last executing test programs: 2m45.927111143s ago: executing program 4 (id=4356): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x72030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x6, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000640)={0xd, "ab265991e494089536a043de283e4511c9e46ad4d15d5d068fa88994f8a28698dcde4cd01cdc64ad17d03e95e40df7bdbde0c969ba1156521975bb1b1ec14b51472d28ad7fead84c8f999a876826c1fd42ba6fa9e78823b7e9b4b19b7866a639e004b1adfb509d9684a2375ecee5015f95e09c5b763b297672b72819fcf12632d75146887e567e8ceedfaa54b3bb76653e87acef43a04a86278cd86eec2ea4ef8e30e592c16d4ab6daff88765c320e04d009a8dbbc1c6d402a8db1376c3223ac8d53ad348a83d0d9b8f7f798fb431a80723887dbc86143ef11b011150b6992c045477b99bb091d7d06806a6876b7ea58177840ca3c9f43c9d471e03a83ed52cb6a29e4c6b844a9f36c04af081559ce683ebbc8e619e430d924fe55c1032aa04ecf092888db8b243effd874fb0285b15a9d00215a98154b5f072146c16d28ce69faf74116a36d979c6211f4d0295685e5900bdafd4e59f71b36da4501ee0ab72577a47b8d27675acc9d29f55ed1e965365fe18c11100bada98d9f69faa637d12808ca003c719400b9a80ef7db0481d67c4c2213f4d2e5391ffc79dc857d529b3689649ec370326e1ef231de3b8462e10798de049d8b9c61741d2af746d50c79dc9a9af2323e8af567cdc80c6423ab713db427932da94e40df5a10318f420de6534b6cabd6f1bfadf35ed1dea1bb2455377a5ce081199aeb1e761e14fe09bb7eda"}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x0, 0x0, 0x0, 0x2, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000070000001a600000810000000cd30000", @ANYRES32=r1, @ANYBLOB='uL\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000000000000ffffffea000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000df0000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"], 0x10) socket$inet6(0xa, 0x80002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)='U', 0x1080}], 0x1}, 0x4040086) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) 2m42.581680505s ago: executing program 4 (id=4393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000380)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@private, 0x80000000}, {@multicast1}, {@local}]}, @timestamp_prespec={0x44, 0xc, 0x1a, 0x3, 0xa, [{@multicast2, 0x1}]}]}}}}}}}, 0x0) 2m42.506123425s ago: executing program 4 (id=4394): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) tee(0xffffffffffffffff, r2, 0x2, 0x0) 2m42.365824386s ago: executing program 4 (id=4395): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) 2m41.941712417s ago: executing program 4 (id=4399): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x0, 0x4, @void, @value}, 0x20) 2m41.45102423s ago: executing program 4 (id=4405): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) 2m41.438965849s ago: executing program 32 (id=4405): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) 2m12.038677177s ago: executing program 1 (id=4859): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) 2m11.873147707s ago: executing program 1 (id=4863): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) 2m11.842705468s ago: executing program 1 (id=4864): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000001c0)=@gcm_128={{}, "7711315f5f52b2f2", "bdec3f3f05f2bc114393492d01360c46", "d73d534c", "7660a30b2af9494e"}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0x0) socketpair(0x18, 0x2, 0x2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000240)={{0x2, 0x4e20, @remote}, {0x6, @remote}, 0x58, {0x2, 0x4e22, @multicast2}, 'veth0_to_bond\x00'}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000006c0)={'wg1\x00'}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r5, &(0x7f0000000080), 0xffffff1c) socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m10.959670521s ago: executing program 1 (id=4876): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="30000000120001003dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x181042, 0x102) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x52, &(0x7f00000043c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@hopopts={0x6c}], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ftruncate(r2, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010100, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xb7b0}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000140)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r1, r1, &(0x7f0000000240), 0x7f03) 2m10.836212091s ago: executing program 1 (id=4877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2m10.111619454s ago: executing program 1 (id=4888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0)="271d666fa5fffb7e4af9a5f42d1d30c62cf11ba2e9d06feca18ae41c45a9dbc5", 0x20, 0x40000, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) splice(r1, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x4, 0xfffffffffffffff8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x1}, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000024) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 2m10.070996294s ago: executing program 33 (id=4888): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f00000001c0)="271d666fa5fffb7e4af9a5f42d1d30c62cf11ba2e9d06feca18ae41c45a9dbc5", 0x20, 0x40000, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) splice(r1, &(0x7f00000000c0)=0x5, r1, &(0x7f0000000100)=0x4, 0xfffffffffffffff8, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x1}, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x2000000000000024) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 3.382681888s ago: executing program 0 (id=6809): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 3.352906098s ago: executing program 0 (id=6810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 3.081182899s ago: executing program 0 (id=6820): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 3.019306379s ago: executing program 0 (id=6821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 2.961949629s ago: executing program 0 (id=6822): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x8000000000000000}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000003040)={0x5, 0xff80, 0x8, 0x8001, 0x0, 0xdf5}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000044c0)={@dev, @multicast1}, &(0x7f0000004840)=0xc) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) 2.95603515s ago: executing program 0 (id=6823): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x72030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x6, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000640)={0xd, "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"}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x0, 0x0, 0x0, 0x2, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r1) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000070000001a600000810000000cd30000", @ANYRES32=r1, @ANYBLOB='uL\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000000000000ffffffea000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000df0000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"], 0x10) socket$inet6(0xa, 0x80002, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)='U', 0x1080}], 0x1}, 0x4040086) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000380)) 2.030299523s ago: executing program 6 (id=6835): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x800}, 0x100001, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.679692474s ago: executing program 3 (id=6840): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 1.678780284s ago: executing program 3 (id=6842): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000003040)={0x5, 0xff80, 0x8, 0x8001, 0x0, 0xdf5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000044c0)={@dev, @multicast1}, &(0x7f0000004840)=0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) 1.582017454s ago: executing program 3 (id=6843): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r7}, 0x10) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 1.169387306s ago: executing program 6 (id=6848): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000002c0)={0x6, 0x8001}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1}}) 1.110022506s ago: executing program 6 (id=6849): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="b868570000ee0000000000000034a40059000000000000858e33ac7a18af29e60d00000000000000c466e0b93ab3a37d28ade86a7b7bf9a095c322ac71fce8887821bee1950e5f3b8d2c89254e76cf006f26861c627a1ff3738315d7ab53f18df7b849b45470608ae91851aae1734da40f471987a530", @ANYRESOCT, @ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000005c0)={0xb, {{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}}}, 0x88) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000b8983e43fe0cc55dd24602279d99d495fbe89aa02a5d90b9a64276c8e029552ce0897186b6c062e28f1977370515e68c750d134dc90082951b3bd464afe428c1442225d1a91cb7071ddcfd00a0e82984a4ea73de123661b45481fdb44cd7e3ee09503f0af9b175ed761651d58a4e63f2db6e539b08bf481f85f839fdd17a6311eddfa68da1f15e216445ae30813a4f21325f0b69da4c17365930afe3c78e29a5c68ec6cdf10386acaf82f7cd808ed1217dbb5eb73c927b1c418c3f2f31c02faa2b21b0d0cb057101"], 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0)=@known='user.incfs.metadata\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000140)={0x3, 0x5, 0x93d, 0x0, 0x0, "88297c25317f52b4b34e5c89aedf6868c9be97"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={&(0x7f00000001c0), 0x3}, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x880) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) close(0xffffffffffffffff) 517.132818ms ago: executing program 2 (id=6861): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000400), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 496.816919ms ago: executing program 2 (id=6863): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x3000006, &(0x7f00000004c0)={[{@discard}, {@abort}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@nobh}, {@dioread_nolock}, {@orlov}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x400}}]}, 0x1, 0x556, &(0x7f0000001100)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x64842, 0x100) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES16, @ANYRES64, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = getpid() r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x1c, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x2, 0x0, 0xb9}, 0x6d391bc20a5248f1) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x1) kcmp(r5, 0xffffffffffffffff, 0x4, r6, r3) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000deffffff00006d0000009500000000000000bb0000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10001}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYRES8=r4], 0x318}}, 0x24000010) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) fchown(r0, r8, 0xee00) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x2}, 0x4, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000011dd000100000000002300000000000000", @ANYRES32=r10, @ANYBLOB="0100000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x8005) r11 = socket$vsock_stream(0x28, 0x1, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r12, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x37, 0x0, "c3218d82c5896754d7cdb23c72887c897926a8856263b50c578ef1f9f362f16f21f5c872b1737718103bbde1a9d99011d25bbdff9c1351ba69e297337d6a5e4a948c1cbf827d6e95ad5bbfb5b3bd1929"}, 0xd8) connect$vsock_stream(r11, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 481.563579ms ago: executing program 5 (id=6864): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004940)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000003040)={0x5, 0xff80, 0x8, 0x8001, 0x0, 0xdf5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000044c0)={@dev, @multicast1}, &(0x7f0000004840)=0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) 408.338969ms ago: executing program 2 (id=6865): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@empty, @private=0xa010101, 0xffffffffffffffff, "0ae642fd09a8ac0a1dbef9811265bed5f162ef712bb1ef0ea68d6169464e5512", 0x1, 0x731, 0x8, 0x5}, 0x3c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ffe000/0x2000)=nil, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x10) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000080)={0x17c04, r5, 0x20005, 0x1000fffff, 0x1a}) 407.649319ms ago: executing program 2 (id=6866): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000005c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x30, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x30, 0x0, @gue={{0x2, 0x0, 0x2, 0x75, 0x100, @val=0x80}, "b36c92abce83cd95ef534e0bcdbecb1c9337da6517e336be4ca01b877789098a"}}}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r5) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000300), 0x4) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bdf2fb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x4040000) 407.295118ms ago: executing program 5 (id=6867): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') (fail_nth: 1) 145.054ms ago: executing program 5 (id=6868): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd600000000054060000000000000000000000ffff07000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50e2000090780000080a0000000000000000030a0000000000000000fe08f989e8"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0xdffffffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) 81.40412ms ago: executing program 6 (id=6875): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095", @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x100708, 0x5dd8, 0x3, 0x0, 0x0, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000140)='./file3\x00', 0x8, 0x3) unshare(0x2030500) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200800000000007020040f8ffffffb703000008000000b704000000000000850000000100000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89b0, &(0x7f0000000080)) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f00000002c0)=0xfa7e, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 30.14179ms ago: executing program 5 (id=6876): openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x610002, 0x118) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000004c9002e3ff00000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/128]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x44000) r1 = io_uring_setup(0x371f, &(0x7f0000000680)={0x0, 0x0, 0x100, 0x1, 0x32c}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) 27.48575ms ago: executing program 5 (id=6877): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_rxfh_indir={0x38}}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000480), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mp']) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="100700000105010300000000000000000700000254020100030000002994240f0981c9000600060073797a3100000000000000000000000000000000000000000000000000000000723b5d54e95e00c8876f16d46dbd49888ed564e4a3b27b871f590c50e5a433f0085902975c4ef8da41a2e3d1276f02aff47ffc692e219aba03b1e199c840447e0500030002000000010000000900780400000000ffff0000000000000200000004000000020006000100000004000000ff0303000300000000000000e55d0b7c020000004c0000000100050003000000040000000700ff000200000009000000070007000200000001000000000005000100000001feffff0500ff0303000000fbffffff040005000100000007000000f8fffaff0200000009000000faff090001000000040000003544030003000000ae0e000009000600020000002200000004000b0003000000090000000100faff03000000020000000b000300000000000a000000bf40010002000000190000000600010100000000dd05000001800500010000000263bbd70504000200020000000900000008009cca02000000ff0f00000600090001000000030000000600080000000000040000009701040000000000090000000d00070002000000a4ffffff00000000010000000f0000000000030001000000080000008000090003000000be0000007dc6010000000000ff7f00000080ff000200000008000000726f080003000000f9740000fffe040002000000ff0100000010050000000000010000000100080001000000070000000800010000000000020000008100800000000000558f7d6c54020100020000000000000040de0c000800190073797a3100000000000000000000000000000000000000000000000000000000f3161e628893028aded8c485c8c61b026453a0afdd86f4d9e2d34d36e0435f2e0b49364fb801497685f04ad61a02b4888b48e39732634ec30e3f6888177984fbb5070200020000000000000001f0d1f40100000009000000090002000000000005000000090004000000000000800000060008000300000003000000050001040000000003000000001003000100000001800000050004000200000001000000060004000200000001000080d00e000003000000bd00000008000c0000000000070000000500070000000000c80000000400f2e3000000000d0000007b41040003000000008000000c00480f010000000000400d0500030000000000ff0100008000040003000000360000000200a00002000000ffff00007e000500010000003d3d12700200050003000000cbc6ffff3c0d09000200000000000000032c000000000000ffff00000400020000000000040000000e00ff01020000000800000002000200010000000500000002000e000200000001010000cc29080000000000040000000700000000000000080000007f000800020000000600000001000a00030000000000000000000f00010000000000000000000f0002000000000000800000ff0303000000060000008100feff0000000001040000ffffff0100000000030000001c0c060000000000ff000000010009000200000000000080ffff000102000000050000000100010000000000000000000100ff0302000000aaa700005402010003000000fdffffff010402000000010073797a31000000000000000000000000000000000000000000000000000000008d864acbc3253fe0500c07c32b27f0762ef58e3e0bea7867672d0b17d697d26ee0da14984bdaa44afc241ef691b32307289f21c9ef27250afdb8a488c9b6dab10500010003000000ff0f00000300050002000000b70000008a0b02000000000003000000010008000300000005000000eb00090000000000090000008100cc0003000000330e00009edf000000000000020000000300000001000000780f00000f00050002000000050000000700ff0003000000080000000104db0001000000ff070000ffff02000200000000080000f3ff000002000000ff000000480c0200000000000008000007000e0302000000e1ffffff09000700020000000700000007000600030000001e0000000600080002000000030000000000ff0f02000000070000000900100001000000000100007f0009000200000001feffff0100010003000000319085080000020001000000010400000200050601000000000000000000060002000000010000000400060002000000010000000050010001000000000000800100010003000000ffffffff0400010000000000f200000093f8040003000000020000000600097e010000008e6000000100020002000000080000000800060000000000090000000200030000000000060000000800fffe0100000081000000000001000000000000000000ff03cc9b020000005ff8ffffde22003201000000ff0f00000900030000000000ff0f000008000400020000000c000000"], 0x710}, 0x1, 0x0, 0x0, 0x4000841}, 0x20044880) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e1aa525476f9fb6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000e7d1fc00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x10) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000"], 0xfe44, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x34, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000ff00000000001fffffff9f2c000000000000009500000000000000db0c03847eae665fd03cc60dba2872978546cb74273a3a0538a98b6618b3444a8290"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x10) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r11, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) 1.243061ms ago: executing program 2 (id=6878): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x18, r0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000001000000080000000800000004420000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000000000000000000000779a152bf65c8490ffd65d73f4b91c69b1180c34987f93a50be2c3ffa17ab2f73c16378bb527eb62d6f59c5ce04d3bd43d5b4cf2fd80139dcf4496375ab6b677a8ed42f12b7d0982ecb6316312456a7178c5c68b9ce157b7d32617ac7cab9078aa169620e7a3f37105d6f6a032e0a53c17d78180b14589f86fbe356adac687b009edb9b2b017433d5d72c4348554651ad202f119f58fdcaaa0f863606d62ac2ccd89ac7336160897d7821c4e67ec9edd01def19c81ade5e5babdc1a7dbfbbc6e09f40814472fa5440d5afb9dbb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x2, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = dup2(r5, r4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() (async) sync() r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3183000000000000001e190000000c0001800800030001000000"], 0x20}}, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) (async) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300), &(0x7f0000000500)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000010000100000000000000000000000400000000002000010000000000000000000000000a5a7330e224a517e5637c3d5c24683e41ac5acdc097a2a28a0f75dc4d04cdfc0ff1df9b5de9dc9fdee01ae792a436eb9ee1dcb4f8777881276c3bd08712ea834f2ee4fe2002ae0e0cceea23e4c9"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=6879): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x7, 0x303, 0x300}}) (fail_nth: 1) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.3.6084'. [ 404.977626][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x4 [ 404.994102][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.001514][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.009025][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.016454][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.023878][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.031351][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.038783][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.046202][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.053672][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.061103][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.068591][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.076026][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.083438][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.090924][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.098396][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.105914][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.113347][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.120783][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.128252][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.135663][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.143098][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.150518][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.157939][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.165504][ T3523] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 405.174021][ T3523] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 405.199226][T20586] macvtap0: entered promiscuous mode [ 405.206296][T20586] macvtap0: left promiscuous mode [ 405.232088][T20594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6089'. [ 405.250117][T20596] netlink: 'syz.3.6087': attribute type 10 has an invalid length. [ 405.426627][T20615] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6098'. [ 405.609391][T20624] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6101'. [ 405.891119][T20643] netlink: 'syz.5.6106': attribute type 10 has an invalid length. [ 406.088586][T20653] vlan0: entered promiscuous mode [ 406.217987][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6120'. [ 406.296185][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6122'. [ 406.577479][T20705] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6137'. [ 406.640679][T20710] IPv6: Can't replace route, no match found [ 406.908602][T20720] lo speed is unknown, defaulting to 1000 [ 406.975014][T20720] chnl_net:caif_netlink_parms(): no params data found [ 407.022891][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 407.023049][ T29] audit: type=1326 audit(1734139263.312:33437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.053167][ T29] audit: type=1326 audit(1734139263.312:33438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.076899][ T29] audit: type=1326 audit(1734139263.312:33439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb5164680 code=0x7ffc0000 [ 407.100617][ T29] audit: type=1326 audit(1734139263.312:33440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5cb5167547 code=0x7ffc0000 [ 407.124281][ T29] audit: type=1326 audit(1734139263.312:33441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.147928][ T29] audit: type=1326 audit(1734139263.312:33442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f5cb5167547 code=0x7ffc0000 [ 407.172227][ T29] audit: type=1326 audit(1734139263.312:33443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5cb516497a code=0x7ffc0000 [ 407.196552][ T29] audit: type=1326 audit(1734139263.312:33444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.220747][ T29] audit: type=1326 audit(1734139263.312:33445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.244301][ T29] audit: type=1326 audit(1734139263.312:33446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20742 comm="syz.6.6149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 407.275544][T20720] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.282779][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.290087][T20720] bridge_slave_0: entered allmulticast mode [ 407.296598][T20720] bridge_slave_0: entered promiscuous mode [ 407.303493][T20720] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.310657][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.318133][T20720] bridge_slave_1: entered allmulticast mode [ 407.324738][T20720] bridge_slave_1: entered promiscuous mode [ 407.349060][T20720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.376295][T20720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.406608][T20720] team0: Port device team_slave_0 added [ 407.413608][T20720] team0: Port device team_slave_1 added [ 407.439947][T20720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.447015][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.473161][T20720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.486352][T20720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.493551][T20720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.519649][T20720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.563379][T20720] hsr_slave_0: entered promiscuous mode [ 407.575585][T20720] hsr_slave_1: entered promiscuous mode [ 407.585852][T20720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.595384][T20720] Cannot create hsr debugfs directory [ 407.722256][T20720] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.787922][T20788] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 407.826502][T20720] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.853937][T20795] macvtap0: entered promiscuous mode [ 407.860966][T20795] macvtap0: left promiscuous mode [ 407.871051][T20720] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.922046][T20720] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.942506][T20798] vlan2: entered promiscuous mode [ 407.984794][T20720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.995607][T20720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 408.004584][T20720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.014339][T20720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.079358][T20818] macvtap0: entered promiscuous mode [ 408.085780][T20818] macvtap0: left promiscuous mode [ 408.093690][T20822] netem: change failed [ 408.108553][T20720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.128702][T20720] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.145626][T20820] __nla_validate_parse: 4 callbacks suppressed [ 408.145642][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6183'. [ 408.165411][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.172548][T10245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.183256][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.190348][T10245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.319157][T20720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.408230][T20859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6195'. [ 408.455034][T20720] veth0_vlan: entered promiscuous mode [ 408.464829][T20866] IPv6: Can't replace route, no match found [ 408.475808][T20720] veth1_vlan: entered promiscuous mode [ 408.494319][T20720] veth0_macvtap: entered promiscuous mode [ 408.504171][T20720] veth1_macvtap: entered promiscuous mode [ 408.515508][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.526142][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.536044][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.546608][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.556604][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.567275][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.577229][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.587733][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.597650][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.608123][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.611205][T20864] netlink: 'syz.0.6196': attribute type 10 has an invalid length. [ 408.619731][T20720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.637418][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.647958][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.657803][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.668253][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.678116][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.688612][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.698451][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.708934][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.718865][T20720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.729322][T20720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.740272][T20720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.749621][T20720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.758470][T20720] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.767291][T20720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.776068][T20720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.832764][T20885] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 409.364248][T20903] IPv6: Can't replace route, no match found [ 410.765982][T20921] netlink: 'syz.2.6218': attribute type 10 has an invalid length. [ 410.776408][T20921] bond0: (slave bond_slave_0): Releasing backup interface [ 410.971378][T20925] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6220'. [ 411.094462][T20931] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 411.140551][T20934] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.221615][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x1 [ 