last executing test programs: 16.532194957s ago: executing program 2 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYRES8], &(0x7f0000000740)=""/50, 0x70, 0x32, 0x0, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000980)=""/128, 0x80, 0x0, &(0x7f0000000700)=""/33, 0x21}}, 0x10) r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x4, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x7}) mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r4, &(0x7f0000001180)=""/209, 0xd1, 0x200000000000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, &(0x7f0000000140)={0x0, 0x989680}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x478982, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="0383800018000000852000000500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000132050007000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500ee4cc089386b26790000c500000018410400"], 0x0, 0x10000, 0x18, &(0x7f0000000a40)=""/24, 0x41000, 0x29, '\x00', r1, 0x35, r2, 0x8, &(0x7f0000000a80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x4, 0xb0eb, 0x665ea0e}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000b40)=[{0x0, 0x2, 0x4, 0xa}, {0x1, 0x3, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x4}, {0x4, 0x5, 0x0, 0x4}, {0x5, 0x2, 0x7, 0x8}, {0x3, 0x1, 0x1}], 0x10, 0x2}, 0x90) recvmmsg(r0, &(0x7f0000005a40), 0x3, 0x0, &(0x7f0000005b80)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="0300eb00000800000900000000000000f95770f23d718d7476d9cfb608b8ec4a64d02bc2731dd5f9b10dfe6b2fec2882343725be08eb4f9baeba9aba43fa277967", @ANYRES64=r7, @ANYRES64=r8/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="040000c0010000000100002005000000da0b804bc522cde3"], 0x48}}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x20, &(0x7f0000000180)=""/32, 0x41100, 0x0, '\x00', r1, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000380)=[{0x0, 0x5, 0x1, 0x3}, {0x0, 0x5, 0x3, 0x2}, {0x5, 0x1, 0xe, 0x3}]}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x15, 0x8001, 0x0, @empty, @mcast2, 0x7, 0x0, 0x0, 0x7}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6, 0x18}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001980)={0xc, {"a2e3ad214fc752f91b25090987f70e06d038e7ff7fc6e5539b3243078b089b3b08386e090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d306d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x4000, 0x40) 15.538319204s ago: executing program 2 (id=2542): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000003580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="060001001800000000000000340000003400000004000000080000000500000604000000040000000500000003000000010000000b0000000600000001000000070000000a0000000700000000005f00"], &(0x7f00000006c0)=""/243, 0x50, 0xf3, 0x1, 0xffff}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000580)=""/231, 0xe7}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001d40)='attr/sockcreate\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000800)={'wg0\x00', @link_local={0x1, 0x34}}) 15.332697772s ago: executing program 2 (id=2550): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) timer_create(0x0, 0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) timer_gettime(r4, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000b00)=""/182, 0xb6) ppoll(&(0x7f0000000780)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x250, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1ac, 0x2, [@TCA_CGROUP_EMATCHES={0x1a8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x2, 0x1, 0x1, "e2"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3fe5}, {0xfffffffb, 0x100, 0x4, 0x8000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1069, 0x7, 0x7}, {{0x8, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x4, 0x9, 0xfc00}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x8, 0x194, 0x518, 0x7}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x17}, {0x3ff, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x0, 0x2}, {0x2, 0x8}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x1, 0xfff7}, {0x7, 0x6, 0x2, 0x2, 0x5, 0x2, 0x2}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xd}, [@TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="58a7987a274f0cc3ce", @TCF_META_TYPE_VAR="cac29306dd73c5e626", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="faae9e3b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="547d4938e2", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x25, 0x1}, {0x1, 0xfe}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x4000}, {{0x0, 0x1, 0x0, 0x1}, {0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xb457, 0x2, 0x6}, {0x8001, 0x2, 0x0, "0588"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x304}, {0x8, 0x8001, 0x6, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x4, 0x1, 0xd21, 0x5}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x250}}, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$isdn(0x22, 0x2, 0x23) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) dup2(r10, r9) 14.476153126s ago: executing program 2 (id=2560): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES32=r2, @ANYRES8=r1, @ANYRESHEX=r0], 0x1, 0x357, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ptrace(0x10, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0xa, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x88, 0x67, 0x0, 0x205fffff) 3.625921724s ago: executing program 3 (id=2714): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x7b, 0x12, r0, 0x47c000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlockall(0x1) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) 2.75395352s ago: executing program 0 (id=2720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x20000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r5 = inotify_init1(0x800) fcntl$getownex(r5, 0x5, &(0x7f0000000100)) syz_emit_ethernet(0x8a, &(0x7f00000011c0)=ANY=[@ANYBLOB="19f44eb2c52f000000000000810017000011aa01f0f9fc676d883ee38e8e10edf32ebf002a7273ceff2d1203b2fc9c861ff51f07e4679f84903d1220a670d1c40aba7ed6383e93e75b7f7ddc782b411032de3f4fa3760506a3ac3e4efa0cc589b2c9e6fd370ba8d3fb23f36ef700899acbce454f07fe551f94567c77ce0c477a4b32b975f0283845f37d"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1301, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='hrtimer_start\x00', r8}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000000080)=""/4076, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r3], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) ptrace(0x11, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) 2.663225778s ago: executing program 0 (id=2722): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000180)={[{@jqfmt_vfsv1}, {@acl}]}, 0x25, 0x4ed, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfff, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x8100000018000000}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2], 0x48}}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) sendto$inet(r8, 0x0, 0x64, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 1.972957308s ago: executing program 0 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe80}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) fcntl$setlease(r1, 0x400, 0x2) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x0) r5 = dup(r3) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x9, 0x0, 0x7ffc0004}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.766033216s ago: executing program 3 (id=2726): sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.689915783s ago: executing program 3 (id=2727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f0000000540)={0x20000300, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x16}, &(0x7f0000000380)=""/36, 0x24, &(0x7f00000004c0)=""/2, &(0x7f0000000500)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x7}, 0x58) kcmp(0xffffffffffffffff, r3, 0x4, r2, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="000000080000000000007b8af8ff00000000bfa200000015000007020000088a00b704000000000000850000000100e790d6070000950000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x53) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) ioprio_get$pid(0x2, 0x0) 1.594131191s ago: executing program 3 (id=2729): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 1.585821042s ago: executing program 3 (id=2731): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) 1.585094352s ago: executing program 0 (id=2732): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001"], 0x4e8}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ftruncate(r1, 0x8001) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 935.729158ms ago: executing program 0 (id=2735): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=t']) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async, rerun: 32) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x404041, 0x0) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x220000, &(0x7f0000000180)=ANY=[@ANYRES64], 0xff, 0x290, &(0x7f0000000780)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000ec0)='./file0\x00', 0x0, 0x20, &(0x7f0000000e80)=ANY=[@ANYBLOB='defcontext']) (async) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) (async) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x100, 0x0, "1f00000800"}) (async, rerun: 64) r4 = dup3(r3, r2, 0x0) (rerun: 64) read$watch_queue(r4, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000000)={'some', 0x20, 0x1, 0x20, 0x5}, 0x2f) (async, rerun: 64) r5 = syz_io_uring_setup(0x5c23, &(0x7f00000002c0)={0x0, 0x63fa, 0x13291, 0x0, 0x102c2}, &(0x7f0000000100), &(0x7f00000001c0)) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x13) ioctl$TUNSETPERSIST(r7, 0x400454cc, 0x0) (async) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b031000e0ff030002004788aa96a13bb1000000000081000500", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) (async, rerun: 64) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$RTC_AIE_ON(r10, 0x7001) io_uring_enter(r5, 0x1, 0x0, 0x1, 0x0, 0x1000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x48) 828.197358ms ago: executing program 4 (id=2739): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() tkill(r1, 0x12) 799.91389ms ago: executing program 4 (id=2742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001140)=ANY=[@ANYBLOB="034886dd05000a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140", @ANYRES16, @ANYRES8, @ANYRES32=r2], 0xfdef) 753.909294ms ago: executing program 0 (id=2743): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYRES8], &(0x7f0000000740)=""/50, 0x70, 0x32, 0x0, 0x9}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000980)=""/128, 0x80, 0x0, &(0x7f0000000700)=""/33, 0x21}}, 0x10) r4 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x4, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x7}) mq_timedreceive(r4, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r4, &(0x7f0000001180)=""/209, 0xd1, 0x200000000000, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x3ed7, &(0x7f0000000140)={0x0, 0x989680}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x478982, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="0383800018000000852000000500000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000132050007000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7050000080000008500ee4cc089386b26790000c5000000184104000400"/48], 0x0, 0x10000, 0x18, &(0x7f0000000a40)=""/24, 0x41000, 0x29, '\x00', r1, 0x35, r2, 0x8, &(0x7f0000000a80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x2, 0x4, 0xb0eb, 0x665ea0e}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r5, r5], &(0x7f0000000b40)=[{0x0, 0x2, 0x4, 0xa}, {0x1, 0x3, 0x0, 0xb}, {0x0, 0x2, 0x0, 0x4}, {0x4, 0x5, 0x0, 0x4}, {0x5, 0x2, 0x7, 0x8}, {0x3, 0x1, 0x1}], 0x10, 0x2}, 0x90) recvmmsg(r0, &(0x7f0000005a40), 0x3, 0x0, &(0x7f0000005b80)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f0000000880)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000e80)=ANY=[@ANYBLOB="0300eb00000800000900000000000000f95770f23d718d7476d9cfb608b8ec4a64d02bc2731dd5f9b10dfe6b2fec2882343725be08eb4f9baeba9aba43fa277967", @ANYRES64=r7, @ANYRES64=r8/1000+10000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="040000c0010000000100002005000000da0b804bc522cde3"], 0x48}}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x4, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x20, &(0x7f0000000180)=""/32, 0x41100, 0x0, '\x00', r1, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000380)=[{0x0, 0x5, 0x1, 0x3}, {0x0, 0x5, 0x3, 0x2}, {0x5, 0x1, 0xe, 0x3}]}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x15, 0x8001, 0x0, @empty, @mcast2, 0x7, 0x0, 0x0, 0x7}}) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)=0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0x0, 0x6, 0x18}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000001980)={0xc, {"a2e3ad214fc752f91b25090987f70e06d038e7ff7fc6e5539b3243078b089b3b08386e090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d306d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$incfs(0xffffffffffffff9c, &(0x7f00000005c0)='.pending_reads\x00', 0x4000, 0x40) 682.753221ms ago: executing program 3 (id=2746): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46ee"], 0x208}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf0e}}], 0x1, 0x2002, 0x0) 572.66489ms ago: executing program 4 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) execve(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4}}}}}}]}, 0x48}}, 0x0) 526.300284ms ago: executing program 1 (id=2749): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2, 0x1000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) timer_create(0x0, 0x0, &(0x7f00000002c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) timer_gettime(r0, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x250, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8, 0xb, 0x1000}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}, @TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1ac, 0x2, [@TCA_CGROUP_EMATCHES={0x1a8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x2, 0x1, 0x1, "e2"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x3fe5}, {0xfffffffb, 0x100, 0x4, 0x8000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1069, 0x7, 0x7}, {{0x8, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x4, 