T8855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.680282][ T8855] RSP: 002b:00007f22cd877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 110.688709][ T8855] RAX: ffffffffffffffda RBX: 00007f22cedb5f80 RCX: 00007f22cebfe719 [ 110.696704][ T8855] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000000020000000 [ 110.704683][ T8855] RBP: 00007f22cd877090 R08: ffffffffffffffff R09: 0000000000000000 [ 110.712662][ T8855] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 110.720641][ T8855] R13: 0000000000000000 R14: 00007f22cedb5f80 R15: 00007ffe136567d8 [ 110.728679][ T8855] [ 110.807875][ T8871] loop2: detected capacity change from 0 to 512 [ 110.814621][ T8871] ext4: Unknown parameter 'obj_user' [ 110.853869][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'. [ 110.949107][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1952'. [ 111.039484][ T8891] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1954'. [ 111.110581][ T8905] loop2: detected capacity change from 0 to 1024 [ 111.129859][ T8905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.142260][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'. [ 111.179016][ T8905] EXT4-fs (loop2): shut down requested (0) [ 111.198666][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.199942][ T8919] FAULT_INJECTION: forcing a failure. [ 111.199942][ T8919] name failslab, interval 1, probability 0, space 0, times 0 [ 111.220413][ T8919] CPU: 0 UID: 0 PID: 8919 Comm: syz.3.1965 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 111.231113][ T8919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.241191][ T8919] Call Trace: [ 111.244491][ T8919] [ 111.247443][ T8919] dump_stack_lvl+0xf2/0x150 [ 111.252087][ T8919] dump_stack+0x15/0x20 [ 111.256313][ T8919] should_fail_ex+0x223/0x230 [ 111.261033][ T8919] ? __se_sys_memfd_create+0x230/0x5c0 [ 111.266532][ T8919] should_failslab+0x8f/0xb0 [ 111.271217][ T8919] __kmalloc_noprof+0xa5/0x370 [ 111.276058][ T8919] __se_sys_memfd_create+0x230/0x5c0 [ 111.281481][ T8919] __x64_sys_memfd_create+0x31/0x40 [ 111.286750][ T8919] x64_sys_call+0x2891/0x2d60 [ 111.291463][ T8919] do_syscall_64+0xc9/0x1c0 [ 111.295996][ T8919] ? clear_bhb_loop+0x55/0xb0 [ 111.300705][ T8919] ? clear_bhb_loop+0x55/0xb0 [ 111.305458][ T8919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.311392][ T8919] RIP: 0033:0x7f91b197e719 [ 111.315885][ T8919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.335553][ T8919] RSP: 002b:00007f91b05f6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 111.343999][ T8919] RAX: ffffffffffffffda RBX: 0000000000000453 RCX: 00007f91b197e719 [ 111.352003][ T8919] RDX: 00007f91b05f6ef0 RSI: 0000000000000000 RDI: 00007f91b19f1c0a [ 111.360008][ T8919] RBP: 0000000020000900 R08: 00007f91b05f6bb7 R09: 00007f91b05f6e40 [ 111.368014][ T8919] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000480 [ 111.376042][ T8919] R13: 00007f91b05f6ef0 R14: 00007f91b05f6eb0 R15: 0000000020000280 [ 111.384069][ T8919] [ 111.387238][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 111.450760][ T8930] netlink: 'syz.3.1970': attribute type 3 has an invalid length. [ 111.566086][ T8936] loop2: detected capacity change from 0 to 1024 [ 111.576545][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.591595][ T8936] EXT4-fs (loop2): shut down requested (0) [ 111.610081][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.653978][ T8946] FAULT_INJECTION: forcing a failure. [ 111.653978][ T8946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.667128][ T8946] CPU: 1 UID: 0 PID: 8946 Comm: syz.3.1975 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 111.677898][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.688185][ T8946] Call Trace: [ 111.691526][ T8946] [ 111.694477][ T8946] dump_stack_lvl+0xf2/0x150 [ 111.699115][ T8946] dump_stack+0x15/0x20 [ 111.703315][ T8946] should_fail_ex+0x223/0x230 [ 111.708119][ T8946] should_fail+0xb/0x10 [ 111.712315][ T8946] should_fail_usercopy+0x1a/0x20 [ 111.717415][ T8946] _copy_from_user+0x1e/0xb0 [ 111.722079][ T8946] copy_msghdr_from_user+0x54/0x2a0 [ 111.727310][ T8946] __sys_sendmsg+0x171/0x270 [ 111.731984][ T8946] __x64_sys_sendmsg+0x46/0x50 [ 111.736771][ T8946] x64_sys_call+0x2689/0x2d60 [ 111.741466][ T8946] do_syscall_64+0xc9/0x1c0 [ 111.745987][ T8946] ? clear_bhb_loop+0x55/0xb0 [ 111.750678][ T8946] ? clear_bhb_loop+0x55/0xb0 [ 111.755407][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.761442][ T8946] RIP: 0033:0x7f91b197e719 [ 111.765870][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.785529][ T8946] RSP: 002b:00007f91b05f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.794225][ T8946] RAX: ffffffffffffffda RBX: 00007f91b1b35f80 RCX: 00007f91b197e719 [ 111.802247][ T8946] RDX: 00000000040c0080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 111.810235][ T8946] RBP: 00007f91b05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.818215][ T8946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.826293][ T8946] R13: 0000000000000000 R14: 00007f91b1b35f80 R15: 00007ffdfd4883a8 [ 111.834281][ T8946] [ 111.854076][ T8950] lo speed is unknown, defaulting to 1000 [ 111.898043][ T8950] loop2: detected capacity change from 0 to 128 [ 111.908822][ T8950] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.921828][ T8950] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.096326][ T8973] loop4: detected capacity change from 0 to 2048 [ 112.102967][ T8973] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.109430][ T8973] EXT4-fs: Ignoring removed i_version option [ 112.115974][ T8973] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 112.125513][ T8973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.149606][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.352489][ T9002] 9p: Unknown access argument u01777777777777777777777: -22 [ 112.435204][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.539229][ T9019] loop4: detected capacity change from 0 to 128 [ 112.549287][ T9019] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.578545][ T9019] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.604085][ T9022] dvmrp0: entered allmulticast mode [ 112.610232][ T9022] dvmrp0: left allmulticast mode [ 112.610777][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.617393][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.687544][ T9031] loop2: detected capacity change from 0 to 1024 [ 112.702996][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.711942][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.721831][ T8959] 9pnet_fd: p9_fd_create_tcp (8959): problem connecting socket to 127.0.0.1 [ 112.737354][ T9031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.807758][ T9031] EXT4-fs (loop2): shut down requested (0) [ 112.836475][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.864316][ T9043] FAULT_INJECTION: forcing a failure. [ 112.864316][ T9043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.877475][ T9043] CPU: 1 UID: 0 PID: 9043 Comm: syz.1.2011 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 112.888175][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.898328][ T9043] Call Trace: [ 112.901625][ T9043] [ 112.904580][ T9043] dump_stack_lvl+0xf2/0x150 [ 112.909204][ T9043] dump_stack+0x15/0x20 [ 112.913420][ T9043] should_fail_ex+0x223/0x230 [ 112.918177][ T9043] should_fail+0xb/0x10 [ 112.922450][ T9043] should_fail_usercopy+0x1a/0x20 [ 112.927507][ T9043] _copy_from_user+0x1e/0xb0 [ 112.932133][ T9043] do_ipv6_setsockopt+0x1ef/0x2250 [ 112.937346][ T9043] ? kstrtoull+0x110/0x140 [ 112.941853][ T9043] ? __rcu_read_unlock+0x4e/0x70 [ 112.946837][ T9043] ? avc_has_perm_noaudit+0x1cc/0x210 [ 112.952232][ T9043] ipv6_setsockopt+0x57/0x130 [ 112.957158][ T9043] tcp_setsockopt+0x93/0xb0 [ 112.961715][ T9043] sock_common_setsockopt+0x64/0x80 [ 112.966934][ T9043] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 112.972863][ T9043] smc_setsockopt+0x182/0x7a0 [ 112.977588][ T9043] ? __pfx_smc_setsockopt+0x10/0x10 [ 112.982868][ T9043] __sys_setsockopt+0x1cc/0x240 [ 112.987743][ T9043] __x64_sys_setsockopt+0x66/0x80 [ 112.992811][ T9043] x64_sys_call+0x278d/0x2d60 [ 112.997569][ T9043] do_syscall_64+0xc9/0x1c0 [ 113.002088][ T9043] ? clear_bhb_loop+0x55/0xb0 [ 113.006821][ T9043] ? clear_bhb_loop+0x55/0xb0 [ 113.011511][ T9043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.017510][ T9043] RIP: 0033:0x7fcecbb8e719 [ 113.021933][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.041679][ T9043] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.050149][ T9043] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 113.058189][ T9043] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000003 [ 113.066179][ T9043] RBP: 00007fceca801090 R08: 0000000000000018 R09: 0000000000000000 [ 113.074160][ T9043] R10: 0000000020001940 R11: 0000000000000246 R12: 0000000000000001 [ 113.082135][ T9043] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 113.090120][ T9043] [ 113.140964][ T9048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 113.475169][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 113.500760][ T9055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.509340][ T9055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.536978][ T9059] FAULT_INJECTION: forcing a failure. [ 113.536978][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.537756][ T9055] bpf_get_probe_write_proto: 2 callbacks suppressed [ 113.537773][ T9055] syz.2.2010[9055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.550102][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.0.2016 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 113.559039][ T9055] syz.2.2010[9055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.568011][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.568031][ T9059] Call Trace: [ 113.568039][ T9059] [ 113.568048][ T9059] dump_stack_lvl+0xf2/0x150 [ 113.580126][ T9055] syz.2.2010[9055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.589982][ T9059] dump_stack+0x15/0x20 [ 113.590016][ T9059] should_fail_ex+0x223/0x230 [ 113.590056][ T9059] should_fail+0xb/0x10 [ 113.633010][ T9064] loop4: detected capacity change from 0 to 512 [ 113.635335][ T9059] should_fail_usercopy+0x1a/0x20 [ 113.635368][ T9059] _copy_from_iter+0xd5/0xd00 [ 113.635392][ T9059] ? kmalloc_reserve+0x16e/0x190 [ 113.635430][ T9059] ? __build_skb_around+0x196/0x1f0 [ 113.661761][ T9059] ? __alloc_skb+0x21f/0x310 [ 113.666378][ T9059] ? __virt_addr_valid+0x1ed/0x250 [ 113.666501][ T9064] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.2017: corrupted in-inode xattr: invalid ea_ino [ 113.671508][ T9059] ? __check_object_size+0x364/0x520 [ 113.686761][ T9064] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.2017: couldn't read orphan inode 15 (err -117) [ 113.690194][ T9059] netlink_sendmsg+0x460/0x6e0 [ 113.702396][ T29] kauditd_printk_skb: 821 callbacks suppressed [ 113.702413][ T29] audit: type=1326 audit(1731254000.419:127066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.706778][ T9059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.706828][ T9059] __sock_sendmsg+0x140/0x180 [ 113.706855][ T9059] ____sys_sendmsg+0x312/0x410 [ 113.715349][ T29] audit: type=1326 audit(1731254000.429:127067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.736551][ T9059] __sys_sendmsg+0x1d9/0x270 [ 113.736597][ T9059] __x64_sys_sendmsg+0x46/0x50 [ 113.736622][ T9059] x64_sys_call+0x2689/0x2d60 [ 113.741983][ T29] audit: type=1326 audit(1731254000.429:127068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.746616][ T9059] do_syscall_64+0xc9/0x1c0 [ 113.746648][ T9059] ? clear_bhb_loop+0x55/0xb0 [ 113.751429][ T29] audit: type=1326 audit(1731254000.429:127069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.774910][ T9059] ? clear_bhb_loop+0x55/0xb0 [ 113.774940][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.779552][ T29] audit: type=1326 audit(1731254000.429:127070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.784268][ T9059] RIP: 0033:0x7f1183c5e719 [ 113.784288][ T9059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.784317][ T9059] RSP: 002b:00007f11828d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.789019][ T29] audit: type=1326 audit(1731254000.429:127071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.812490][ T9059] RAX: ffffffffffffffda RBX: 00007f1183e15f80 RCX: 00007f1183c5e719 [ 113.812510][ T9059] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 113.812527][ T9059] RBP: 00007f11828d1090 R08: 0000000000000000 R09: 0000000000000000 [ 113.817033][ T29] audit: type=1326 audit(1731254000.429:127072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.821771][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.821790][ T9059] R13: 0000000000000000 R14: 00007f1183e15f80 R15: 00007ffd392d8738 [ 113.845404][ T29] audit: type=1326 audit(1731254000.429:127073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 113.850004][ T9059] [ 113.856330][ T9064] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.879632][ T29] audit: type=1326 audit(1731254000.429:127074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9054 comm="syz.2.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 114.032104][ T9072] netlink: 'syz.0.2022': attribute type 3 has an invalid length. [ 114.040066][ T29] audit: type=1400 audit(1731254000.629:127075): avc: denied { write } for pid=9060 comm="syz.4.2017" path="socket:[21328]" dev="sockfs" ino=21328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 114.066090][ T3313] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 114.144182][ T9081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.152690][ T9082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.161726][ T9082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.169859][ T9081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.176742][ T9082] __nla_validate_parse: 8 callbacks suppressed [ 114.176767][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'. [ 114.192811][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2025'. [ 114.199857][ T35] IPVS: starting estimator thread 0... [ 114.213756][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 114.222965][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2026'. [ 114.242407][ T9089] loop5: detected capacity change from 0 to 7 [ 114.252312][ T9089] Buffer I/O error on dev loop5, logical block 0, async page read [ 114.265274][ T9089] Buffer I/O error on dev loop5, logical block 0, async page read [ 114.273971][ T9089] loop5: unable to read partition table [ 114.280349][ T9089] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 114.280349][ T9089] ) failed (rc=-5) [ 114.347251][ T9087] IPVS: using max 2304 ests per chain, 115200 per kthread [ 114.370665][ T9097] loop2: detected capacity change from 0 to 512 [ 114.379831][ T9097] /dev/loop2: Can't open blockdev [ 114.404656][ T9103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2033'. [ 114.406282][ T9105] loop2: detected capacity change from 0 to 1024 [ 114.438025][ T9105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.452467][ T9105] EXT4-fs (loop2): shut down requested (0) [ 114.468963][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.490384][ T9123] netlink: 'syz.2.2038': attribute type 3 has an invalid length. [ 114.515213][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 114.539462][ T9127] syz.1.2040[9127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.539565][ T9127] syz.1.2040[9127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.551154][ T9127] syz.1.2040[9127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.567647][ T9127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.620862][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 114.666506][ T9144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.685683][ T9147] dvmrp1: entered allmulticast mode [ 114.692961][ T9147] dvmrp1: left allmulticast mode [ 114.702975][ T9149] serio: Serial port ptm0 [ 114.776569][ T9155] netlink: 'syz.1.2051': attribute type 3 has an invalid length. [ 114.911366][ T9177] loop4: detected capacity change from 0 to 1024 [ 114.928619][ T9177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.961634][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2057'. [ 