411.229120][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.236666][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.244168][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.251670][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.259084][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.266579][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x4 [ 411.274281][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.281761][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x2 [ 411.289219][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.296716][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.304287][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.312304][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.319759][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x4 [ 411.327191][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.334601][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.341990][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.349419][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.356843][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.364256][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.371684][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.379076][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.386486][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.393893][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.401321][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.408719][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.416157][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.423578][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.430999][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.438405][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.445810][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.453342][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.460746][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.468134][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.475592][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.482982][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.490406][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.497782][ T1036] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 411.506148][ T1036] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.517010][T20934] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.554498][T20934] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.568653][T20954] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6232'. [ 411.572556][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x1 [ 411.585286][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.592742][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.600192][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.607607][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.615233][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.622715][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x4 [ 411.630200][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.637612][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x2 [ 411.645071][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.652494][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.659975][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.667408][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.674882][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x4 [ 411.682334][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.689834][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.697254][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.704689][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.712213][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.719708][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.727100][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.734565][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.742037][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.749413][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.756816][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.764308][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.771765][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.779219][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.786648][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.794066][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.801525][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.808903][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.816324][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.823744][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.831338][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.838790][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.846371][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.853896][ T35] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 411.862350][ T35] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 411.907452][T20934] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.974356][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6234'. [ 412.007099][T20934] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.019114][T20934] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.029664][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 412.029679][ T29] audit: type=1326 audit(1734139268.312:33667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.031402][T20934] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.035911][ T29] audit: type=1326 audit(1734139268.312:33668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.062785][T20934] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.067659][ T29] audit: type=1326 audit(1734139268.312:33669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.123102][ T29] audit: type=1326 audit(1734139268.312:33670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.147284][ T29] audit: type=1326 audit(1734139268.312:33671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.171370][ T29] audit: type=1326 audit(1734139268.312:33672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.194999][ T29] audit: type=1326 audit(1734139268.312:33673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.3.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.224347][ T29] audit: type=1326 audit(1734139268.512:33674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20978 comm="syz.3.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.248179][ T29] audit: type=1326 audit(1734139268.512:33675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20978 comm="syz.3.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.251604][T20987] netlink: 'syz.5.6235': attribute type 10 has an invalid length. [ 412.276061][ T29] audit: type=1326 audit(1734139268.562:33676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20978 comm="syz.3.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc35565d19 code=0x7ffc0000 [ 412.340043][T20990] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6246'. [ 412.493933][T20998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6250'. [ 412.562813][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6253'. [ 412.666101][T21014] vlan0: entered promiscuous mode [ 412.715706][T21023] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6259'. [ 413.195868][T21038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.205756][T21038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.614104][T21041] vlan2: entered promiscuous mode [ 413.682652][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6268'. [ 413.723231][T21057] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6271'. [ 414.392815][T21078] siw: device registration error -23 [ 414.461760][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6281'. [ 414.534327][T21089] macvtap0: entered promiscuous mode [ 414.540519][T21089] macvtap0: left promiscuous mode [ 414.599393][T21091] netlink: 252 bytes leftover after parsing attributes in process `syz.5.6285'. [ 414.688518][T21093] vlan2: entered promiscuous mode [ 414.720340][T21102] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 414.897422][T21117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.916150][T21117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.930423][T21122] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6295'. [ 414.939256][T21108] lo speed is unknown, defaulting to 1000 [ 414.981083][T11307] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.021499][T11307] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.034627][T21108] chnl_net:caif_netlink_parms(): no params data found [ 415.073648][T11307] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.084466][T21108] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.091593][T21108] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.098870][T21108] bridge_slave_0: entered allmulticast mode [ 415.106082][T21108] bridge_slave_0: entered promiscuous mode [ 415.114163][T21108] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.121342][T21108] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.128614][T21108] bridge_slave_1: entered allmulticast mode [ 415.135360][T21108] bridge_slave_1: entered promiscuous mode [ 415.142830][T11307] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.166064][T21108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.177180][T21108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.198936][T21108] team0: Port device team_slave_0 added [ 415.207600][T21108] team0: Port device team_slave_1 added [ 415.243918][T11307] bridge_slave_1: left allmulticast mode [ 415.249679][T11307] bridge_slave_1: left promiscuous mode [ 415.255345][T11307] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.263651][T11307] bridge_slave_0: left allmulticast mode [ 415.269325][T11307] bridge_slave_0: left promiscuous mode [ 415.274998][T11307] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.326350][T11307] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 415.411542][T21138] netlink: 252 bytes leftover after parsing attributes in process `syz.6.6298'. [ 415.423149][T11307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.434914][T11307] bond0 (unregistering): Released all slaves [ 415.444083][T21108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.451224][T21108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.477432][T21108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.491738][T21108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.498713][T21108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.524755][T21108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.542845][T11307] hsr_slave_0: left promiscuous mode [ 415.548511][T11307] hsr_slave_1: left promiscuous mode [ 415.556822][T11307] veth1_macvtap: left promiscuous mode [ 415.562500][T11307] veth0_macvtap: left promiscuous mode [ 415.566432][T21140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6299'. [ 415.568024][T11307] veth1_vlan: left promiscuous mode [ 415.582292][T11307] veth0_vlan: left promiscuous mode [ 415.691793][T21108] hsr_slave_0: entered promiscuous mode [ 415.697993][T21108] hsr_slave_1: entered promiscuous mode [ 415.704498][T21108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.712563][T21108] Cannot create hsr debugfs directory [ 415.829365][T21153] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 415.883718][T21159] FAULT_INJECTION: forcing a failure. [ 415.883718][T21159] name failslab, interval 1, probability 0, space 0, times 0 [ 415.896550][T21159] CPU: 0 UID: 0 PID: 21159 Comm: syz.2.6307 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 415.907340][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 415.917462][T21159] Call Trace: [ 415.917473][T21159] [ 415.917483][T21159] dump_stack_lvl+0xf2/0x150 [ 415.917529][T21159] dump_stack+0x15/0x1a [ 415.932527][T21159] should_fail_ex+0x223/0x230 [ 415.937299][T21159] should_failslab+0x8f/0xb0 [ 415.941957][T21159] kmem_cache_alloc_noprof+0x52/0x320 [ 415.947408][T21159] ? mas_alloc_nodes+0x1e3/0x490 [ 415.952456][T21159] mas_alloc_nodes+0x1e3/0x490 [ 415.957304][T21159] mas_preallocate+0x44a/0x650 [ 415.962117][T21159] __split_vma+0x244/0x6a0 [ 415.966611][T21159] vms_gather_munmap_vmas+0x171/0x7a0 [ 415.972087][T21159] ? exc_page_fault+0x4b6/0x650 [ 415.976980][T21159] ? _parse_integer_limit+0x167/0x180 [ 415.982394][T21159] do_vmi_align_munmap+0x1a4/0x390 [ 415.987547][T21159] do_vmi_munmap+0x1eb/0x230 [ 415.992182][T21159] __se_sys_mremap+0x62c/0xf10 [ 415.996987][T21159] __x64_sys_mremap+0x67/0x80 [ 416.001715][T21159] x64_sys_call+0x27e8/0x2dc0 [ 416.006431][T21159] do_syscall_64+0xc9/0x1c0 [ 416.010956][T21159] ? clear_bhb_loop+0x55/0xb0 [ 416.015717][T21159] ? clear_bhb_loop+0x55/0xb0 [ 416.020446][T21159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.026444][T21159] RIP: 0033:0x7f9d7bf95d19 [ 416.030876][T21159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.050653][T21159] RSP: 002b:00007f9d7a607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 416.059107][T21159] RAX: ffffffffffffffda RBX: 00007f9d7c185fa0 RCX: 00007f9d7bf95d19 [ 416.067096][T21159] RDX: 0000000000001000 RSI: 0000000000c00000 RDI: 0000000020400000 [ 416.075090][T21159] RBP: 00007f9d7a607090 R08: 00000000208b5000 R09: 0000000000000000 [ 416.083099][T21159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.091152][T21159] R13: 0000000000000000 R14: 00007f9d7c185fa0 R15: 00007ffdd42cf718 [ 416.099180][T21159] [ 416.229253][T21108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.242851][T21108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.262963][T21108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.286308][T21108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.324581][T21108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.336403][T21108] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.346221][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.353381][T11307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.364750][T10251] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.371956][T10251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.443716][T21108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.520571][T21108] veth0_vlan: entered promiscuous mode [ 416.528497][T21108] veth1_vlan: entered promiscuous mode [ 416.544745][T21108] veth0_macvtap: entered promiscuous mode [ 416.552771][T21108] veth1_macvtap: entered promiscuous mode [ 