0x9, 0xfc00}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x8, 0x194, 0x518, 0x7}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x17}, {0x3ff, 0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7fff, 0x0, 0x2}, {0x2, 0x8}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffa, 0x1, 0xfff7}, {0x7, 0x6, 0x2, 0x2, 0x5, 0x2, 0x2}}}, @TCF_EM_META={0x60, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xd}, [@TCA_EM_META_LVALUE={0x33, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="58a7987a274f0cc3ce", @TCF_META_TYPE_VAR="cac29306dd73c5e626", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="faae9e3b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="547d4938e2", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x25, 0x1}, {0x1, 0xfe}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0x4000}, {{0x0, 0x1, 0x0, 0x1}, {0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xb457, 0x2, 0x6}, {0x8001, 0x2, 0x0, "0588"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x0, 0x1, 0x304}, {0x8, 0x8001, 0x6, 0x4, 0x3, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x1}, {0x4, 0x1, 0xd21, 0x5}}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x250}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 499.663166ms ago: executing program 1 (id=2750): socket$inet(0x2, 0xa, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010c43362000010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011880e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) 462.45072ms ago: executing program 4 (id=2751): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 445.111691ms ago: executing program 4 (id=2752): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = gettid() tkill(r1, 0x12) 444.555481ms ago: executing program 4 (id=2753): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x3000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 329.640661ms ago: executing program 1 (id=2754): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 316.437462ms ago: executing program 1 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="45f7000000000000000032"], 0x1c}}, 0x0) 274.830056ms ago: executing program 1 (id=2756): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000001200)='signal_generate\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='cpu<0\'||!') 42.016896ms ago: executing program 1 (id=2757): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, 'gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'}]}, 0x484) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) prlimit64(0x0, 0x3, &(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x2}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) ioctl$FS_IOC_SETFLAGS(r5, 0x4c02, &(0x7f0000000140)) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)=[0xffffffffffffffff, &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\x00\x00\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xdf\x02\x00\xfc\x9dW\xec\xdb-\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xdb$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe2\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd\x7f\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7', &(0x7f0000002340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f0000001f00)=[&(0x7f0000001e80)='\\\x00', &(0x7f0000001ec0)='}[\\-\x00']) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002300), 0xffffffffffffffff) 14.339539ms ago: executing program 2 (id=2701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2736, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(r1, 0x306f, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2758): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x500, 0x0, 0x388, 0x278, 0x1e0, 0x1e0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r8 = open(0x0, 0x7695fe, 0x0) readahead(r8, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000300)) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2) getsockname(r10, &(0x7f0000000d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000c80)=0x80) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x843, 0x8, 0x4f, 0x400, 0x0, 0x40089, r11}) sendmsg$nl_route(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r13, 0x0) cachestat(r13, &(0x7f0000000040), &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0869010000009a5a6a001d2000f4015500"/29], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): x2d60 [ 170.604288][T13865] do_syscall_64+0xc9/0x1c0 [ 170.608864][T13865] ? clear_bhb_loop+0x55/0xb0 [ 170.613580][T13865] ? clear_bhb_loop+0x55/0xb0 [ 170.618252][T13865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.624236][T13865] RIP: 0033:0x7f827e60b9df [ 170.628639][T13865] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 170.648267][T13865] RSP: 002b:00007f827d287000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 170.656681][T13865] RAX: ffffffffffffffda RBX: 00007f827e7c5f80 RCX: 00007f827e60b9df [ 170.664755][T13865] RDX: 0000000000000047 RSI: 0000000020000680 RDI: 00000000000000c8 [ 170.672732][T13865] RBP: 00007f827d287090 R08: 0000000000000000 R09: 0000000000000000 [ 170.680869][T13865] R10: 0000000000000047 R11: 0000000000000293 R12: 0000000000000001 [ 170.688980][T13865] R13: 0000000000000000 R14: 00007f827e7c5f80 R15: 00007ffcbffbed18 [ 170.697108][T13865] [ 170.776260][T13868] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 170.827589][T13876] netem: change failed [ 171.141939][T13877] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2041'. [ 171.456727][T13902] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 171.517910][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 171.528395][ C1] vxcan0: j1939_session_tx_dat: 0xffff888112790200: queue data error: -100 [ 171.542834][T13910] netem: change failed [ 171.598259][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 171.598272][ T29] audit: type=1400 audit(1725775791.131:3916): avc: denied { listen } for pid=13916 comm="syz.2.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 171.818521][T13922] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 171.826830][T13922] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 171.873225][T13928] SELinux: policydb version -570608695 does not match my version range 15-33 [ 171.883134][T13928] SELinux: failed to load policy [ 172.049230][T13937] netem: change failed [ 172.104877][ T29] audit: type=1326 audit(1725775791.631:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.105681][T13943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.130617][ T29] audit: type=1326 audit(1725775791.631:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.147236][T13943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2067'. [ 172.158700][ T29] audit: type=1326 audit(1725775791.631:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.191109][ T29] audit: type=1326 audit(1725775791.631:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.214636][ T29] audit: type=1326 audit(1725775791.631:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.238244][ T29] audit: type=1326 audit(1725775791.631:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.263269][ T29] audit: type=1326 audit(1725775791.671:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.287052][ T29] audit: type=1326 audit(1725775791.671:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.310608][ T29] audit: type=1326 audit(1725775791.671:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 172.409035][T13951] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 172.417399][T13951] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 172.439191][T13953] FAULT_INJECTION: forcing a failure. [ 172.439191][T13953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.452279][T13953] CPU: 0 UID: 0 PID: 13953 Comm: syz.2.2071 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 172.463087][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 172.473184][T13953] Call Trace: [ 172.476499][T13953] [ 172.479412][T13953] dump_stack_lvl+0xf2/0x150 [ 172.484046][T13953] dump_stack+0x15/0x20 [ 172.488184][T13953] should_fail_ex+0x229/0x230 [ 172.492863][T13953] should_fail+0xb/0x10 [ 172.497060][T13953] should_fail_usercopy+0x1a/0x20 [ 172.502133][T13953] _copy_to_user+0x1e/0xa0 [ 172.506616][T13953] simple_read_from_buffer+0xa0/0x110 [ 172.512024][T13953] proc_fail_nth_read+0xff/0x140 [ 172.516969][T13953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.522522][T13953] vfs_read+0x1a2/0x6e0 [ 172.526663][T13953] ? __rcu_read_unlock+0x4e/0x70 [ 172.531591][T13953] ? __fget_files+0x1da/0x210 [ 172.536257][T13953] ksys_read+0xeb/0x1b0 [ 172.540432][T13953] __x64_sys_read+0x42/0x50 [ 172.544977][T13953] x64_sys_call+0x27d3/0x2d60 [ 172.549642][T13953] do_syscall_64+0xc9/0x1c0 [ 172.554147][T13953] ? clear_bhb_loop+0x55/0xb0 [ 172.558804][T13953] ? clear_bhb_loop+0x55/0xb0 [ 172.563638][T13953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.569786][T13953] RIP: 0033:0x7f08bfbab93c [ 172.574283][T13953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 172.593917][T13953] RSP: 002b:00007f08be827030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.602534][T13953] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbab93c [ 172.610487][T13953] RDX: 000000000000000f RSI: 00007f08be8270a0 RDI: 0000000000000007 [ 172.618482][T13953] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 172.626449][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.634632][T13953] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 172.642600][T13953] [ 172.854404][T13957] SELinux: policydb version -570608695 does not match my version range 15-33 [ 172.863529][T13957] SELinux: failed to load policy [ 172.899419][T13959] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 172.931026][T13962] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 172.987253][T13965] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 173.167785][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 174.004740][T13985] pim6reg: entered allmulticast mode [ 174.010525][T13985] pim6reg: left allmulticast mode [ 174.062914][T13988] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 174.071147][T13988] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 174.093109][T13990] FAULT_INJECTION: forcing a failure. [ 174.093109][T13990] name failslab, interval 1, probability 0, space 0, times 0 [ 174.105847][T13990] CPU: 0 UID: 0 PID: 13990 Comm: syz.2.2086 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 174.116645][T13990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.126704][T13990] Call Trace: [ 174.129968][T13990] [ 174.132915][T13990] dump_stack_lvl+0xf2/0x150 [ 174.137491][T13990] dump_stack+0x15/0x20 [ 174.141643][T13990] should_fail_ex+0x229/0x230 [ 174.146419][T13990] ? skb_clone+0x154/0x1f0 [ 174.150833][T13990] should_failslab+0x8f/0xb0 [ 174.155470][T13990] kmem_cache_alloc_noprof+0x4c/0x290 [ 174.160879][T13990] skb_clone+0x154/0x1f0 [ 174.165118][T13990] __netlink_deliver_tap+0x2bd/0x4c0 [ 174.170408][T13990] netlink_unicast+0x64a/0x670 [ 174.175167][T13990] netlink_sendmsg+0x5cc/0x6e0 [ 174.180076][T13990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.185355][T13990] __sock_sendmsg+0x140/0x180 [ 174.190099][T13990] ____sys_sendmsg+0x312/0x410 [ 174.194944][T13990] __sys_sendmmsg+0x269/0x500 [ 174.199628][T13990] ? trace_sys_enter+0x65/0xa0 [ 174.204394][T13990] __x64_sys_sendmmsg+0x57/0x70 [ 174.209281][T13990] x64_sys_call+0xa49/0x2d60 [ 174.213879][T13990] do_syscall_64+0xc9/0x1c0 [ 174.218889][T13990] ? clear_bhb_loop+0x55/0xb0 [ 174.223566][T13990] ? clear_bhb_loop+0x55/0xb0 [ 174.228479][T13990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.234388][T13990] RIP: 0033:0x7f08bfbacef9 [ 174.238988][T13990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.258644][T13990] RSP: 002b:00007f08be827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 174.267146][T13990] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbacef9 [ 174.275140][T13990] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007 [ 174.283098][T13990] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 174.291062][T13990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.299024][T13990] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 174.307071][T13990] [ 174.360677][T13992] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 174.402818][T13997] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 174.741815][T14014] pim6reg: entered allmulticast mode [ 174.752051][T14014] pim6reg: left allmulticast mode [ 174.806524][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2097'. [ 174.940984][T14026] syzkaller0: entered promiscuous mode [ 174.946608][T14026] syzkaller0: entered allmulticast mode [ 175.008275][T14026] veth0_to_bridge: entered promiscuous mode [ 175.029070][T14026] veth0_to_bridge: left promiscuous mode [ 175.047602][T14033] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 175.055808][T14033] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 175.418979][ T3278] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.470707][ T3278] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.529690][ T3278] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.556270][T14041] chnl_net:caif_netlink_parms(): no params data found [ 175.570704][T14059] pim6reg: entered allmulticast mode [ 175.591732][ T3278] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.603304][T14059] pim6reg: left allmulticast mode [ 175.635294][T14041] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.642543][T14041] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.649811][T14041] bridge_slave_0: entered allmulticast mode [ 175.657505][T14041] bridge_slave_0: entered promiscuous mode [ 175.664718][T14041] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.671834][T14041] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.679087][T14041] bridge_slave_1: entered allmulticast mode [ 175.685683][T14041] bridge_slave_1: entered promiscuous mode [ 175.718505][T14065] FAULT_INJECTION: forcing a failure. [ 175.718505][T14065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.727873][T14041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.731678][T14065] CPU: 0 UID: 0 PID: 14065 Comm: syz.2.2110 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 