last executing test programs: 4m39.185434581s ago: executing program 4 (id=2101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x89400) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace$setopts(0x4202, r0, 0xe96, 0x455b843fbdb64c65) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) io_setup(0x7, &(0x7f0000000280)) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4m39.156494771s ago: executing program 4 (id=2104): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x83, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000001c0), 0xfffffffffffffe63) close_range(r3, 0xffffffffffffffff, 0x0) 4m38.999499671s ago: executing program 4 (id=2107): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket(0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2000400) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, 0x0, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x40, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x20}, 0x20008000) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000440)='0', 0x1}], 0x2) 4m38.94009145s ago: executing program 4 (id=2110): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f00000002c0)={[{@orlov}, {@noload}, {@noblock_validity}, {@norecovery}, {@block_validity}, {@nomblk_io_submit}]}, 0x1, 0x549, &(0x7f0000000b80)="$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") statx(0xffffffffffffff9c, 0x0, 0x100, 0xf0cb2f4a0c2cfc5d, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20048815) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$tipc(0x1e, 0x5, 0x0) 4m38.740326219s ago: executing program 4 (id=2113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000340)}}, 0x18) 4m37.502354815s ago: executing program 4 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3303e648b92827}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 4m37.489075215s ago: executing program 32 (id=2135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3303e648b92827}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 1m2.204653591s ago: executing program 5 (id=5882): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x9805cc7b) 1m1.752868329s ago: executing program 5 (id=5889): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000"], 0x48) 1m1.645227978s ago: executing program 5 (id=5892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}, {0x3, 0x94, 0x38, 0x9}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={@empty, @rand_addr=0x64010102, 0x8}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m0.789171645s ago: executing program 5 (id=5900): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2805011, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1001402, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000000a1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) syz_read_part_table(0x5d4, &(0x7f0000000000)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x109002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x0, 0x10000000, 0xbc88, 0x12081, 0xffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="ff0f00000000000000eb5d0000000000000000006955b3cece198ae8ba02f4780e0092657b127c53fa6d9dd805046de9483694c688e73109c22b1b2a73b1775717566f77b63db60fcc9cd924fa82f8b74442f25dc5fdda5ceb36ef31a7d88be86494592a05d20bf39fcd52f88e3f6884b170837ce4ceb4926d35a0a7f8bb19b88b14cad82e61a0b713", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) 1m0.502354624s ago: executing program 5 (id=5901): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000008000005c00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"], 0x48) 59.946230702s ago: executing program 5 (id=5907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) memfd_secret(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x4) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000840)={0x2, 0x6930, 0x4, 0x1}) 59.946104522s ago: executing program 33 (id=5907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) memfd_secret(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x4) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000840)={0x2, 0x6930, 0x4, 0x1}) 4.352581887s ago: executing program 0 (id=6935): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000010) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r2, @ANYRES32=r1, @ANYBLOB="01000000000000000000020000000900010073797a32000000000900030073797a310000"], 0x2c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x81, 0x0, 0x1faa, 0x8000, 0x400}, &(0x7f0000000040)=0x98) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000400)=@fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x9, 0x65}, 0x8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000340)=""/101) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008003f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a", 0x65, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r9, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r9, 0x2, &(0x7f0000000740)={0x0}) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1057, 0x1, 0x5, 0xff, 0x9, 0x1200, 0x0, {r6, @in6={{0xa, 0x4e20, 0x7ff, @mcast1, 0xd8f906ef}}, 0x9, 0x4, 0x5, 0x7, 0x2ba}}, &(0x7f00000000c0)=0xb0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(0x0) 4.177893296s ago: executing program 0 (id=6939): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x81, 0x0, 0x1faa, 0x8000, 0x400}, &(0x7f0000000040)=0x98) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000400)=@fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x9, 0x65}, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008003f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a", 0x65, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1057, 0x1, 0x5, 0xff, 0x9, 0x1200, 0x0, {r3, @in6={{0xa, 0x4e20, 0x7ff, @mcast1, 0xd8f906ef}}, 0x9, 0x4, 0x5, 0x7, 0x2ba}}, &(0x7f00000000c0)=0xb0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) rmdir(0x0) 4.082380315s ago: executing program 0 (id=6940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x48}}, 0x0) 4.028124185s ago: executing program 0 (id=6942): socket$inet_dccp(0x2, 0x6, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x1, 0x90, 0x75, 0x3}, {0xfff, 0x8, 0x2, 0x9}, {0x8, 0x4, 0xff, 0x8199}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRES64, @ANYBLOB="6d8c3e98707a9bf88152d51717f2699d11f4663e79b5a2798bc3625953e585a151536496f250a967e608f2c405a7d75cc3ebeb98275c1988354be5076e2f26b4c26c37515927da49ccb95d6b34cff467ad647ed638504ac631b366f4d57c9af3133bdec3761c0391b126e2dd2349100a33238a77eb67fdb8ee8d3627a06204b55131c4bd7a48f60ac1803e1fd9f7628f32d7fb8ffb5dc34937aaf2026f8eed3991617a7773166dc9e212ef658e6d9b0a9c830d167417e5a45d4a89c7718e55c7f9cab83e6280fe0fd398325ff861dc1fe60049bd98610cbbe70ecb8445", @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffebc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {0x3}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {0x1, 0x40}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x8001, 0xe, 0x8, 0x0, 0x7}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x80000000, 0x0, 0xe10}, {}, {}, {}, {0x0, 0x40}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0xcb8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.539974726s ago: executing program 2 (id=6973): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x5e, 0x100, 0x6, 0xc47}, &(0x7f00000001c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000000000000000000000000000000000992d97748abb69e7003d811e82e2970aacaac0ea"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)) openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41180, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) ftruncate(0xffffffffffffffff, 0xee72) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.469192015s ago: executing program 2 (id=6974): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r1, 0x0, 0x0, 0x2000, 0x0) 1.402260875s ago: executing program 2 (id=6975): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket(0x1d, 0x2, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xc593, &(0x7f0000001380)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="e36d0983b75180733398e7172f788ce0e009f917927e3fe9ef788147540035243147088b90d49ba80e5f013541209109f8706c3836bc46221e2d97fe2c7576aa5bbff761ba68686a99cdb113cb453921d2b015fdd63a36745f377b28505045cd9f8a23729114e191a4bbc3f898b69d03cd8bd51b4d6225edb416d06f26f214960dc8dc8b49aa4032639031111ee4038ece717eb15f059a82ef17e0962b73bd3161f60ccacd854732be9a42c57bd8625e2a5fd7df4d4baf0543bb5178525dfab9c532647c1e5ea4b9caf84fae8aedac8d5cde327b0638f7c93caae7022dba83368a43ad746e37b3", @ANYRESOCT=r2, @ANYRES16=r1], 0x1, 0x121d, &(0x7f00000014c0)="$eJzs3E9rHGUcB/Bf1tSmafPHWqvtQR/04mlocvAkSJAUJAtKbYRWEKZmokvG3ZBZAitiFQSvvg7x6E0Q30AufQ3ecvHYgziSndQ2cVsNZF3Rz+cyP/Z5vvPMzLIPzDLP7L/+zSdbm1W2mfejNTUVre2IdD9FilY88OJas711e22l3V69kdL1lZtLr6WU5l/68f3Pvnv5p/75976f/+Fs7C1+sP/L8s97l/eu7P928+NOlTpV6vb6KU93er1+fqcs0kan2spSeqcs8qpInW5V7Bxp3yx729uDlHc35ma3d4qqSnl3kLaKQer3Un9nkPKP8k43ZVmW5maDxzrz113Wv71f13VEXZ+Jp6Ou6/pczMb5uBBzMR9fRMQzcTGejUvxXFyO5+OFuBJTcZAAAAAAAAAAAAAAAAAAAAAATs+T1v8vxOKI9f8HvYavBgAAAAAAAAAAAAAAAAAAAABOybu3bq+ttNurN1KaiSi/3l3fXW+2TfvKZnSijCKuxUL8GsPV/42mvv5We/VaGlqML8u7h/m7u+tPfXUkvzR8ncBhfnq47wf5pSafjubPxuyj+eVYiEujx18emZ+JV195JJ/FQtz7MHpRxsZw7If5z5dSevPt9rH81WE/AAAA+C/I0h+O37837dnj2pv8Cf4fOHZ/PR1Xpyd77kRUg0+38rIsdo4WM3/65H9S1HEK+2mN6QhbMfHr8y8rWvFPDnru8EdzwvjBNDfpCzWiuHfxiX3+1vRxYayTE2P38Euf9JEAAAAAAAAAAABwEmN+0nA6RjxZ9sZkThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+ZweOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD//51hxo0=") open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="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", 0x131}, {&(0x7f0000000380)="c0aa02def6c5dbe7abfea14433bf5783cbb997f7a16d7caad59cad440f32b7f9132f928d1782e80389550a6083adcff9e901b43ef350ab2b1e8530ed8aef81965ccf989d4ca1dcb46c244b5f4a924b38ca1356b2b05f079dde815349824d5cfdbfa82d552246cde4104f2dc151df2a35c9bfbcdfe3a4664f197f290c02cc7f62cb021a1f23898e790cafc141abed04c40290ea9d75418e49f7d3fb9624dcb296eb8026dbe3348250e097642e7dfb6e5e72402063365a73e528ffdd68632bb09a28b90fceb9d3f9e5590038a40b25e0d61acceb2a454429a1b92ce5acbbf208701fee00e18c470b55402b1f90502822fd074936597dba3f3cb8", 0xf9}, {&(0x7f0000000800)="8cb00a8c7c408a1e7131682f9b4a25bb4b62cbd32b8cf2f0e205723bf5a11729cbeb22193bcdaf6a13612b7bed657a0008d9797ce760cfaa3ce237b8d9281719199a96e60f9e2c1a886159019315a74bc5c44cd276be320e12e95b8ae8eef1b899f4b73f3721c8b8eb73438a4a1c30a4cb7b18b00f03fbd346c93cfae759d56513e61137d45c6977d2d844785be4d527896767ace9f604fee757d131fccdb255240373eeda36a6838907f79e299166c6afaf98a53024bbee5994a9812e658e5da4ef", 0xc2}, {&(0x7f0000000540)="33391f900d7b655c0d96e0fb3228068f310988d1378aeffd55352a0b8cda00a47b396ef14471e6adca2f4d8b9c923c251b479ebc56f0ac3a38a2be27634b8a8da7c6e39c0e12d517c357d47d254aa93d0926b88619881bfac2a960c177f6afef3e0e673479e7ea16b09c04c9fd54ddaad2cc632444c19560657c19687f6268d7e69d7e4bab42403e527ec8309ea2b91daa8b04b4049ebe6ff00705d5cce381a648bfbd0d7d789c29d4edd007898a332478f1d29110d43b2bb799db7968295cbf42baf4e776", 0xc5}, {&(0x7f0000000000)="6941d8ee6ac6c7be822b6361d48d826cab8f", 0x12}, {&(0x7f0000000140)="ab28eefbb3a9093e0b95266bcd5ede5679a6f49257e02879d8f104f309e67349ca72239f7e7e6ad80167cf5b26982666d7414032e4e7f783765cdbe430f9ee61f37b6337e851bc8e9cc7272b69aeea49b4b7746bde2fc6c8a32dc686c01f04d7b99b926f98fe155dba7574a9acc7712303077644368f283152e86a580ef81876aab98478a340ed9f7dd811c3c5b73e5426b7a022d8eae6720005b8", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000ac0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d353aa1286e3af37ba4d1bac9280fe71822e0e5bef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750bb20d68bac0e03f2957d4cebb8fbac2af9aba140100820064122f5bd93ebef6e200989cdb3c821345a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729346b5eddd9e213e51a16a4003d4ec20e100dfacd66b50923bfeaa1635a8167a19c155afd3cbbc6f8b83fc8109f05d67de380aca9163f5e2c62400d3bce6a53f518f7436f52fd5f65058aa9caba5693a0a60ed2427ea1055615b3174a6c92ceb441c1fedeb0255207cde2fb23b44355c7cf1af993fe2f07060fae1f6b186e5223752c5dbb1010240000000000", 0x13e}, {&(0x7f0000000a00)="b3fe109a0a0e5fbf3f4e8ce314c9de", 0xf}], 0x2}}], 0x3, 0xc044) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="ee", 0x1}], 0x1}}], 0x1, 0x0) 1.360427355s ago: executing program 2 (id=6976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 1.253849494s ago: executing program 2 (id=6980): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x8, 0x0, 0x1, 0x0, r0, 0x2, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x48000, 0xa, 0x7}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffa76e9b5a378331fb00b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r8}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 992.043024ms ago: executing program 0 (id=6987): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/245], 0x129) read(r0, &(0x7f0000005480)=""/213, 0xd5) 934.137193ms ago: executing program 3 (id=6988): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x611, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 867.368613ms ago: executing program 3 (id=6991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 788.949303ms ago: executing program 1 (id=6994): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x55a}) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000459e850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1ed"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 709.441153ms ago: executing program 3 (id=6996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$getown(r0, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x987, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', 0x0}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000400)='ns\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 695.614533ms ago: executing program 1 (id=6997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 684.866972ms ago: executing program 6 (id=6998): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x16) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}, 0x81, 0x0, 0x1faa, 0x8000, 0x400}, &(0x7f0000000040)=0x98) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000400)=@fragment={0x33, 0x0, 0x2, 0x0, 0x0, 0x9, 0x65}, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008003f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a", 0x65, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x1057, 0x1, 0x5, 0xff, 0x9, 0x1200, 0x0, {r3, @in6={{0xa, 0x4e20, 0x7ff, @mcast1, 0xd8f906ef}}, 0x9, 0x4, 0x5, 0x7, 0x2ba}}, &(0x7f00000000c0)=0xb0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) rmdir(0x0) 602.173572ms ago: executing program 6 (id=6999): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket(0x1d, 0x2, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xc593, &(0x7f0000001380)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="e36d0983b75180733398e7172f788ce0e009f917927e3fe9ef788147540035243147088b90d49ba80e5f013541209109f8706c3836bc46221e2d97fe2c7576aa5bbff761ba68686a99cdb113cb453921d2b015fdd63a36745f377b28505045cd9f8a23729114e191a4bbc3f898b69d03cd8bd51b4d6225edb416d06f26f214960dc8dc8b49aa4032639031111ee4038ece717eb15f059a82ef17e0962b73bd3161f60ccacd854732be9a42c57bd8625e2a5fd7df4d4baf0543bb5178525dfab9c532647c1e5ea4b9caf84fae8aedac8d5cde327b0638f7c93caae7022dba83368a43ad746e37b3", @ANYRESOCT=r2, @ANYRES16=r1], 0x1, 