416.563222][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.573808][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.583788][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.594292][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.604342][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.614883][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.624853][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.635428][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.645299][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.655747][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.665594][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.676216][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.687080][T21108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.698413][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.708965][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.718885][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.729423][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.739278][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.749758][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.759814][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.770409][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.780312][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.790798][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.800665][T21108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.811162][T21108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.822045][T21108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.831998][T21108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.840871][T21108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.849648][T21108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.858446][T21108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.947105][T21201] netlink: 'syz.0.6319': attribute type 10 has an invalid length. [ 416.956328][T21201] bond0: (slave bond_slave_0): Releasing backup interface [ 417.023172][T21208] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6322'. [ 417.137459][T21214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.193156][T21214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.242665][T21214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.246988][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6330'. [ 417.283884][T21214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.330346][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 417.330363][ T29] audit: type=1326 audit(1734139273.622:34068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.333070][T21232] netlink: 252 bytes leftover after parsing attributes in process `syz.2.6333'. [ 417.336587][ T29] audit: type=1326 audit(1734139273.622:34069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.393188][ T29] audit: type=1326 audit(1734139273.622:34070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d7bf94680 code=0x7ffc0000 [ 417.416921][ T29] audit: type=1326 audit(1734139273.622:34071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9d7bf97547 code=0x7ffc0000 [ 417.440576][ T29] audit: type=1326 audit(1734139273.622:34072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.464096][ T29] audit: type=1326 audit(1734139273.622:34073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9d7bf97547 code=0x7ffc0000 [ 417.487745][ T29] audit: type=1326 audit(1734139273.622:34074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9d7bf9497a code=0x7ffc0000 [ 417.511244][ T29] audit: type=1326 audit(1734139273.622:34075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.534831][ T29] audit: type=1326 audit(1734139273.622:34076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.558515][ T29] audit: type=1326 audit(1734139273.622:34077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21231 comm="syz.2.6333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9d7bf95d19 code=0x7ffc0000 [ 417.616364][T21234] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 417.798949][T21249] vlan2: entered promiscuous mode [ 417.987389][T21262] IPv6: Can't replace route, no match found [ 418.112359][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x1 [ 418.119848][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.127470][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.135027][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.142494][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.150176][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.157626][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x4 [ 418.165109][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.172558][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x2 [ 418.179975][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.187485][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.194931][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.202373][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.209807][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x4 [ 418.217278][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.224787][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.232566][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.240195][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.247605][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.255049][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.262469][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.269980][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.277391][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.284842][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.292259][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.299897][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.307350][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.314848][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.322284][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.329787][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.337186][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.344612][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.352180][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.359621][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.367131][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.374592][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.381992][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.389393][ T24] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 418.398203][ T24] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz0 [ 418.597712][T21286] netlink: 'syz.5.6356': attribute type 10 has an invalid length. [ 418.721691][T21288] netlink: 'syz.5.6357': attribute type 10 has an invalid length. [ 419.433615][T21316] netlink: 'syz.3.6369': attribute type 10 has an invalid length. [ 419.443218][T21316] bond0: (slave bond_slave_0): Releasing backup interface [ 419.702074][T21325] IPv6: Can't replace route, no match found [ 420.382813][T21339] __nla_validate_parse: 1 callbacks suppressed [ 420.382833][T21339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6374'. [ 420.400223][T21338] vlan2: entered promiscuous mode [ 420.638776][T21349] netlink: 'syz.5.6380': attribute type 10 has an invalid length. [ 420.873652][T21356] bond1: entered promiscuous mode [ 420.878757][T21356] bond1: entered allmulticast mode [ 420.898586][T21356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.920798][T21356] bond1 (unregistering): Released all slaves [ 421.100755][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x1 [ 421.108211][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.115720][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.123133][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.130550][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.137976][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.145401][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x4 [ 421.152810][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.160227][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x2 [ 421.167634][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.175072][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.182556][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.189993][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.197455][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x4 [ 421.204878][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.212395][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.219884][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.227304][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.234788][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.242250][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.249660][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.257049][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.264493][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.272236][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.279659][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.287050][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.294522][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.302031][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.309430][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.316853][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.324284][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.331728][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.339114][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.346527][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.353964][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.361423][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.368815][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.376235][ T24] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 421.722391][ T24] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 421.816216][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6390'. [ 421.863393][T21378] ALSA: seq fatal error: cannot create timer (-16) [ 421.887503][T21378] bridge0: port 3(macvlan0) entered blocking state [ 421.894132][T21378] bridge0: port 3(macvlan0) entered disabled state [ 421.947164][T21378] macvlan0: entered allmulticast mode [ 421.952617][T21378] veth1_vlan: entered allmulticast mode [ 421.960650][T21378] macvlan0: entered promiscuous mode [ 421.966454][T21378] bridge0: port 3(macvlan0) entered blocking state [ 421.973096][T21378] bridge0: port 3(macvlan0) entered forwarding state [ 422.016060][T21385] macvtap0: entered promiscuous mode [ 422.034142][T21385] macvtap0: left promiscuous mode [ 422.315266][T21399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.323858][T21399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.341432][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x1 [ 422.348907][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.356482][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.363939][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.371467][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.378855][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.386368][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x4 [ 422.393924][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.401433][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x2 [ 422.408828][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.416263][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.423694][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.431142][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.438696][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x4 [ 422.446165][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.453572][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.461047][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.468513][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.476023][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.483533][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.490955][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.498373][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.505888][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.513324][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.520753][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.528261][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.535708][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.543219][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.550679][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.558128][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.565565][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.573059][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.580495][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.587887][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.595386][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.602873][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.610287][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.617675][ T24] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 422.811706][T21396] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.824162][T21396] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 422.834592][T21396] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 423.077913][ T29] kauditd_printk_skb: 740 callbacks suppressed [ 423.077928][ T29] audit: type=1326 audit(1734139279.342:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.107895][ T29] audit: type=1326 audit(1734139279.342:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.131676][ T29] audit: type=1326 audit(1734139279.342:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.155330][ T29] audit: type=1326 audit(1734139279.342:34821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.178949][ T29] audit: type=1326 audit(1734139279.342:34822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.202570][ T29] audit: type=1326 audit(1734139279.342:34823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.226180][ T29] audit: type=1326 audit(1734139279.342:34824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.250014][ T29] audit: type=1326 audit(1734139279.342:34825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.273650][ T29] audit: type=1326 audit(1734139279.342:34826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.297155][ T29] audit: type=1326 audit(1734139279.342:34827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21406 comm="syz.6.