175.742215][T14041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.751324][T14065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.751336][T14065] Call Trace: [ 175.751342][T14065] [ 175.751348][T14065] dump_stack_lvl+0xf2/0x150 [ 175.781213][T14065] dump_stack+0x15/0x20 [ 175.785442][T14065] should_fail_ex+0x229/0x230 [ 175.790126][T14065] should_fail+0xb/0x10 [ 175.794314][T14065] should_fail_usercopy+0x1a/0x20 [ 175.799368][T14065] _copy_from_user+0x1e/0xd0 [ 175.804036][T14065] ucma_write+0xda/0x240 [ 175.808345][T14065] ? __pfx_ucma_write+0x10/0x10 [ 175.813230][T14065] vfs_write+0x28b/0x900 [ 175.817518][T14065] ? __fget_files+0x1da/0x210 [ 175.822199][T14065] ksys_write+0xeb/0x1b0 [ 175.826533][T14065] __x64_sys_write+0x42/0x50 [ 175.831141][T14065] x64_sys_call+0x27dd/0x2d60 [ 175.835911][T14065] do_syscall_64+0xc9/0x1c0 [ 175.840438][T14065] ? clear_bhb_loop+0x55/0xb0 [ 175.845101][T14065] ? clear_bhb_loop+0x55/0xb0 [ 175.849810][T14065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.855742][T14065] RIP: 0033:0x7f08bfbacef9 [ 175.860233][T14065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.879822][T14065] RSP: 002b:00007f08be827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.888290][T14065] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbacef9 [ 175.896286][T14065] RDX: 0000000000000018 RSI: 00000000200000c0 RDI: 0000000000000003 [ 175.904344][T14065] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 175.912383][T14065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.920442][T14065] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 175.928398][T14065] [ 175.942897][T14041] team0: Port device team_slave_0 added [ 175.953249][ T3278] bridge_slave_1: left allmulticast mode [ 175.958967][ T3278] bridge_slave_1: left promiscuous mode [ 175.964700][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.973977][ T3278] bridge_slave_0: left allmulticast mode [ 175.979700][ T3278] bridge_slave_0: left promiscuous mode [ 175.985378][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.092017][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.112088][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.138761][ T3278] bond0 (unregistering): Released all slaves [ 176.149735][T14041] team0: Port device team_slave_1 added [ 176.175788][T14041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.182812][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.208787][T14041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.239535][T14041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.246643][T14041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.272838][T14041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.291816][T14086] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 176.310232][ T3278] hsr_slave_0: left promiscuous mode [ 176.317471][ T3278] hsr_slave_1: left promiscuous mode [ 176.323655][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.331109][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.340485][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.348071][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.366737][ T3278] veth1_macvtap: left promiscuous mode [ 176.372304][ T3278] veth0_macvtap: left promiscuous mode [ 176.377995][ T3278] veth1_vlan: left promiscuous mode [ 176.383205][ T3278] veth0_vlan: left promiscuous mode [ 176.521958][ T3278] team0 (unregistering): Port device team_slave_1 removed [ 176.532929][ T3278] team0 (unregistering): Port device team_slave_0 removed [ 176.592041][T14086] Â: renamed from wg0 (while UP) [ 176.600581][T14041] hsr_slave_0: entered promiscuous mode [ 176.633804][T14041] hsr_slave_1: entered promiscuous mode [ 176.644554][T14041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.662564][T14041] Cannot create hsr debugfs directory [ 176.879934][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 176.879948][ T29] audit: type=1326 audit(1725775796.411:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 176.909984][ T29] audit: type=1326 audit(1725775796.411:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 177.053301][ T29] audit: type=1326 audit(1725775796.411:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 177.076854][ T29] audit: type=1326 audit(1725775796.411:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 177.100413][ T29] audit: type=1326 audit(1725775796.411:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 177.121348][T14041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.124032][ T29] audit: type=1326 audit(1725775796.411:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 177.154550][ T29] audit: type=1326 audit(1725775796.411:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08bfbaee17 code=0x7ffc0000 [ 177.178109][ T29] audit: type=1326 audit(1725775796.411:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f08bfbaed8c code=0x7ffc0000 [ 177.201719][ T29] audit: type=1326 audit(1725775796.411:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08bfbaecc4 code=0x7ffc0000 [ 177.225224][ T29] audit: type=1326 audit(1725775796.411:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.2.2123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08bfbaecc4 code=0x7ffc0000 [ 177.250968][T14041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.261953][T14041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.288489][T14041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.329620][T14041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.342267][T14041] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.347612][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.356215][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.367503][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.367585][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.455268][T14201] delete_channel: no stack [ 177.480026][T14041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.564543][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.599496][T14231] SELinux: policydb version -570608695 does not match my version range 15-33 [ 177.608979][T14231] SELinux: failed to load policy [ 177.625577][T14041] veth0_vlan: entered promiscuous mode [ 177.651694][T14041] veth1_vlan: entered promiscuous mode [ 177.668384][T14041] veth0_macvtap: entered promiscuous mode [ 177.676049][T14041] veth1_macvtap: entered promiscuous mode [ 177.693287][T14209] chnl_net:caif_netlink_parms(): no params data found [ 177.704906][ T4023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.716929][T14240] netem: change failed [ 177.739455][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.749981][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.759937][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.770401][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.780244][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.790763][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.800600][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.811140][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.820979][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.831586][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.843216][T14041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.851403][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.861870][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.871731][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.882172][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.892035][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.902518][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.912330][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.922780][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.932607][T14041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.943334][T14041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.955157][T14041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.970344][ T4023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.998455][T14041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.007270][T14041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.015986][T14041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.025140][T14041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.041901][T14209] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.049087][T14209] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.057136][T14209] bridge_slave_0: entered allmulticast mode [ 178.060328][T14254] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 178.063710][T14209] bridge_slave_0: entered promiscuous mode [ 178.082811][ T4023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.095861][T14209] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.103164][T14209] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.111164][T14209] bridge_slave_1: entered allmulticast mode [ 178.118506][T14209] bridge_slave_1: entered promiscuous mode [ 178.139540][T14209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.162137][ T4023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.178600][T14260] SELinux: policydb version -570608695 does not match my version range 15-33 [ 178.207574][T14209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.219908][T14260] SELinux: failed to load policy [ 178.219958][T14264] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 178.234050][T14264] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 178.264852][T14209] team0: Port device team_slave_0 added [ 178.284244][ T4023] bridge_slave_1: left allmulticast mode [ 178.289985][ T4023] bridge_slave_1: left promiscuous mode [ 178.295731][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.313589][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.323587][ T4023] bridge_slave_0: left allmulticast mode [ 178.332511][ T4023] bridge_slave_0: left promiscuous mode [ 178.340741][ T4023] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.591104][ T4023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.601690][ T4023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.613155][ T4023] bond0 (unregistering): Released all slaves [ 178.622687][T14209] team0: Port device team_slave_1 added [ 178.628661][T14267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 178.697538][T14209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.704587][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.730581][T14209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.762289][T14262] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2145'. [ 178.780325][ T4023] hsr_slave_0: left promiscuous mode [ 178.788278][ T4023] hsr_slave_1: left promiscuous mode [ 178.794085][ T4023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.801620][ T4023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.811167][ T4023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.818677][ T4023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.846238][ T4023] veth1_macvtap: left promiscuous mode [ 178.851796][ T4023] veth0_macvtap: left promiscuous mode [ 178.858233][ T4023] veth1_vlan: left promiscuous mode [ 178.863467][ T4023] veth0_vlan: left promiscuous mode [ 178.989017][ T4023] team0 (unregistering): Port device team_slave_1 removed [ 179.002743][ T4023] team0 (unregistering): Port device team_slave_0 removed [ 179.046100][T14209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.053149][T14209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.079108][T14209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.143143][T14209] hsr_slave_0: entered promiscuous mode [ 179.155208][T14209] hsr_slave_1: entered promiscuous mode [ 179.162329][T14209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.169922][T14209] Cannot create hsr debugfs directory [ 179.300110][T14307] SELinux: policydb version -570608695 does not match my version range 15-33 [ 179.315428][T14307] SELinux: failed to load policy [ 179.359689][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.471602][T14332] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 179.479998][T14332] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 179.563919][T14209] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.578526][T14209] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.588274][T14209] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.608199][T14209] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.715153][T14209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.730465][T14209] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.741007][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.748188][ T5834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.777844][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.785426][ T5834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.804424][T14209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.845600][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.910256][T14209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.953888][T14406] FAULT_INJECTION: forcing a failure. [ 179.953888][T14406] name failslab, interval 1, probability 0, space 0, times 0 [ 179.966690][T14406] CPU: 1 UID: 0 PID: 14406 Comm: syz.4.2172 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 179.977465][T14406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 179.987525][T14406] Call Trace: [ 179.990805][T14406] [ 179.993738][T14406] dump_stack_lvl+0xf2/0x150 [ 179.998341][T14406] dump_stack+0x15/0x20 [ 180.002501][T14406] should_fail_ex+0x229/0x230 [ 180.007316][T14406] ? v9fs_mount+0x53/0x560 [ 180.011749][T14406] should_failslab+0x8f/0xb0 [ 180.016348][T14406] __kmalloc_cache_noprof+0x4b/0x2a0 [ 180.021639][T14406] v9fs_mount+0x53/0x560 [ 180.025061][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 180.025906][T14406] ? __pfx_v9fs_mount+0x10/0x10 [ 180.039575][T14406] legacy_get_tree+0x77/0xd0 [ 180.044208][T14406] vfs_get_tree+0x56/0x1e0 [ 180.048632][T14406] do_new_mount+0x227/0x690 [ 180.053205][T14406] path_mount+0x49b/0xb30 [ 180.057145][T14209] veth0_vlan: entered promiscuous mode [ 180.057549][T14406] __se_sys_mount+0x27c/0x2d0 [ 180.067672][T14406] __x64_sys_mount+0x67/0x80 [ 180.072330][T14406] x64_sys_call+0x203e/0x2d60 [ 