0x121d, &(0x7f00000014c0)="$eJzs3E9rHGUcB/Bf1tSmafPHWqvtQR/04mlocvAkSJAUJAtKbYRWEKZmokvG3ZBZAitiFQSvvg7x6E0Q30AufQ3ecvHYgziSndQ2cVsNZF3Rz+cyP/Z5vvPMzLIPzDLP7L/+zSdbm1W2mfejNTUVre2IdD9FilY88OJas711e22l3V69kdL1lZtLr6WU5l/68f3Pvnv5p/75976f/+Fs7C1+sP/L8s97l/eu7P928+NOlTpV6vb6KU93er1+fqcs0kan2spSeqcs8qpInW5V7Bxp3yx729uDlHc35ma3d4qqSnl3kLaKQer3Un9nkPKP8k43ZVmW5maDxzrz113Wv71f13VEXZ+Jp6Ou6/pczMb5uBBzMR9fRMQzcTGejUvxXFyO5+OFuBJTcZAAAAAAAAAAAAAAAAAAAAAATs+T1v8vxOKI9f8HvYavBgAAAAAAAAAAAAAAAAAAAABOybu3bq+ttNurN1KaiSi/3l3fXW+2TfvKZnSijCKuxUL8GsPV/42mvv5We/VaGlqML8u7h/m7u+tPfXUkvzR8ncBhfnq47wf5pSafjubPxuyj+eVYiEujx18emZ+JV195JJ/FQtz7MHpRxsZw7If5z5dSevPt9rH81WE/AAAA+C/I0h+O37837dnj2pv8Cf4fOHZ/PR1Xpyd77kRUg0+38rIsdo4WM3/65H9S1HEK+2mN6QhbMfHr8y8rWvFPDnru8EdzwvjBNDfpCzWiuHfxiX3+1vRxYayTE2P38Euf9JEAAAAAAAAAAABwEmN+0nA6RjxZ9sZkThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+ZweOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD//51hxo0=") open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="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", 0x131}, {&(0x7f0000000380)="c0aa02def6c5dbe7abfea14433bf5783cbb997f7a16d7caad59cad440f32b7f9132f928d1782e80389550a6083adcff9e901b43ef350ab2b1e8530ed8aef81965ccf989d4ca1dcb46c244b5f4a924b38ca1356b2b05f079dde815349824d5cfdbfa82d552246cde4104f2dc151df2a35c9bfbcdfe3a4664f197f290c02cc7f62cb021a1f23898e790cafc141abed04c40290ea9d75418e49f7d3fb9624dcb296eb8026dbe3348250e097642e7dfb6e5e72402063365a73e528ffdd68632bb09a28b90fceb9d3f9e5590038a40b25e0d61acceb2a454429a1b92ce5acbbf208701fee00e18c470b55402b1f90502822fd074936597dba3f3cb8", 0xf9}, {&(0x7f0000000800)="8cb00a8c7c408a1e7131682f9b4a25bb4b62cbd32b8cf2f0e205723bf5a11729cbeb22193bcdaf6a13612b7bed657a0008d9797ce760cfaa3ce237b8d9281719199a96e60f9e2c1a886159019315a74bc5c44cd276be320e12e95b8ae8eef1b899f4b73f3721c8b8eb73438a4a1c30a4cb7b18b00f03fbd346c93cfae759d56513e61137d45c6977d2d844785be4d527896767ace9f604fee757d131fccdb255240373eeda36a6838907f79e299166c6afaf98a53024bbee5994a9812e658e5da4ef", 0xc2}, {&(0x7f0000000540)="33391f900d7b655c0d96e0fb3228068f310988d1378aeffd55352a0b8cda00a47b396ef14471e6adca2f4d8b9c923c251b479ebc56f0ac3a38a2be27634b8a8da7c6e39c0e12d517c357d47d254aa93d0926b88619881bfac2a960c177f6afef3e0e673479e7ea16b09c04c9fd54ddaad2cc632444c19560657c19687f6268d7e69d7e4bab42403e527ec8309ea2b91daa8b04b4049ebe6ff00705d5cce381a648bfbd0d7d789c29d4edd007898a332478f1d29110d43b2bb799db7968295cbf42baf4e776", 0xc5}, {&(0x7f0000000000)="6941d8ee6ac6c7be822b6361d48d826cab8f", 0x12}, {&(0x7f0000000140)="ab28eefbb3a9093e0b95266bcd5ede5679a6f49257e02879d8f104f309e67349ca72239f7e7e6ad80167cf5b26982666d7414032e4e7f783765cdbe430f9ee61f37b6337e851bc8e9cc7272b69aeea49b4b7746bde2fc6c8a32dc686c01f04d7b99b926f98fe155dba7574a9acc7712303077644368f283152e86a580ef81876aab98478a340ed9f7dd811c3c5b73e5426b7a022d8eae6720005b8", 0x9b}], 0x6}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000ac0)="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", 0x13e}, {&(0x7f0000000a00)="b3fe109a0a0e5fbf3f4e8ce314c9de", 0xf}], 0x2}}], 0x3, 0xc044) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="ee", 0x1}], 0x1}}], 0x1, 0x0) 543.274022ms ago: executing program 1 (id=7000): r0 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmmsg$inet(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x10}}], 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x3, 0x10, 0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x3, 0x261, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}, @IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x54}}, 0x0) 525.995991ms ago: executing program 6 (id=7001): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000000)=0x19) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) setgid(0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 477.238462ms ago: executing program 6 (id=7002): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x611, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, 0x0, 0xd0}, 0x480c4) 471.162311ms ago: executing program 3 (id=7003): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000000240)=ANY=[], 0x46) recvmmsg(r1, &(0x7f0000003300), 0x0, 0x2000, 0x0) 386.326221ms ago: executing program 6 (id=7004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @remote, @remote, @local}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (fail_nth: 1) 386.006391ms ago: executing program 1 (id=7005): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000440)={0x2, 0x1, 0x7, 0x3, 0x8001}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000028}, 0x4) socket$rxrpc(0x21, 0x2, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000006a40)={0x3, 0x40, 0xfa00, {{0x6000000, 0x4e24, 0x0, @private0, 0x459a}, {0xa, 0x4e20, 0x0, @empty}, r3}}, 0x48) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 384.282711ms ago: executing program 3 (id=7006): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000070000000000280012800b0001006d61637365630000180002800c0004000200b50100c27a400500030004"], 0x48}}, 0x0) 202.34818ms ago: executing program 2 (id=7007): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x9, 0x0, 0x0, 0xe, 0x10240, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0x8, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5, 0x1300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="2200000000000038ab1b661c1fd425ce4500"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0xb310, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x9, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xc, r1, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004900000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = semget$private(0x0, 0x3, 0x0) semop(r5, &(0x7f0000000240)=[{0x0, 0x8002, 0x1000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu>20\t&&') semop(r5, &(0x7f0000000140)=[{0x0, 0xfffb}, {0x2, 0x7f, 0x1800}], 0x2) semop(r5, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 138.43627ms ago: executing program 3 (id=7008): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x5, 0xd3, &(0x7f0000000140)=""/211, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b70500000100000061108900000000000400000000000000950000000000d11a9b8ef56a04b0fe35030094ef31aeb0f33bd205d2fb580314b3d025d947ab0beec1a53019a409281969c5a5b76536c7aa5710ca253068d18cabeabcfdc73e106e3b91ee75d4ee0163951cb099add9d7758588b701a323430a6acbc1f0fb2a0100000000000000b5d9ff1d7af6b600000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b00010000000009040000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0xffffe6b0]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x2, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40107446, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 127.10429ms ago: executing program 1 (id=7009): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x0, 0x0, 0x0, 0x55a}) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000459e850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) write$P9_RLERRORu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1ed"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 126.94517ms ago: executing program 6 (id=7010): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1fff}, {0x3, 0x94, 0x38, 0x9}]}) 42.42944ms ago: executing program 0 (id=7011): pipe2(&(0x7f0000000040), 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1801000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=7012): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket(0x1d, 0x2, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0xc593, &(0x7f0000001380)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="e36d0983b75180733398e7172f788ce0e009f917927e3fe9ef788147540035243147088b90d49ba80e5f013541209109f8706c3836bc46221e2d97fe2c7576aa5bbff761ba68686a99cdb113cb453921d2b015fdd63a36745f377b28505045cd9f8a23729114e191a4bbc3f898b69d03cd8bd51b4d6225edb416d06f26f214960dc8dc8b49aa4032639031111ee4038ece717eb15f059a82ef17e0962b73bd3161f60ccacd854732be9a42c57bd8625e2a5fd7df4d4baf0543bb5178525dfab9c532647c1e5ea4b9caf84fae8aedac8d5cde327b0638f7c93caae7022dba83368a43ad746e37b3", @ANYRESOCT=r2, @ANYRES16=r1], 0x1, 0x121d, &(0x7f00000014c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000ac0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d353aa1286e3af37ba4d1bac9280fe71822e0e5bef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750bb20d68bac0e03f2957d4cebb8fbac2af9aba140100820064122f5bd93ebef6e200989cdb3c821345a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729346b5eddd9e213e51a16a4003d4ec20e100dfacd66b50923bfeaa1635a8167a19c155afd3cbbc6f8b83fc8109f05d67de380aca9163f5e2c62400d3bce6a53f518f7436f52fd5f65058aa9caba5693a0a60ed2427ea1055615b3174a6c92ceb441c1fedeb0255207cde2fb23b44355c7cf1af993fe2f07060fae1f6b186e5223752c5dbb101024000000000000", 0x13f}, {&(0x7f0000000a00)="b3fe109a0a0e5fbf3f4e8ce314c9de", 0xf}], 0x2}}], 0x2, 0xc044) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet(r4, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="ee", 0x1}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): esystem 00000000-0000-0000-0000-000000000000. [ 518.159825][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6052'. [ 518.181763][ T6511] IPVS: starting estimator thread 0... [ 518.209428][T21430] bridge0: port 3(batadv1) entered blocking state [ 518.216173][T21430] bridge0: port 3(batadv1) entered disabled state [ 518.223885][T21430] batadv1: entered allmulticast mode [ 518.230784][T21430] batadv1: entered promiscuous mode [ 518.275431][T21433] IPVS: using max 2448 ests per chain, 122400 per kthread [ 518.339678][T21444] loop6: detected capacity change from 0 to 8192 [ 518.373948][T21444] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 518.979900][T18985] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 518.989352][T18985] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 519.058622][T21472] loop2: detected capacity change from 0 to 256 [ 519.267899][T21482] Cannot find add_set index 0 as target [ 519.425964][T21485] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 519.645292][T21504] loop2: detected capacity change from 0 to 8192 [ 519.652261][T21504] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 519.742507][T21508] loop2: detected capacity change from 0 to 128 [ 519.783827][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6083'. [ 519.793690][T21508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 519.888526][T21512] loop2: detected capacity change from 0 to 8192 [ 519.895607][T21512] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 520.058030][T21515] loop2: detected capacity change from 0 to 1024 [ 520.065247][T21515] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 520.076859][T21515] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 520.086980][T21515] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 520.106630][T21515] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6086'. [ 520.131075][T21515] netlink: 'syz.2.6086': attribute type 4 has an invalid length. [ 520.136446][T21518] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 520.151031][T21515] netlink: 'syz.2.6086': attribute type 4 has an invalid length. [ 520.164430][T21515] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.383118][T21526] loop2: detected capacity change from 0 to 8192 [ 520.394458][T21526] vfat: Unknown parameter '' [ 520.499288][T21416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.588940][T21544] lo speed is unknown, defaulting to 1000 [ 520.681572][T21547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6099'. [ 520.832879][T21416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.898524][T21554] lo speed is unknown, defaulting to 1000 [ 520.930887][T21416] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.003460][T21416] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.015315][T21416] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.028064][T21416] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.041596][T21416] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.757021][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6110'. [ 521.801644][T21592] bridge0: port 4(batadv2) entered blocking state [ 521.808429][T21592] bridge0: port 4(batadv2) entered disabled state [ 521.819306][T21592] batadv2: entered allmulticast mode [ 521.821173][T21594] sd 0:0:1:0: device reset [ 521.825866][T21592] batadv2: entered promiscuous mode [ 521.839145][T21594] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.899892][T21594] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.957267][T21594] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.992771][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 521.992790][ T29] audit: type=1326 audit(1738030551.309:23723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.024992][ T29] audit: type=1326 audit(1738030551.309:23724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.048923][ T29] audit: type=1326 audit(1738030551.309:23725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.072549][ T29] audit: type=1326 audit(1738030551.319:23726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.084123][T21594] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.096193][ T29] audit: type=1326 audit(1738030551.319:23727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.096236][ T29] audit: type=1326 audit(1738030551.319:23728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.153392][ T29] audit: type=1326 audit(1738030551.319:23729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.177109][ T29] audit: type=1326 audit(1738030551.319:23730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.200868][ T29] audit: type=1326 audit(1738030551.319:23731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.224515][ T29] audit: type=1326 audit(1738030551.329:23732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21603 comm="syz.2.6117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 522.310149][T18995] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 522.319456][T18995] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 522.330597][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6119'. [ 522.343294][T21611] bridge0: port 8(batadv7) entered blocking state [ 522.349927][T21611] bridge0: port 8(batadv7) entered disabled state [ 522.356978][T21611] batadv7: entered allmulticast mode [ 522.362802][T21611] batadv7: entered promiscuous mode [ 522.378536][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6120'. [ 522.391859][T21613] bridge0: port 3(batadv1) entered blocking state [ 522.398408][T21613] bridge0: port 3(batadv1) entered disabled state [ 522.405877][T21613] batadv1: entered allmulticast mode [ 522.411766][T21613] batadv1: entered promiscuous mode [ 522.421855][T21594] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.437660][T21594] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.449374][T21594] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.463670][T21594] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.482117][T21619] loop2: detected capacity change from 0 to 512 [ 522.507512][T21619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 522.525824][T21619] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.668772][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6129'. [ 522.688465][T21636] bridge0: port 3(batadv1) entered blocking state [ 522.695029][T21636] bridge0: port 3(batadv1) entered disabled state [ 522.701780][T21636] batadv1: entered allmulticast mode [ 522.707783][T21636] batadv1: entered promiscuous mode [ 522.818813][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6127'. [ 522.851743][T18985] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 522.861136][T18985] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 522.902439][T21645] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 523.030217][T21652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.096735][T18985] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 523.106118][T18985] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 523.123568][T21652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.192287][T18987] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 