114.998154][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.002102][ T9189] capability: warning: `syz.0.2061' uses 32-bit capabilities (legacy support in use) [ 115.161240][ T9206] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2064'. [ 115.201886][ T9211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.237144][ T9211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.271423][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'. [ 115.280475][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2066'. [ 115.555188][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 115.612419][ T9223] netlink: 'syz.3.2071': attribute type 3 has an invalid length. [ 115.747792][ T9235] block device autoloading is deprecated and will be removed. [ 115.808103][ T9237] loop3: detected capacity change from 0 to 128 [ 115.830345][ T9237] /dev/loop3: Can't open blockdev [ 116.130046][ T9264] netlink: 'syz.2.2086': attribute type 3 has an invalid length. [ 116.150388][ T9268] loop0: detected capacity change from 0 to 512 [ 116.157731][ T9268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.176053][ T9268] EXT4-fs (loop0): 1 truncate cleaned up [ 116.182145][ T9268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.229296][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.237845][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.241858][ T9279] loop4: detected capacity change from 0 to 512 [ 116.256378][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.258961][ T3393] IPVS: starting estimator thread 0... [ 116.280380][ T9279] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.2093: corrupted xattr block 255: invalid header [ 116.289202][ T9286] loop2: detected capacity change from 0 to 512 [ 116.300466][ T9286] ext4: Unknown parameter 'euid>00000000000000000000' [ 116.332015][ T9279] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 116.345034][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.355210][ T9280] IPVS: using max 2064 ests per chain, 103200 per kthread [ 116.371633][ T9279] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.2093: corrupted xattr block 255: invalid header [ 116.391876][ T9279] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 116.399369][ T9279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.438877][ T9279] loop4: detected capacity change from 0 to 512 [ 116.464068][ T9279] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.2093: corrupted xattr block 255: invalid header [ 116.464833][ T9299] lo speed is unknown, defaulting to 1000 [ 116.492903][ T9279] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 116.531331][ T9279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.537775][ T9308] loop2: detected capacity change from 0 to 512 [ 116.571786][ T9279] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #2: comm syz.4.2093: corrupted xattr block 255: invalid header [ 116.575478][ T9314] syz.0.2102[9314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.586495][ T9279] SELinux: (dev loop4, type ext4) getxattr errno 117 [ 116.592420][ T9313] tipc: New replicast peer: 255.255.255.5 [ 116.597955][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 116.605150][ T9308] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.610759][ T9313] tipc: Enabled bearer , priority 10 [ 116.617653][ T9314] syz.0.2102[9314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.633940][ T9279] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.644759][ T9314] loop0: detected capacity change from 0 to 764 [ 116.646578][ T9308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 116.668672][ T9308] System zones: 1-12 [ 116.673126][ T9314] iso9660: Unknown parameter '' [ 116.683256][ T9308] EXT4-fs (loop2): 1 truncate cleaned up [ 116.689425][ T9308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.694471][ T9319] loop3: detected capacity change from 0 to 512 [ 116.729424][ T9326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9326 comm=syz.0.2106 [ 116.763192][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.766741][ T9330] loop3: detected capacity change from 0 to 512 [ 116.789248][ T9330] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.2109: casefold flag without casefold feature [ 116.803446][ T9330] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.2109: couldn't read orphan inode 15 (err -117) [ 116.819592][ T9330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.855926][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.867718][ T9340] loop4: detected capacity change from 0 to 128 [ 116.874178][ T9340] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 116.952674][ T9357] syz.2.2118[9357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.952749][ T9357] syz.2.2118[9357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.016455][ T9363] netlink: '+}[@': attribute type 1 has an invalid length. [ 117.117387][ T9366] loop2: detected capacity change from 0 to 8192 [ 117.147745][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.156429][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.635170][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.708546][ T9384] loop4: detected capacity change from 0 to 512 [ 117.726639][ T9384] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.741773][ T9384] EXT4-fs (loop4): mount failed [ 117.804769][ T9392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.858168][ T9401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9401 comm=syz.4.2134 [ 117.881205][ T9403] FAULT_INJECTION: forcing a failure. [ 117.881205][ T9403] name failslab, interval 1, probability 0, space 0, times 0 [ 117.888232][ T9401] loop4: detected capacity change from 0 to 128 [ 117.893884][ T9403] CPU: 0 UID: 0 PID: 9403 Comm: syz.0.2133 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 117.901167][ T9401] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 117.911496][ T9403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.911524][ T9403] Call Trace: [ 117.911533][ T9403] [ 117.911543][ T9403] dump_stack_lvl+0xf2/0x150 [ 117.940442][ T9403] dump_stack+0x15/0x20 [ 117.944633][ T9403] should_fail_ex+0x223/0x230 [ 117.949383][ T9403] ? resv_map_alloc+0x32/0x190 [ 117.954237][ T9403] should_failslab+0x8f/0xb0 [ 117.958846][ T9403] __kmalloc_cache_noprof+0x4b/0x2a0 [ 117.964189][ T9403] resv_map_alloc+0x32/0x190 [ 117.968857][ T9403] hugetlbfs_get_inode+0x6e/0x2b0 [ 117.973909][ T9403] hugetlb_file_setup+0x188/0x3c0 [ 117.979044][ T9403] ksys_mmap_pgoff+0x172/0x330 [ 117.983850][ T9403] x64_sys_call+0x1884/0x2d60 [ 117.988571][ T9403] do_syscall_64+0xc9/0x1c0 [ 117.993087][ T9403] ? clear_bhb_loop+0x55/0xb0 [ 117.997783][ T9403] ? clear_bhb_loop+0x55/0xb0 [ 118.002477][ T9403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.008537][ T9403] RIP: 0033:0x7f1183c5e719 [ 118.012969][ T9403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.032602][ T9403] RSP: 002b:00007f11828d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.041102][ T9403] RAX: ffffffffffffffda RBX: 00007f1183e15f80 RCX: 00007f1183c5e719 [ 118.049084][ T9403] RDX: 0000000000000008 RSI: 0000000000c00000 RDI: 0000000020400000 [ 118.057068][ T9403] RBP: 00007f11828d1090 R08: ffffffffffffffff R09: 0000000000000000 [ 118.065048][ T9403] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 118.073025][ T9403] R13: 0000000000000000 R14: 00007f1183e15f80 R15: 00007ffd392d8738 [ 118.081015][ T9403] [ 118.103379][ T9408] FAULT_INJECTION: forcing a failure. [ 118.103379][ T9408] name failslab, interval 1, probability 0, space 0, times 0 [ 118.109965][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.116082][ T9408] CPU: 0 UID: 0 PID: 9408 Comm: syz.3.2137 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 118.125638][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.135052][ T9408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.153002][ T9408] Call Trace: [ 118.156354][ T9408] [ 118.159330][ T9408] dump_stack_lvl+0xf2/0x150 [ 118.163932][ T9408] dump_stack+0x15/0x20 [ 118.168119][ T9408] should_fail_ex+0x223/0x230 [ 118.172811][ T9408] ? dst_alloc+0xc0/0x100 [ 118.177170][ T9408] should_failslab+0x8f/0xb0 [ 118.181846][ T9408] kmem_cache_alloc_noprof+0x4c/0x290 [ 118.187346][ T9408] dst_alloc+0xc0/0x100 [ 118.191595][ T9408] ? ipv4_sk_update_pmtu+0x782/0xb80 [ 118.196936][ T9408] ip_route_output_key_hash_rcu+0xb90/0x12d0 [ 118.202930][ T9408] ? call_rcu+0x2fb/0x430 [ 118.207274][ T9408] ip_route_output_flow+0x76/0x120 [ 118.212539][ T9408] tcp_v4_connect+0x45f/0xad0 [ 118.217288][ T9408] __inet_stream_connect+0x162/0x790 [ 118.222703][ T9408] ? should_fail_ex+0xd7/0x230 [ 118.227559][ T9408] ? tcp_sendmsg_fastopen+0x163/0x4f0 [ 118.233012][ T9408] ? should_failslab+0x8f/0xb0 [ 118.237879][ T9408] ? __kmalloc_cache_noprof+0x10b/0x2a0 [ 118.243527][ T9408] tcp_sendmsg_fastopen+0x40e/0x4f0 [ 118.248749][ T9408] tcp_sendmsg_locked+0x2513/0x2700 [ 118.254000][ T9408] ? mntput+0x49/0x70 [ 118.258148][ T9408] ? __rcu_read_unlock+0x4e/0x70 [ 118.263125][ T9408] ? avc_has_perm_noaudit+0x1cc/0x210 [ 118.268522][ T9408] ? avc_has_perm+0xd4/0x160 [ 118.273122][ T9408] ? _raw_spin_unlock_bh+0x36/0x40 [ 118.278305][ T9408] ? __pfx_tcp_sendmsg+0x10/0x10 [ 118.283247][ T9408] tcp_sendmsg+0x30/0x50 [ 118.287549][ T9408] inet_sendmsg+0x77/0xd0 [ 118.291944][ T9408] __sock_sendmsg+0x102/0x180 [ 118.296756][ T9408] __sys_sendto+0x1d6/0x260 [ 118.301293][ T9408] __x64_sys_sendto+0x78/0x90 [ 118.306023][ T9408] x64_sys_call+0x2959/0x2d60 [ 118.310820][ T9408] do_syscall_64+0xc9/0x1c0 [ 118.315342][ T9408] ? clear_bhb_loop+0x55/0xb0 [ 118.320070][ T9408] ? clear_bhb_loop+0x55/0xb0 [ 118.324757][ T9408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.330793][ T9408] RIP: 0033:0x7f91b197e719 [ 118.335252][ T9408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.354892][ T9408] RSP: 002b:00007f91b05f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 118.363399][ T9408] RAX: ffffffffffffffda RBX: 00007f91b1b35f80 RCX: 00007f91b197e719 [ 118.371419][ T9408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 118.379497][ T9408] RBP: 00007f91b05f7090 R08: 0000000020000180 R09: 0000000000000010 [ 118.387490][ T9408] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 118.395462][ T9408] R13: 0000000000000000 R14: 00007f91b1b35f80 R15: 00007ffdfd4883a8 [ 118.403478][ T9408] [ 118.446051][ T9418] FAULT_INJECTION: forcing a failure. [ 118.446051][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 118.458850][ T9418] CPU: 0 UID: 0 PID: 9418 Comm: syz.1.2141 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 118.469598][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.479728][ T9418] Call Trace: [ 118.483079][ T9418] [ 118.486032][ T9418] dump_stack_lvl+0xf2/0x150 [ 118.490720][ T9418] dump_stack+0x15/0x20 [ 118.494899][ T9418] should_fail_ex+0x223/0x230 [ 118.499642][ T9418] ? tracepoint_probe_unregister+0x16f/0x700 [ 118.505685][ T9418] should_failslab+0x8f/0xb0 [ 118.510321][ T9418] __kmalloc_noprof+0xa5/0x370 [ 118.515104][ T9418] ? __pfx_tp_stub_func+0x10/0x10 [ 118.520246][ T9418] tracepoint_probe_unregister+0x16f/0x700 [ 118.526111][ T9418] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 118.531593][ T9418] bpf_probe_unregister+0x37/0x50 [ 118.536689][ T9418] bpf_raw_tp_link_release+0x27/0x40 [ 118.542013][ T9418] bpf_link_free+0xc8/0x2f0 [ 118.546567][ T9418] bpf_link_release+0x52/0x70 [ 118.551392][ T9418] ? __pfx_bpf_link_release+0x10/0x10 [ 118.556768][ T9418] __fput+0x17a/0x6d0 [ 118.560844][ T9418] ? _raw_spin_unlock+0x26/0x50 [ 118.565749][ T9418] ____fput+0x1c/0x30 [ 118.569918][ T9418] task_work_run+0x13a/0x1a0 [ 118.574538][ T9418] syscall_exit_to_user_mode+0xbe/0x130 [ 118.580087][ T9418] do_syscall_64+0xd6/0x1c0 [ 118.584630][ T9418] ? clear_bhb_loop+0x55/0xb0 [ 118.589381][ T9418] ? clear_bhb_loop+0x55/0xb0 [ 118.594087][ T9418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.600065][ T9418] RIP: 0033:0x7fcecbb8e719 [ 118.604484][ T9418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.624134][ T9418] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 118.632556][ T9418] RAX: 0000000000000000 RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 118.640553][ T9418] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 118.648574][ T9418] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 118.656576][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.664669][ T9418] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 118.672734][ T9418] [ 118.676032][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.708042][ T9424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=9424 comm=syz.1.2143 [ 118.721509][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 118.721523][ T29] audit: type=1400 audit(1731254005.419:127755): avc: denied { append } for pid=9422 comm="syz.3.2142" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.751630][ T29] audit: type=1326 audit(1731254005.449:127756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9422 comm="syz.3.2142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91b197e719 code=0x0 [ 118.774805][ T29] audit: type=1400 audit(1731254005.469:127757): avc: denied { bind } for pid=9429 comm="syz.4.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 118.794356][ T29] audit: type=1400 audit(1731254005.469:127758): avc: denied { name_bind } for pid=9429 comm="syz.4.2145" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 118.815370][ T29] audit: type=1400 audit(1731254005.469:127759): avc: denied { node_bind } for pid=9429 comm="syz.4.2145" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 118.823069][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.836563][ T29] audit: type=1400 audit(1731254005.469:127760): avc: denied { listen } for pid=9429 comm="syz.4.2145" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 118.847942][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.865587][ T29] audit: type=1400 audit(1731254005.469:127761): avc: denied { accept } for pid=9429 comm="syz.4.2145" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 118.951845][ T29] audit: type=1326 audit(1731254005.659:127762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 118.975602][ T29] audit: type=1326 audit(1731254005.659:127763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 118.999483][ T29] audit: type=1326 audit(1731254005.659:127764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9433 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2156ae719 code=0x7ffc0000 [ 119.012840][ T9436] loop2: detected capacity change from 0 to 512 [ 119.036100][ T9436] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 119.044360][ T9436] System zones: 0-2, 18-18, 34-34 [ 119.050414][ T9436] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2146: bg 0: block 248: padding at end of block bitmap is not set [ 119.065017][ T9436] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.2146: Failed to acquire dquot type 1 [ 119.077069][ T9436] EXT4-fs (loop2): 1 truncate cleaned up [ 119.083102][ T9436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.095821][ T9436] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.122494][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.140213][ T9440] FAULT_INJECTION: forcing a failure. [ 119.140213][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 119.152978][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.2.2147 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 119.163686][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.173793][ T9440] Call Trace: [ 119.177145][ T9440] [ 119.180166][ T9440] dump_stack_lvl+0xf2/0x150 [ 119.184920][ T9440] dump_stack+0x15/0x20 [ 119.189232][ T9440] should_fail_ex+0x223/0x230 [ 119.194009][ T9440] ? skb_clone+0x154/0x1f0 [ 119.198570][ T9440] should_failslab+0x8f/0xb0 [ 119.203200][ T9440] kmem_cache_alloc_noprof+0x4c/0x290 [ 119.208620][ T9440] skb_clone+0x154/0x1f0 [ 119.212888][ T9440] __netlink_deliver_tap+0x2bd/0x4c0 [ 119.218275][ T9440] netlink_sendskb+0x126/0x150 [ 119.223075][ T9440] netlink_unicast+0x291/0x670 [ 119.227957][ T9440] netlink_ack+0x4c4/0x4f0 [ 119.232502][ T9440] netlink_rcv_skb+0x19c/0x230 [ 119.237266][ T9440] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.242784][ T9440] rtnetlink_rcv+0x1c/0x30 [ 119.247229][ T9440] netlink_unicast+0x599/0x670 [ 119.252039][ T9440] netlink_sendmsg+0x5cc/0x6e0 [ 119.256968][ T9440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.262274][ T9440] __sock_sendmsg+0x140/0x180 [ 119.267094][ T9440] __sys_sendto+0x1d6/0x260 [ 119.271634][ T9440] __x64_sys_sendto+0x78/0x90 [ 119.276323][ T9440] x64_sys_call+0x2959/0x2d60 [ 119.281099][ T9440] do_syscall_64+0xc9/0x1c0 [ 119.285636][ T9440] ? clear_bhb_loop+0x55/0xb0 [ 119.290365][ T9440] ? clear_bhb_loop+0x55/0xb0 [ 119.295065][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.301065][ T9440] RIP: 0033:0x7fe2156ae719 [ 119.305501][ T9440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.325143][ T9440] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 119.333624][ T9440] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 119.341615][ T9440] RDX: 0000000000000090 RSI: 0000000020000180 RDI: 0000000000000004 [ 119.349610][ T9440] RBP: 00007fe214321090 R08: 0000000000000000 R09: 0000000000000000 [ 119.357618][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.365628][ T9440] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 119.373623][ T9440] [ 119.398888][ T9447] FAULT_INJECTION: forcing a failure. [ 119.398888][ T9447] name failslab, interval 1, probability 0, space 0, times 0 [ 119.411644][ T9447] CPU: 1 UID: 0 PID: 9447 Comm: syz.0.2150 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 119.422418][ T9447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.432487][ T9447] Call Trace: [ 119.435874][ T9447] [ 119.438810][ T9447] dump_stack_lvl+0xf2/0x150 [ 119.443425][ T9447] dump_stack+0x15/0x20 [ 119.447622][ T9447] should_fail_ex+0x223/0x230 [ 119.452380][ T9447] ? audit_log_start+0x34c/0x6b0 [ 119.457365][ T9447] should_failslab+0x8f/0xb0 [ 119.461968][ T9447] kmem_cache_alloc_noprof+0x4c/0x290 [ 119.467490][ T9447] audit_log_start+0x34c/0x6b0 [ 119.472339][ T9447] audit_seccomp+0x4b/0x130 [ 119.476854][ T9447] __seccomp_filter+0x6fa/0x1180 [ 119.481841][ T9447] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 119.487492][ T9447] ? vfs_write+0x596/0x920 [ 119.491931][ T9447] ? __rcu_read_unlock+0x4e/0x70 [ 119.497025][ T9447] ? __fget_files+0x1d4/0x210 [ 119.501849][ T9447] __secure_computing+0x9f/0x1c0 [ 119.506815][ T9447] syscall_trace_enter+0xd1/0x1f0 [ 119.511963][ T9447] ? fpregs_assert_state_consistent+0x83/0xa0 [ 119.518164][ T9447] do_syscall_64+0xaa/0x1c0 [ 119.522746][ T9447] ? clear_bhb_loop+0x55/0xb0 [ 119.527510][ T9447] ? clear_bhb_loop+0x55/0xb0 [ 119.532295][ T9447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.538259][ T9447] RIP: 0033:0x7f1183c5e719 [ 119.542697][ T9447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.562324][ T9447] RSP: 002b:00007f11828d1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c0 [ 119.570830][ T9447] RAX: ffffffffffffffda RBX: 00007f1183e15f80 RCX: 00007f1183c5e719 [ 119.578876][ T9447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 119.586943][ T9447] RBP: 00007f11828d1090 R08: 0000000000000000 R09: 0000000000000000 [ 119.594930][ T9447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.602933][ T9447] R13: 0000000000000000 R14: 00007f1183e15f80 R15: 00007ffd392d8738 [ 119.610961][ T9447] [ 119.654342][ T9450] loop3: detected capacity change from 0 to 1024 [ 119.656925][ T9445] __nla_validate_parse: 13 callbacks suppressed [ 119.656945][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 119.679229][ T9453] sd 0:0:1:0: device reset [ 119.679367][ T9450] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.699766][ T9445] loop2: detected capacity change from 0 to 164 [ 119.699804][ T9450] EXT4-fs (loop3): shut down requested (0) [ 119.715187][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 119.748239][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.777882][ T9466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.786736][ T9466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.796892][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2158'. [ 119.805949][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2158'. [ 119.820421][ T9468] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2159'. [ 119.912466][ T9476] veth1_macvtap: left promiscuous mode [ 119.918812][ T9476] macsec0: entered promiscuous mode [ 119.966702][ T9479] netlink: 'syz.3.2163': attribute type 3 has an invalid length. [ 120.035727][ T9481] sd 0:0:1:0: device reset [ 120.053186][ T9483] FAULT_INJECTION: forcing a failure. [ 120.053186][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.066424][ T9483] CPU: 1 UID: 0 PID: 9483 Comm: syz.2.2165 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 120.077151][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.087215][ T9483] Call Trace: [ 120.090567][ T9483] [ 120.093552][ T9483] dump_stack_lvl+0xf2/0x150 [ 120.098299][ T9483] dump_stack+0x15/0x20 [ 120.102552][ T9483] should_fail_ex+0x223/0x230 [ 120.107284][ T9483] should_fail+0xb/0x10 [ 120.111562][ T9483] should_fail_usercopy+0x1a/0x20 [ 120.116618][ T9483] _copy_from_iter+0xd5/0xd00 [ 120.121300][ T9483] ? skb_set_owner_w+0x15a/0x200 [ 120.126252][ T9483] ? __virt_addr_valid+0x1ed/0x250 [ 120.131450][ T9483] ? __check_object_size+0x364/0x520 [ 120.136844][ T9483] skb_copy_datagram_from_iter+0xb3/0x460 [ 120.142569][ T9483] ? mntput_no_expire+0x70/0x3c0 [ 120.147617][ T9483] ? skb_put+0xba/0x100 [ 120.151809][ T9483] packet_sendmsg+0x26b7/0x34f0 [ 120.156938][ T9483] ? avc_has_perm+0xd4/0x160 [ 120.161561][ T9483] ? selinux_socket_sendmsg+0x19c/0x1d0 [ 120.167192][ T9483] ? __pfx_packet_sendmsg+0x10/0x10 [ 120.172511][ T9483] __sock_sendmsg+0x140/0x180 [ 120.177224][ T9483] __sys_sendto+0x1d6/0x260 [ 120.181794][ T9483] __x64_sys_sendto+0x78/0x90 [ 120.186513][ T9483] x64_sys_call+0x2959/0x2d60 [ 120.191238][ T9483] do_syscall_64+0xc9/0x1c0 [ 120.195748][ T9483] ? clear_bhb_loop+0x55/0xb0 [ 120.200431][ T9483] ? clear_bhb_loop+0x55/0xb0 [ 120.205126][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.211158][ T9483] RIP: 0033:0x7fe2156ae719 [ 120.215579][ T9483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.235319][ T9483] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.243752][ T9483] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 120.251724][ T9483] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000003 [ 120.259728][ T9483] RBP: 00007fe214321090 R08: 0000000020000040 R09: 0000000000000014 [ 120.267814][ T9483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.275788][ T9483] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 120.284329][ T9483] [ 120.309504][ T9485] loop2: detected capacity change from 0 to 1024 [ 120.321905][ T9487] loop3: detected capacity change from 0 to 1024 [ 120.328625][ T9487] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.335554][ T9487] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 120.346621][ T9487] JBD2: no valid journal superblock found [ 120.347313][ T9485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.352359][ T9487] EXT4-fs (loop3): Could not load journal inode [ 120.369331][ T9485] EXT4-fs (loop2): shut down requested (0) [ 120.381951][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'. [ 120.390954][ T9487] bridge_slave_1: left allmulticast mode [ 120.391580][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.396777][ T9487] bridge_slave_1: left promiscuous mode [ 120.411614][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.420791][ T9487] bridge_slave_0: left allmulticast mode [ 120.426511][ T9487] bridge_slave_0: left promiscuous mode [ 120.432219][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.457209][ T9493] loop3: detected capacity change from 0 to 4096 [ 120.463876][ T9493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.472435][ T9493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.487034][ T9492] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 120.501778][ T9496] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2169'. [ 120.530225][ T9500] bpf_get_probe_write_proto: 1 callbacks suppressed [ 120.530244][ T9500] syz.1.2171[9500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.537335][ T9500] syz.1.2171[9500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.538385][ T9498] SELinux: Context system_u: is not valid (left unmapped). [ 120.549493][ T9500] syz.1.2171[9500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.582253][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.606317][ T9502] FAULT_INJECTION: forcing a failure. [ 120.606317][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 120.618989][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.2.2172 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 120.629694][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.639815][ T9502] Call Trace: [ 120.643115][ T9502] [ 120.646070][ T9502] dump_stack_lvl+0xf2/0x150 [ 120.650709][ T9502] dump_stack+0x15/0x20 [ 120.654877][ T9502] should_fail_ex+0x223/0x230 [ 120.659664][ T9502] ? audit_log_d_path+0x96/0x250 [ 120.664623][ T9502] should_failslab+0x8f/0xb0 [ 120.669261][ T9502] __kmalloc_cache_noprof+0x4b/0x2a0 [ 120.674677][ T9502] audit_log_d_path+0x96/0x250 [ 120.679500][ T9502] ? get_file_rcu+0xeb/0x100 [ 120.684163][ T9502] ? __rcu_read_unlock+0x4e/0x70 [ 120.689122][ T9502] audit_log_d_path_exe+0x42/0x70 [ 120.694163][ T9502] audit_log_task+0x155/0x180 [ 120.698909][ T9502] audit_seccomp+0x68/0x130 [ 120.703420][ T9502] __seccomp_filter+0x6fa/0x1180 [ 120.708399][ T9502] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.714087][ T9502] ? vfs_write+0x596/0x920 [ 120.718522][ T9502] ? __schedule+0x6fa/0x930 [ 120.723061][ T9502] __secure_computing+0x9f/0x1c0 [ 120.728098][ T9502] syscall_trace_enter+0xd1/0x1f0 [ 120.733220][ T9502] do_syscall_64+0xaa/0x1c0 [ 120.737794][ T9502] ? clear_bhb_loop+0x55/0xb0 [ 120.742561][ T9502] ? clear_bhb_loop+0x55/0xb0 [ 120.747249][ T9502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.753236][ T9502] RIP: 0033:0x7fe2156ae719 [ 120.757672][ T9502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.777315][ T9502] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 120.785739][ T9502] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 120.793718][ T9502] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 120.801697][ T9502] RBP: 00007fe214321090 R08: 0000000000000000 R09: 0000000000000000 [ 120.809759][ T9502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.817739][ T9502] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 120.825819][ T9502] [ 120.829018][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 120.879744][ T9518] loop2: detected capacity change from 0 to 512 [ 120.886985][ T9518] EXT4-fs: Ignoring removed bh option [ 120.892474][ T9518] EXT4-fs: inline encryption not supported [ 120.903190][ T9518] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.2177: corrupted in-inode xattr: invalid ea_ino [ 120.923476][ T9518] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.2177: couldn't read orphan inode 15 (err -117) [ 120.937842][ T9518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.954580][ T9518] EXT4-fs error (device loop2): ext4_lookup:1813: inode #12: comm syz.2.2177: iget: bad extended attribute block 543 [ 120.978617][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.038842][ T9531] syz.1.2179[9531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.038943][ T9531] syz.1.2179[9531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.050712][ T9531] syz.1.2179[9531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.063169][ T9526] FAULT_INJECTION: forcing a failure. [ 121.063169][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.087620][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.1.2179 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 121.098840][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.108974][ T9526] Call Trace: [ 121.112282][ T9526] [ 121.115289][ T9526] dump_stack_lvl+0xf2/0x150 [ 121.119908][ T9526] dump_stack+0x15/0x20 [ 121.124171][ T9526] should_fail_ex+0x223/0x230 [ 121.128927][ T9526] should_fail+0xb/0x10 [ 121.133180][ T9526] should_fail_usercopy+0x1a/0x20 [ 121.138259][ T9526] _copy_from_user+0x1e/0xb0 [ 121.142963][ T9526] copy_msghdr_from_user+0x54/0x2a0 [ 121.148241][ T9526] __sys_sendmsg+0x171/0x270 [ 121.152857][ T9526] __x64_sys_sendmsg+0x46/0x50 [ 121.157734][ T9526] x64_sys_call+0x2689/0x2d60 [ 121.162417][ T9526] do_syscall_64+0xc9/0x1c0 [ 121.166935][ T9526] ? clear_bhb_loop+0x55/0xb0 [ 121.171711][ T9526] ? clear_bhb_loop+0x55/0xb0 [ 121.176418][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.182338][ T9526] RIP: 0033:0x7fcecbb8e719 [ 121.186752][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.206435][ T9526] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.214879][ T9526] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 121.222907][ T9526] RDX: 0000000000004000 RSI: 00000000200001c0 RDI: 0000000000000005 [ 121.230966][ T9526] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 121.238963][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.246965][ T9526] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 121.254979][ T9526] [ 121.280434][ T9535] FAULT_INJECTION: forcing a failure. [ 121.280434][ T9535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.293548][ T9535] CPU: 1 UID: 0 PID: 9535 Comm: syz.2.2182 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 121.304320][ T9535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.314413][ T9535] Call Trace: [ 121.317699][ T9535] [ 121.320663][ T9535] dump_stack_lvl+0xf2/0x150 [ 121.325288][ T9535] dump_stack+0x15/0x20 [ 121.329478][ T9535] should_fail_ex+0x223/0x230 [ 121.334203][ T9535] should_fail+0xb/0x10 [ 121.338404][ T9535] should_fail_usercopy+0x1a/0x20 [ 121.343518][ T9535] _copy_from_user+0x1e/0xb0 [ 121.348305][ T9535] io_register_rsrc_update+0x5e/0x120 [ 121.353800][ T9535] __se_sys_io_uring_register+0xb87/0x1280 [ 121.359660][ T9535] __x64_sys_io_uring_register+0x55/0x70 [ 121.365383][ T9535] x64_sys_call+0x202/0x2d60 [ 121.370024][ T9535] do_syscall_64+0xc9/0x1c0 [ 121.374635][ T9535] ? clear_bhb_loop+0x55/0xb0 [ 121.379364][ T9535] ? clear_bhb_loop+0x55/0xb0 [ 121.384097][ T9535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.390110][ T9535] RIP: 0033:0x7fe2156ae719 [ 121.394552][ T9535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.414196][ T9535] RSP: 002b:00007fe214321038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 121.422645][ T9535] RAX: ffffffffffffffda RBX: 00007fe215865f80 RCX: 00007fe2156ae719 [ 121.430644][ T9535] RDX: 0000000020000600 RSI: 0000000000000010 RDI: 0000000000000003 [ 121.438715][ T9535] RBP: 00007fe214321090 R08: 0000000000000000 R09: 0000000000000000 [ 121.446712][ T9535] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 121.454776][ T9535] R13: 0000000000000000 R14: 00007fe215865f80 R15: 00007fffa4e784a8 [ 121.462771][ T9535] [ 121.494150][ T9545] FAULT_INJECTION: forcing a failure. [ 121.494150][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 121.507039][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: +}[@ Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 121.517274][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.527367][ T9545] Call Trace: [ 121.530823][ T9545] [ 121.533773][ T9545] dump_stack_lvl+0xf2/0x150 [ 121.538394][ T9545] dump_stack+0x15/0x20 [ 121.542590][ T9545] should_fail_ex+0x223/0x230 [ 121.547382][ T9545] ? __alloc_skb+0x10b/0x310 [ 121.552071][ T9545] should_failslab+0x8f/0xb0 [ 121.556685][ T9545] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 121.562533][ T9545] __alloc_skb+0x10b/0x310 [ 121.566995][ T9545] inet_netconf_notify_devconf+0x15a/0x210 [ 121.572937][ T9545] inetdev_event+0x63d/0xad0 [ 121.577620][ T9545] ? cfg802154_netdev_notifier_call+0xa8/0x560 [ 121.583866][ T9545] ? __pfx_arp_netdev_event+0x10/0x10 [ 121.589338][ T9545] ? __pfx_inetdev_event+0x10/0x10 [ 121.594551][ T9545] raw_notifier_call_chain+0x6f/0x1d0 [ 121.599960][ T9545] ? up_write+0x30/0xf0 [ 121.604237][ T9545] ? mutex_is_locked+0xd/0x20 [ 121.608981][ T9545] call_netdevice_notifiers_info+0xae/0x100 [ 121.614998][ T9545] unregister_netdevice_many_notify+0x8b7/0x11b0 [ 121.621381][ T9545] ? __cond_resched+0x28/0x50 [ 