180.077033][T14406] do_syscall_64+0xc9/0x1c0 [ 180.081616][T14406] ? clear_bhb_loop+0x55/0xb0 [ 180.086296][T14406] ? clear_bhb_loop+0x55/0xb0 [ 180.091019][T14406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.096928][T14406] RIP: 0033:0x7f827e60cef9 [ 180.098320][T14209] veth1_vlan: entered promiscuous mode [ 180.101376][T14406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.126585][T14406] RSP: 002b:00007f827d266038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.135038][T14406] RAX: ffffffffffffffda RBX: 00007f827e7c6058 RCX: 00007f827e60cef9 [ 180.143006][T14406] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 180.150967][T14406] RBP: 00007f827d266090 R08: 0000000020000540 R09: 0000000000000000 [ 180.158927][T14406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.166901][T14406] R13: 0000000000000000 R14: 00007f827e7c6058 R15: 00007ffcbffbed18 [ 180.174926][T14406] [ 180.244218][T14446] FAULT_INJECTION: forcing a failure. [ 180.244218][T14446] name failslab, interval 1, probability 0, space 0, times 0 [ 180.257171][T14446] CPU: 0 UID: 0 PID: 14446 Comm: syz.2.2174 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 180.268165][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 180.278315][T14446] Call Trace: [ 180.281599][T14446] [ 180.284533][T14446] dump_stack_lvl+0xf2/0x150 [ 180.289141][T14446] dump_stack+0x15/0x20 [ 180.293418][T14446] should_fail_ex+0x229/0x230 [ 180.298100][T14446] ? __alloc_skb+0x10b/0x310 [ 180.302731][T14446] should_failslab+0x8f/0xb0 [ 180.307311][T14446] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 180.313155][T14446] __alloc_skb+0x10b/0x310 [ 180.317567][T14446] netlink_alloc_large_skb+0xad/0xe0 [ 180.322843][T14446] netlink_sendmsg+0x3b4/0x6e0 [ 180.327592][T14446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.332953][T14446] __sock_sendmsg+0x140/0x180 [ 180.337630][T14446] ____sys_sendmsg+0x312/0x410 [ 180.342419][T14446] __sys_sendmsg+0x1e9/0x280 [ 180.347074][T14446] __x64_sys_sendmsg+0x46/0x50 [ 180.351823][T14446] x64_sys_call+0x2689/0x2d60 [ 180.356503][T14446] do_syscall_64+0xc9/0x1c0 [ 180.360986][T14446] ? clear_bhb_loop+0x55/0xb0 [ 180.365654][T14446] ? clear_bhb_loop+0x55/0xb0 [ 180.370369][T14446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.376291][T14446] RIP: 0033:0x7f08bfbacef9 [ 180.380690][T14446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.400284][T14446] RSP: 002b:00007f08be827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.408725][T14446] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbacef9 [ 180.416684][T14446] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000009 [ 180.424709][T14446] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 180.432665][T14446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.440637][T14446] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 180.448699][T14446] [ 180.462315][T14209] veth0_macvtap: entered promiscuous mode [ 180.476647][T14209] veth1_macvtap: entered promiscuous mode [ 180.491713][T14453] syz.3.2175[14453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.491773][T14453] syz.3.2175[14453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.504558][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.526399][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.536242][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.546665][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.556480][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.566908][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.576965][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.581120][T14453] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.587484][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.604030][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.614470][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.625775][T14209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.634994][T14453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2175'. [ 180.656629][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.667384][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.677341][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.687973][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.698004][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.708548][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.715551][T14454] delete_channel: no stack [ 180.718446][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.718463][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.718476][T14209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.753884][T14209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.765316][T14209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.779911][T14209] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.788764][T14209] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.797645][T14209] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.806512][T14209] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.882276][T14464] syz.3.2179[14464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.882338][T14464] syz.3.2179[14464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.885097][T14466] loop0: detected capacity change from 0 to 1024 [ 180.914080][T14466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.921467][T14466] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.938173][T14464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.950727][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.951290][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 180.960191][T14466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.969040][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.083760][T14209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.167153][T14456] IPVS: starting estimator thread 0... [ 181.167230][T14491] syz.3.2186[14491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.173139][T14491] syz.3.2186[14491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.191181][T14491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.213866][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 181.256151][T14492] IPVS: using max 2880 ests per chain, 144000 per kthread [ 181.288832][T14502] SELinux: policydb version -570608695 does not match my version range 15-33 [ 181.298548][T14502] SELinux: failed to load policy [ 181.385269][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 181.408474][T14524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2201'. [ 181.420131][T14524] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2201'. [ 181.481906][T14527] syz.3.2201[14527] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.539739][T14533] FAULT_INJECTION: forcing a failure. [ 181.539739][T14533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.564435][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.4.2205 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 181.575247][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 181.585350][T14533] Call Trace: [ 181.588623][T14533] [ 181.591539][T14533] dump_stack_lvl+0xf2/0x150 [ 181.596136][T14533] dump_stack+0x15/0x20 [ 181.600354][T14533] should_fail_ex+0x229/0x230 [ 181.605095][T14533] should_fail+0xb/0x10 [ 181.609243][T14533] should_fail_usercopy+0x1a/0x20 [ 181.614274][T14533] strncpy_from_user+0x25/0x270 [ 181.619159][T14533] bpf_raw_tp_link_attach+0x157/0x3a0 [ 181.624562][T14533] bpf_raw_tracepoint_open+0x187/0x320 [ 181.630046][T14533] __sys_bpf+0x32b/0x7a0 [ 181.634272][T14533] __x64_sys_bpf+0x43/0x50 [ 181.638675][T14533] x64_sys_call+0x2625/0x2d60 [ 181.643372][T14533] do_syscall_64+0xc9/0x1c0 [ 181.647879][T14533] ? clear_bhb_loop+0x55/0xb0 [ 181.652609][T14533] ? clear_bhb_loop+0x55/0xb0 [ 181.657287][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.663376][T14533] RIP: 0033:0x7f827e60cef9 [ 181.667816][T14533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.687406][T14533] RSP: 002b:00007f827d287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.695795][T14533] RAX: ffffffffffffffda RBX: 00007f827e7c5f80 RCX: 00007f827e60cef9 [ 181.703813][T14533] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000011 [ 181.711794][T14533] RBP: 00007f827d287090 R08: 0000000000000000 R09: 0000000000000000 [ 181.719749][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.727764][T14533] R13: 0000000000000000 R14: 00007f827e7c5f80 R15: 00007ffcbffbed18 [ 181.735896][T14533] [ 181.890486][ T29] kauditd_printk_skb: 755 callbacks suppressed [ 181.890501][ T29] audit: type=1326 audit(1725775801.421:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 181.917031][T14546] delete_channel: no stack [ 181.928002][ T29] audit: type=1326 audit(1725775801.421:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 181.951666][ T29] audit: type=1326 audit(1725775801.421:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 181.975272][ T29] audit: type=1326 audit(1725775801.421:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 181.998864][ T29] audit: type=1326 audit(1725775801.421:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.022462][ T29] audit: type=1326 audit(1725775801.421:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.046109][ T29] audit: type=1326 audit(1725775801.421:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.069746][ T29] audit: type=1326 audit(1725775801.421:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.093473][ T29] audit: type=1326 audit(1725775801.421:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.116816][ T29] audit: type=1326 audit(1725775801.421:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.4.2214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827e60cef9 code=0x7ffc0000 [ 182.507872][ T2926] kernel write not supported for file /vcsa1 (pid: 2926 comm: kworker/1:2) [ 182.793834][T14585] syz.3.2223[14585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.793940][T14585] syz.3.2223[14585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.866752][T14588] syz.3.2224[14588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.032141][T14595] loop1: detected capacity change from 0 to 128 [ 183.058735][T14597] loop1: detected capacity change from 0 to 128 [ 183.089276][T14599] SELinux: policydb version -570608695 does not match my version range 15-33 [ 183.090325][T14591] delete_channel: no stack [ 183.098631][T14599] SELinux: failed to load policy [ 183.189505][T14605] SELinux: policydb version -570608695 does not match my version range 15-33 [ 183.203912][T14605] SELinux: failed to load policy [ 183.523163][T14613] loop2: detected capacity change from 0 to 2048 [ 183.529713][T14613] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.547663][T14613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.827093][T14635] SELinux: policydb version -570608695 does not match my version range 15-33 [ 183.837383][T14635] SELinux: failed to load policy [ 184.081022][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.097478][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.159951][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 184.168962][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'. [ 184.211431][T14706] loop0: detected capacity change from 0 to 128 [ 184.353076][T14724] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 184.378453][T14716] delete_channel: no stack [ 184.387572][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.455819][T14750] loop2: detected capacity change from 0 to 512 [ 184.467865][T14750] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 184.552780][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'. [ 184.765724][ T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:1) [ 185.552018][T14815] netem: change failed [ 185.656019][T14823] netem: change failed [ 185.685041][T14808] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2266'. [ 185.750305][T14832] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 185.848215][T14834] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 185.865909][T14838] Â: renamed from wg0 (while UP) [ 185.928463][T14841] netem: change failed [ 186.074026][T14850] netem: change failed [ 186.080222][T14852] loop2: detected capacity change from 0 to 1024 [ 186.126454][T14852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.142101][T14862] loop1: detected capacity change from 0 to 128 [ 186.228377][T14860] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 186.236743][T14860] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 186.318383][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.336521][T14867] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 186.356019][T14876] SELinux: policydb version -570608695 does not match my version range 15-33 [ 186.371558][T14876] SELinux: failed to load policy [ 186.379874][T14878] FAULT_INJECTION: forcing a failure. [ 186.379874][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 186.392673][T14878] CPU: 0 UID: 0 PID: 14878 Comm: syz.4.2293 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 186.403809][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 186.413966][T14878] Call Trace: [ 186.417236][T14878] [ 186.420158][T14878] dump_stack_lvl+0xf2/0x150 [ 186.424766][T14878] dump_stack+0x15/0x20 [ 186.429077][T14878] should_fail_ex+0x229/0x230 [ 186.433748][T14878] ? __d_alloc+0x3d/0x340 [ 186.438116][T14878] should_failslab+0x8f/0xb0 [ 186.442702][T14878] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 186.448425][T14878] __d_alloc+0x3d/0x340 [ 186.452616][T14878] d_alloc_pseudo+0x1e/0x80 [ 186.457134][T14878] alloc_file_pseudo+0x70/0x140 [ 186.462025][T14878] __shmem_file_setup+0x1bb/0x1f0 [ 186.467060][T14878] shmem_file_setup+0x3b/0x50 [ 186.471802][T14878] __se_sys_memfd_create+0x31d/0x600 [ 186.477082][T14878] __x64_sys_memfd_create+0x31/0x40 [ 186.482360][T14878] x64_sys_call+0x2891/0x2d60 [ 186.487033][T14878] do_syscall_64+0xc9/0x1c0 [ 186.491618][T14878] ? clear_bhb_loop+0x55/0xb0 [ 186.496547][T14878] ? clear_bhb_loop+0x55/0xb0 [ 186.501210][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.507262][T14878] RIP: 0033:0x7f827e60cef9 [ 186.511666][T14878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.531355][T14878] RSP: 002b:00007f827d286e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 