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 423.324835][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6401'. [ 423.370140][ T24] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz0 [ 423.440306][T21414] FAULT_INJECTION: forcing a failure. [ 423.440306][T21414] name failslab, interval 1, probability 0, space 0, times 0 [ 423.453022][T21414] CPU: 1 UID: 0 PID: 21414 Comm: syz.2.6405 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 423.463858][T21414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 423.473960][T21414] Call Trace: [ 423.477264][T21414] [ 423.480203][T21414] dump_stack_lvl+0xf2/0x150 [ 423.484855][T21414] dump_stack+0x15/0x1a [ 423.489045][T21414] should_fail_ex+0x223/0x230 [ 423.493805][T21414] should_failslab+0x8f/0xb0 [ 423.498473][T21414] kmem_cache_alloc_noprof+0x52/0x320 [ 423.503911][T21414] ? getname_flags+0x81/0x3b0 [ 423.508598][T21414] getname_flags+0x81/0x3b0 [ 423.513136][T21414] __x64_sys_link+0x33/0x70 [ 423.517802][T21414] x64_sys_call+0x2d1a/0x2dc0 [ 423.522534][T21414] do_syscall_64+0xc9/0x1c0 [ 423.527060][T21414] ? clear_bhb_loop+0x55/0xb0 [ 423.531798][T21414] ? clear_bhb_loop+0x55/0xb0 [ 423.536582][T21414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.542506][T21414] RIP: 0033:0x7f9d7bf95d19 [ 423.546940][T21414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.566598][T21414] RSP: 002b:00007f9d7a607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 423.575159][T21414] RAX: ffffffffffffffda RBX: 00007f9d7c185fa0 RCX: 00007f9d7bf95d19 [ 423.583157][T21414] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000020000a40 [ 423.591209][T21414] RBP: 00007f9d7a607090 R08: 0000000000000000 R09: 0000000000000000 [ 423.599259][T21414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.607260][T21414] R13: 0000000000000000 R14: 00007f9d7c185fa0 R15: 00007ffdd42cf718 [ 423.615263][T21414] [ 424.030799][T21429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6411'. [ 424.063936][T21429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.071472][T21429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.219228][T21429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.226786][T21429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.646267][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x1 [ 424.653773][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.661238][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.668690][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.676162][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.683600][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.691048][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x4 [ 424.698474][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.705997][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x2 [ 424.713432][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.721113][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.728522][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.735933][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.743366][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x4 [ 424.750959][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.758364][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.765784][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.773190][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.780622][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.788030][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.795620][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.803059][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.810482][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.817878][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.825317][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.832745][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.840152][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.847544][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.854979][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.862398][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.869871][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.877385][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.884801][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.892260][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.899700][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.907080][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.914522][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 424.921992][ T3375] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 425.258015][T21214] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.282314][ T3375] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz0 [ 425.300547][T21214] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.353095][T21214] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.388360][T21214] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.493008][T21451] vlan2: entered promiscuous mode [ 425.695960][T21455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6422'. [ 425.797803][T21460] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6423'. [ 425.929851][T21473] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 426.038253][T21477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.065305][T21477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.108628][T21480] IPv6: Can't replace route, no match found [ 426.151502][T21483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6433'. [ 426.169859][T21483] team0 (unregistering): Port device team_slave_0 removed [ 426.181948][T21483] team0 (unregistering): Port device team_slave_1 removed [ 426.734213][T21490] pim6reg: entered allmulticast mode [ 426.742980][T21490] pim6reg: left allmulticast mode [ 426.816958][T21500] macvtap0: entered promiscuous mode [ 426.823052][T21500] macvtap0: left promiscuous mode [ 426.985712][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6439'. [ 426.997227][T21510] macvtap0: entered promiscuous mode [ 427.003331][T21510] macvtap0: left promiscuous mode [ 427.138010][T21515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21515 comm=syz.5.6447 [ 427.164821][T21515] lo speed is unknown, defaulting to 1000 [ 427.691036][T21530] netlink: 'syz.6.6454': attribute type 10 has an invalid length. [ 427.705763][T21533] netlink: 'syz.3.6455': attribute type 10 has an invalid length. [ 427.727523][T21536] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 427.775373][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6458'. [ 427.806364][T21547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6460'. [ 427.807852][T21548] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 427.964099][T21560] tmpfs: Bad value for 'mpol' [ 427.991423][T21562] netlink: 'syz.2.6467': attribute type 10 has an invalid length. [ 428.034120][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6462'. [ 428.046391][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'. [ 428.065127][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'. [ 428.092074][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6469'. [ 428.122941][T21567] syz.2.6469 (21567): /proc/21566/oom_adj is deprecated, please use /proc/21566/oom_score_adj instead. [ 428.750653][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 428.750672][ T29] audit: type=1326 audit(1734139285.042:35305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.786527][ T29] audit: type=1326 audit(1734139285.072:35306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.810273][ T29] audit: type=1326 audit(1734139285.072:35307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.833945][ T29] audit: type=1326 audit(1734139285.072:35308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.857854][ T29] audit: type=1326 audit(1734139285.072:35309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.881517][ T29] audit: type=1326 audit(1734139285.072:35310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.905235][ T29] audit: type=1326 audit(1734139285.072:35311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.928875][ T29] audit: type=1326 audit(1734139285.072:35312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.952548][ T29] audit: type=1326 audit(1734139285.072:35313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 428.976152][ T29] audit: type=1326 audit(1734139285.072:35314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21580 comm="syz.6.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 429.019991][T21582] IPv6: Can't replace route, no match found [ 429.201098][T21600] netlink: 'syz.2.6479': attribute type 10 has an invalid length. [ 429.253869][T21606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.263234][T21606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.146186][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x1 [ 430.153723][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.161289][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.168687][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.176175][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.183632][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.191077][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x4 [ 430.198527][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.206060][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x2 [ 430.213541][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.220963][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.228407][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.235852][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.243289][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x4 [ 430.250712][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.258150][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.265595][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.273014][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.280417][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.287810][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.295295][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.302699][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.310173][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.317626][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.325049][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.332537][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.340017][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.347402][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.355228][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.362650][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.370123][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.377632][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.385081][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.393142][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.400904][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.408306][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.415714][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.423191][ T3523] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 430.431219][ T3523] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 430.621976][T21662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.673712][T21662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.743834][T21662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.783139][T21662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.829051][T21662] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.840121][T21662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.851592][T21662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.862774][T21662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.895177][T21665] __nla_validate_parse: 4 callbacks suppressed [ 430.895193][T21665] netlink: 252 bytes leftover after parsing attributes in process `syz.5.6507'. [ 431.199916][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x1 [ 431.207364][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.214896][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.222408][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.229932][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.237369][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.244978][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x4 [ 431.252498][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.259946][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x2 [ 431.267413][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.274878][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.282330][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.289760][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.297152][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x4 [ 431.304659][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.312173][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.319668][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.327067][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.334575][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.342044][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.349450][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.356937][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.364424][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.371904][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.379394][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.386826][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.394258][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.401719][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.409118][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.416707][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.424151][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.431797][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.439200][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.446717][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.454166][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.461609][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.469025][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.476472][ T3375] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 431.494132][ T3375] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz0 [ 431.646858][T21696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6521'. [ 431.783481][T21705] loop0: detected capacity change from 0 to 1024 [ 431.851427][T21705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.863957][T21705] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.885125][T21705] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 431.897493][T21705] EXT4-fs (loop0): This should not happen!! Data will be lost [ 431.897493][T21705] [ 431.907478][T21705] EXT4-fs (loop0): Total free blocks count 0 [ 431.913534][T21705] EXT4-fs (loop0): Free/Dirty block details [ 431.919481][T21705] EXT4-fs (loop0): free_blocks=0 [ 431.924579][T21705] EXT4-fs (loop0): dirty_blocks=0 [ 431.929658][T21705] EXT4-fs (loop0): Block reservation details [ 431.935680][T21705] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 432.008673][T21108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.130871][T21725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6530'. [ 432.203213][T21734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 432.252258][T21741] loop0: detected capacity change from 0 to 512 [ 432.263335][T21741] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 432.273921][T21741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 432.282094][T21741] System zones: 1-12 [ 432.286780][T21741] EXT4-fs (loop0): 1 truncate cleaned up [ 432.292969][T21741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.306935][T21747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6537'. [ 432.320568][T21108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.342998][T21749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6538'. [ 432.376634][T21753] loop0: detected capacity change from 0 to 512 [ 432.393902][T21753] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 432.409135][T21753] EXT4-fs (loop0): mount failed [ 432.457254][T21759] loop0: detected capacity change from 0 to 1024 [ 