523.201747][T18987] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 523.214581][T21660] sd 0:0:1:0: device reset [ 523.221067][T21660] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.270308][T21660] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.366530][T20584] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 523.373409][T21660] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.420271][T21660] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.479921][T21685] loop2: detected capacity change from 0 to 8192 [ 523.487473][T21685] vfat: Unknown parameter '' [ 523.511874][T21660] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.537339][T21660] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.563627][T21660] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.577146][T21660] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.684414][T21703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6146'. [ 523.720365][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6147'. [ 523.733778][T21707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 523.875794][T21719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'. [ 523.915715][T21719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 523.983807][T21730] sd 0:0:1:0: device reset [ 524.005028][T21730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.049246][T21723] loop3: detected capacity change from 0 to 8192 [ 524.070880][T21730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.120496][T21730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.160080][T21730] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.240338][T21730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.252224][T21730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.264149][T21730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.305074][T21730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.430800][T21757] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 524.491346][T21764] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 524.563150][T21742] lo speed is unknown, defaulting to 1000 [ 524.814136][T21794] sd 0:0:1:0: device reset [ 524.846970][T21794] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.884995][T21802] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6172'. [ 524.957538][T21794] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.969824][ T6511] IPVS: starting estimator thread 0... [ 524.969903][T21809] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 525.011874][T21794] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.046131][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6175'. [ 525.048016][T21742] chnl_net:caif_netlink_parms(): no params data found [ 525.065490][T21818] IPVS: using max 2400 ests per chain, 120000 per kthread [ 525.083759][T21822] bridge0: port 4(batadv2) entered blocking state [ 525.090531][T21822] bridge0: port 4(batadv2) entered disabled state [ 525.103996][T21822] batadv2: entered allmulticast mode [ 525.114252][T21822] batadv2: entered promiscuous mode [ 525.172093][T21794] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.204324][T21828] bridge0: port 6(batadv4) entered blocking state [ 525.211020][T21828] bridge0: port 6(batadv4) entered disabled state [ 525.217735][T21828] batadv4: entered allmulticast mode [ 525.223423][T21828] batadv4: entered promiscuous mode [ 525.289844][T21742] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.297141][T21742] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.307135][T21742] bridge_slave_0: entered allmulticast mode [ 525.313874][T21742] bridge_slave_0: entered promiscuous mode [ 525.321018][T21742] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.328356][T21742] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.336056][T21742] bridge_slave_1: entered allmulticast mode [ 525.342688][T21742] bridge_slave_1: entered promiscuous mode [ 525.368751][T21742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.383359][T21742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.462002][T21742] team0: Port device team_slave_0 added [ 525.478296][T21742] team0: Port device team_slave_1 added [ 525.497237][T21742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.504264][T21742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.530432][T21742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.553801][T21742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.560846][T21742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.586970][T21742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.614715][T18993] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 525.623497][T21858] loop3: detected capacity change from 0 to 8192 [ 525.624131][T18993] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 525.636475][T21858] vfat: Unknown parameter '' [ 525.666395][T21742] hsr_slave_0: entered promiscuous mode [ 525.672744][T21742] hsr_slave_1: entered promiscuous mode [ 525.693840][T21742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.710655][T18990] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 525.719983][T18990] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 525.728336][T21742] Cannot create hsr debugfs directory [ 525.817432][T21879] loop6: detected capacity change from 0 to 128 [ 525.875017][T21879] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 525.958994][T21742] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.981570][T21794] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.998960][T21794] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.024535][T21742] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.061169][T21794] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.094793][T21742] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.114717][T21794] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.126419][T21910] bridge0: port 5(batadv3) entered blocking state [ 526.132986][T21910] bridge0: port 5(batadv3) entered disabled state [ 526.149952][T21910] batadv3: entered allmulticast mode [ 526.156751][T21910] batadv3: entered promiscuous mode [ 526.167707][T21908] bridge0: port 7(batadv5) entered blocking state [ 526.174285][T21908] bridge0: port 7(batadv5) entered disabled state [ 526.184658][T21908] batadv5: entered allmulticast mode [ 526.190751][T21908] batadv5: entered promiscuous mode [ 526.202916][T21742] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.318051][T21927] SELinux: syz.6.6207 (21927) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 526.328417][T21929] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 526.406447][T21936] sd 0:0:1:0: device reset [ 526.412849][T21936] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.477611][T21936] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.537757][T21936] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.598671][T21945] loop3: detected capacity change from 0 to 8192 [ 526.605306][T21945] vfat: Unknown parameter '' [ 526.617462][T21936] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.631742][T18985] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 526.641215][T18985] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 526.665612][T18995] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 526.674913][T18995] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 526.694435][T21936] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.709308][T21936] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.761145][T21936] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.773535][T21936] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.830067][T21956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.841197][T21956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.918280][T21742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 526.947869][T21742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 526.958516][T21956] loop6: detected capacity change from 0 to 2048 [ 526.967970][T21742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 526.987398][T21742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 527.017967][T21956] loop6: p1 < > p4 [ 527.035465][T21956] loop6: p4 size 8388608 extends beyond EOD, truncated [ 527.040692][T21971] bridge0: port 8(batadv6) entered blocking state [ 527.048944][T21971] bridge0: port 8(batadv6) entered disabled state [ 527.050812][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 527.050827][ T29] audit: type=1326 audit(1738030556.369:24379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.063766][T21971] batadv6: entered allmulticast mode [ 527.105818][T21971] batadv6: entered promiscuous mode [ 527.111757][T21968] loop2: detected capacity change from 0 to 8192 [ 527.131494][T21968] vfat: Unknown parameter '' [ 527.171573][ T29] audit: type=1326 audit(1738030556.409:24380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd2bba1c2a7 code=0x7ffc0000 [ 527.195477][ T29] audit: type=1326 audit(1738030556.409:24381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.219309][ T29] audit: type=1326 audit(1738030556.409:24382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.242989][ T29] audit: type=1326 audit(1738030556.409:24383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.266785][ T29] audit: type=1326 audit(1738030556.409:24384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd2bba1c2a7 code=0x7ffc0000 [ 527.290503][ T29] audit: type=1326 audit(1738030556.409:24385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.314126][ T29] audit: type=1326 audit(1738030556.409:24386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.337778][ T29] audit: type=1326 audit(1738030556.409:24387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd2bba1b53a code=0x7ffc0000 [ 527.361621][ T29] audit: type=1326 audit(1738030556.409:24388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21955 comm="syz.6.6220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd2bba1b98a code=0x7ffc0000 [ 527.396978][T18985] batadv7: left allmulticast mode [ 527.402077][T18985] batadv7: left promiscuous mode [ 527.407354][T18985] bridge0: port 8(batadv7) entered disabled state [ 527.411659][T21977] sd 0:0:1:0: device reset [ 527.421849][T18985] batadv6: left allmulticast mode [ 527.427087][T18985] batadv6: left promiscuous mode [ 527.432422][T18985] bridge0: port 7(batadv6) entered disabled state [ 527.440247][T18985] batadv5: left allmulticast mode [ 527.445298][T18985] batadv5: left promiscuous mode [ 527.450600][T18985] bridge0: port 6(batadv5) entered disabled state [ 527.463161][T18985] batadv4: left allmulticast mode [ 527.468402][T18985] batadv4: left promiscuous mode [ 527.469325][T21981] __nla_validate_parse: 16 callbacks suppressed [ 527.469342][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 527.473457][T18985] bridge0: port 5(batadv4) entered disabled state [ 527.504039][T18985] batadv3: left allmulticast mode [ 527.509283][T18985] batadv3: left promiscuous mode [ 527.514321][T18985] bridge0: port 4(batadv3) entered disabled state [ 527.524245][T18985] batadv2: left allmulticast mode [ 527.527974][T18987] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 527.529328][T18985] batadv2: left promiscuous mode [ 527.538552][T18987] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 527.543632][T18985] bridge0: port 3(batadv2) entered disabled state [ 527.560803][T18985] bridge_slave_1: left allmulticast mode [ 527.566633][T18985] bridge_slave_1: left promiscuous mode [ 527.572352][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.590581][T18985] bridge_slave_0: left allmulticast mode [ 527.596399][T18985] bridge_slave_0: left promiscuous mode [ 527.602271][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.636984][T21977] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.653915][T21985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6233'. [ 527.738424][T18985] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.748380][T18985] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.758300][T18985] . (unregistering): (slave batadv0): Releasing backup interface [ 527.767623][T18985] . (unregistering): (slave dummy0): Releasing backup interface [ 527.767971][T21988] loop6: detected capacity change from 0 to 128 [ 527.782769][T18985] . (unregistering): Released all slaves [ 527.794275][T18985] bond1 (unregistering): Released all slaves [ 527.808519][T18985]  (unregistering): Released all slaves [ 527.818626][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6234'. [ 527.828849][T21977] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.843061][T21988] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 527.888454][T21977] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.918408][T21742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.948420][T21977] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.966846][T21742] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.981474][T18987] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.988594][T18987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.006484][T18987] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.013606][T18987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.052013][T18985] hsr_slave_0: left promiscuous mode [ 528.059495][T18985] hsr_slave_1: left promiscuous mode [ 528.078872][T18985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.086487][T18985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.104839][T18985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.112437][T18985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.118673][T22000] loop3: detected capacity change from 0 to 8192 [ 528.133801][T22000] vfat: Unknown parameter '' [ 528.168786][T18985] veth1_macvtap: left promiscuous mode [ 528.183962][T18985] veth0_macvtap: left promiscuous mode [ 528.334909][T18985] team0 (unregistering): Port device team_slave_1 removed [ 528.348633][T18985] team0 (unregistering): Port device team_slave_0 removed [ 528.409268][T22009] lo speed is unknown, defaulting to 1000 [ 528.504267][T21742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.580651][T22023] loop3: detected capacity change from 0 to 8192 [ 528.607738][T21742] veth0_vlan: entered promiscuous mode [ 528.621103][T21742] veth1_vlan: entered promiscuous mode [ 528.650240][T21742] veth0_macvtap: entered promiscuous mode [ 528.661675][T21742] veth1_macvtap: entered promiscuous mode [ 528.683336][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6248'. [ 528.694914][T21977] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.704651][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.715269][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.725259][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.736000][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.746035][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.756698][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.766599][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.777132][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.787146][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.797773][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.815842][T21742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.829970][T21977] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.841536][T21977] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.854673][T21977] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.864894][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.875547][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.885433][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.895886][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.905879][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.916369][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.926241][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.936850][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.947388][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.958248][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.968146][T21742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.978636][T21742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.072232][T21742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.091323][T21742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.100296][T21742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.109099][T21742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.117941][T21742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.156223][T22047] loop2: detected capacity change from 0 to 8192 [ 529.230578][T22061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6262'. [ 529.259386][T18985] IPVS: stop unused estimator thread 0... [ 529.283398][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6262'. [ 529.295745][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6155'. [ 529.308615][T22070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6263'. [ 529.309222][T22069] bridge0: port 3(batadv1) entered blocking state [ 529.324048][T22069] bridge0: port 3(batadv1) entered disabled state [ 529.331391][T22069] batadv1: entered allmulticast mode [ 529.337751][T22069] batadv1: entered promiscuous mode [ 529.426921][T22076] loop2: detected capacity change from 0 to 8192 [ 529.435632][T22076] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 529.479385][T22082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'. [ 529.592135][T22084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 529.630894][T22084] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 529.776042][T22113] loop3: detected capacity change from 0 to 128 [ 529.799729][T22113] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 529.815904][T18995] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 529.826627][T18995] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 529.851755][T22115] bridge0: port 9(batadv7) entered blocking state [ 529.858389][T22115] bridge0: port 9(batadv7) entered disabled state [ 529.864951][T22115] batadv7: entered allmulticast mode [ 529.871170][T22115] batadv7: entered promiscuous mode [ 529.941042][T22117] loop3: detected capacity change from 0 to 8192 [ 529.952611][T22117] vfat: Unknown parameter '' [ 530.115809][T22140] bridge0: port 10(batadv8) entered blocking state [ 530.122456][T22140] bridge0: port 10(batadv8) entered disabled state [ 530.129473][T22140] batadv8: entered allmulticast mode [ 530.136318][T22140] batadv8: entered promiscuous mode [ 530.170933][T22144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 530.264485][T22146] loop3: detected capacity change from 0 to 8192 [ 530.279381][T22148] loop6: detected capacity change from 0 to 8192 [ 530.289360][T22148] vfat: Unknown parameter '' [ 530.360585][T18989] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 530.369983][T18989] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 530.408361][T22156] loop6: detected capacity change from 0 to 128 [ 530.518584][T22161] loop6: detected capacity change from 0 to 8192 [ 530.526582][T22161] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 530.552707][T22167] bridge0: port 5(batadv3) entered blocking state [ 530.559616][T22167] bridge0: port 5(batadv3) entered disabled state [ 530.593182][T22167] batadv3: entered allmulticast mode [ 530.606036][T22167] batadv3: entered promiscuous mode [ 530.618642][T18989] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 530.628038][T18989] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 530.630971][T22172] sd 0:0:1:0: device reset [ 530.657334][T22172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.723871][T22179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.740117][T22179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.741216][T22181] SELinux: syz.6.6313 (22181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 530.763818][T22172] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.803969][T22177] loop2: detected capacity change from 0 to 8192 [ 530.807708][T22179] loop3: detected capacity change from 0 to 2048 [ 530.823951][T22177] vfat: Unknown parameter '' [ 530.830806][T22172] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.861133][T22179] loop3: p1 < > p4 [ 530.869079][T22179] loop3: p4 size 8388608 extends beyond EOD, truncated [ 530.888695][T22172] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.970200][T22172] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.982539][T22172] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.005182][T22172] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.021397][T22172] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.030285][T22198] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 531.037402][T22200] bridge0: port 4(batadv2) entered blocking state [ 531.046333][T22200] bridge0: port 4(batadv2) entered disabled state [ 531.059335][T18995] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 531.065512][T22200] batadv2: entered allmulticast mode [ 531.068697][T18995] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 531.074688][T22200] batadv2: entered promiscuous mode [ 531.151785][T22209] lo speed is unknown, defaulting to 1000 [ 531.208661][T22211] bridge0: port 5(batadv3) entered blocking state [ 531.215280][T22211] bridge0: port 5(batadv3) entered disabled state [ 531.221978][T22211] batadv3: entered allmulticast mode [ 531.228358][T22211] batadv3: entered promiscuous mode [ 531.450728][T22227] FAULT_INJECTION: forcing a failure. [ 531.450728][T22227] name failslab, interval 1, probability 0, space 0, times 0 [ 531.463542][T22227] CPU: 0 UID: 0 PID: 22227 Comm: syz.1.6332 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 531.463566][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 531.463578][T22227] Call Trace: [ 531.463585][T22227] [ 531.463594][T22227] dump_stack_lvl+0xf2/0x150 [ 531.463638][T22227] dump_stack+0x15/0x1a [ 531.463665][T22227] should_fail_ex+0x24a/0x260 [ 531.463706][T22227] should_failslab+0x8f/0xb0 [ 531.463737][T22227] kmem_cache_alloc_node_noprof+0x59/0x320 [ 531.463892][T22227] ? dup_task_struct+0x6c/0x710 [ 531.463922][T22227] dup_task_struct+0x6c/0x710 [ 531.464033][T22227] ? kstrtoull+0x110/0x140 [ 531.464069][T22227] copy_process+0x3a9/0x1fb0 [ 531.464131][T22227] ? 0xffffffff81000000 [ 531.464163][T22227] ? selinux_file_permission+0x22a/0x360 [ 531.464190][T22227] ? __rcu_read_unlock+0x4e/0x70 [ 531.464220][T22227] kernel_clone+0x167/0x5e0 [ 531.464261][T22227] ? __rcu_read_unlock+0x4e/0x70 [ 531.464297][T22227] __x64_sys_clone+0xe8/0x120 [ 531.464332][T22227] x64_sys_call+0x2d7e/0x2dc0 [ 531.464399][T22227] do_syscall_64+0xc9/0x1c0 [ 531.464428][T22227] ? clear_bhb_loop+0x55/0xb0 [ 531.464473][T22227] ? clear_bhb_loop+0x55/0xb0 [ 531.464534][T22227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.464559][T22227] RIP: 0033:0x7fcb48b3cd29 [ 531.464574][T22227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.464605][T22227] RSP: 002b:00007fcb471a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 531.464626][T22227] RAX: ffffffffffffffda RBX: 00007fcb48d55fa0 RCX: 00007fcb48b3cd29 [ 531.464638][T22227] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 531.464649][T22227] RBP: 00007fcb471a1090 R08: 0000000000000000 R09: 0000000000000000 [ 531.464660][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.464670][T22227] R13: 0000000000000000 R14: 00007fcb48d55fa0 R15: 00007ffc135e8fd8 [ 531.464689][T22227] [ 531.674517][T18985] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 531.683875][T18985] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 531.701372][T22231] sd 0:0:1:0: device reset [ 531.722898][T18985] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 531.732326][T18985] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 531.736976][T22233] bridge0: port 11(batadv9) entered blocking state [ 531.748268][T22233] bridge0: port 11(batadv9) entered disabled state [ 531.771525][T22233] batadv9: entered allmulticast mode [ 531.778902][T22233] batadv9: entered promiscuous mode [ 531.950841][T22259] sd 0:0:1:0: device reset [ 532.089108][T22268] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.116023][T22270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 532.231075][T18993] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 532.240893][T18993] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 532.685435][T22275] loop2: detected capacity change from 0 to 128 [ 532.819048][T22286] sd 0:0:1:0: device reset [ 532.845582][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.853029][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.860515][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.868216][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.875703][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.883176][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.890752][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.898272][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.905772][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.913210][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.920703][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.928134][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.935575][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.943027][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.950490][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.957926][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.965434][ T3375] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 532.988019][ T3375] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 533.030588][T22292] __nla_validate_parse: 20 callbacks suppressed [ 533.030607][T22292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6361'. [ 533.048963][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 533.048985][ T29] audit: type=1326 audit(1738030562.369:24861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22293 comm="syz.1.6360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb48b3cd29 code=0x0 [ 533.079894][T22292] bridge0: port 6(batadv4) entered blocking state [ 533.086574][T22292] bridge0: port 6(batadv4) entered disabled state [ 533.093262][T22292] batadv4: entered allmulticast mode [ 533.099950][T22292] batadv4: entered promiscuous mode [ 533.113594][ T29] audit: type=1326 audit(1738030562.429:24862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.137555][T22299] loop6: detected capacity change from 0 to 128 [ 533.138221][ T29] audit: type=1326 audit(1738030562.429:24863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.168126][ T29] audit: type=1326 audit(1738030562.429:24864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.191813][ T29] audit: type=1326 audit(1738030562.429:24865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.215851][ T29] audit: type=1326 audit(1738030562.429:24866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.239787][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6363'. [ 533.239993][ T29] audit: type=1326 audit(1738030562.429:24867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.249254][T22299] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 533.272373][ T29] audit: type=1326 audit(1738030562.429:24868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.305647][ T29] audit: type=1326 audit(1738030562.429:24869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22295 comm="syz.2.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 533.355797][T22303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6364'. [ 533.399181][T22307] SELinux: syz.6.6366 (22307) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 533.520233][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6369'. [ 533.529540][T22314] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 533.565476][T18987] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 533.574842][T18987] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 533.980034][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6371'. [ 534.013269][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.020826][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.028525][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.036105][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.043511][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.051162][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.058629][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.066319][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.073981][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.081651][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.089084][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.096546][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.103939][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.111352][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.118793][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.126202][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.133622][ T2962] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 534.141607][ T2962] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 534.171950][T22322] SELinux: syz.2.6373 (22322) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 534.326428][T22329] lo speed is unknown, defaulting to 1000 [ 534.624011][ T29] audit: type=1400 audit(1738030563.939:24870): avc: denied { mount } for pid=22340 comm="syz.6.6381" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 534.655282][T22347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6382'. [ 534.668940][T22347] bridge0: port 7(batadv5) entered blocking state [ 534.675650][T22347] bridge0: port 7(batadv5) entered disabled state [ 534.682284][T22347] batadv5: entered allmulticast mode [ 534.695761][T22347] batadv5: entered promiscuous mode [ 534.750349][T22349] loop6: detected capacity change from 0 to 8192 [ 534.757411][T22349] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 534.822150][T22353] SELinux: syz.6.6385 (22353) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 534.823792][T22351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6384'. [ 534.883294][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6386'. [ 534.899157][T22360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6388'. [ 534.904698][T22355] bridge0: port 8(batadv6) entered blocking state [ 534.914696][T22355] bridge0: port 8(batadv6) entered disabled state [ 534.927957][T22355] batadv6: entered allmulticast mode [ 534.933986][T22355] batadv6: entered promiscuous mode [ 534.946908][T22360] bridge0: port 6(batadv4) entered blocking state [ 534.953483][T22360] bridge0: port 6(batadv4) entered disabled state [ 534.960556][T22360] batadv4: entered allmulticast mode [ 534.966378][T22360] batadv4: entered promiscuous mode [ 535.026677][T22368] lo speed is unknown, defaulting to 1000 [ 535.129521][T22372] loop6: detected capacity change from 0 to 8192 [ 535.175443][T18987] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 535.184767][T18987] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 535.234322][T22377] SELinux: syz.2.6396 (22377) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 535.295150][T22382] SELinux: syz.3.6397 (22382) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 