186.539806][T14878] RAX: ffffffffffffffda RBX: 00000000000004de RCX: 00007f827e60cef9 [ 186.547767][T14878] RDX: 00007f827d286ef0 RSI: 0000000000000000 RDI: 00007f827e67f839 [ 186.555753][T14878] RBP: 0000000020000c40 R08: 00007f827d286bb7 R09: 00007f827d286e40 [ 186.563712][T14878] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000080 [ 186.571717][T14878] R13: 00007f827d286ef0 R14: 00007f827d286eb0 R15: 00000000200000c0 [ 186.579686][T14878] [ 186.647868][T14884] netem: change failed [ 186.826641][T14913] FAULT_INJECTION: forcing a failure. [ 186.826641][T14913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.839883][T14913] CPU: 0 UID: 0 PID: 14913 Comm: syz.0.2303 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 186.850701][T14913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 186.860756][T14913] Call Trace: [ 186.864028][T14913] [ 186.866947][T14913] dump_stack_lvl+0xf2/0x150 [ 186.871547][T14913] dump_stack+0x15/0x20 [ 186.875738][T14913] should_fail_ex+0x229/0x230 [ 186.880405][T14913] should_fail+0xb/0x10 [ 186.884624][T14913] should_fail_usercopy+0x1a/0x20 [ 186.889704][T14913] _copy_to_user+0x1e/0xa0 [ 186.894173][T14913] copy_siginfo_to_user+0x24/0x90 [ 186.899198][T14913] x64_setup_rt_frame+0x29a/0x570 [ 186.904233][T14913] arch_do_signal_or_restart+0x287/0x4b0 [ 186.910007][T14913] syscall_exit_to_user_mode+0x59/0x130 [ 186.915555][T14913] do_syscall_64+0xd6/0x1c0 [ 186.920046][T14913] ? clear_bhb_loop+0x55/0xb0 [ 186.924827][T14913] ? clear_bhb_loop+0x55/0xb0 [ 186.929496][T14913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.935388][T14913] RIP: 0033:0x7f4f3410cef7 [ 186.939799][T14913] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 186.959484][T14913] RSP: 002b:00007f4f32d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 186.967964][T14913] RAX: 000000000000002a RBX: 00007f4f342c5f80 RCX: 00007f4f3410cef9 [ 186.975933][T14913] RDX: 000000000000006e RSI: 0000000020000140 RDI: 0000000000000006 [ 186.984060][T14913] RBP: 00007f4f32d87090 R08: 0000000000000000 R09: 0000000000000000 [ 186.992023][T14913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.000027][T14913] R13: 0000000000000000 R14: 00007f4f342c5f80 R15: 00007ffc320ffce8 [ 187.008082][T14913] [ 187.053442][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 187.053457][ T29] audit: type=1326 audit(1725775806.581:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.064639][T14921] loop0: detected capacity change from 0 to 1024 [ 187.105943][T14921] EXT4-fs: Ignoring removed nobh option [ 187.111612][T14921] EXT4-fs: Ignoring removed orlov option [ 187.145238][ T29] audit: type=1326 audit(1725775806.581:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.169032][ T29] audit: type=1326 audit(1725775806.581:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.192708][ T29] audit: type=1326 audit(1725775806.581:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.216226][ T29] audit: type=1326 audit(1725775806.581:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.239857][ T29] audit: type=1326 audit(1725775806.581:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.263510][ T29] audit: type=1326 audit(1725775806.581:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 187.287035][ T29] audit: type=1326 audit(1725775806.581:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f3410cf33 code=0x7ffc0000 [ 187.305476][T14934] SELinux: policydb version -570608695 does not match my version range 15-33 [ 187.310387][ T29] audit: type=1326 audit(1725775806.591:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f3410b9df code=0x7ffc0000 [ 187.342610][ T29] audit: type=1326 audit(1725775806.591:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4f3410cf87 code=0x7ffc0000 [ 187.351814][T14934] SELinux: failed to load policy [ 187.374404][T14921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.648760][T14993] netem: change failed [ 187.721912][T14902] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2300'. [ 187.796414][T15013] bpf_get_probe_write_proto: 3 callbacks suppressed [ 187.796429][T15013] syz.4.2319[15013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.809876][T15013] syz.4.2319[15013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.827652][T15013] xt_TPROXY: Can be used only with -p tcp or -p udp [ 187.849606][T14209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.850640][T15013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2319'. [ 188.008978][T15028] netem: change failed [ 188.164674][T15047] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.193455][T15053] syz.2.2336[15053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.193565][T15053] syz.2.2336[15053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.208710][T15053] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.229856][T15053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2336'. [ 188.381037][T15063] SELinux: policydb version -570608695 does not match my version range 15-33 [ 188.390202][T15063] SELinux: failed to load policy [ 188.451735][T15071] loop2: detected capacity change from 0 to 1024 [ 188.459298][T15071] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.466955][T15071] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.488383][T15071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.509160][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.564441][T15082] loop2: detected capacity change from 0 to 1024 [ 188.571630][T15082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.578697][T15082] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 188.597944][T15082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.611147][T15082] FAULT_INJECTION: forcing a failure. [ 188.611147][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.624381][T15082] CPU: 0 UID: 0 PID: 15082 Comm: syz.2.2347 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 188.635136][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.645181][T15082] Call Trace: [ 188.648457][T15082] [ 188.651375][T15082] dump_stack_lvl+0xf2/0x150 [ 188.656109][T15082] dump_stack+0x15/0x20 [ 188.660252][T15082] should_fail_ex+0x229/0x230 [ 188.664964][T15082] should_fail+0xb/0x10 [ 188.669106][T15082] should_fail_usercopy+0x1a/0x20 [ 188.674208][T15082] strncpy_from_user+0x25/0x270 [ 188.679118][T15082] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 188.684815][T15082] getname_flags+0xb0/0x3b0 [ 188.689359][T15082] user_path_at+0x26/0x110 [ 188.693793][T15082] __se_sys_mount+0x248/0x2d0 [ 188.698520][T15082] __x64_sys_mount+0x67/0x80 [ 188.703220][T15082] x64_sys_call+0x203e/0x2d60 [ 188.707923][T15082] do_syscall_64+0xc9/0x1c0 [ 188.712420][T15082] ? clear_bhb_loop+0x55/0xb0 [ 188.717084][T15082] ? clear_bhb_loop+0x55/0xb0 [ 188.721750][T15082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.727793][T15082] RIP: 0033:0x7f08bfbae69a [ 188.732250][T15082] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.751891][T15082] RSP: 002b:00007f08be826e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 188.760468][T15082] RAX: ffffffffffffffda RBX: 00007f08be826ef0 RCX: 00007f08bfbae69a [ 188.768427][T15082] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000 [ 188.776386][T15082] RBP: 0000000020000180 R08: 00007f08be826ef0 R09: 0000000001a4203c [ 188.784367][T15082] R10: 0000000001a4203c R11: 0000000000000246 R12: 0000000020000100 [ 188.792382][T15082] R13: 00007f08be826eb0 R14: 0000000000000000 R15: 00000000200003c0 [ 188.800368][T15082] [ 188.820699][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.832530][T15086] syz.1.2348[15086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.832584][T15086] syz.1.2348[15086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.852130][T15086] xt_TPROXY: Can be used only with -p tcp or -p udp [ 188.875146][T15094] SELinux: policydb version -570608695 does not match my version range 15-33 [ 188.880971][T15086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2348'. [ 188.884933][T15094] SELinux: failed to load policy [ 189.024056][T15115] loop0: detected capacity change from 0 to 128 [ 189.034903][T15115] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.048228][T15115] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.062429][T15115] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2361: No space for directory leaf checksum. Please run e2fsck -D. [ 189.078064][T15115] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.2361: checksumming directory block 0 [ 189.120446][T15115] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2361: No space for directory leaf checksum. Please run e2fsck -D. [ 189.135876][T15115] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.2361: checksumming directory block 0 [ 189.149312][T15115] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2361: No space for directory leaf checksum. Please run e2fsck -D. [ 189.164759][T15115] EXT4-fs error (device loop0): __ext4_find_entry:1652: inode #2: comm syz.0.2361: checksumming directory block 0 [ 189.179021][T15115] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.2361: No space for directory leaf checksum. Please run e2fsck -D. [ 189.194381][T15115] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.2361: Directory block failed checksum [ 189.217341][T14209] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.237406][T15122] delete_channel: no stack [ 189.317622][T15138] FAULT_INJECTION: forcing a failure. [ 189.317622][T15138] name failslab, interval 1, probability 0, space 0, times 0 [ 189.330310][T15138] CPU: 0 UID: 0 PID: 15138 Comm: syz.2.2369 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 189.341092][T15138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.351582][T15138] Call Trace: [ 189.354889][T15138] [ 189.357902][T15138] dump_stack_lvl+0xf2/0x150 [ 189.362537][T15138] dump_stack+0x15/0x20 [ 189.366896][T15138] should_fail_ex+0x229/0x230 [ 189.371617][T15138] ? shmem_init_fs_context+0x38/0x100 [ 189.377031][T15138] should_failslab+0x8f/0xb0 [ 189.381609][T15138] __kmalloc_cache_noprof+0x4b/0x2a0 [ 189.386882][T15138] shmem_init_fs_context+0x38/0x100 [ 189.392131][T15138] alloc_fs_context+0x3fb/0x4e0 [ 189.396980][T15138] ? __pfx_public_dev_mount+0x10/0x10 [ 189.402521][T15138] fs_context_for_reconfigure+0x46/0x60 [ 189.408128][T15138] reconfigure_single+0x2e/0x90 [ 189.412984][T15138] public_dev_mount+0x4f/0xb0 [ 189.417752][T15138] legacy_get_tree+0x77/0xd0 [ 189.422432][T15138] vfs_get_tree+0x56/0x1e0 [ 189.426988][T15138] do_new_mount+0x227/0x690 [ 189.431499][T15138] path_mount+0x49b/0xb30 [ 189.435850][T15138] __se_sys_mount+0x27c/0x2d0 [ 189.440519][T15138] __x64_sys_mount+0x67/0x80 [ 189.445101][T15138] x64_sys_call+0x203e/0x2d60 [ 189.449819][T15138] do_syscall_64+0xc9/0x1c0 [ 189.454359][T15138] ? clear_bhb_loop+0x55/0xb0 [ 189.459103][T15138] ? clear_bhb_loop+0x55/0xb0 [ 189.463850][T15138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.470001][T15138] RIP: 0033:0x7f08bfbacef9 [ 189.474439][T15138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.494086][T15138] RSP: 002b:00007f08be827038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.502482][T15138] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbacef9 [ 189.510483][T15138] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000000000000 [ 189.518482][T15138] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 189.526489][T15138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.534546][T15138] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 189.542690][T15138] [ 189.764650][T15142] syz.3.2371[15142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.764790][T15142] syz.3.2371[15142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.779824][T15142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 189.801060][T15142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'. [ 189.868085][T15144] netem: change failed [ 189.924861][T15151] loop1: detected capacity change from 0 to 1024 [ 189.936409][T15151] EXT4-fs: dax option not supported [ 190.016185][T15159] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 190.018475][T15163] Â: renamed from wg0 (while UP) [ 190.049824][T15168] netlink: 'syz.4.2381': attribute type 4 has an invalid length. [ 190.057776][T15168] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2381'. [ 190.191745][ T3336] kernel read not supported for file inotify (pid: 3336 comm: kworker/0:4) [ 190.383038][T15221] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15221 comm=syz.4.2386 [ 190.411688][T15225] syz.2.2387[15225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.411807][T15225] syz.2.2387[15225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.437318][T15225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.462366][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2387'. [ 190.670484][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.777522][T15283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'. [ 190.793496][T15283] loop2: detected capacity change from 0 to 1024 [ 190.800728][T15283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.808204][T15283] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 190.828676][T15283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.843686][T15283] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 190.867640][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.910405][T15304] SELinux: policydb version -570608695 does not match my version range 15-33 [ 190.965426][T15304] SELinux: failed to load policy [ 191.057444][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2398'. [ 191.066531][T15329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2398'. [ 191.108802][T15338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.212212][T15354] SELinux: policydb version -570608695 does not match my version range 15-33 [ 191.222685][T15354] SELinux: failed to load policy [ 191.449798][T15359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 191.456506][T15359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 191.464135][T15359] vhci_hcd vhci_hcd.0: Device attached [ 191.590499][T15350] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 191.598733][T15350] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 191.618615][T15369] vhci_hcd: connection closed [ 191.618941][ T8922] vhci_hcd: stop threads [ 191.627984][ T8922] vhci_hcd: release socket [ 191.632390][ T8922] vhci_hcd: disconnect device [ 191.666760][ T3338] vhci_hcd: vhci_device speed not set [ 191.754926][T15367] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2410'. [ 192.172401][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.219294][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.247558][T15479] loop1: detected capacity change from 0 to 164 [ 192.260848][T15479] Unable to read rock-ridge attributes [ 192.263847][T15428] loop0: detected capacity change from 0 to 128 [ 192.276771][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 192.276784][ T29] audit: type=1400 audit(1725775811.811:5687): avc: denied { mount } for pid=15478 comm="syz.1.2414" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 192.277430][T15479] Unable to read rock-ridge attributes [ 192.284562][T15428] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 192.329569][T15482] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 192.348069][ T29] audit: type=1400 audit(1725775811.871:5688): avc: denied { unmount } for pid=14041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 192.412971][T15495] netem: incorrect ge model size [ 192.418026][T15495] netem: change failed [ 192.452830][T15500] loop2: detected capacity change from 0 to 128 [ 192.479349][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.517846][ T29] audit: type=1400 audit(1725775812.051:5689): avc: denied { bind } for pid=15499 comm="syz.2.2422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.544037][T15506] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2422'. [ 192.573598][ T29] audit: type=1400 audit(1725775812.071:5690): avc: denied { write } for pid=15499 comm="syz.2.2422" path="socket:[35855]" dev="sockfs" ino=35855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.604278][T15506] futex_wake_op: syz.2.2422 tries to shift op by 32; fix this program [ 192.916034][T15551] SELinux: policydb version -570608695 does not match my version range 15-33 [ 192.931961][T15551] SELinux: failed to load policy [ 192.956493][T15556] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.970967][T15556] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.037963][T15563] loop0: detected capacity change from 0 to 164 [ 193.049696][T15563] Unable to read rock-ridge attributes [ 193.055741][T15563] Unable to read rock-ridge attributes [ 193.160680][T15569] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 193.200973][ T29] audit: type=1400 audit(1725775812.731:5691): avc: denied { map } for pid=15586 comm="syz.0.2432" path="socket:[35898]" dev="sockfs" ino=35898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.224413][ T29] audit: type=1400 audit(1725775812.731:5692): avc: denied { read } for pid=15586 comm="syz.0.2432" path="socket:[35898]" dev="sockfs" ino=35898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 193.272769][T15594] loop0: detected capacity change from 0 to 2048 [ 193.279609][T15594] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.287348][T15594] ext4: Unknown parameter 'audit' [ 193.519558][T15626] delete_channel: no stack [ 193.643819][ T29] audit: type=1400 audit(1725775813.171:5693): avc: denied { create } for pid=15672 comm="syz.1.2439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.836346][T15699] netem: change failed [ 193.935209][T15706] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 193.943575][T15706] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 194.168835][T15738] SELinux: policydb version -570608695 does not match my version range 15-33 [ 194.194093][T15738] SELinux: failed to load policy [ 194.441386][T15779] netem: change failed [ 194.647896][ T29] audit: type=1326 audit(1725775814.181:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15804 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 194.673081][T15809] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2459'. [ 194.682654][T15809] netlink: 'syz.3.2459': attribute type 10 has an invalid length. [ 194.689327][ T29] audit: type=1326 audit(1725775814.191:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15804 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 194.714143][ T29] audit: type=1326 audit(1725775814.191:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15804 comm="syz.2.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08bfbacef9 code=0x7ffc0000 [ 194.739919][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.747170][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.782397][T15809] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.789723][T15809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.797125][T15809] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.804272][T15809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.885230][T15809] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.998060][T15869] SELinux: policydb version -570608695 does not match my version range 15-33 [ 195.007801][T15869] SELinux: failed to load policy [ 195.034883][T15872] loop2: detected capacity change from 0 to 512 [ 195.043590][T15872] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.057279][T15872] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 195.095195][T15881] syz.2.2473[15881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.095261][T15881] syz.2.2473[15881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.111906][T15881] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.134459][T15881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2473'. [ 195.230895][T15885] syz.0.2474[15885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.231021][T15885] syz.0.2474[15885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.253720][T15885] xt_TPROXY: Can be used only with -p tcp or -p udp [ 195.296911][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2474'. [ 195.375643][T15889] loop2: detected capacity change from 0 to 2048 [ 195.400358][T15889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.429348][T15889] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 16: comm syz.2.2476: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 195.485154][T13448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.646081][T15905] FAULT_INJECTION: forcing a failure. [ 195.646081][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 195.658760][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.2.2481 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 195.669574][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.679704][T15905] Call Trace: [ 195.682979][T15905] [ 195.685909][T15905] dump_stack_lvl+0xf2/0x150 [ 195.690592][T15905] dump_stack+0x15/0x20 [ 195.694750][T15905] should_fail_ex+0x229/0x230 [ 195.699427][T15905] ? cond_bools_copy+0x30/0x80 [ 195.704196][T15905] should_failslab+0x8f/0xb0 [ 195.708804][T15905] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 195.715145][T15905] kmemdup_noprof+0x2a/0x60 [ 195.719650][T15905] cond_bools_copy+0x30/0x80 [ 195.724397][T15905] hashtab_duplicate+0x12c/0x370 [ 195.729334][T15905] ? __pfx_cond_bools_copy+0x10/0x10 [ 195.734691][T15905] ? __pfx_cond_bools_destroy+0x10/0x10 [ 195.740332][T15905] cond_policydb_dup+0xdb/0x710 [ 195.745203][T15905] ? __kmalloc_node_track_caller_noprof+0x17e/0x380 [ 195.751944][T15905] security_set_bools+0xa8/0x350 [ 195.756902][T15905] ? sel_commit_bools_write+0x16a/0x260 [ 195.762538][T15905] sel_commit_bools_write+0x1e4/0x260 [ 195.767921][T15905] vfs_writev+0x402/0x880 [ 195.772253][T15905] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 195.778168][T15905] ? mutex_lock+0xd/0x40 [ 195.782487][T15905] do_writev+0xf8/0x220 [ 195.786648][T15905] __x64_sys_writev+0x45/0x50 [ 195.791328][T15905] x64_sys_call+0x1f18/0x2d60 [ 195.796096][T15905] do_syscall_64+0xc9/0x1c0 [ 195.800657][T15905] ? clear_bhb_loop+0x55/0xb0 [ 195.805444][T15905] ? clear_bhb_loop+0x55/0xb0 [ 195.810109][T15905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.816090][T15905] RIP: 0033:0x7f08bfbacef9 [ 195.820505][T15905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.840276][T15905] RSP: 002b:00007f08be827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 195.848682][T15905] RAX: ffffffffffffffda RBX: 00007f08bfd65f80 RCX: 00007f08bfbacef9 [ 195.856818][T15905] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000003 [ 195.864817][T15905] RBP: 00007f08be827090 R08: 0000000000000000 R09: 0000000000000000 [ 195.872871][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.880902][T15905] R13: 0000000000000000 R14: 00007f08bfd65f80 R15: 00007fffdacaa418 [ 195.888869][T15905] [ 195.912161][T15907] loop1: detected capacity change from 0 to 512 [ 195.925273][T15907] EXT4-fs: dax option not supported [ 196.002192][T15921] SELinux: policydb version -570608695 does not match my version range 15-33 [ 196.011921][T15921] SELinux: failed to load policy [ 196.143608][T15934] loop1: detected capacity change from 0 to 1024 [ 196.153175][T15934] EXT4-fs: Ignoring removed oldalloc option [ 196.177630][T15936] Cannot find del_set index 0 as target [ 196.185144][T15934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.199811][T15936] SELinux: failed to load policy [ 196.240852][T15939] syz.1.2494 (15939) used greatest stack depth: 9568 bytes left [ 196.263599][T14041] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.320361][T15947] SELinux: policydb version -570608695 does not match my version range 15-33 [ 196.340716][T15947] SELinux: failed to load policy [ 196.345894][T15950] SELinux: policydb version -570608695 does not match my version range 15-33 [ 196.362729][T15950] SELinux: failed to load policy [ 196.538645][T15958] loop0: detected capacity change from 0 to 2048 [ 196.594135][T15932] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2493'. [ 196.617625][T15958] loop0: p3 < > p4 < > [ 196.621847][T15958] loop0: partition table partially beyond EOD, truncated [ 196.636369][T15958] loop0: p3 start 4284289 is beyond EOD, truncated [ 196.657779][T15952] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2501'. [ 196.904224][T15970] syz.0.2506[15970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.904292][T15970] syz.0.2506[15970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.919412][T15970] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.940489][T15970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2506'. [ 197.224715][T15979] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 197.228360][T15977] lo: entered allmulticast mode [ 197.331901][T15983] loop2: detected capacity change from 0 to 164 [ 197.390970][T15989] SELinux: policydb version -570608695 does not match my version range 15-33 [ 197.400043][T15989] SELinux: failed to load policy [ 197.418711][T15993] SELinux: policydb version -570608695 does not match my version range 15-33 [ 197.429292][T15993] SELinux: failed to load policy [ 197.452613][T15995] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 197.460886][T15995] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 197.494920][T16006] FAULT_INJECTION: forcing a failure. [ 197.494920][T16006] name failslab, interval 1, probability 0, space 0, times 0 [ 197.507600][T16006] CPU: 0 UID: 0 PID: 16006 Comm: syz.4.2522 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 197.518737][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 197.528799][T16006] Call Trace: [ 197.532118][T16006] [ 197.535082][T16006] dump_stack_lvl+0xf2/0x150 [ 197.539712][T16006] dump_stack+0x15/0x20 [ 197.543858][T16006] should_fail_ex+0x229/0x230 [ 197.548601][T16006] ? vm_area_alloc+0x2c/0x130 [ 197.553267][T16006] should_failslab+0x8f/0xb0 [ 197.557854][T16006] kmem_cache_alloc_noprof+0x4c/0x290 [ 197.563326][T16006] vm_area_alloc+0x2c/0x130 [ 197.567845][T16006] mmap_region+0x88b/0x1620 [ 197.572486][T16006] ? mm_get_unmapped_area+0x8a/0xa0 [ 197.577682][T16006] ? security_mmap_addr+0x4c/0x70 [ 197.582761][T16006] ? __get_unmapped_area+0x2d1/0x300 [ 197.588037][T16006] do_mmap+0x72a/0xb70 [ 197.592216][T16006] ? security_mmap_file+0x128/0x150 [ 197.597507][T16006] vm_mmap_pgoff+0x133/0x290 [ 197.602107][T16006] ksys_mmap_pgoff+0xd0/0x340 [ 197.606778][T16006] ? fpregs_assert_state_consistent+0x83/0xa0 [ 197.612865][T16006] x64_sys_call+0x1884/0x2d60 [ 197.617649][T16006] do_syscall_64+0xc9/0x1c0 [ 197.622142][T16006] ? clear_bhb_loop+0x55/0xb0 [ 197.626870][T16006] ? clear_bhb_loop+0x55/0xb0 [ 197.631702][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.637592][T16006] RIP: 0033:0x7f827e60cef9 [ 197.642103][T16006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.661762][T16006] RSP: 002b:00007f827d287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.670280][T16006] RAX: ffffffffffffffda RBX: 00007f827e7c5f80 RCX: 00007f827e60cef9 [ 197.678307][T16006] RDX: 0000000000000000 RSI: 0000000000fbe000 RDI: 0000000020000000 [ 197.686333][T16006] RBP: 00007f827d287090 R08: ffffffffffffffff R09: 0000000000000000 [ 197.694291][T16006] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 197.702248][T16006] R13: 0000000000000000 R14: 00007f827e7c5f80 R15: 00007ffcbffbed18 [ 197.710308][T16006] [ 197.790662][T16028] SELinux: policydb version -570608695 does not match my version range 15-33 [ 197.799763][T16028] SELinux: failed to load policy [ 197.849185][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.970031][T16061] loop1: detected capacity change from 0 to 164 [ 197.979650][T16061] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 198.065790][T16072] netem: change failed [ 198.119897][T16082] FAULT_INJECTION: forcing a failure. [ 198.119897][T16082] name failslab, interval 1, probability 0, space 0, times 0 [ 198.122991][T16084] loop1: detected capacity change from 0 to 128 [ 198.132594][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.0.2536 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 198.140904][T16084] EXT4-fs: Ignoring removed nobh option [ 198.149640][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 198.149655][T16082] Call Trace: [ 198.149663][T16082] [ 198.149670][T16082] dump_stack_lvl+0xf2/0x150 [ 198.149696][T16082] dump_stack+0x15/0x20 [ 198.149733][T16082] should_fail_ex+0x229/0x230 [ 