432.470747][T21759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.515345][T21108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.551793][T21765] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 432.602476][T21768] vlan2: entered promiscuous mode [ 432.608381][T21774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.621233][T21774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.714665][T21782] FAULT_INJECTION: forcing a failure. [ 432.714665][T21782] name failslab, interval 1, probability 0, space 0, times 0 [ 432.727468][T21782] CPU: 0 UID: 0 PID: 21782 Comm: syz.3.6550 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 432.738253][T21782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 432.748369][T21782] Call Trace: [ 432.751676][T21782] [ 432.754625][T21782] dump_stack_lvl+0xf2/0x150 [ 432.759269][T21782] dump_stack+0x15/0x1a [ 432.763463][T21782] should_fail_ex+0x223/0x230 [ 432.768400][T21782] should_failslab+0x8f/0xb0 [ 432.773099][T21782] __kmalloc_node_noprof+0xad/0x410 [ 432.778318][T21782] ? __rcu_read_unlock+0x4e/0x70 [ 432.783448][T21782] ? __kvmalloc_node_noprof+0x72/0x170 [ 432.788978][T21782] __kvmalloc_node_noprof+0x72/0x170 [ 432.794485][T21782] simple_xattr_set+0x6e/0x2a0 [ 432.799288][T21782] ? strlen+0x19/0x30 [ 432.803301][T21782] shmem_xattr_handler_set+0x129/0x220 [ 432.808837][T21782] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 432.814842][T21782] __vfs_setxattr+0x2e5/0x310 [ 432.819615][T21782] __vfs_setxattr_noperm+0xed/0x420 [ 432.824897][T21782] __vfs_setxattr_locked+0x1af/0x1d0 [ 432.830241][T21782] vfs_setxattr+0x140/0x290 [ 432.834801][T21782] file_setxattr+0x139/0x1b0 [ 432.839447][T21782] path_setxattrat+0x2c2/0x310 [ 432.844259][T21782] __x64_sys_fsetxattr+0x6d/0x80 [ 432.849235][T21782] x64_sys_call+0x29d2/0x2dc0 [ 432.853954][T21782] do_syscall_64+0xc9/0x1c0 [ 432.858500][T21782] ? clear_bhb_loop+0x55/0xb0 [ 432.863248][T21782] ? clear_bhb_loop+0x55/0xb0 [ 432.867959][T21782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.873918][T21782] RIP: 0033:0x7fbc35565d19 [ 432.878344][T21782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.898018][T21782] RSP: 002b:00007fbc33bd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 432.906459][T21782] RAX: ffffffffffffffda RBX: 00007fbc35755fa0 RCX: 00007fbc35565d19 [ 432.914534][T21782] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 432.922525][T21782] RBP: 00007fbc33bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 432.930663][T21782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.939024][T21782] R13: 0000000000000000 R14: 00007fbc35755fa0 R15: 00007ffd28a1cc88 [ 432.947111][T21782] [ 433.371335][T20942] udevd[20942]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 433.375174][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6560'. [ 433.412465][T21813] FAULT_INJECTION: forcing a failure. [ 433.412465][T21813] name failslab, interval 1, probability 0, space 0, times 0 [ 433.425569][T21813] CPU: 1 UID: 0 PID: 21813 Comm: syz.3.6562 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 433.429724][T21815] FAULT_INJECTION: forcing a failure. [ 433.429724][T21815] name failslab, interval 1, probability 0, space 0, times 0 [ 433.436341][T21813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.459086][T21813] Call Trace: [ 433.462370][T21813] [ 433.465305][T21813] dump_stack_lvl+0xf2/0x150 [ 433.469986][T21813] dump_stack+0x15/0x1a [ 433.474196][T21813] should_fail_ex+0x223/0x230 [ 433.478887][T21813] should_failslab+0x8f/0xb0 [ 433.483562][T21813] __kmalloc_node_noprof+0xad/0x410 [ 433.488773][T21813] ? __kvmalloc_node_noprof+0x72/0x170 [ 433.494254][T21813] __kvmalloc_node_noprof+0x72/0x170 [ 433.499614][T21813] __nf_hook_entries_try_shrink+0x23a/0x440 [ 433.505556][T21813] __nf_unregister_net_hook+0x31e/0x3f0 [ 433.511305][T21813] nf_unregister_net_hooks+0xb0/0xe0 [ 433.516644][T21813] nf_ct_netns_do_put+0x1d4/0x250 [ 433.521761][T21813] nf_ct_netns_put+0xe3/0x1e0 [ 433.526458][T21813] nft_connlimit_destroy+0x3a/0x70 [ 433.531588][T21813] ? __pfx_nft_connlimit_destroy+0x10/0x10 [ 433.537408][T21813] nf_tables_rule_release+0x169/0x1e0 [ 433.542806][T21813] __nft_release_table+0x194/0x830 [ 433.547975][T21813] nft_rcv_nl_event+0x2ec/0x390 [ 433.552919][T21813] ? nfulnl_rcv_nl_event+0x15c/0x180 [ 433.558239][T21813] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 433.563680][T21813] blocking_notifier_call_chain+0x94/0x200 [ 433.569562][T21813] netlink_release+0xad6/0xfb0 [ 433.574354][T21813] sock_close+0x68/0x150 [ 433.578612][T21813] ? __pfx_sock_close+0x10/0x10 [ 433.583490][T21813] __fput+0x17a/0x6d0 [ 433.587491][T21813] ? file_close_fd_locked+0x17f/0x1a0 [ 433.592900][T21813] __fput_sync+0x96/0xc0 [ 433.597180][T21813] __se_sys_close+0x109/0x1b0 [ 433.601871][T21813] __x64_sys_close+0x1f/0x30 [ 433.606573][T21813] x64_sys_call+0x266c/0x2dc0 [ 433.611261][T21813] do_syscall_64+0xc9/0x1c0 [ 433.615890][T21813] ? clear_bhb_loop+0x55/0xb0 [ 433.620612][T21813] ? clear_bhb_loop+0x55/0xb0 [ 433.625299][T21813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.631291][T21813] RIP: 0033:0x7fbc35565d19 [ 433.635767][T21813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.655424][T21813] RSP: 002b:00007fbc33bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 433.663882][T21813] RAX: ffffffffffffffda RBX: 00007fbc35755fa0 RCX: 00007fbc35565d19 [ 433.671967][T21813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 433.680014][T21813] RBP: 00007fbc33bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 433.688321][T21813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.696374][T21813] R13: 0000000000000000 R14: 00007fbc35755fa0 R15: 00007ffd28a1cc88 [ 433.704429][T21813] [ 433.707455][T21815] CPU: 0 UID: 0 PID: 21815 Comm: syz.5.6563 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 433.718266][T21815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 433.728339][T21815] Call Trace: [ 433.731628][T21815] [ 433.734570][T21815] dump_stack_lvl+0xf2/0x150 [ 433.739293][T21815] dump_stack+0x15/0x1a [ 433.743579][T21815] should_fail_ex+0x223/0x230 [ 433.748410][T21815] should_failslab+0x8f/0xb0 [ 433.753027][T21815] kmem_cache_alloc_node_noprof+0x59/0x320 [ 433.758939][T21815] ? __alloc_skb+0x10b/0x310 [ 433.763642][T21815] __alloc_skb+0x10b/0x310 [ 433.768076][T21815] netlink_alloc_large_skb+0xad/0xe0 [ 433.773439][T21815] netlink_sendmsg+0x3b4/0x6e0 [ 433.778361][T21815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.783732][T21815] __sock_sendmsg+0x140/0x180 [ 433.788470][T21815] ____sys_sendmsg+0x312/0x410 [ 433.793264][T21815] __sys_sendmsg+0x19d/0x230 [ 433.797931][T21815] __x64_sys_sendmsg+0x46/0x50 [ 433.802786][T21815] x64_sys_call+0x2734/0x2dc0 [ 433.807527][T21815] do_syscall_64+0xc9/0x1c0 [ 433.812057][T21815] ? clear_bhb_loop+0x55/0xb0 [ 433.816816][T21815] ? clear_bhb_loop+0x55/0xb0 [ 433.821555][T21815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.827637][T21815] RIP: 0033:0x7f45ad1b5d19 [ 433.832130][T21815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.851779][T21815] RSP: 002b:00007f45ab827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.860201][T21815] RAX: ffffffffffffffda RBX: 00007f45ad3a5fa0 RCX: 00007f45ad1b5d19 [ 433.868192][T21815] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 433.876229][T21815] RBP: 00007f45ab827090 R08: 0000000000000000 R09: 0000000000000000 [ 433.884263][T21815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.892277][T21815] R13: 0000000000000000 R14: 00007f45ad3a5fa0 R15: 00007fffa82557e8 [ 433.900288][T21815] [ 434.022922][T21831] batadv_slave_1: mtu less than device minimum [ 434.042645][T21831] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.078292][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 434.078309][ T29] audit: type=1326 audit(1734139290.362:35887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.112661][ T29] audit: type=1326 audit(1734139290.362:35888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.136608][ T29] audit: type=1326 audit(1734139290.362:35889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.160385][ T29] audit: type=1326 audit(1734139290.402:35890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.183975][ T29] audit: type=1326 audit(1734139290.402:35891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.208206][ T29] audit: type=1326 audit(1734139290.482:35892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.232254][ T29] audit: type=1326 audit(1734139290.482:35893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.258542][ T29] audit: type=1326 audit(1734139290.482:35894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.282154][ T29] audit: type=1326 audit(1734139290.482:35895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.305791][ T29] audit: type=1326 audit(1734139290.482:35896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21834 comm="syz.5.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 434.362291][T21831] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.466217][T21831] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.516212][T21831] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.572181][T20942] udevd[20942]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 434.619945][T21856] IPv6: Can't replace route, no match found [ 434.903562][T20942] udevd[20942]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 435.061040][T21881] FAULT_INJECTION: forcing a failure. [ 435.061040][T21881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.074369][T21881] CPU: 0 UID: 0 PID: 21881 Comm: syz.2.6594 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 435.085155][T21881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 435.095225][T21881] Call Trace: [ 435.098517][T21881] [ 435.101473][T21881] dump_stack_lvl+0xf2/0x150 [ 435.106105][T21881] dump_stack+0x15/0x1a [ 435.110306][T21881] should_fail_ex+0x223/0x230 [ 435.115016][T21881] should_fail+0xb/0x10 [ 435.119200][T21881] should_fail_usercopy+0x1a/0x20 [ 435.124284][T21881] _copy_from_user+0x1e/0xb0 [ 435.128909][T21881] copy_msghdr_from_user+0x54/0x2a0 [ 435.134200][T21881] ? __fget_files+0x17c/0x1c0 [ 435.138996][T21881] do_recvmmsg+0x256/0x6d0 [ 435.143464][T21881] __x64_sys_recvmmsg+0xe2/0x170 [ 435.148557][T21881] x64_sys_call+0x2a9a/0x2dc0 [ 435.153267][T21881] do_syscall_64+0xc9/0x1c0 [ 435.157793][T21881] ? clear_bhb_loop+0x55/0xb0 [ 435.162520][T21881] ? clear_bhb_loop+0x55/0xb0 [ 435.167254][T21881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.173192][T21881] RIP: 0033:0x7f9d7bf95d19 [ 435.177678][T21881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.197413][T21881] RSP: 002b:00007f9d7a607038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.205874][T21881] RAX: ffffffffffffffda RBX: 00007f9d7c185fa0 RCX: 00007f9d7bf95d19 [ 435.213865][T21881] RDX: 0000000000000001 RSI: 0000000020003940 RDI: 0000000000000008 [ 435.221843][T21881] RBP: 00007f9d7a607090 R08: 0000000000000000 R09: 0000000000000000 [ 435.229825][T21881] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 435.237816][T21881] R13: 0000000000000000 R14: 00007f9d7c185fa0 R15: 00007ffdd42cf718 [ 435.245801][T21881] [ 435.325968][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6597'. [ 435.346636][T21831] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.365328][T21831] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.377688][T21831] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.390270][T21831] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.489782][T21901] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 435.540598][T21907] ebt_among: dst integrity fail: 200 [ 435.547627][T21907] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.6605'. [ 435.557359][T21907] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 435.649232][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6608'. [ 435.852731][T21923] IPv6: Can't replace route, no match found [ 435.948334][T21932] netlink: 'syz.2.6616': attribute type 10 has an invalid length. [ 436.006247][T21937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.015539][T21937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.075698][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6620'. [ 436.104256][T21944] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 436.507895][T21964] netlink: 'syz.3.6629': attribute type 10 has an invalid length. [ 436.552267][T21968] syzkaller0: entered allmulticast mode [ 436.559197][T21969] syzkaller0 (unregistering): left allmulticast mode [ 436.639460][T21972] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 436.675726][T21975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.684804][T21975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.116503][T21984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6637'. [ 437.272861][T21998] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 437.325283][T22002] IPv6: Can't replace route, no match found [ 437.628115][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6648'. [ 437.660938][T21135] udevd[21135]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 437.714482][T21135] udevd[21135]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 438.137288][T22026] FAULT_INJECTION: forcing a failure. [ 438.137288][T22026] name failslab, interval 1, probability 0, space 0, times 0 [ 438.150033][T22026] CPU: 1 UID: 0 PID: 22026 Comm: syz.6.6653 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 438.160833][T22026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 438.171086][T22026] Call Trace: [ 438.174418][T22026] [ 438.177357][T22026] dump_stack_lvl+0xf2/0x150 [ 438.181970][T22026] dump_stack+0x15/0x1a [ 438.186152][T22026] should_fail_ex+0x223/0x230 [ 438.190944][T22026] should_failslab+0x8f/0xb0 [ 438.195608][T22026] kmem_cache_alloc_node_noprof+0x59/0x320 [ 438.201424][T22026] ? __alloc_skb+0x10b/0x310 [ 438.206039][T22026] __alloc_skb+0x10b/0x310 [ 438.210550][T22026] netlink_alloc_large_skb+0xad/0xe0 [ 438.215857][T22026] netlink_sendmsg+0x3b4/0x6e0 [ 438.221185][T22026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.226518][T22026] __sock_sendmsg+0x140/0x180 [ 438.231212][T22026] ____sys_sendmsg+0x312/0x410 [ 438.235986][T22026] __sys_sendmsg+0x19d/0x230 [ 438.240595][T22026] __x64_sys_sendmsg+0x46/0x50 [ 438.245392][T22026] x64_sys_call+0x2734/0x2dc0 [ 438.250106][T22026] do_syscall_64+0xc9/0x1c0 [ 438.254609][T22026] ? clear_bhb_loop+0x55/0xb0 [ 438.259293][T22026] ? clear_bhb_loop+0x55/0xb0 [ 438.263992][T22026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.269912][T22026] RIP: 0033:0x7f5cb5165d19 [ 438.274324][T22026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.293998][T22026] RSP: 002b:00007f5cb37d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.302420][T22026] RAX: ffffffffffffffda RBX: 00007f5cb5355fa0 RCX: 00007f5cb5165d19 [ 438.310460][T22026] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 438.318519][T22026] RBP: 00007f5cb37d1090 R08: 0000000000000000 R09: 0000000000000000 [ 438.326502][T22026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.334570][T22026] R13: 0000000000000000 R14: 00007f5cb5355fa0 R15: 00007fffacdd5b28 [ 438.342571][T22026] [ 438.367874][T22029] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 