535.312818][T22381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6398'. [ 535.405445][T18993] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 535.414714][T18993] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 535.450428][T18993] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 535.459800][T18993] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 535.513613][T22398] bridge0: port 12(batadv10) entered blocking state [ 535.520590][T22398] bridge0: port 12(batadv10) entered disabled state [ 535.532247][T22398] batadv10: entered allmulticast mode [ 535.538681][T22398] batadv10: entered promiscuous mode [ 535.610021][T22405] SELinux: syz.2.6409 (22405) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 535.714396][T22409] lo speed is unknown, defaulting to 1000 [ 535.801424][T22423] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 535.864838][T22430] SELinux: syz.0.6420 (22430) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 535.896621][T22433] FAULT_INJECTION: forcing a failure. [ 535.896621][T22433] name failslab, interval 1, probability 0, space 0, times 0 [ 535.909415][T22433] CPU: 0 UID: 0 PID: 22433 Comm: syz.0.6422 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 535.909443][T22433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 535.909458][T22433] Call Trace: [ 535.909466][T22433] [ 535.909473][T22433] dump_stack_lvl+0xf2/0x150 [ 535.909499][T22433] dump_stack+0x15/0x1a [ 535.909544][T22433] should_fail_ex+0x24a/0x260 [ 535.909581][T22433] ? audit_log_d_path+0x96/0x250 [ 535.909621][T22433] should_failslab+0x8f/0xb0 [ 535.909652][T22433] __kmalloc_cache_noprof+0x4e/0x320 [ 535.909742][T22433] audit_log_d_path+0x96/0x250 [ 535.909774][T22433] ? __rcu_read_unlock+0x4e/0x70 [ 535.909854][T22433] audit_log_d_path_exe+0x42/0x70 [ 535.909897][T22433] audit_log_task+0x192/0x1c0 [ 535.909930][T22433] audit_seccomp+0x68/0x130 [ 535.909995][T22433] __seccomp_filter+0x6fa/0x1180 [ 535.910016][T22433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 535.910044][T22433] ? vfs_write+0x644/0x920 [ 535.910136][T22433] __secure_computing+0x9f/0x1c0 [ 535.910156][T22433] syscall_trace_enter+0xd1/0x1f0 [ 535.910180][T22433] ? fpregs_assert_state_consistent+0x83/0xa0 [ 535.910256][T22433] do_syscall_64+0xaa/0x1c0 [ 535.910284][T22433] ? clear_bhb_loop+0x55/0xb0 [ 535.910311][T22433] ? clear_bhb_loop+0x55/0xb0 [ 535.910412][T22433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.910484][T22433] RIP: 0033:0x7f68bb61cd29 [ 535.910501][T22433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.910522][T22433] RSP: 002b:00007f68b9c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 535.910544][T22433] RAX: ffffffffffffffda RBX: 00007f68bb835fa0 RCX: 00007f68bb61cd29 [ 535.910559][T22433] RDX: 0000000000000006 RSI: 087abbe8d1cc6ad9 RDI: 0000000020952000 [ 535.910645][T22433] RBP: 00007f68b9c87090 R08: 0000000000000000 R09: 0000000000000000 [ 535.910659][T22433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.910674][T22433] R13: 0000000000000000 R14: 00007f68bb835fa0 R15: 00007ffe852e5ad8 [ 535.910698][T22433] [ 536.124214][T18985] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 536.133990][T18985] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 536.202115][T22439] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 536.334385][ T1065] IPVS: starting estimator thread 0... [ 536.341526][T22448] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 536.382777][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.390513][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.398096][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.405578][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.412996][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.420500][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.427994][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.428552][T22455] IPVS: using max 2400 ests per chain, 120000 per kthread [ 536.435480][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.450068][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.457577][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.465063][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.472525][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.480097][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.487538][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.495026][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.502463][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.509904][ T1065] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 536.518291][ T1065] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 536.656075][T22477] loop2: detected capacity change from 0 to 512 [ 536.680245][T22477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 536.693603][T22477] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.768177][T22484] bridge0: port 7(batadv5) entered blocking state [ 536.774744][T22484] bridge0: port 7(batadv5) entered disabled state [ 536.794552][T22484] batadv5: entered allmulticast mode [ 536.800859][T22484] batadv5: entered promiscuous mode [ 537.086510][T22501] lo speed is unknown, defaulting to 1000 [ 537.205541][T18985] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 537.214825][T18985] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 537.548363][T20584] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 537.778825][T22539] loop3: detected capacity change from 0 to 128 [ 537.790326][T22543] bridge0: port 8(batadv6) entered blocking state [ 537.796845][T22543] bridge0: port 8(batadv6) entered disabled state [ 537.803573][T22543] batadv6: entered allmulticast mode [ 537.809512][T22543] batadv6: entered promiscuous mode [ 537.816691][T22539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 537.881183][T22550] bridge0: port 13(batadv11) entered blocking state [ 537.887973][T22550] bridge0: port 13(batadv11) entered disabled state [ 537.903211][T22550] batadv11: entered allmulticast mode [ 537.910709][T22550] batadv11: entered promiscuous mode [ 538.978828][T18991] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 538.988283][T18991] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 539.008380][T18991] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled [ 539.017854][T18991] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled [ 539.037289][T22559] loop3: detected capacity change from 0 to 1024 [ 539.048448][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 539.048516][ T29] audit: type=1326 audit(1738030568.329:25254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.078482][ T29] audit: type=1326 audit(1738030568.329:25255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.102128][ T29] audit: type=1326 audit(1738030568.329:25256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.125774][ T29] audit: type=1326 audit(1738030568.329:25257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.149354][ T29] audit: type=1326 audit(1738030568.329:25258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.325205][T22576] FAULT_INJECTION: forcing a failure. [ 539.325205][T22576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.338355][T22576] CPU: 1 UID: 0 PID: 22576 Comm: syz.6.6478 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 539.338381][T22576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 539.338438][T22576] Call Trace: [ 539.338445][T22576] [ 539.338452][T22576] dump_stack_lvl+0xf2/0x150 [ 539.338519][T22576] dump_stack+0x15/0x1a [ 539.338539][T22576] should_fail_ex+0x24a/0x260 [ 539.338572][T22576] should_fail+0xb/0x10 [ 539.338704][T22576] should_fail_usercopy+0x1a/0x20 [ 539.338728][T22576] _copy_to_user+0x20/0xa0 [ 539.338755][T22576] simple_read_from_buffer+0xa0/0x110 [ 539.338784][T22576] proc_fail_nth_read+0xf9/0x140 [ 539.338815][T22576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 539.338902][T22576] vfs_read+0x19b/0x6f0 [ 539.338927][T22576] ? __rcu_read_unlock+0x4e/0x70 [ 539.338953][T22576] ? __fget_files+0x17c/0x1c0 [ 539.338988][T22576] ksys_read+0xe8/0x1b0 [ 539.339009][T22576] __x64_sys_read+0x42/0x50 [ 539.339095][T22576] x64_sys_call+0x2874/0x2dc0 [ 539.339197][T22576] do_syscall_64+0xc9/0x1c0 [ 539.339221][T22576] ? clear_bhb_loop+0x55/0xb0 [ 539.339253][T22576] ? clear_bhb_loop+0x55/0xb0 [ 539.339348][T22576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.339380][T22576] RIP: 0033:0x7fd2bba1b73c [ 539.339398][T22576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 539.339420][T22576] RSP: 002b:00007fd2ba081030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 539.339447][T22576] RAX: ffffffffffffffda RBX: 00007fd2bbc35fa0 RCX: 00007fd2bba1b73c [ 539.339501][T22576] RDX: 000000000000000f RSI: 00007fd2ba0810a0 RDI: 0000000000000003 [ 539.339516][T22576] RBP: 00007fd2ba081090 R08: 0000000000000000 R09: 0000000000000000 [ 539.339531][T22576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.339544][T22576] R13: 0000000000000001 R14: 00007fd2bbc35fa0 R15: 00007ffc38f03a88 [ 539.339562][T22576] [ 539.349909][ T29] audit: type=1326 audit(1738030568.489:25259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.380436][T22579] __nla_validate_parse: 16 callbacks suppressed [ 539.380453][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6479'. [ 539.381228][ T29] audit: type=1326 audit(1738030568.489:25260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.426945][T22579] bridge0: port 9(batadv7) entered blocking state [ 539.429740][ T29] audit: type=1326 audit(1738030568.489:25261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.433912][T22579] bridge0: port 9(batadv7) entered disabled state [ 539.438345][ T29] audit: type=1326 audit(1738030568.489:25262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.438449][ T29] audit: type=1326 audit(1738030568.489:25263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.0.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68bb61cd29 code=0x7ffc0000 [ 539.466755][T22579] batadv7: entered allmulticast mode [ 539.518067][T22559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.574282][T22579] batadv7: entered promiscuous mode [ 539.578322][T22559] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.657390][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6480'. [ 539.686096][T22586] loop2: detected capacity change from 0 to 8192 [ 539.709214][T22589] loop6: detected capacity change from 0 to 512 [ 539.728368][T22587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 539.775690][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'. [ 539.786653][T22589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.809702][T22589] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.906015][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.919323][T22597] lo speed is unknown, defaulting to 1000 [ 539.940162][T18989] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 539.949690][T18989] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 540.182207][T22605] SELinux: syz.2.6488 (22605) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 540.214392][T22607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6489'. [ 540.585009][T22622] netlink: 'syz.2.6493': attribute type 3 has an invalid length. [ 540.592884][T22622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6493'. [ 540.611757][T20742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 540.693176][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6495'. [ 540.816819][T22629] loop6: detected capacity change from 0 to 2048 [ 540.833719][T22629] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 540.860249][T22631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6497'. [ 540.955225][T22638] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6500'. [ 540.993747][T22640] SELinux: syz.6.6501 (22640) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 541.059030][T22646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.070216][T22646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.087421][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6506'. [ 541.103296][T22646] loop6: detected capacity change from 0 to 2048 [ 541.165930][T22646] loop6: p1 < > p4 [ 541.170615][T22646] loop6: p4 size 8388608 extends beyond EOD, truncated [ 541.772352][T22664] netlink: 'syz.6.6510': attribute type 3 has an invalid length. [ 541.780195][T22664] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6510'. [ 541.945642][T22667] lo speed is unknown, defaulting to 1000 [ 542.215660][T22665] loop2: detected capacity change from 0 to 8192 [ 542.232077][T22672] loop6: detected capacity change from 0 to 2048 [ 542.240130][T22672] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 542.275639][T22665] loop2: p2 p3 p4 [ 542.289839][T22665] loop2: p2 size 130943 extends beyond EOD, truncated [ 542.342093][T22665] loop2: p3 size 16776960 extends beyond EOD, truncated [ 542.370365][T22665] loop2: p4 size 3599499392 extends beyond EOD, truncated [ 542.400409][T22678] SELinux: syz.0.6515 (22678) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 542.679536][T22690] lo speed is unknown, defaulting to 1000 [ 542.871521][T22708] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 542.956310][T22706] loop6: detected capacity change from 0 to 8192 [ 542.970591][T22706] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 543.086543][T22725] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 543.118273][T22729] SELinux: syz.6.6539 (22729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 543.220499][T22734] bridge0: port 9(batadv7) entered blocking state [ 543.227177][T22734] bridge0: port 9(batadv7) entered disabled state [ 543.233735][T22734] batadv7: entered allmulticast mode [ 543.240143][T22734] batadv7: entered promiscuous mode [ 543.471967][T22747] bridge0: port 10(batadv8) entered blocking state [ 543.478947][T22747] bridge0: port 10(batadv8) entered disabled state [ 543.486013][T22747] batadv8: entered allmulticast mode [ 543.491806][T22747] batadv8: entered promiscuous mode [ 543.594582][T22751] loop3: detected capacity change from 0 to 8192 [ 543.601828][T22751] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 543.617795][T22761] bridge0: port 11(batadv9) entered blocking state [ 543.624682][T22761] bridge0: port 11(batadv9) entered disabled state [ 543.633264][T22761] batadv9: entered allmulticast mode [ 543.639662][T22761] batadv9: entered promiscuous mode [ 543.726057][T18995] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 543.735390][T18995] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 543.854730][T22781] SELinux: syz.0.6563 (22781) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 543.938111][T22790] loop3: detected capacity change from 0 to 128 [ 543.964899][T22790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 543.987626][T18985] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 543.997086][T18985] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 544.029189][T22796] netlink: 'syz.1.6568': attribute type 4 has an invalid length. [ 544.044967][T22795] loop3: detected capacity change from 0 to 2048 [ 544.061609][T22795] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 544.115939][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 544.115956][ T29] audit: type=1326 audit(1738030573.439:25914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.117332][T18985] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 544.122345][ T29] audit: type=1326 audit(1738030573.439:25915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.145945][T18985] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 544.211897][ T29] audit: type=1326 