198.161168][T16084] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.165295][T16082] ? dup_task_struct+0x6c/0x710 [ 198.169143][T16084] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.171488][T16082] should_failslab+0x8f/0xb0 [ 198.216502][T16082] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 198.222336][T16082] dup_task_struct+0x6c/0x710 [ 198.227110][T16082] ? path_openat+0x19bc/0x1f10 [ 198.231882][T16082] copy_process+0x3a9/0x1f90 [ 198.236491][T16082] ? _copy_from_user+0x9a/0xd0 [ 198.241443][T16082] kernel_clone+0x167/0x5e0 [ 198.245983][T16082] __se_sys_clone3+0x1b5/0x1f0 [ 198.250839][T16082] __x64_sys_clone3+0x31/0x40 [ 198.255530][T16082] x64_sys_call+0x287d/0x2d60 [ 198.260246][T16082] do_syscall_64+0xc9/0x1c0 [ 198.264823][T16082] ? clear_bhb_loop+0x55/0xb0 [ 198.269502][T16082] ? clear_bhb_loop+0x55/0xb0 [ 198.274352][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.280262][T16082] RIP: 0033:0x7f4f3410cef9 [ 198.284679][T16082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.304520][T16082] RSP: 002b:00007f4f32d86f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 198.313075][T16082] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f4f3410cef9 [ 198.321050][T16082] RDX: 00007f4f32d86f20 RSI: 0000000000000058 RDI: 00007f4f32d86f20 [ 198.329560][T16082] RBP: 00007f4f32d87090 R08: 0000000000000000 R09: 0000000000000058 [ 198.337537][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.345511][T16082] R13: 0000000000000000 R14: 00007f4f342c5f80 R15: 00007ffc320ffce8 [ 198.353495][T16082] [ 198.360424][T14041] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.432217][T16121] syz.0.2540[16121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.432309][T16121] syz.0.2540[16121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.447621][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 198.447635][ T29] audit: type=1326 audit(1725775817.981:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.454290][T16121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 198.465234][T16116] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 198.494488][T16121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2540'. [ 198.506310][ T29] audit: type=1326 audit(1725775817.981:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.535464][ T29] audit: type=1326 audit(1725775817.981:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.559235][ T29] audit: type=1326 audit(1725775817.981:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.575958][T16130] SELinux: policydb version -570608695 does not match my version range 15-33 [ 198.582731][ T29] audit: type=1326 audit(1725775818.001:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.593453][T16130] SELinux: failed to load policy [ 198.615229][ T29] audit: type=1326 audit(1725775818.001:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.643768][ T29] audit: type=1326 audit(1725775818.001:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.667178][ T29] audit: type=1326 audit(1725775818.001:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.690948][ T29] audit: type=1326 audit(1725775818.001:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.714542][ T29] audit: type=1326 audit(1725775818.001:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16119 comm="syz.0.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 198.720176][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 198.914377][T16170] netem: change failed [ 198.928608][T16182] loop1: detected capacity change from 0 to 128 [ 198.935156][T16182] vfat: Unknown parameter '' [ 199.066583][T16188] delete_channel: no stack [ 199.075400][T16194] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 199.088642][T16184] delete_channel: no stack [ 199.444586][T16205] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2555'. [ 199.613431][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.641339][T16210] SELinux: policydb version -570608695 does not match my version range 15-33 [ 199.650335][T16210] SELinux: failed to load policy [ 199.810266][T16217] loop2: detected capacity change from 0 to 128 [ 199.904425][T16226] netem: change failed [ 199.908764][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2562'. [ 199.971944][T16236] syz.3.2566[16236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.972051][T16236] syz.3.2566[16236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.983426][T16235] FAULT_INJECTION: forcing a failure. [ 199.983426][T16235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.998132][T16236] xt_TPROXY: Can be used only with -p tcp or -p udp [ 200.008652][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.1.2567 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 200.020445][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2566'. [ 200.025846][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 200.025861][T16235] Call Trace: [ 200.025868][T16235] [ 200.025875][T16235] dump_stack_lvl+0xf2/0x150 [ 200.056147][T16235] dump_stack+0x15/0x20 [ 200.060312][T16235] should_fail_ex+0x229/0x230 [ 200.064991][T16235] should_fail+0xb/0x10 [ 200.069147][T16235] should_fail_usercopy+0x1a/0x20 [ 200.074185][T16235] fpu__restore_sig+0x11a/0xaf0 [ 200.079042][T16235] ? copy_fpstate_to_sigframe+0x61d/0x720 [ 200.084908][T16235] restore_sigcontext+0x1b5/0x220 [ 200.089989][T16235] __do_sys_rt_sigreturn+0xc5/0x150 [ 200.095277][T16235] x64_sys_call+0x28e1/0x2d60 [ 200.099963][T16235] do_syscall_64+0xc9/0x1c0 [ 200.104659][T16235] ? clear_bhb_loop+0x55/0xb0 [ 200.109453][T16235] ? clear_bhb_loop+0x55/0xb0 [ 200.114263][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.120294][T16235] RIP: 0033:0x7fb164b6cef7 [ 200.124722][T16235] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 200.144336][T16235] RSP: 002b:00007fb1637e7038 EFLAGS: 00000246 [ 200.150600][T16235] RAX: 00000000000001c1 RBX: 00007fb164d25f80 RCX: 00007fb164b6cef9 [ 200.158744][T16235] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020001080 [ 200.166755][T16235] RBP: 00007fb1637e7090 R08: 0000000000000001 R09: 0000000000000000 [ 200.175159][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.183173][T16235] R13: 0000000000000000 R14: 00007fb164d25f80 R15: 00007ffec94b44d8 [ 200.191236][T16235] [ 200.412509][T16215] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2559'. [ 200.436690][T16247] delete_channel: no stack [ 200.863265][T16251] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2572'. [ 201.045873][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2575'. [ 201.117675][T16273] netem: change failed [ 201.397366][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 201.472638][T16332] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 201.701427][T16386] SELinux: policydb version -570608695 does not match my version range 15-33 [ 201.711754][T16386] SELinux: failed to load policy [ 201.913436][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 202.014979][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'. [ 202.097699][T16447] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 202.105932][T16447] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 202.118076][T16452] SELinux: policydb version -570608695 does not match my version range 15-33 [ 202.127181][T16452] SELinux: failed to load policy [ 203.096705][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'. [ 203.217407][T16489] netlink: 'syz.3.2611': attribute type 21 has an invalid length. [ 203.225267][T16489] netlink: 'syz.3.2611': attribute type 15 has an invalid length. [ 203.233097][T16489] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2611'. [ 203.748808][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 203.748823][ T29] audit: type=1326 audit(1725775823.281:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.802219][T16500] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2612'. [ 203.806895][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 203.827317][T16566] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 203.835529][T16566] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 203.844047][ T29] audit: type=1326 audit(1725775823.281:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.867621][ T29] audit: type=1326 audit(1725775823.281:6139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.891173][ T29] audit: type=1326 audit(1725775823.281:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.914652][ T29] audit: type=1326 audit(1725775823.281:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.938231][ T29] audit: type=1326 audit(1725775823.281:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.961852][ T29] audit: type=1326 audit(1725775823.281:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 203.985552][ T29] audit: type=1326 audit(1725775823.281:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 204.009080][ T29] audit: type=1326 audit(1725775823.281:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 204.032662][ T29] audit: type=1326 audit(1725775823.281:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16565 comm="syz.1.2616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb164b6cef9 code=0x7ffc0000 [ 204.089980][T16606] SELinux: policydb version -570608695 does not match my version range 15-33 [ 204.104291][T16606] SELinux: failed to load policy [ 205.053939][T16637] syz.0.2625 (16637) used greatest stack depth: 9296 bytes left [ 205.476477][T16652] SELinux: policydb version -570608695 does not match my version range 15-33 [ 205.501606][T16652] SELinux: failed to load policy [ 205.559271][T16657] SELinux: policydb version -570608695 does not match my version range 15-33 [ 205.583616][T16657] SELinux: failed to load policy [ 205.724615][T16663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2635'. [ 205.787492][T16665] SELinux: policydb version -570608695 does not match my version range 15-33 [ 205.816146][T16665] SELinux: failed to load policy [ 205.882730][T16655] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2631'. [ 205.992288][T16671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.134617][T16678] netem: incorrect gi model size [ 206.139797][T16678] netem: change failed [ 206.230315][T16681] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 206.262288][T16686] netem: change failed [ 206.413900][T16695] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 206.422276][T16695] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 206.479704][T16697] loop1: detected capacity change from 0 to 128 [ 206.492622][T16697] vfat: Unknown parameter '' [ 207.201553][T16716] syz.3.2657[16716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.201672][T16716] syz.3.2657[16716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.298382][T16718] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 207.475755][T16725] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2652'. [ 207.624333][T16728] program syz.4.2660 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.966660][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2664'. [ 208.169089][T16463] syz.0.2594 (16463) used greatest stack depth: 7808 bytes left [ 208.198267][T16763] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 208.206712][T16763] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 208.314267][T16777] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2677'. [ 208.324934][T16466] syz.0.2594 (16466) used greatest stack depth: 7696 bytes left [ 208.463866][T16779] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2678'. [ 208.755785][T16786] delete_channel: no stack [ 208.880350][T16789] delete_channel: no stack [ 208.931449][T16796] SELinux: policydb version -570608695 does not match my version range 15-33 [ 208.941162][T16796] SELinux: failed to load policy [ 208.975422][T16800] SELinux: policydb version -570608695 does not match my version range 15-33 [ 208.984600][T16800] SELinux: failed to load policy [ 209.001402][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 209.001416][ T29] audit: type=1326 audit(1725775828.531:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.005719][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 209.007950][ T29] audit: type=1326 audit(1725775828.531:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.064011][ T29] audit: type=1326 audit(1725775828.531:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.071379][T16805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.087705][ T29] audit: type=1326 audit(1725775828.531:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.107124][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2689'. [ 209.117961][ T29] audit: type=1326 audit(1725775828.531:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.150676][ T29] audit: type=1326 audit(1725775828.531:6233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.174574][ T29] audit: type=1326 audit(1725775828.531:6234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.198188][ T29] audit: type=1326 audit(1725775828.531:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.221713][ T29] audit: type=1326 audit(1725775828.531:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.236461][T16806] delete_channel: no stack [ 209.245336][ T29] audit: type=1326 audit(1725775828.531:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16801 comm="syz.0.