438.431832][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 438.451545][T22038] team0 (unregistering): Port device team_slave_0 removed [ 438.464093][T22038] team0 (unregistering): Port device team_slave_1 removed [ 438.485582][T22044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.496219][T22044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.557021][T22049] IPv6: Can't replace route, no match found [ 438.647851][T22055] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 438.682569][T22057] loop0: detected capacity change from 0 to 1024 [ 438.690727][T22057] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 438.702839][T22057] JBD2: no valid journal superblock found [ 438.708616][T22057] EXT4-fs (loop0): Could not load journal inode [ 438.793078][T22065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.802015][T22065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.085067][ T29] kauditd_printk_skb: 1725 callbacks suppressed [ 439.085084][ T29] audit: type=1326 audit(1734139295.372:37622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb515cce7 code=0x7ffc0000 [ 439.120393][ T29] audit: type=1326 audit(1734139295.402:37623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cb5101f29 code=0x7ffc0000 [ 439.144005][ T29] audit: type=1326 audit(1734139295.402:37624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb515cce7 code=0x7ffc0000 [ 439.167564][ T29] audit: type=1326 audit(1734139295.402:37625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cb5101f29 code=0x7ffc0000 [ 439.191126][ T29] audit: type=1326 audit(1734139295.402:37626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 439.215040][ T29] audit: type=1326 audit(1734139295.412:37627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb515cce7 code=0x7ffc0000 [ 439.238605][ T29] audit: type=1326 audit(1734139295.412:37628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cb5101f29 code=0x7ffc0000 [ 439.262368][ T29] audit: type=1326 audit(1734139295.412:37629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 439.286078][ T29] audit: type=1326 audit(1734139295.412:37630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cb515cce7 code=0x7ffc0000 [ 439.309703][ T29] audit: type=1326 audit(1734139295.412:37631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22045 comm="syz.6.6663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cb5101f29 code=0x7ffc0000 [ 439.403978][T22075] loop0: detected capacity change from 0 to 1024 [ 439.412103][T22077] FAULT_INJECTION: forcing a failure. [ 439.412103][T22077] name failslab, interval 1, probability 0, space 0, times 0 [ 439.424878][T22077] CPU: 0 UID: 0 PID: 22077 Comm: syz.6.6676 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 439.434189][T22075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.435673][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.435691][T22077] Call Trace: [ 439.435700][T22077] [ 439.435709][T22077] dump_stack_lvl+0xf2/0x150 [ 439.448194][T22075] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.457789][T22077] dump_stack+0x15/0x1a [ 439.467416][T22075] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 439.468645][T22077] should_fail_ex+0x223/0x230 [ 439.479017][T22075] EXT4-fs (loop0): This should not happen!! Data will be lost [ 439.479017][T22075] [ 439.479034][T22075] EXT4-fs (loop0): Total free blocks count 0 [ 439.479047][T22075] EXT4-fs (loop0): Free/Dirty block details [ 439.479059][T22075] EXT4-fs (loop0): free_blocks=0 [ 439.483198][T22077] should_failslab+0x8f/0xb0 [ 439.495488][T22075] EXT4-fs (loop0): dirty_blocks=0 [ 439.500117][T22077] kmem_cache_alloc_node_noprof+0x59/0x320 [ 439.500175][T22077] ? __alloc_skb+0x10b/0x310 [ 439.500196][T22077] __alloc_skb+0x10b/0x310 [ 439.509849][T22075] EXT4-fs (loop0): Block reservation details [ 439.515775][T22077] netlink_alloc_large_skb+0xad/0xe0 [ 439.521727][T22075] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 439.526607][T22077] netlink_sendmsg+0x3b4/0x6e0 [ 439.573372][T22077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.573405][T22077] __sock_sendmsg+0x140/0x180 [ 439.583441][T22077] ____sys_sendmsg+0x312/0x410 [ 439.588240][T22077] __sys_sendmsg+0x19d/0x230 [ 439.592949][T22077] __x64_sys_sendmsg+0x46/0x50 [ 439.597722][T22077] x64_sys_call+0x2734/0x2dc0 [ 439.602429][T22077] do_syscall_64+0xc9/0x1c0 [ 439.607089][T22077] ? clear_bhb_loop+0x55/0xb0 [ 439.611806][T22077] ? clear_bhb_loop+0x55/0xb0 [ 439.616490][T22077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.622419][T22077] RIP: 0033:0x7f5cb5165d19 [ 439.626850][T22077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.646493][T22077] RSP: 002b:00007f5cb37d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.655039][T22077] RAX: ffffffffffffffda RBX: 00007f5cb5355fa0 RCX: 00007f5cb5165d19 [ 439.663167][T22077] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000006 [ 439.671157][T22077] RBP: 00007f5cb37d1090 R08: 0000000000000000 R09: 0000000000000000 [ 439.679165][T22077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.687208][T22077] R13: 0000000000000000 R14: 00007f5cb5355fa0 R15: 00007fffacdd5b28 [ 439.695215][T22077] [ 439.789409][T21108] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.827201][T22084] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 440.041080][T22088] FAULT_INJECTION: forcing a failure. [ 440.041080][T22088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.054379][T22088] CPU: 0 UID: 0 PID: 22088 Comm: syz.0.6677 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 440.065211][T22088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 440.075360][T22088] Call Trace: [ 440.078669][T22088] [ 440.081605][T22088] dump_stack_lvl+0xf2/0x150 [ 440.086296][T22088] dump_stack+0x15/0x1a [ 440.090497][T22088] should_fail_ex+0x223/0x230 [ 440.095257][T22088] should_fail+0xb/0x10 [ 440.099423][T22088] should_fail_usercopy+0x1a/0x20 [ 440.104528][T22088] strncpy_from_user+0x25/0x210 [ 440.109455][T22088] ? exc_page_fault+0x4fc/0x650 [ 440.114420][T22088] strncpy_from_user_nofault+0x66/0xe0 [ 440.119915][T22088] bpf_probe_read_user_str+0x2a/0x70 [ 440.125233][T22088] bpf_prog_b1bc9f7c1f89903c+0x41/0x43 [ 440.130757][T22088] bpf_trace_run3+0x10c/0x1d0 [ 440.135467][T22088] ? __alloc_skb+0x290/0x310 [ 440.140092][T22088] ? __alloc_skb+0x1b5/0x310 [ 440.144693][T22088] ? __alloc_skb+0x290/0x310 [ 440.149387][T22088] kmem_cache_free+0x237/0x2d0 [ 440.154177][T22088] ? __alloc_skb+0x1b5/0x310 [ 440.158810][T22088] __alloc_skb+0x290/0x310 [ 440.163239][T22088] ? selinux_file_permission+0x22a/0x360 [ 440.168908][T22088] ppp_write+0x87/0x310 [ 440.173219][T22088] ? vfs_write+0x26d/0x920 [ 440.177660][T22088] ? __pfx_ppp_write+0x10/0x10 [ 440.182495][T22088] vfs_write+0x281/0x920 [ 440.186763][T22088] ? putname+0xcf/0xf0 [ 440.190846][T22088] ? __fget_files+0x17c/0x1c0 [ 440.195562][T22088] ksys_write+0xe8/0x1b0 [ 440.199830][T22088] __x64_sys_write+0x42/0x50 [ 440.204502][T22088] x64_sys_call+0x287e/0x2dc0 [ 440.209292][T22088] do_syscall_64+0xc9/0x1c0 [ 440.213816][T22088] ? clear_bhb_loop+0x55/0xb0 [ 440.218514][T22088] ? clear_bhb_loop+0x55/0xb0 [ 440.223300][T22088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.229264][T22088] RIP: 0033:0x7fbb32675d19 [ 440.233730][T22088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.253360][T22088] RSP: 002b:00007fbb30ce7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 440.261797][T22088] RAX: ffffffffffffffda RBX: 00007fbb32865fa0 RCX: 00007fbb32675d19 [ 440.269782][T22088] RDX: 0000000020000412 RSI: 0000000020000400 RDI: 0000000000000005 [ 440.277772][T22088] RBP: 00007fbb30ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.285760][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.293774][T22088] R13: 0000000000000000 R14: 00007fbb32865fa0 R15: 00007ffc576fd508 [ 440.301817][T22088] [ 440.351467][T22094] ALSA: seq fatal error: cannot create timer (-16) [ 440.479314][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6686'. [ 440.548534][T22109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22109 comm=syz.5.6689 [ 441.007846][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6698'. [ 441.068471][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6701'. [ 441.103881][T22137] bridge_slave_1: left allmulticast mode [ 441.109696][T22137] bridge_slave_1: left promiscuous mode [ 441.115556][T22137] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.199854][T22137] bridge_slave_0: left allmulticast mode [ 441.205584][T22137] bridge_slave_0: left promiscuous mode [ 441.211377][T22137] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.368698][T22163] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 441.383625][T22140] vlan2: entered promiscuous mode [ 441.685821][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6713'. [ 441.930238][T22181] pim6reg: entered allmulticast mode [ 441.963860][T22186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6718'. [ 442.116340][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6722'. [ 442.243171][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6725'. [ 442.264003][T22213] vlan2: entered promiscuous mode [ 442.317626][T22231] FAULT_INJECTION: forcing a failure. [ 442.317626][T22231] name failslab, interval 1, probability 0, space 0, times 0 [ 442.330384][T22231] CPU: 0 UID: 0 PID: 22231 Comm: syz.2.6735 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 442.341174][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.351276][T22231] Call Trace: [ 442.354589][T22231] [ 442.357561][T22231] dump_stack_lvl+0xf2/0x150 [ 442.362227][T22231] dump_stack+0x15/0x1a [ 442.366424][T22231] should_fail_ex+0x223/0x230 [ 442.371297][T22231] should_failslab+0x8f/0xb0 [ 442.375935][T22231] kmem_cache_alloc_node_noprof+0x59/0x320 [ 442.381801][T22231] ? __alloc_skb+0x10b/0x310 [ 442.386456][T22231] __alloc_skb+0x10b/0x310 [ 442.390897][T22231] netlink_alloc_large_skb+0xad/0xe0 [ 442.396217][T22231] netlink_sendmsg+0x3b4/0x6e0 [ 442.401071][T22231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.406594][T22231] __sock_sendmsg+0x140/0x180 [ 442.411423][T22231] ____sys_sendmsg+0x312/0x410 [ 442.415616][T22223] cgroup: fork rejected by pids controller in /syz5 [ 442.416272][T22231] __sys_sendmsg+0x19d/0x230 [ 442.422979][T22223] [ 442.427487][T22231] __x64_sys_sendmsg+0x46/0x50 [ 442.434662][T22231] x64_sys_call+0x2734/0x2dc0 [ 442.439359][T22231] do_syscall_64+0xc9/0x1c0 [ 442.443926][T22231] ? clear_bhb_loop+0x55/0xb0 [ 442.448639][T22231] ? clear_bhb_loop+0x55/0xb0 [ 442.453423][T22231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.459346][T22231] RIP: 0033:0x7f9d7bf95d19 [ 442.463805][T22231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.483518][T22231] RSP: 002b:00007f9d7a607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.491949][T22231] RAX: ffffffffffffffda RBX: 00007f9d7c185fa0 RCX: 00007f9d7bf95d19 [ 442.499947][T22231] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 442.507931][T22231] RBP: 00007f9d7a607090 R08: 0000000000000000 R09: 0000000000000000 [ 442.515931][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.523994][T22231] R13: 0000000000000000 R14: 00007f9d7c185fa0 R15: 00007ffdd42cf718 [ 442.532004][T22231] [ 442.582040][T22233] netlink: 'syz.6.6731': attribute type 10 has an invalid length. [ 442.629109][T22259] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.681744][T22259] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.709074][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6739'. [ 442.732998][T22259] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.792684][T22259] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.839066][T22259] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.855313][T22259] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.884173][T22280] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.892533][T22280] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.900843][T22280] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.909108][T22280] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.923584][T22259] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.937595][T22259] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.983807][T22289] vlan2: entered promiscuous mode [ 443.054141][T22296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.071564][T22296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.211516][T22306] netlink: 'syz.0.6751': attribute type 10 has an invalid length. [ 443.370674][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6754'. [ 444.165902][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 444.165925][ T29] audit: type=1326 audit(1734139300.452:38049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.196047][ T29] audit: type=1326 audit(1734139300.452:38050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.219692][ T29] audit: type=1326 audit(1734139300.452:38051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.243786][ T29] audit: type=1326 audit(1734139300.452:38052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.267602][ T29] audit: type=1326 audit(1734139300.452:38053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.291501][ T29] audit: type=1326 audit(1734139300.452:38054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.315221][ T29] audit: type=1326 audit(1734139300.452:38055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.338888][ T29] audit: type=1326 audit(1734139300.452:38056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.362589][ T29] audit: type=1326 audit(1734139300.452:38057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.386234][ T29] audit: type=1326 audit(1734139300.452:38058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22333 comm="syz.6.