121.626106][ T9545] ? __flush_work+0x495/0x570 [ 121.630821][ T9545] ? detach_if_pending+0x94/0x200 [ 121.635958][ T9545] unregister_netdevice_queue+0x1f4/0x220 [ 121.641716][ T9545] unregister_netdev+0x1c/0x30 [ 121.646602][ T9545] slip_close+0xe5/0x100 [ 121.650944][ T9545] ? __pfx_slip_hangup+0x10/0x10 [ 121.653468][ T9547] loop2: detected capacity change from 0 to 256 [ 121.655909][ T9545] slip_hangup+0x15/0x20 [ 121.666437][ T9545] tty_ldisc_hangup+0x129/0x370 [ 121.671303][ T9545] __tty_hangup+0x3b1/0x530 [ 121.675854][ T9545] tty_ioctl+0x607/0xbe0 [ 121.680200][ T9545] ? __pfx_tty_ioctl+0x10/0x10 [ 121.684981][ T9545] __se_sys_ioctl+0xcd/0x140 [ 121.689658][ T9545] __x64_sys_ioctl+0x43/0x50 [ 121.694347][ T9545] x64_sys_call+0x15cc/0x2d60 [ 121.699092][ T9545] do_syscall_64+0xc9/0x1c0 [ 121.703678][ T9545] ? clear_bhb_loop+0x55/0xb0 [ 121.708362][ T9545] ? clear_bhb_loop+0x55/0xb0 [ 121.713092][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.719027][ T9545] RIP: 0033:0x7fcecbb8e719 [ 121.723483][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.743182][ T9545] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.751644][ T9545] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 121.759676][ T9545] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000003 [ 121.767655][ T9545] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 121.775666][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.783646][ T9545] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 121.791630][ T9545] [ 121.822079][ T9550] FAULT_INJECTION: forcing a failure. [ 121.822079][ T9550] name failslab, interval 1, probability 0, space 0, times 0 [ 121.834884][ T9550] CPU: 1 UID: 0 PID: 9550 Comm: +}[@ Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 121.845070][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 121.855166][ T9550] Call Trace: [ 121.858503][ T9550] [ 121.861448][ T9550] dump_stack_lvl+0xf2/0x150 [ 121.866062][ T9550] dump_stack+0x15/0x20 [ 121.870349][ T9550] should_fail_ex+0x223/0x230 [ 121.875103][ T9550] ? qdisc_alloc+0x65/0x450 [ 121.875186][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 121.879642][ T9550] should_failslab+0x8f/0xb0 [ 121.891110][ T9550] __kmalloc_node_noprof+0xa8/0x380 [ 121.896376][ T9550] ? strlen+0x19/0x30 [ 121.900390][ T9550] qdisc_alloc+0x65/0x450 [ 121.904750][ T9550] qdisc_create+0xe5/0xae0 [ 121.909191][ T9550] ? __nla_parse+0x40/0x60 [ 121.913622][ T9550] tc_modify_qdisc+0x65f/0x1050 [ 121.918551][ T9550] ? ns_capable+0x7d/0xb0 [ 121.923021][ T9550] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 121.928363][ T9550] rtnetlink_rcv_msg+0x6aa/0x710 [ 121.933346][ T9550] ? ref_tracker_free+0x3a5/0x410 [ 121.938413][ T9550] ? __dev_queue_xmit+0x161/0x2040 [ 121.943563][ T9550] ? ref_tracker_alloc+0x1f5/0x2f0 [ 121.948787][ T9550] netlink_rcv_skb+0x12c/0x230 [ 121.953632][ T9550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.959120][ T9550] rtnetlink_rcv+0x1c/0x30 [ 121.963566][ T9550] netlink_unicast+0x599/0x670 [ 121.968380][ T9550] netlink_sendmsg+0x5cc/0x6e0 [ 121.973158][ T9550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.978511][ T9550] __sock_sendmsg+0x140/0x180 [ 121.983212][ T9550] ____sys_sendmsg+0x312/0x410 [ 121.988028][ T9550] __sys_sendmsg+0x1d9/0x270 [ 121.992643][ T9550] __x64_sys_sendmsg+0x46/0x50 [ 121.997459][ T9550] x64_sys_call+0x2689/0x2d60 [ 122.002271][ T9550] do_syscall_64+0xc9/0x1c0 [ 122.006855][ T9550] ? clear_bhb_loop+0x55/0xb0 [ 122.011621][ T9550] ? clear_bhb_loop+0x55/0xb0 [ 122.016308][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.022318][ T9550] RIP: 0033:0x7f22cebfe719 [ 122.026739][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.046422][ T9550] RSP: 002b:00007f22cd877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.054871][ T9550] RAX: ffffffffffffffda RBX: 00007f22cedb5f80 RCX: 00007f22cebfe719 [ 122.062923][ T9550] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000006 [ 122.071170][ T9550] RBP: 00007f22cd877090 R08: 0000000000000000 R09: 0000000000000000 [ 122.079300][ T9550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.087299][ T9550] R13: 0000000000000000 R14: 00007f22cedb5f80 R15: 00007ffe136567d8 [ 122.095312][ T9550] [ 122.198835][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.208233][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.208400][ T9568] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 122.218938][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 122.224275][ T9568] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 122.233288][ T9572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2198'. [ 122.303612][ T9579] loop4: detected capacity change from 0 to 256 [ 122.311464][ T9579] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.395407][ T9579] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.422562][ T9589] FAULT_INJECTION: forcing a failure. [ 122.422562][ T9589] name failslab, interval 1, probability 0, space 0, times 0 [ 122.435371][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.1.2202 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 122.446094][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.456217][ T9589] Call Trace: [ 122.459509][ T9589] [ 122.462523][ T9589] dump_stack_lvl+0xf2/0x150 [ 122.467135][ T9589] dump_stack+0x15/0x20 [ 122.471301][ T9589] should_fail_ex+0x223/0x230 [ 122.476031][ T9589] ? bpf_prog_alloc_no_stats+0xc3/0x360 [ 122.481600][ T9589] should_failslab+0x8f/0xb0 [ 122.486259][ T9589] __kmalloc_cache_noprof+0x4b/0x2a0 [ 122.491563][ T9589] ? __vmalloc_noprof+0x5e/0x70 [ 122.496449][ T9589] bpf_prog_alloc_no_stats+0xc3/0x360 [ 122.501848][ T9589] bpf_prog_alloc+0x3a/0x150 [ 122.506508][ T9589] bpf_prog_load+0x4d1/0x1070 [ 122.511201][ T9589] ? __rcu_read_unlock+0x4e/0x70 [ 122.516230][ T9589] __sys_bpf+0x463/0x7a0 [ 122.520496][ T9589] __x64_sys_bpf+0x43/0x50 [ 122.525046][ T9589] x64_sys_call+0x2625/0x2d60 [ 122.529828][ T9589] do_syscall_64+0xc9/0x1c0 [ 122.534349][ T9589] ? clear_bhb_loop+0x55/0xb0 [ 122.539035][ T9589] ? clear_bhb_loop+0x55/0xb0 [ 122.543731][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.549698][ T9589] RIP: 0033:0x7fcecbb8e719 [ 122.554187][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.573864][ T9589] RSP: 002b:00007fceca801038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.582292][ T9589] RAX: ffffffffffffffda RBX: 00007fcecbd45f80 RCX: 00007fcecbb8e719 [ 122.590271][ T9589] RDX: 0000000000000094 RSI: 0000000020000280 RDI: 0000000000000005 [ 122.598298][ T9589] RBP: 00007fceca801090 R08: 0000000000000000 R09: 0000000000000000 [ 122.606277][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.614254][ T9589] R13: 0000000000000000 R14: 00007fcecbd45f80 R15: 00007ffd9d151e58 [ 122.622272][ T9589] [ 122.676940][ T9601] netlink: 'syz.4.2207': attribute type 3 has an invalid length. [ 122.768866][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x7 [ 122.771028][ T9616] FAULT_INJECTION: forcing a failure. [ 122.771028][ T9616] name failslab, interval 1, probability 0, space 0, times 0 [ 122.776427][ T35] hid-generic 0000:0000:0000.0005: ignoring exceeding usage max [ 122.789754][ T9616] CPU: 0 UID: 0 PID: 9616 Comm: syz.3.2212 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 122.801535][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 122.808103][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.821940][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0x6 [ 122.825543][ T9616] Call Trace: [ 122.825552][ T9616] [ 122.825561][ T9616] dump_stack_lvl+0xf2/0x150 [ 122.825593][ T9616] dump_stack+0x15/0x20 [ 122.832997][ T35] hid-generic 0000:0000:0000.0005: unknown main item tag 0xd [ 122.836228][ T9616] should_fail_ex+0x223/0x230 [ 122.847826][ T35] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.847969][ T9616] ? __rds_conn_create+0x3c9/0xfb0 [ 122.871501][ T9622] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 122.874683][ T9616] should_failslab+0x8f/0xb0 [ 122.887827][ T9616] kmem_cache_alloc_noprof+0x4c/0x290 [ 122.893285][ T9616] __rds_conn_create+0x3c9/0xfb0 [ 122.898283][ T9616] rds_conn_create_outgoing+0x43/0x60 [ 122.903683][ T9616] rds_sendmsg+0xba7/0x1400 [ 122.908291][ T9616] ? __pfx_rds_sendmsg+0x10/0x10 [ 122.913249][ T9616] __sock_sendmsg+0x140/0x180 [ 122.918021][ T9616] ____sys_sendmsg+0x312/0x410 [ 122.922795][ T9616] __sys_sendmsg+0x1d9/0x270 [ 122.927429][ T9616] __x64_sys_sendmsg+0x46/0x50 [ 122.932286][ T9616] x64_sys_call+0x2689/0x2d60 [ 122.937072][ T9616] do_syscall_64+0xc9/0x1c0 [ 122.941594][ T9616] ? clear_bhb_loop+0x55/0xb0 [ 122.946337][ T9616] ? clear_bhb_loop+0x55/0xb0 [ 122.951023][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.956983][ T9616] RIP: 0033:0x7f91b197e719 [ 122.961455][ T9616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.981116][ T9616] RSP: 002b:00007f91b05f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.989550][ T9616] RAX: ffffffffffffffda RBX: 00007f91b1b35f80 RCX: 00007f91b197e719 [ 122.997544][ T9616] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 123.005567][ T9616] RBP: 00007f91b05f7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.013557][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.021582][ T9616] R13: 0000000000000000 R14: 00007f91b1b35f80 R15: 00007ffdfd4883a8 [ 123.029600][ T9616] [ 123.032776][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 123.063810][ T9625] loop3: detected capacity change from 0 to 1024 [ 123.088127][ T9625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.119239][ T9637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.128445][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.148449][ T9637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.156679][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.191250][ T9637] IPVS: Error joining to the multicast group [ 123.197492][ T9640] IPVS: Error joining to the multicast group [ 123.223874][ T9625] EXT4-fs (loop3): shut down requested (0) [ 123.242874][ T9651] syz.0.2225[9651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.243003][ T9651] syz.0.2225[9651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.243006][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.243097][ T9651] ================================================================== [ 123.254374][ T9651] BUG: KCSAN: data-race in data_push_tail / uuid_string [ 123.254414][ T9651] [ 123.254424][ T9651] write to 0xffffffff88bb5d71 of 1 bytes by task 3318 on cpu 0: [ 123.254445][ T9651] uuid_string+0x435/0x4b0 [ 123.254467][ T9651] pointer+0x3ee/0xd20 [ 123.254484][ T9651] vsnprintf+0x861/0xe30 [ 123.254502][ T9651] pointer+0x8a1/0xd20 [ 123.254522][ T9651] vsnprintf+0x861/0xe30 [ 123.254543][ T9651] vscnprintf+0x42/0x90 [ 123.254564][ T9651] printk_sprint+0x30/0x2d0 [ 123.254599][ T9651] vprintk_store+0x570/0x810 [ 123.254635][ T9651] vprintk_emit+0x15e/0x680 [ 123.254670][ T9651] vprintk_default+0x26/0x30 [ 123.254702][ T9651] vprintk+0x75/0x80 [ 123.254726][ T9651] _printk+0x7a/0xa0 [ 123.254757][ T9651] __ext4_msg+0x18e/0x1a0 [ 123.254792][ T9651] ext4_put_super+0x91/0x840 [ 123.254832][ T9651] generic_shutdown_super+0xe5/0x220 [ 123.254878][ T9651] kill_block_super+0x2a/0x70 [ 123.254919][ T9651] ext4_kill_sb+0x44/0x80 [ 123.254951][ T9651] deactivate_locked_super+0x7d/0x1c0 [ 123.254986][ T9651] deactivate_super+0x9f/0xb0 [ 123.255022][ T9651] cleanup_mnt+0x268/0x2e0 [ 123.255049][ T9651] __cleanup_mnt+0x19/0x20 [ 123.255076][ T9651] task_work_run+0x13a/0x1a0 [ 123.255109][ T9651] syscall_exit_to_user_mode+0xbe/0x130 [ 123.255135][ T9651] do_syscall_64+0xd6/0x1c0 [ 123.255165][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.255211][ T9651] [ 123.255220][ T9651] read to 0xffffffff88bb5d70 of 8 bytes by task 9651 on cpu 1: [ 123.255243][ T9651] data_push_tail+0x102/0x430 [ 123.255276][ T9651] data_alloc+0xbe/0x2c0 [ 123.255301][ T9651] prb_reserve+0x85e/0xb60 [ 123.255332][ T9651] vprintk_store+0x53f/0x810 [ 123.255368][ T9651] vprintk_emit+0x15e/0x680 [ 123.255403][ T9651] vprintk_default+0x26/0x30 [ 123.255434][ T9651] vprintk+0x75/0x80 [ 123.255452][ T9651] _printk+0x7a/0xa0 [ 123.255478][ T9651] bpf_get_probe_write_proto+0x8b/0x90 [ 123.255522][ T9651] bpf_tracing_func_proto+0x596/0x790 [ 123.255555][ T9651] raw_tp_prog_func_proto+0x65/0xc0 [ 123.255585][ T9651] check_helper_call+0x131/0x3d30 [ 123.255627][ T9651] do_check+0x4c42/0x7310 [ 123.255667][ T9651] do_check_common+0xc34/0x1160 [ 123.255708][ T9651] bpf_check+0xa7de/0xcbf0 [ 123.255739][ T9651] bpf_prog_load+0xed4/0x1070 [ 123.255759][ T9651] __sys_bpf+0x463/0x7a0 [ 123.255776][ T9651] __x64_sys_bpf+0x43/0x50 [ 123.255809][ T9651] x64_sys_call+0x2625/0x2d60 [ 123.255845][ T9651] do_syscall_64+0xc9/0x1c0 [ 123.255880][ T9651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.255915][ T9651] [ 123.255920][ T9651] value changed: 0x00000000ffffe9ff -> 0x00000000ffffe920 [ 123.255933][ T9651] [ 123.255940][ T9651] Reported by Kernel Concurrency Sanitizer on: [ 123.255953][ T9651] CPU: 1 UID: 0 PID: 9651 Comm: syz.0.2225 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 123.255988][ T9651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.256006][ T9651] ================================================================== [ 123.331342][ T9654] FAULT_INJECTION: forcing a failure. [ 123.331342][ T9654] name failslab, interval 1, probability 0, space 0, times 0 [ 123.331890][ T9651] syz.0.2225[9651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.336329][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.0.2225 Not tainted 6.12.0-rc6-syzkaller-00279-gde2f378f2b77 #0 [ 123.605160][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.615223][ T9654] Call Trace: [ 123.618504][ T9654] [ 123.621440][ T9654] dump_stack_lvl+0xf2/0x150 [ 123.626109][ T9654] dump_stack+0x15/0x20 [ 123.630290][ T9654] should_fail_ex+0x223/0x230 [ 123.634988][ T9654] ? alloc_pid+0x71/0x6f0 [ 123.639405][ T9654] should_failslab+0x8f/0xb0 [ 123.644007][ T9654] kmem_cache_alloc_noprof+0x4c/0x290 [ 123.649425][ T9654] alloc_pid+0x71/0x6f0 [ 123.653662][ T9654] ? copy_thread+0x327/0x390 [ 123.658321][ T9654] copy_process+0xe72/0x1f90 [ 123.662965][ T9654] ? __pfx_io_sq_thread+0x10/0x10 [ 123.668013][ T9654] create_io_thread+0x9e/0xd0 [ 123.672718][ T9654] ? __pfx_io_sq_thread+0x10/0x10 [ 123.677765][ T9654] io_sq_offload_create+0x652/0x8e0 [ 123.683013][ T9654] ? io_allocate_scq_urings+0x2d7/0x300 [ 123.688581][ T9654] io_uring_create+0x55d/0x940 [ 123.693366][ T9654] __se_sys_io_uring_setup+0x1d2/0x1e0 [ 123.698883][ T9654] __x64_sys_io_uring_setup+0x31/0x40 [ 123.704282][ T9654] x64_sys_call+0x1f7e/0x2d60 [ 123.709000][ T9654] do_syscall_64+0xc9/0x1c0 [ 123.713550][ T9654] ? clear_bhb_loop+0x55/0xb0 [ 123.718297][ T9654] ? clear_bhb_loop+0x55/0xb0 [ 123.722992][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.728911][ T9654] RIP: 0033:0x7f1183c5e719 [ 123.733334][ T9654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.753039][ T9654] RSP: 002b:00007f11828affc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 123.761519][ T9654] RAX: ffffffffffffffda RBX: 00007f1183e16058 RCX: 00007f1183c5e719 [ 123.769624][ T9654] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000002ddd [ 123.777599][ T9654] RBP: 00000000200006c0 R08: 0000000000000000 R09: 0000000000000000 [ 123.785690][ T9654] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 123.793664][ T9654] R13: 0000000000000000 R14: 0000000000002ddd R15: 0000000000000000 [ 123.801649][ T9654] [ 123.815325][ T9651] syz.0.2225 (9651) used greatest stack depth: 9080 bytes left [ 123.869708][ T9653] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 124.035182][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 125.075189][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 126.115180][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 127.155132][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 128.195142][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 129.235176][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 130.275160][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 131.315167][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.355211][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available