audit(1738030573.499:25916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.215444][T22804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.235884][ T29] audit: type=1326 audit(1738030573.499:25917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.268140][ T29] audit: type=1326 audit(1738030573.499:25918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.273050][T22804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.292150][ T29] audit: type=1326 audit(1738030573.499:25919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.324168][ T29] audit: type=1326 audit(1738030573.499:25920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.348300][ T29] audit: type=1326 audit(1738030573.499:25921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.352449][T22804] loop3: detected capacity change from 0 to 2048 [ 544.371992][ T29] audit: type=1326 audit(1738030573.499:25922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.372030][ T29] audit: type=1326 audit(1738030573.499:25923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22801 comm="syz.3.6572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 544.447107][T22808] SELinux: syz.6.6575 (22808) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 544.477092][T22804] loop3: p1 < > p4 [ 544.481678][T22804] loop3: p4 size 8388608 extends beyond EOD, truncated [ 544.544917][T22816] team0 (unregistering): Port device team_slave_0 removed [ 544.556512][T22816] team0 (unregistering): Port device team_slave_1 removed [ 544.574131][T22818] __nla_validate_parse: 19 callbacks suppressed [ 544.574150][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6579'. [ 544.590236][T22818] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 544.862279][T22843] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 545.114648][T22858] loop3: detected capacity change from 0 to 8192 [ 545.124959][T22858] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 545.193544][T22862] lo speed is unknown, defaulting to 1000 [ 545.372246][T22868] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 545.382046][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6603'. [ 545.454566][T22875] SELinux: syz.0.6606 (22875) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 545.547064][T22879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6608'. [ 545.580414][T22879] bridge0: port 12(batadv10) entered blocking state [ 545.587528][T22879] bridge0: port 12(batadv10) entered disabled state [ 545.612758][T22879] batadv10: entered allmulticast mode [ 545.628952][T22879] batadv10: entered promiscuous mode [ 545.648542][T22856] loop6: detected capacity change from 0 to 8192 [ 545.665823][T22881] loop3: detected capacity change from 0 to 8192 [ 545.672657][T22881] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 545.726482][T22856] loop6: p2 p3 p4 [ 545.735179][T22856] loop6: p2 size 130943 extends beyond EOD, truncated [ 545.774232][T22890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.806227][T22856] loop6: p3 size 16776960 extends beyond EOD, truncated [ 545.815288][T22856] loop6: p4 size 3599499392 extends beyond EOD, truncated [ 545.823377][T22890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.857792][T22894] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 545.987057][T22902] loop3: detected capacity change from 0 to 1024 [ 546.022522][T22902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.045222][T22902] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.068968][T22902] FAULT_INJECTION: forcing a failure. [ 546.068968][T22902] name fail_futex, interval 1, probability 0, space 0, times 1 [ 546.081945][T22902] CPU: 1 UID: 0 PID: 22902 Comm: syz.3.6618 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 546.081976][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 546.081990][T22902] Call Trace: [ 546.081997][T22902] [ 546.082005][T22902] dump_stack_lvl+0xf2/0x150 [ 546.082061][T22902] dump_stack+0x15/0x1a [ 546.082163][T22902] should_fail_ex+0x24a/0x260 [ 546.082205][T22902] should_fail+0xb/0x10 [ 546.082289][T22902] get_futex_key+0x135/0x740 [ 546.082320][T22902] futex_wait_setup+0x4c/0x1f0 [ 546.082399][T22902] futex_wait_requeue_pi+0x1bb/0x6d0 [ 546.082441][T22902] ? __pfx_futex_wake_mark+0x10/0x10 [ 546.082495][T22902] do_futex+0x146/0x370 [ 546.082527][T22902] __se_sys_futex+0x25d/0x3a0 [ 546.082634][T22902] __x64_sys_futex+0x78/0x90 [ 546.082700][T22902] x64_sys_call+0x2d6a/0x2dc0 [ 546.082787][T22902] do_syscall_64+0xc9/0x1c0 [ 546.082819][T22902] ? clear_bhb_loop+0x55/0xb0 [ 546.082884][T22902] ? clear_bhb_loop+0x55/0xb0 [ 546.082917][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.082947][T22902] RIP: 0033:0x7f875adfcd29 [ 546.082966][T22902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.082991][T22902] RSP: 002b:00007f8759461038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 546.083014][T22902] RAX: ffffffffffffffda RBX: 00007f875b015fa0 RCX: 00007f875adfcd29 [ 546.083029][T22902] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000000002000cffc [ 546.083043][T22902] RBP: 00007f8759461090 R08: 0000000020048000 R09: 0000000000000000 [ 546.083058][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.083072][T22902] R13: 0000000000000000 R14: 00007f875b015fa0 R15: 00007ffd4e310698 [ 546.083096][T22902] [ 546.287231][T18985] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 546.296683][T18985] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 546.307064][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.593024][T22920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6625'. [ 546.606646][T22920] bridge0: port 13(batadv11) entered blocking state [ 546.613372][T22920] bridge0: port 13(batadv11) entered disabled state [ 546.620217][T22920] batadv11: entered allmulticast mode [ 546.626358][T22920] batadv11: entered promiscuous mode [ 546.650353][T22922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6626'. [ 546.714549][T22926] lo speed is unknown, defaulting to 1000 [ 546.719879][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6629'. [ 546.729920][T22928] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 546.804114][T22934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6631'. [ 546.822555][T22934] bridge0: port 6(batadv4) entered blocking state [ 546.829544][T22934] bridge0: port 6(batadv4) entered disabled state [ 546.836987][T22934] batadv4: entered allmulticast mode [ 546.845651][T22934] batadv4: entered promiscuous mode [ 546.911709][T22939] loop2: detected capacity change from 0 to 8192 [ 546.918548][T22939] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 546.964886][T22944] sd 0:0:1:0: device reset [ 546.979229][T22944] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.030746][T22944] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.067062][T22948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6637'. [ 547.084142][T22951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6638'. [ 547.118462][T22948] bridge0: port 7(batadv5) entered blocking state [ 547.122748][T18991] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled [ 547.124993][T22948] bridge0: port 7(batadv5) entered disabled state [ 547.134305][T18991] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled [ 547.141276][T22948] batadv5: entered allmulticast mode [ 547.178105][T22948] batadv5: entered promiscuous mode [ 547.191946][T22944] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.210061][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6640'. [ 547.228338][T22944] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.325805][T18991] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 547.335094][T18991] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 547.364224][T22944] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.376913][T22944] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.390897][T22944] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.403018][T22944] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.613197][T18991] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 547.623225][T18991] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 547.660571][T22989] lo speed is unknown, defaulting to 1000 [ 547.746203][T23000] sd 0:0:1:0: device reset [ 547.777945][T23000] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.842555][T23000] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.920680][T23000] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.052090][T23000] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.088681][T23011] bridge0: port 14(batadv12) entered blocking state [ 548.095655][T23011] bridge0: port 14(batadv12) entered disabled state [ 548.113101][T23011] batadv12: entered allmulticast mode [ 548.121718][T23011] batadv12: entered promiscuous mode [ 548.171087][T23000] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.189693][T23000] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.227710][T23000] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.252581][T23000] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.282116][T23017] lo speed is unknown, defaulting to 1000 [ 548.359129][T23025] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 548.594814][T18987] batman_adv: batadv12: No IGMP Querier present - multicast optimizations disabled [ 548.604383][T18987] batman_adv: batadv12: No MLD Querier present - multicast optimizations disabled [ 548.639718][T23048] lo speed is unknown, defaulting to 1000 [ 548.739506][T23056] bridge0: port 4(batadv2) entered blocking state [ 548.746230][T23056] bridge0: port 4(batadv2) entered disabled state [ 548.773940][T23056] batadv2: entered allmulticast mode [ 548.781138][T23056] batadv2: entered promiscuous mode [ 548.900419][T23066] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.987200][T23070] loop6: detected capacity change from 0 to 8192 [ 549.004874][T23070] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 549.137462][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 549.137480][ T29] audit: type=1400 audit(1738030578.459:26499): avc: denied { append } for pid=23078 comm="syz.6.6693" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 549.190181][T23079] loop6: detected capacity change from 0 to 2048 [ 549.210631][T23079] ext4: Unknown parameter 'subj_user' [ 549.217985][ T29] audit: type=1326 audit(1738030578.459:26500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.241813][ T29] audit: type=1326 audit(1738030578.459:26501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.265495][ T29] audit: type=1326 audit(1738030578.459:26502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.289359][ T29] audit: type=1326 audit(1738030578.459:26503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.313001][ T29] audit: type=1326 audit(1738030578.459:26504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.336677][ T29] audit: type=1326 audit(1738030578.459:26505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.344201][T18989] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 549.360342][ T29] audit: type=1326 audit(1738030578.489:26507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23080 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcb48b6f5e5 code=0x7ffc0000 [ 549.369645][T18989] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 549.393224][ T29] audit: type=1326 audit(1738030578.489:26506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.417025][T23079] SELinux: Context is not valid (left unmapped). [ 549.426439][ T29] audit: type=1326 audit(1738030578.489:26508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23075 comm="syz.1.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb48b3cd29 code=0x7ffc0000 [ 549.549295][T23089] 9pnet: p9_errstr2errno: server reported unknown error ٫á]>.1S@|iuYeft%^ [ 549.553430][T23090] bridge0: port 15(batadv13) entered blocking state [ 549.567437][T23090] bridge0: port 15(batadv13) entered disabled state [ 549.592997][T23090] batadv13: entered allmulticast mode [ 549.604647][T23090] batadv13: entered promiscuous mode [ 549.741415][T23102] SELinux: syz.2.6702 (23102) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 550.044929][T23104] loop6: detected capacity change from 0 to 8192 [ 550.109850][T23104] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 550.123629][T23117] __nla_validate_parse: 13 callbacks suppressed [ 550.123647][T23117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6708'. [ 550.193714][T18989] batman_adv: batadv13: No IGMP Querier present - multicast optimizations disabled [ 550.203121][T18989] batman_adv: batadv13: No MLD Querier present - multicast optimizations disabled [ 550.273271][T23119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6709'. [ 550.396187][T23128] loop6: detected capacity change from 0 to 8192 [ 550.404486][T23128] vfat: Unknown parameter '' [ 550.422241][T23133] sd 0:0:1:0: device reset [ 550.436396][T23133] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.539365][T23133] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.584658][T23140] loop6: detected capacity change from 0 to 256 [ 550.594672][T23140] msdos: Bad value for 'gid' [ 550.594857][T23133] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.599375][T23140] msdos: Bad value for 'gid' [ 550.657848][T23133] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.714924][T23133] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.728206][T23133] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.740231][T23133] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.753002][T23133] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.797440][T23143] loop3: detected capacity change from 0 to 512 [ 550.810613][T23143] loop3: detected capacity change from 0 to 128 [ 550.844600][T23143] FAT-fs (loop3): FAT read failed (blocknr 234) [ 550.852293][T23143] FAT-fs (loop3): FAT read failed (blocknr 234) [ 551.152621][T23164] sd 0:0:1:0: device reset [ 551.160531][T23164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.198971][T23164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.250386][T23164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.299603][T23164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.355730][T23164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.368201][T23164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.380703][T23164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.396983][T23164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.582304][T23182] lo speed is unknown, defaulting to 1000 [ 551.592940][T23178] lo speed is unknown, defaulting to 1000 [ 551.851143][T23193] SELinux: syz.0.6742 (23193) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 551.902111][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6743'. [ 551.931197][T23198] sd 0:0:1:0: device reset [ 551.937991][T23198] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.025496][T23198] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.087398][T23198] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.096541][T23206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6747'. [ 552.127092][T23206] bridge0: port 10(batadv8) entered blocking state [ 552.133694][T23206] bridge0: port 10(batadv8) entered disabled state [ 552.141327][T23206] batadv8: entered allmulticast mode [ 552.147334][T23206] batadv8: entered promiscuous mode [ 552.167061][T23198] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.173051][T23208] loop3: detected capacity change from 0 to 2048 [ 552.206067][T23208] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 552.237226][T23213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6751'. [ 