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb5165d19 code=0x7ffc0000 [ 444.489147][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6765'. [ 444.628393][T22353] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.638245][T22353] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.681759][T22353] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.691617][T22353] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.742111][T22353] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.751948][T22353] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.782360][T22353] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.792234][T22353] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.837853][T22353] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.846181][T22353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.857616][T22353] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.865989][T22353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.877208][T22353] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.885541][T22353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.896944][T22353] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.905330][T22353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.866240][T22378] netlink: 'syz.2.6777': attribute type 10 has an invalid length. [ 446.023751][T22382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6779'. [ 446.053883][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6780'. [ 446.254123][T22407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6790'. [ 446.595874][T22434] 9pnet_fd: Insufficient options for proto=fd [ 446.956947][T22436] __nla_validate_parse: 3 callbacks suppressed [ 446.956964][T22436] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6801'. [ 447.662398][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6822'. [ 447.948847][T22493] FAULT_INJECTION: forcing a failure. [ 447.948847][T22493] name failslab, interval 1, probability 0, space 0, times 0 [ 447.961721][T22493] CPU: 1 UID: 0 PID: 22493 Comm: syz.3.6827 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 447.972564][T22493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 447.982621][T22493] Call Trace: [ 447.985948][T22493] [ 447.988881][T22493] dump_stack_lvl+0xf2/0x150 [ 447.993573][T22493] dump_stack+0x15/0x1a [ 447.997799][T22493] should_fail_ex+0x223/0x230 [ 448.002499][T22493] should_failslab+0x8f/0xb0 [ 448.007101][T22493] __kmalloc_noprof+0xab/0x3f0 [ 448.011866][T22493] ? kobject_get_path+0x85/0x160 [ 448.016870][T22493] ? kobject_uevent_env+0x1a4/0x550 [ 448.022114][T22493] kobject_get_path+0x85/0x160 [ 448.026916][T22493] kobject_uevent_env+0x1b9/0x550 [ 448.031950][T22493] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 448.037805][T22493] ? device_pm_check_callbacks+0x632/0x650 [ 448.043634][T22493] kobject_uevent+0x1c/0x30 [ 448.048243][T22493] device_del+0x6fa/0x780 [ 448.052647][T22493] ? mntput+0x49/0x70 [ 448.056714][T22493] device_unregister+0x15/0x40 [ 448.061489][T22493] bdi_unregister+0x307/0x3a0 [ 448.066179][T22493] del_gendisk+0x309/0x600 [ 448.070602][T22493] loop_control_ioctl+0x3ae/0x440 [ 448.075647][T22493] ? __pfx_loop_control_ioctl+0x10/0x10 [ 448.081206][T22493] __se_sys_ioctl+0xc9/0x140 [ 448.085993][T22493] __x64_sys_ioctl+0x43/0x50 [ 448.090604][T22493] x64_sys_call+0x1690/0x2dc0 [ 448.095351][T22493] do_syscall_64+0xc9/0x1c0 [ 448.099868][T22493] ? clear_bhb_loop+0x55/0xb0 [ 448.104557][T22493] ? clear_bhb_loop+0x55/0xb0 [ 448.109244][T22493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.115216][T22493] RIP: 0033:0x7fbc35565d19 [ 448.119673][T22493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.139350][T22493] RSP: 002b:00007fbc33bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 448.147865][T22493] RAX: ffffffffffffffda RBX: 00007fbc35755fa0 RCX: 00007fbc35565d19 [ 448.155858][T22493] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 448.163861][T22493] RBP: 00007fbc33bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.171838][T22493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.179851][T22493] R13: 0000000000000000 R14: 00007fbc35755fa0 R15: 00007ffd28a1cc88 [ 448.187936][T22493] [ 448.276120][T22500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6830'. [ 448.303886][T22504] FAULT_INJECTION: forcing a failure. [ 448.303886][T22504] name failslab, interval 1, probability 0, space 0, times 0 [ 448.316814][T22504] CPU: 1 UID: 0 PID: 22504 Comm: syz.2.6831 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 448.327644][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.337772][T22504] Call Trace: [ 448.341058][T22504] [ 448.344048][T22504] dump_stack_lvl+0xf2/0x150 [ 448.348791][T22504] dump_stack+0x15/0x1a [ 448.352980][T22504] should_fail_ex+0x223/0x230 [ 448.357716][T22504] should_failslab+0x8f/0xb0 [ 448.362326][T22504] __kmalloc_noprof+0xab/0x3f0 [ 448.367103][T22504] ? bpf_test_init+0xc7/0x170 [ 448.371850][T22504] bpf_test_init+0xc7/0x170 [ 448.376363][T22504] bpf_prog_test_run_nf+0x178/0x590 [ 448.381626][T22504] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 448.387376][T22504] bpf_prog_test_run+0x20f/0x3a0 [ 448.392326][T22504] __sys_bpf+0x400/0x7a0 [ 448.396609][T22504] __x64_sys_bpf+0x43/0x50 [ 448.401051][T22504] x64_sys_call+0x2914/0x2dc0 [ 448.405737][T22504] do_syscall_64+0xc9/0x1c0 [ 448.410303][T22504] ? clear_bhb_loop+0x55/0xb0 [ 448.414986][T22504] ? clear_bhb_loop+0x55/0xb0 [ 448.419670][T22504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.425659][T22504] RIP: 0033:0x7f9d7bf95d19 [ 448.430083][T22504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.449745][T22504] RSP: 002b:00007f9d7a607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.458232][T22504] RAX: ffffffffffffffda RBX: 00007f9d7c185fa0 RCX: 00007f9d7bf95d19 [ 448.466273][T22504] RDX: 0000000000000050 RSI: 00000000200008c0 RDI: 000000000000000a [ 448.474320][T22504] RBP: 00007f9d7a607090 R08: 0000000000000000 R09: 0000000000000000 [ 448.482331][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.490309][T22504] R13: 0000000000000000 R14: 00007f9d7c185fa0 R15: 00007ffdd42cf718 [ 448.498331][T22504] [ 448.562957][T22508] syz.2.6833[22508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.563061][T22508] syz.2.6833[22508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.574608][T22508] syz.2.6833[22508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.674111][T22516] FAULT_INJECTION: forcing a failure. [ 448.674111][T22516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.698686][T22516] CPU: 1 UID: 0 PID: 22516 Comm: syz.5.6837 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 448.709451][T22516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.719510][T22516] Call Trace: [ 448.722857][T22516] [ 448.725785][T22516] dump_stack_lvl+0xf2/0x150 [ 448.730410][T22516] dump_stack+0x15/0x1a [ 448.734596][T22516] should_fail_ex+0x223/0x230 [ 448.739277][T22516] should_fail+0xb/0x10 [ 448.743494][T22516] should_fail_usercopy+0x1a/0x20 [ 448.748548][T22516] _copy_from_iter+0xd5/0xd00 [ 448.753319][T22516] ? kmalloc_reserve+0x16e/0x190 [ 448.758258][T22516] ? __build_skb_around+0x196/0x1f0 [ 448.763503][T22516] ? __alloc_skb+0x21f/0x310 [ 448.768101][T22516] ? __virt_addr_valid+0x1ed/0x250 [ 448.773232][T22516] ? __check_object_size+0x364/0x520 [ 448.778532][T22516] netlink_sendmsg+0x460/0x6e0 [ 448.783318][T22516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.789030][T22516] __sock_sendmsg+0x140/0x180 [ 448.793845][T22516] ____sys_sendmsg+0x312/0x410 [ 448.798652][T22516] __sys_sendmsg+0x19d/0x230 [ 448.803348][T22516] __x64_sys_sendmsg+0x46/0x50 [ 448.808180][T22516] x64_sys_call+0x2734/0x2dc0 [ 448.813041][T22516] do_syscall_64+0xc9/0x1c0 [ 448.817627][T22516] ? clear_bhb_loop+0x55/0xb0 [ 448.822327][T22516] ? clear_bhb_loop+0x55/0xb0 [ 448.827078][T22516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.833231][T22516] RIP: 0033:0x7f45ad1b5d19 [ 448.837644][T22516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.857614][T22516] RSP: 002b:00007f45ab827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.866056][T22516] RAX: ffffffffffffffda RBX: 00007f45ad3a5fa0 RCX: 00007f45ad1b5d19 [ 448.874043][T22516] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 448.882055][T22516] RBP: 00007f45ab827090 R08: 0000000000000000 R09: 0000000000000000 [ 448.890116][T22516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.898095][T22516] R13: 0000000000000000 R14: 00007f45ad3a5fa0 R15: 00007fffa82557e8 [ 448.906091][T22516] [ 448.920101][T22508] xt_nat: multiple ranges no longer supported [ 448.989800][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6842'. [ 449.155538][T22541] netlink: 'syz.5.6846': attribute type 10 has an invalid length. [ 449.179470][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 449.185789][ T29] audit: type=1326 audit(1734139305.462:38488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.210973][ T29] audit: type=1326 audit(1734139305.462:38489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.234671][ T29] audit: type=1326 audit(1734139305.472:38490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.258299][ T29] audit: type=1326 audit(1734139305.502:38491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.282090][ T29] audit: type=1326 audit(1734139305.502:38492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.306613][ T29] audit: type=1326 audit(1734139305.502:38493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.330377][ T29] audit: type=1326 audit(1734139305.502:38494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.354002][ T29] audit: type=1326 audit(1734139305.502:38495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.377575][ T29] audit: type=1326 audit(1734139305.502:38496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.401215][ T29] audit: type=1326 audit(1734139305.502:38497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22543 comm="syz.5.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f45ad1b5d19 code=0x7ffc0000 [ 449.555600][T22549] IPv6: Can't replace route, no match found [ 449.733861][T22557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'. [ 449.869052][T22564] netlink: 'syz.2.6854': attribute type 10 has an invalid length. [ 450.023753][T22570] netlink: 'syz.2.6857': attribute type 10 has an invalid length. [ 450.092186][T22577] syz.5.6860[22577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.092305][T22577] syz.5.6860[22577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.104084][T22577] syz.5.6860[22577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.197423][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6864'. [ 450.239300][T22596] FAULT_INJECTION: forcing a failure. [ 450.239300][T22596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.252692][T22596] CPU: 1 UID: 0 PID: 22596 Comm: syz.5.6867 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 450.263500][T22596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.273556][T22596] Call Trace: [ 450.276833][T22596] [ 450.279787][T22596] dump_stack_lvl+0xf2/0x150 [ 450.284491][T22596] dump_stack+0x15/0x1a [ 450.288741][T22596] should_fail_ex+0x223/0x230 [ 450.293460][T22596] should_fail+0xb/0x10 [ 450.297620][T22596] should_fail_usercopy+0x1a/0x20 [ 450.302652][T22596] strncpy_from_user+0x25/0x210 [ 450.307592][T22596] ? selinux_file_permission+0x22a/0x360 [ 450.313314][T22596] ? __rcu_read_unlock+0x4e/0x70 [ 450.318263][T22596] path_removexattrat+0x81/0x4b0 [ 450.323252][T22596] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 450.328920][T22596] __x64_sys_fremovexattr+0x35/0x40 [ 450.334171][T22596] x64_sys_call+0x1c51/0x2dc0 [ 450.338880][T22596] do_syscall_64+0xc9/0x1c0 [ 450.343407][T22596] ? clear_bhb_loop+0x55/0xb0 [ 450.348188][T22596] ? clear_bhb_loop+0x55/0xb0 [ 450.353009][T22596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.358952][T22596] RIP: 0033:0x7f45ad1b5d19 [ 450.363404][T22596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.383070][T22596] RSP: 002b:00007f45ab827038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 450.391570][T22596] RAX: ffffffffffffffda RBX: 00007f45ad3a5fa0 RCX: 00007f45ad1b5d19 [ 450.399653][T22596] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 450.407646][T22596] RBP: 00007f45ab827090 R08: 0000000000000000 R09: 0000000000000000 [ 450.415624][T22596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.423598][T22596] R13: 0000000000000000 R14: 00007f45ad3a5fa0 R15: 00007fffa82557e8 [ 450.431582][T22596] [ 450.483282][T22595] netlink: 'syz.2.6866': attribute type 10 has an invalid length. [ 450.513753][T22603] netlink: 'syz.3.6869': attribute type 10 has an invalid length. [ 450.615461][T22612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6874'. [ 450.642919][T22625] ================================================================== [ 450.651033][T22625] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 450.657895][T22625] [ 450.660220][T22625] write to 0xffff88811068e210 of 8 bytes by task 22624 on cpu 0: [ 450.667940][T22625] call_rcu+0x3b/0x430 [ 450.672025][T22625] mas_replace_node+0x2fa/0x430 [ 450.676897][T22625] mas_wr_store_entry+0x1fbf/0x2d10 [ 450.682117][T22625] mas_store_prealloc+0x6bf/0x960 [ 450.687163][T22625] vma_complete+0x3a7/0x760 [ 450.691671][T22625] __split_vma+0x5d6/0x6a0 [ 450.696096][T22625] vma_modify+0xd3/0x1e0 [ 450.700355][T22625] vma_modify_flags+0xf1/0x120 [ 450.705126][T22625] mprotect_fixup+0x31a/0x5e0 [ 450.709820][T22625] do_mprotect_pkey+0x653/0x960 [ 450.714724][T22625] __x64_sys_mprotect+0x48/0x60 [ 450.719674][T22625] x64_sys_call+0x2770/0x2dc0 [ 450.724363][T22625] do_syscall_64+0xc9/0x1c0 [ 450.728877][T22625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.734801][T22625] [ 450.737130][T22625] read to 0xffff88811068e210 of 8 bytes by task 22625 on cpu 1: [ 450.744771][T22625] mtree_range_walk+0x1b4/0x460 [ 450.749633][T22625] mas_walk+0x16e/0x320 [ 450.753815][T22625] lock_vma_under_rcu+0x95/0x260 [ 450.758770][T22625] exc_page_fault+0x150/0x650 [ 450.763463][T22625] asm_exc_page_fault+0x26/0x30 [ 450.768337][T22625] [ 450.770660][T22625] value changed: 0x00007f9d7a5c5fff -> 0xffffffff852d89d0 [ 450.777774][T22625] [ 450.780108][T22625] Reported by Kernel Concurrency Sanitizer on: [ 450.786256][T22625] CPU: 1 UID: 0 PID: 22625 Comm: syz.2.6878 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 450.797035][T22625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.807115][T22625] ================================================================== [ 450.827263][T22628] FAULT_INJECTION: forcing a failure. [ 450.827263][T22628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.840606][T22628] CPU: 0 UID: 0 PID: 22628 Comm: syz.3.6879 Not tainted 6.13.0-rc2-syzkaller-00192-g243f750a2df0 #0 [ 450.851396][T22628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.861554][T22628] Call Trace: [ 450.864841][T22628] [ 450.867778][T22628] dump_stack_lvl+0xf2/0x150 [ 450.872427][T22628] dump_stack+0x15/0x1a [ 450.876608][T22628] should_fail_ex+0x223/0x230 [ 450.881338][T22628] should_fail+0xb/0x10 [ 450.885588][T22628] should_fail_usercopy+0x1a/0x20 [ 450.890705][T22628] _copy_from_user+0x1e/0xb0 [ 450.895318][T22628] set_selection_user+0x48/0xa0 [ 450.900263][T22628] tioclinux+0x2b0/0x430 [ 450.904527][T22628] vt_ioctl+0x84f/0x1810 [ 450.908827][T22628] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 450.913977][T22628] tty_ioctl+0x815/0xbe0 [ 450.918243][T22628] ? __pfx_tty_ioctl+0x10/0x10 [ 450.923030][T22628] __se_sys_ioctl+0xc9/0x140 [ 450.927640][T22628] __x64_sys_ioctl+0x43/0x50 [ 450.932249][T22628] x64_sys_call+0x1690/0x2dc0 [ 450.937024][T22628] do_syscall_64+0xc9/0x1c0 [ 450.941536][T22628] ? clear_bhb_loop+0x55/0xb0 [ 450.946222][T22628] ? clear_bhb_loop+0x55/0xb0 [ 450.950930][T22628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.956895][T22628] RIP: 0033:0x7fbc35565d19 [ 450.961322][T22628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.981046][T22628] RSP: 002b:00007fbc33bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.989467][T22628] RAX: ffffffffffffffda RBX: 00007fbc35755fa0 RCX: 00007fbc35565d19 [ 450.997475][T22628] RDX: 0000000020001900 RSI: 000000000000541c RDI: 0000000000000003 [ 451.005506][T22628] RBP: 00007fbc33bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 451.013659][T22628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.021640][T22628] R13: 0000000000000000 R14: 00007fbc35755fa0 R15: 00007ffd28a1cc88 [ 451.029626][T22628] [ 451.035982][T22630] tmpfs: Unknown parameter 'mp' [ 451.045688][T22629] IPv6: NLM_F_CREATE should be specified when creating new route