552.357556][T23220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.369150][T23218] lo speed is unknown, defaulting to 1000 [ 552.375042][T23220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.404970][T23220] loop2: detected capacity change from 0 to 2048 [ 552.451863][T23222] lo speed is unknown, defaulting to 1000 [ 552.466140][T23220] loop2: p1 < > p4 [ 552.473333][T23220] loop2: p4 size 8388608 extends beyond EOD, truncated [ 552.604839][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6756'. [ 552.638323][T18987] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 552.647796][T18987] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 552.778477][T23240] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6762'. [ 553.060660][ T3371] udevd[3371]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 553.197751][T23251] lo speed is unknown, defaulting to 1000 [ 553.304911][T23256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6769'. [ 553.317939][T23256] bridge0: port 8(batadv6) entered blocking state [ 553.324414][T23256] bridge0: port 8(batadv6) entered disabled state [ 553.331034][T23256] batadv6: entered allmulticast mode [ 553.337050][T23256] batadv6: entered promiscuous mode [ 553.415126][T23260] loop2: detected capacity change from 0 to 512 [ 553.430278][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6771'. [ 553.566347][T23267] loop2: detected capacity change from 0 to 512 [ 553.609606][T23267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 553.622517][T23267] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.658885][T23274] lo speed is unknown, defaulting to 1000 [ 553.839185][T18990] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 553.848679][T18990] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 554.051007][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6782'. [ 554.160729][T23292] bridge0: port 11(batadv9) entered blocking state [ 554.167361][T23292] bridge0: port 11(batadv9) entered disabled state [ 554.174027][T23292] batadv9: entered allmulticast mode [ 554.180047][T23292] batadv9: entered promiscuous mode [ 554.202807][ T29] kauditd_printk_skb: 1249 callbacks suppressed [ 554.202821][ T29] audit: type=1326 audit(1738030583.519:27756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.233120][ T29] audit: type=1326 audit(1738030583.519:27757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.280249][ T29] audit: type=1326 audit(1738030583.519:27758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.304153][ T29] audit: type=1326 audit(1738030583.519:27759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.328343][ T29] audit: type=1326 audit(1738030583.519:27760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.336137][T23299] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 554.352168][ T29] audit: type=1326 audit(1738030583.519:27761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.382624][ T29] audit: type=1326 audit(1738030583.519:27762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.406550][ T29] audit: type=1326 audit(1738030583.519:27763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.430281][ T29] audit: type=1326 audit(1738030583.519:27764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.454223][ T29] audit: type=1326 audit(1738030583.549:27765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23296 comm="syz.3.6785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f875adfcd29 code=0x7ffc0000 [ 554.528184][T20584] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 554.560818][T23309] loop6: detected capacity change from 0 to 8192 [ 554.571353][T23311] SELinux: syz.3.6792 (23311) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 554.589121][T23309] vfat: Unknown parameter '' [ 554.678420][T18990] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 554.687761][T18990] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 554.771537][T23322] lo speed is unknown, defaulting to 1000 [ 554.853334][T23324] lo speed is unknown, defaulting to 1000 [ 554.947774][T23329] loop6: detected capacity change from 0 to 512 [ 554.974547][T23329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.991810][T23329] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.087489][T20742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.215230][T23341] loop3: detected capacity change from 0 to 512 [ 555.244694][T23341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 555.257570][T23341] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.402089][T23198] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.475108][T23198] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.570167][T23198] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.613783][T23358] lo speed is unknown, defaulting to 1000 [ 555.698097][T23198] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.012215][T23369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6807'. [ 556.116327][T20130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 556.140799][T23372] FAULT_INJECTION: forcing a failure. [ 556.140799][T23372] name failslab, interval 1, probability 0, space 0, times 0 [ 556.152743][T23374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6811'. [ 556.153692][T23372] CPU: 1 UID: 0 PID: 23372 Comm: syz.1.6809 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 556.153723][T23372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 556.153739][T23372] Call Trace: [ 556.153747][T23372] [ 556.153756][T23372] dump_stack_lvl+0xf2/0x150 [ 556.153791][T23372] dump_stack+0x15/0x1a [ 556.153848][T23372] should_fail_ex+0x24a/0x260 [ 556.153889][T23372] ? x509_cert_parse+0xa9/0x440 [ 556.153922][T23372] should_failslab+0x8f/0xb0 [ 556.153953][T23372] __kmalloc_cache_noprof+0x4e/0x320 [ 556.154042][T23372] x509_cert_parse+0xa9/0x440 [ 556.154074][T23372] x509_key_preparse+0x3c/0x400 [ 556.154137][T23372] asymmetric_key_preparse+0x6b/0xc0 [ 556.154206][T23372] __key_create_or_update+0x29f/0x750 [ 556.154259][T23372] key_create_or_update+0x42/0x60 [ 556.154302][T23372] __se_sys_add_key+0x280/0x320 [ 556.154342][T23372] __x64_sys_add_key+0x67/0x80 [ 556.154371][T23372] x64_sys_call+0x2964/0x2dc0 [ 556.154472][T23372] do_syscall_64+0xc9/0x1c0 [ 556.154502][T23372] ? clear_bhb_loop+0x55/0xb0 [ 556.154536][T23372] ? clear_bhb_loop+0x55/0xb0 [ 556.154569][T23372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.154602][T23372] RIP: 0033:0x7fcb48b3cd29 [ 556.154702][T23372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.154725][T23372] RSP: 002b:00007fcb471a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 556.154749][T23372] RAX: ffffffffffffffda RBX: 00007fcb48d55fa0 RCX: 00007fcb48b3cd29 [ 556.154765][T23372] RDX: 00000000200007c0 RSI: 0000000000000000 RDI: 0000000020000480 [ 556.154780][T23372] RBP: 00007fcb471a1090 R08: 000000001b63c40f R09: 0000000000000000 [ 556.154795][T23372] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 556.154810][T23372] R13: 0000000000000000 R14: 00007fcb48d55fa0 R15: 00007ffc135e8fd8 [ 556.154850][T23372] [ 556.449709][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6816'. [ 556.495878][T23398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6818'. [ 556.698827][T23384] lo speed is unknown, defaulting to 1000 [ 556.719451][T23405] FAULT_INJECTION: forcing a failure. [ 556.719451][T23405] name failslab, interval 1, probability 0, space 0, times 0 [ 556.732413][T23405] CPU: 1 UID: 0 PID: 23405 Comm: syz.3.6820 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 556.732442][T23405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 556.732458][T23405] Call Trace: [ 556.732466][T23405] [ 556.732533][T23405] dump_stack_lvl+0xf2/0x150 [ 556.732566][T23405] dump_stack+0x15/0x1a [ 556.732591][T23405] should_fail_ex+0x24a/0x260 [ 556.732641][T23405] should_failslab+0x8f/0xb0 [ 556.732728][T23405] kmem_cache_alloc_node_noprof+0x59/0x320 [ 556.732766][T23405] ? __alloc_skb+0x10b/0x310 [ 556.732790][T23405] __alloc_skb+0x10b/0x310 [ 556.732810][T23405] ? audit_log_start+0x34c/0x6b0 [ 556.732894][T23405] audit_log_start+0x368/0x6b0 [ 556.732933][T23405] audit_seccomp+0x4b/0x130 [ 556.732966][T23405] __seccomp_filter+0x6fa/0x1180 [ 556.733045][T23405] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 556.733104][T23405] ? vfs_write+0x644/0x920 [ 556.733130][T23405] ? __schedule+0x75b/0x990 [ 556.733177][T23405] __secure_computing+0x9f/0x1c0 [ 556.733220][T23405] syscall_trace_enter+0xd1/0x1f0 [ 556.733252][T23405] do_syscall_64+0xaa/0x1c0 [ 556.733302][T23405] ? clear_bhb_loop+0x55/0xb0 [ 556.733337][T23405] ? clear_bhb_loop+0x55/0xb0 [ 556.733415][T23405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.733449][T23405] RIP: 0033:0x7f875adfcd29 [ 556.733467][T23405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.733561][T23405] RSP: 002b:00007f8759461038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 556.733583][T23405] RAX: ffffffffffffffda RBX: 00007f875b015fa0 RCX: 00007f875adfcd29 [ 556.733661][T23405] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 556.733694][T23405] RBP: 00007f8759461090 R08: 0000000000000000 R09: 0000000000000000 [ 556.733709][T23405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.733724][T23405] R13: 0000000000000000 R14: 00007f875b015fa0 R15: 00007ffd4e310698 [ 556.733806][T23405] [ 556.812236][T23410] loop3: detected capacity change from 0 to 512 [ 557.201697][T23424] lo speed is unknown, defaulting to 1000 [ 557.258971][T23436] lo speed is unknown, defaulting to 1000 [ 557.282360][T23440] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 557.412021][T23452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6833'. [ 557.443065][T23452] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 557.632313][T23456] sd 0:0:1:0: device reset [ 557.654897][T23456] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.671166][T23467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6839'. [ 557.718404][T23456] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.835759][T23456] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.855658][T23474] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 557.863647][ T5931] IPVS: starting estimator thread 0... [ 557.943760][T23456] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.989786][T23478] IPVS: using max 2448 ests per chain, 122400 per kthread [ 558.024257][T23456] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.037236][T23456] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.048893][T23456] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.069002][T23456] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.092336][T23489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6847'. [ 558.211722][T23493] lo speed is unknown, defaulting to 1000 [ 558.252595][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6849'. [ 558.264870][T23496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 558.339080][T23500] SELinux: syz.0.6851 (23500) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 558.383220][T23505] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 558.399354][T23503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6852'. [ 558.452248][T23509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6855'. [ 558.492299][T23515] sd 0:0:1:0: device reset [ 558.494385][T23509] bridge0: port 16(batadv14) entered blocking state [ 558.503529][T23509] bridge0: port 16(batadv14) entered disabled state [ 558.527420][T23509] batadv14: entered allmulticast mode [ 558.534781][T23509] batadv14: entered promiscuous mode [ 558.546592][T23515] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.597244][T23519] lo speed is unknown, defaulting to 1000 [ 558.610024][T23515] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.681503][T23515] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.723812][T23515] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.797041][T23515] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.810070][T23515] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.837086][T23515] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.870053][T23515] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.893657][T23534] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 559.004397][T18993] batman_adv: batadv14: No IGMP Querier present - multicast optimizations disabled [ 559.013948][T18993] batman_adv: batadv14: No MLD Querier present - multicast optimizations disabled [ 559.186760][T23562] 9pnet: p9_errstr2errno: server reported unknown error @΂(er [ 559.237475][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 559.237490][ T29] audit: type=1400 audit(1738030588.559:28136): avc: denied { ioctl } for pid=23561 comm="syz.1.6877" path="mnt:[4026533466]" dev="nsfs" ino=4026533466 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 559.310006][T23567] bridge0: port 5(batadv3) entered blocking state [ 559.316571][T23567] bridge0: port 5(batadv3) entered disabled state [ 559.323391][T23567] batadv3: entered allmulticast mode [ 559.329868][T23567] batadv3: entered promiscuous mode [ 559.335698][ T29] audit: type=1326 audit(1738030588.649:28137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23560 comm="syz.6.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.365080][ T29] audit: type=1326 audit(1738030588.679:28138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23557 comm="syz.6.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2bb9b8f29 code=0x7ffc0000 [ 559.388718][ T29] audit: type=1326 audit(1738030588.679:28139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23557 comm="syz.6.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.412423][ T29] audit: type=1326 audit(1738030588.679:28140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23557 comm="syz.6.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.533048][T23582] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 559.548192][T23584] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 559.579304][ T29] audit: type=1326 audit(1738030588.899:28141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23585 comm="syz.6.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.603223][ T29] audit: type=1326 audit(1738030588.899:28142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23585 comm="syz.6.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.627642][ T29] audit: type=1326 audit(1738030588.899:28143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23585 comm="syz.6.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.651500][ T29] audit: type=1326 audit(1738030588.899:28144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23585 comm="syz.6.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.675662][ T29] audit: type=1326 audit(1738030588.899:28145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23585 comm="syz.6.6886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bba1cd29 code=0x7ffc0000 [ 559.817938][T18989] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 559.827326][T18989] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 559.856930][T23596] bridge0: port 17(batadv15) entered blocking state [ 559.862253][T23594] loop6: detected capacity change from 0 to 2048 [ 559.863652][T23596] bridge0: port 17(batadv15) entered disabled state [ 559.877449][T23596] batadv15: entered allmulticast mode [ 559.883419][T23596] batadv15: entered promiscuous mode [ 559.915796][T23594] loop6: p3 p4 < > [ 559.956519][T23602] bridge0: port 18(batadv16) entered blocking state [ 559.963211][T23602] bridge0: port 18(batadv16) entered disabled state [ 559.970862][T23602] batadv16: entered allmulticast mode [ 559.977132][T23602] batadv16: entered promiscuous mode [ 560.021615][T23604] lo speed is unknown, defaulting to 1000 [ 560.358194][T23614] FAULT_INJECTION: forcing a failure. [ 560.358194][T23614] name failslab, interval 1, probability 0, space 0, times 0 [ 560.371196][T23614] CPU: 0 UID: 0 PID: 23614 Comm: syz.1.6898 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 560.371226][T23614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 560.371240][T23614] Call Trace: [ 560.371248][T23614] [ 560.371275][T23614] dump_stack_lvl+0xf2/0x150 [ 560.371307][T23614] dump_stack+0x15/0x1a [ 560.371331][T23614] should_fail_ex+0x24a/0x260 [ 560.371401][T23614] should_failslab+0x8f/0xb0 [ 560.371430][T23614] kmem_cache_alloc_noprof+0x52/0x320 [ 560.371467][T23614] ? skb_clone+0x154/0x1f0 [ 560.371563][T23614] skb_clone+0x154/0x1f0 [ 560.371595][T23614] __netlink_deliver_tap+0x2bd/0x4f0 [ 560.371640][T23614] netlink_unicast+0x64a/0x670 [ 560.371720][T23614] netlink_sendmsg+0x5cc/0x6e0 [ 560.371762][T23614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 560.371872][T23614] __sock_sendmsg+0x140/0x180 [ 560.371895][T23614] ____sys_sendmsg+0x312/0x410 [ 560.372042][T23614] __sys_sendmsg+0x19d/0x230 [ 560.372163][T23614] __x64_sys_sendmsg+0x46/0x50 [ 560.372247][T23614] x64_sys_call+0x2734/0x2dc0 [ 560.372415][T23614] do_syscall_64+0xc9/0x1c0 [ 560.372442][T23614] ? clear_bhb_loop+0x55/0xb0 [ 560.372516][T23614] ? clear_bhb_loop+0x55/0xb0 [ 560.372546][T23614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.372632][T23614] RIP: 0033:0x7fcb48b3cd29 [ 560.372650][T23614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.372725][T23614] RSP: 002b:00007fcb471a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.372747][T23614] RAX: ffffffffffffffda RBX: 00007fcb48d55fa0 RCX: 00007fcb48b3cd29 [ 560.372781][T23614] RDX: 0000000024008040 RSI: 0000000020000080 RDI: 0000000000000003 [ 560.372795][T23614] RBP: 00007fcb471a1090 R08: 0000000000000000 R09: 0000000000000000 [ 560.372808][T23614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.372822][T23614] R13: 0000000000000000 R14: 00007fcb48d55fa0 R15: 00007ffc135e8fd8 [ 560.372844][T23614] [ 560.374317][T18993] batman_adv: batadv15: No IGMP Querier present - multicast optimizations disabled [ 560.561240][T23624] sd 0:0:1:0: device reset [ 560.562595][T18993] batman_adv: batadv15: No MLD Querier present - multicast optimizations disabled [ 560.598449][T23624] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.617942][T18993] batman_adv: batadv16: No IGMP Querier present - multicast optimizations disabled [ 560.627358][T18993] batman_adv: batadv16: No MLD Querier present - multicast optimizations disabled [ 560.649146][T23624] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.738704][T23624] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.788412][T23632] bridge0: port 9(batadv7) entered blocking state [ 560.794972][T23632] bridge0: port 9(batadv7) entered disabled state [ 560.802989][T23632] batadv7: entered allmulticast mode [ 560.825219][T23632] batadv7: entered promiscuous mode [ 560.836525][T23624] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.894179][T23636] pim6reg: entered allmulticast mode [ 560.912689][T23624] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.927840][T23624] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.936452][T23636] pim6reg: left allmulticast mode [ 560.948487][T23624] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.957257][T23640] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 560.968559][T23624] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.024237][T23642] bridge0: port 19(batadv17) entered blocking state [ 561.031060][T23642] bridge0: port 19(batadv17) entered disabled state [ 561.072763][T23642] batadv17: entered allmulticast mode [ 561.079388][T23642] batadv17: entered promiscuous mode [ 561.148406][T23655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.158806][T23655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.294434][T18990] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 561.303697][T18990] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 561.525423][T18989] batman_adv: batadv17: No IGMP Querier present - multicast optimizations disabled [ 561.534856][T18989] batman_adv: batadv17: No MLD Querier present - multicast optimizations disabled [ 561.757161][T23662] __nla_validate_parse: 11 callbacks suppressed [ 561.757189][T23662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6919'. [ 561.780420][T23662] bridge0: port 12(batadv10) entered blocking state [ 561.787258][T23662] bridge0: port 12(batadv10) entered disabled state [ 561.805103][T23662] batadv10: entered allmulticast mode [ 561.812404][T23662] batadv10: entered promiscuous mode [ 561.858054][T23667] sd 0:0:1:0: device reset [ 561.868728][T23667] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.886452][T23670] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 561.911097][T23667] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.923128][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6924'. [ 561.938203][T23672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 562.007885][T23667] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.081871][T23686] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 562.086683][T23667] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.147584][T23690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6932'. [ 562.177297][T23667] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.202253][T23667] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.227586][T23690] bridge0: port 10(batadv8) entered blocking state [ 562.234231][T23690] bridge0: port 10(batadv8) entered disabled state [ 562.245563][T23690] batadv8: entered allmulticast mode [ 562.259255][T23690] batadv8: entered promiscuous mode [ 562.278199][T23667] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.289631][T18989] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 562.292051][T23667] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.299012][T18989] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 562.450532][T23703] lo speed is unknown, defaulting to 1000 [ 562.514520][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 562.541789][T23709] bridge0: port 20(batadv18) entered blocking state [ 562.548683][T23709] bridge0: port 20(batadv18) entered disabled state [ 562.568922][T23709] batadv18: entered allmulticast mode [ 562.574903][T23709] batadv18: entered promiscuous mode [ 562.725507][T18985] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 562.736512][T18985] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 563.037156][T18993] batman_adv: batadv18: No IGMP Querier present - multicast optimizations disabled [ 563.046522][T18993] batman_adv: batadv18: No MLD Querier present - multicast optimizations disabled [ 563.187655][T23719] bridge0: port 14(batadv12) entered blocking state [ 563.194341][T23719] bridge0: port 14(batadv12) entered disabled state [ 563.202552][T23719] batadv12: entered allmulticast mode [ 563.208539][T23719] batadv12: entered promiscuous mode [ 563.290195][T23721] loop2: detected capacity change from 0 to 8192 [ 563.297149][T23721] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 563.480340][T23736] lo speed is unknown, defaulting to 1000 [ 563.499897][T23738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6952'. [ 563.687119][T18995] batman_adv: batadv12: No IGMP Querier present - multicast optimizations disabled [ 563.696528][T18995] batman_adv: batadv12: No MLD Querier present - multicast optimizations disabled [ 563.778574][T23750] loop6: detected capacity change from 0 to 8192 [ 563.794773][T23750] vfat: Unknown parameter '18446744073709551615m Qs3/x ~?xGT' [ 563.936762][T23753] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6958'. [ 563.946048][T23753] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 564.251588][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 564.251602][ T29] audit: type=1326 audit(1738030593.569:28834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13bf413ce7 code=0x7ffc0000 [ 564.281872][ T29] audit: type=1326 audit(1738030593.569:28835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13bf3b8f29 code=0x7ffc0000 [ 564.305419][ T29] audit: type=1326 audit(1738030593.569:28836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 564.329081][ T29] audit: type=1326 audit(1738030593.579:28837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13bf413ce7 code=0x7ffc0000 [ 564.352665][ T29] audit: type=1326 audit(1738030593.579:28838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13bf3b8f29 code=0x7ffc0000 [ 564.376468][ T29] audit: type=1326 audit(1738030593.579:28839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 564.400107][ T29] audit: type=1326 audit(1738030593.579:28840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13bf413ce7 code=0x7ffc0000 [ 564.423945][ T29] audit: type=1326 audit(1738030593.579:28841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f13bf3b8f29 code=0x7ffc0000 [ 564.447798][ T29] audit: type=1326 audit(1738030593.579:28842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f13bf41cd29 code=0x7ffc0000 [ 564.472608][ T29] audit: type=1326 audit(1738030593.599:28843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23741 comm="syz.2.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f13bf413ce7 code=0x7ffc0000 [ 564.694664][T23777] sd 0:0:1:0: device reset [ 564.702463][T23777] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.753529][T23779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.773673][T23777] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.783887][T23779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.811146][T23779] loop6: detected capacity change from 0 to 2048 [ 564.822356][T23777] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.869370][T23777] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.871831][T23779] loop6: p1 < > p4 [ 564.884532][T23779] loop6: p4 size 8388608 extends beyond EOD, truncated [ 564.949876][T23777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.961968][T23777] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.975222][T23777] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.990054][T23777] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.061151][T23783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6972'. [ 565.223948][T23789] loop2: detected capacity change from 0 to 8192 [ 565.230923][T23789] vfat: Unknown parameter '' [ 565.272666][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6976'. [ 565.450834][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6980'. [ 565.460323][T23806] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 565.640909][T23817] bridge0: port 13(batadv11) entered blocking state [ 565.647724][T23817] bridge0: port 13(batadv11) entered disabled state [ 565.654577][T23817] batadv11: entered allmulticast mode [ 565.676239][T23817] batadv11: entered promiscuous mode [ 565.773215][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6991'. [ 565.847751][T23835] 9pnet: p9_errstr2errno: server reported unknown error @΂(er [ 565.866980][T23837] bridge0: port 14(batadv12) entered blocking state [ 565.873746][T23837] bridge0: port 14(batadv12) entered disabled state [ 565.880939][T23837] batadv12: entered allmulticast mode [ 565.887709][T23837] batadv12: entered promiscuous mode [ 566.023070][T23848] loop6: detected capacity change from 0 to 8192 [ 566.029892][T23848] vfat: Unknown parameter '' [ 566.170464][T18989] batman_adv: batadv11: No IGMP Querier present - multicast optimizations disabled [ 566.179876][T18989] batman_adv: batadv11: No MLD Querier present - multicast optimizations disabled [ 566.228912][T23861] FAULT_INJECTION: forcing a failure. [ 566.228912][T23861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.242327][T23861] CPU: 1 UID: 0 PID: 23861 Comm: syz.6.7004 Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 566.242351][T23861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.242440][T23861] Call Trace: [ 566.242447][T23861] [ 566.242463][T23861] dump_stack_lvl+0xf2/0x150 [ 566.242536][T23861] dump_stack+0x15/0x1a [ 566.242558][T23861] should_fail_ex+0x24a/0x260 [ 566.242605][T23861] should_fail+0xb/0x10 [ 566.242645][T23861] should_fail_usercopy+0x1a/0x20 [ 566.242685][T23861] _copy_from_user+0x1c/0xa0 [ 566.242712][T23861] move_addr_to_kernel+0x82/0x120 [ 566.242748][T23861] __sys_sendto+0x12e/0x230 [ 566.242870][T23861] __x64_sys_sendto+0x78/0x90 [ 566.242897][T23861] x64_sys_call+0x29fa/0x2dc0 [ 566.242922][T23861] do_syscall_64+0xc9/0x1c0 [ 566.242949][T23861] ? clear_bhb_loop+0x55/0xb0 [ 566.242983][T23861] ? clear_bhb_loop+0x55/0xb0 [ 566.243046][T23861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.243071][T23861] RIP: 0033:0x7fd2bba1cd29 [ 566.243087][T23861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.243109][T23861] RSP: 002b:00007fd2ba081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 566.243132][T23861] RAX: ffffffffffffffda RBX: 00007fd2bbc35fa0 RCX: 00007fd2bba1cd29 [ 566.243146][T23861] RDX: 000000000000002a RSI: 0000000020000100 RDI: 0000000000000006 [ 566.243172][T23861] RBP: 00007fd2ba081090 R08: 0000000020000200 R09: 0000000000000014 [ 566.243183][T23861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.243194][T23861] R13: 0000000000000000 R14: 00007fd2bbc35fa0 R15: 00007ffc38f03a88 [ 566.243214][T23861] [ 566.456827][T18990] batman_adv: batadv12: No IGMP Querier present - multicast optimizations disabled [ 566.466453][T18990] batman_adv: batadv12: No MLD Querier present - multicast optimizations disabled [ 566.504935][T23871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.516970][T23871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.531577][T23873] 9pnet: p9_errstr2errno: server reported unknown error @΂( [ 566.563332][T23871] loop3: detected capacity change from 0 to 2048 [ 566.585436][T23877] lo speed is unknown, defaulting to 1000 [ 566.615812][T23871] loop3: p1 < > p4 [ 566.625514][T23871] loop3: p4 size 8388608 extends beyond EOD, truncated [ 566.656317][ T4942] ================================================================== [ 566.664458][ T4942] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 566.671619][ T4942] [ 566.673950][ T4942] read to 0xffff8881204689a8 of 4 bytes by task 3371 on cpu 1: [ 566.681508][ T4942] generic_fillattr+0x16f/0x330 [ 566.686393][ T4942] shmem_getattr+0x17b/0x200 [ 566.691008][ T4942] vfs_fstat+0x19d/0x200 [ 566.695266][ T4942] __se_sys_newfstatat+0xb5/0x300 [ 566.700337][ T4942] __x64_sys_newfstatat+0x55/0x70 [ 566.705410][ T4942] x64_sys_call+0x236d/0x2dc0 [ 566.710114][ T4942] do_syscall_64+0xc9/0x1c0 [ 566.714643][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.720560][ T4942] [ 566.722894][ T4942] write to 0xffff8881204689a8 of 4 bytes by task 4942 on cpu 0: [ 566.730526][ T4942] touch_atime+0x1f3/0x350 [ 566.734959][ T4942] shmem_file_read_iter+0x46a/0x540 [ 566.740165][ T4942] vfs_read+0x5cc/0x6f0 [ 566.744325][ T4942] ksys_read+0xe8/0x1b0 [ 566.748486][ T4942] __x64_sys_read+0x42/0x50 [ 566.752998][ T4942] x64_sys_call+0x2874/0x2dc0 [ 566.757689][ T4942] do_syscall_64+0xc9/0x1c0 [ 566.762202][ T4942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.768104][ T4942] [ 566.770427][ T4942] value changed: 0x39e14d74 -> 0x3a646838 [ 566.776138][ T4942] [ 566.778457][ T4942] Reported by Kernel Concurrency Sanitizer on: [ 566.784687][ T4942] CPU: 0 UID: 0 PID: 4942 Comm: udevd Not tainted 6.13.0-syzkaller-08291-g805ba04cb7cc #0 [ 566.794580][ T4942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 566.804636][ T4942] ==================================================================