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3410cef9 code=0x7ffc0000 [ 209.307414][T16810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.458219][T16814] SELinux: policydb version -570608695 does not match my version range 15-33 [ 209.467592][T16814] SELinux: failed to load policy [ 209.622313][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2695'. [ 209.631967][T16822] program syz.4.2695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.714449][T16828] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 209.831786][ T3338] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 209.839726][ T3338] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 209.866219][ T3338] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 209.884315][ T3338] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 209.904323][T16834] loop1: detected capacity change from 0 to 512 [ 210.012577][T16851] SELinux: policydb version -570608695 does not match my version range 15-33 [ 210.041459][T16851] SELinux: failed to load policy [ 210.076957][T16836] chnl_net:caif_netlink_parms(): no params data found [ 210.086325][T16855] netlink: 'syz.4.2705': attribute type 3 has an invalid length. [ 210.132698][T16862] FAULT_INJECTION: forcing a failure. [ 210.132698][T16862] name failslab, interval 1, probability 0, space 0, times 0 [ 210.145461][T16862] CPU: 1 UID: 0 PID: 16862 Comm: syz.1.2707 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 210.156221][T16862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.166278][T16862] Call Trace: [ 210.169596][T16862] [ 210.172585][T16862] dump_stack_lvl+0xf2/0x150 [ 210.177260][T16862] dump_stack+0x15/0x20 [ 210.181414][T16862] should_fail_ex+0x229/0x230 [ 210.186085][T16862] ? audit_log_start+0x34c/0x6b0 [ 210.191208][T16862] should_failslab+0x8f/0xb0 [ 210.195826][T16862] kmem_cache_alloc_noprof+0x4c/0x290 [ 210.201418][T16862] audit_log_start+0x34c/0x6b0 [ 210.206367][T16862] ? kmem_cache_free+0xd8/0x280 [ 210.211279][T16862] audit_seccomp+0x4b/0x130 [ 210.215814][T16862] __seccomp_filter+0x6fa/0x1180 [ 210.220787][T16862] ? avc_has_perm+0xd4/0x160 [ 210.225388][T16862] __secure_computing+0x9f/0x1c0 [ 210.230396][T16862] syscall_trace_enter+0xd1/0x1f0 [ 210.235425][T16862] ? fpregs_assert_state_consistent+0x83/0xa0 [ 210.241510][T16862] do_syscall_64+0xaa/0x1c0 [ 210.246066][T16862] ? clear_bhb_loop+0x55/0xb0 [ 210.250749][T16862] ? clear_bhb_loop+0x55/0xb0 [ 210.255427][T16862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.261384][T16862] RIP: 0033:0x7fb164b6b93c [ 210.265796][T16862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 210.285401][T16862] RSP: 002b:00007fb1637e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.293904][T16862] RAX: ffffffffffffffda RBX: 00007fb164d25f80 RCX: 00007fb164b6b93c [ 210.301880][T16862] RDX: 000000000000000f RSI: 00007fb1637e70a0 RDI: 0000000000000006 [ 210.310306][T16862] RBP: 00007fb1637e7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.318513][T16862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.326492][T16862] R13: 0000000000000000 R14: 00007fb164d25f80 R15: 00007ffec94b44d8 [ 210.334466][T16862] [ 210.352470][T16836] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.359634][T16836] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.367203][T16836] bridge_slave_0: entered allmulticast mode [ 210.376475][T16836] bridge_slave_0: entered promiscuous mode [ 210.398161][T16836] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.405301][T16836] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.412969][T16879] FAULT_INJECTION: forcing a failure. [ 210.412969][T16879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.426203][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.0.2712 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 210.437092][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.447491][T16879] Call Trace: [ 210.450770][T16879] [ 210.453696][T16879] dump_stack_lvl+0xf2/0x150 [ 210.458346][T16879] dump_stack+0x15/0x20 [ 210.462520][T16879] should_fail_ex+0x229/0x230 [ 210.467262][T16879] should_fail+0xb/0x10 [ 210.471418][T16879] should_fail_usercopy+0x1a/0x20 [ 210.476589][T16879] strncpy_from_user+0x25/0x270 [ 210.481455][T16879] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 210.487254][T16879] getname_flags+0xb0/0x3b0 [ 210.491848][T16879] user_path_create+0x26/0x110 [ 210.496614][T16879] bpf_obj_pin_user+0xc9/0x260 [ 210.501380][T16879] bpf_obj_pin+0xd8/0xf0 [ 210.505637][T16879] __sys_bpf+0x5ad/0x7a0 [ 210.506346][T16836] bridge_slave_1: entered allmulticast mode [ 210.509879][T16879] __x64_sys_bpf+0x43/0x50 [ 210.516359][T16836] bridge_slave_1: entered promiscuous mode [ 210.520154][T16879] x64_sys_call+0x2625/0x2d60 [ 210.530655][T16879] do_syscall_64+0xc9/0x1c0 [ 210.535213][T16879] ? clear_bhb_loop+0x55/0xb0 [ 210.539892][T16879] ? clear_bhb_loop+0x55/0xb0 [ 210.544571][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.550480][T16879] RIP: 0033:0x7f4f3410cef9 [ 210.554969][T16879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.574778][T16879] RSP: 002b:00007f4f32d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.583196][T16879] RAX: ffffffffffffffda RBX: 00007f4f342c5f80 RCX: 00007f4f3410cef9 [ 210.591258][T16879] RDX: 0000000000000018 RSI: 0000000020000380 RDI: 0000000000000006 [ 210.599232][T16879] RBP: 00007f4f32d87090 R08: 0000000000000000 R09: 0000000000000000 [ 210.607206][T16879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.615180][T16879] R13: 0000000000000000 R14: 00007f4f342c5f80 R15: 00007ffc320ffce8 [ 210.623324][T16879] [ 210.652649][ T40] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.668607][T16836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.681107][T16886] syz.1.2713[16886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.681167][T16886] syz.1.2713[16886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.685797][T16887] loop0: detected capacity change from 0 to 128 [ 210.695642][T16836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.743799][T16836] team0: Port device team_slave_0 added [ 210.751147][T16836] team0: Port device team_slave_1 added [ 210.759013][T16887] vfat: Unknown parameter '' [ 210.781425][T16836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.788421][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.814680][T16836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.024633][T16836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.031659][T16836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.057594][T16836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.208355][ T40] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.284564][T16836] hsr_slave_0: entered promiscuous mode [ 211.299240][T16836] hsr_slave_1: entered promiscuous mode [ 211.328038][T16836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.348668][T16836] Cannot create hsr debugfs directory [ 211.358426][ T40] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.428731][ T40] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.440567][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 211.451107][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 211.530409][ T40] bridge_slave_1: left allmulticast mode [ 211.536301][ T40] bridge_slave_1: left promiscuous mode [ 211.542076][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.586518][ T40] bridge_slave_0: left allmulticast mode [ 211.592251][ T40] bridge_slave_0: left promiscuous mode [ 211.598018][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.677192][T16922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16922 comm=syz.1.2721 [ 211.694280][T16927] loop0: detected capacity change from 0 to 512 [ 211.703765][T16927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 211.712746][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.726555][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.746007][T16927] EXT4-fs error (device loop0): ext4_quota_enable:7022: comm syz.0.2722: inode #512: comm syz.0.2722: iget: illegal inode # [ 211.760958][T16932] loop1: detected capacity change from 0 to 1024 [ 211.770345][ T40] bond0 (unregistering): Released all slaves [ 211.777732][T16927] EXT4-fs error (device loop0): ext4_quota_enable:7025: comm syz.0.2722: Bad quota inode: 512, type: 2 [ 211.794592][T16932] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.813344][T16927] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-117, ino=512). Please run e2fsck to fix. [ 211.820695][T16932] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 211.840724][T16932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.844486][T16927] EXT4-fs (loop0): mount failed [ 211.848900][T16923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2722'. [ 211.861295][T16932] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.2721: Freeing blocks not in datazone - block = 0, count = 4096 [ 211.878712][T16932] EXT4-fs (loop1): 1 orphan inode deleted [ 211.884856][T16932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 211.897356][T16884] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2714'. [ 211.924203][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 211.933155][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.940616][T16923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.948010][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.2721: path /127/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 211.968243][T16923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.975686][T16923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.983578][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.004310][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 18: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.047370][ T40] hsr_slave_0: left promiscuous mode [ 212.055181][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 19: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.075737][ T40] hsr_slave_1: left promiscuous mode [ 212.084090][T16927] futex_wake_op: syz.0.2722 tries to shift op by 144; fix this program [ 212.094139][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.101669][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.111296][T16927] IPVS: nq: TCP 172.20.20.170:0 - no destination available [ 212.118980][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 20: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.141997][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.149683][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.159029][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 21: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.184669][ T40] veth1_macvtap: left promiscuous mode [ 212.188915][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 22: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.190344][ T40] veth0_macvtap: left promiscuous mode [ 212.211517][T16914] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 23: comm syz.1.2721: path /127/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 212.216047][ T40] veth1_vlan: left promiscuous mode [ 212.241606][ T40] veth0_vlan: left promiscuous mode [ 212.434691][T14041] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.623290][ T40] team0 (unregistering): Port device team_slave_1 removed [ 212.635872][ T40] team0 (unregistering): Port device team_slave_0 removed [ 212.775153][T17034] xt_TCPMSS: Only works on TCP SYN packets [ 213.311718][T16836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.329532][T16836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.347193][T16836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.355059][T17048] SELinux: policydb version -570608695 does not match my version range 15-33 [ 213.360978][T17050] 9pnet: Could not find request transport: t [ 213.366392][T17048] SELinux: failed to load policy [ 213.373896][T17052] loop0: detected capacity change from 0 to 128 [ 213.383979][T16836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.405232][T17054] netlink: 'syz.1.2737': attribute type 7 has an invalid length. [ 213.421883][T17050] tap0: tun_chr_ioctl cmd 1074025676 [ 213.427259][T17050] tap0: owner set to 0 [ 213.486028][T16836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.512790][T16836] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.526428][ T3874] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.533535][ T3874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.547304][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.554454][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.575670][T17085] FAULT_INJECTION: forcing a failure. [ 213.575670][T17085] name failslab, interval 1, probability 0, space 0, times 0 [ 213.575699][T17085] CPU: 1 UID: 0 PID: 17085 Comm: syz.1.2745 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 213.599065][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 213.602240][T17086] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 213.609149][T17085] Call Trace: [ 213.609161][T17085] [ 213.609168][T17085] dump_stack_lvl+0xf2/0x150 [ 213.609193][T17085] dump_stack+0x15/0x20 [ 213.628128][T16836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.631446][T17085] should_fail_ex+0x229/0x230 [ 213.641839][T16836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.646388][T17085] ? mas_alloc_nodes+0x1d3/0x4a0 [ 213.646416][T17085] should_failslab+0x8f/0xb0 [ 213.666422][T17085] kmem_cache_alloc_noprof+0x4c/0x290 [ 213.666482][T17085] mas_alloc_nodes+0x1d3/0x4a0 [ 213.666538][T17085] mas_preallocate+0x773/0xc30 [ 213.666564][T17085] __split_vma+0x244/0x690 [ 213.666596][T17085] do_vmi_align_munmap+0x227/0xa60 [ 213.666681][T17085] do_vmi_munmap+0x1fb/0x250 [ 213.666708][T17085] mmap_region+0x52a/0x1620 [ 213.666737][T17085] ? security_capable+0x64/0x80 [ 213.666817][T17085] do_mmap+0x72a/0xb70 [ 213.666836][T17085] ? security_mmap_file+0x128/0x150 [ 213.666856][T17085] vm_mmap_pgoff+0x133/0x290 [ 213.666883][T17085] ksys_mmap_pgoff+0x2ea/0x340 [ 213.666973][T17085] x64_sys_call+0x1884/0x2d60 [ 213.666998][T17085] do_syscall_64+0xc9/0x1c0 [ 213.667015][T17085] ? clear_bhb_loop+0x55/0xb0 [ 213.667031][T17085] ? clear_bhb_loop+0x55/0xb0 [ 213.667047][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.667126][T17085] RIP: 0033:0x7fb164b6cef9 [ 213.667140][T17085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.667190][T17085] RSP: 002b:00007fb1637e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 213.667206][T17085] RAX: ffffffffffffffda RBX: 00007fb164d25f80 RCX: 00007fb164b6cef9 [ 213.667219][T17085] RDX: 0000000002800001 RSI: 0000000000400000 RDI: 0000000020000000 [ 213.667310][T17085] RBP: 00007fb1637e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 213.667321][T17085] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 213.667331][T17085] R13: 0000000000000000 R14: 00007fb164d25f80 R15: 00007ffec94b44d8 [ 213.667395][T17085] [ 213.727115][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.730191][T17099] SELinux: policydb version -570608695 does not match my version range 15-33 [ 213.730292][T17099] SELinux: failed to load policy [ 213.793536][T17105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'. [ 213.886018][T16836] veth0_vlan: entered promiscuous mode [ 213.893466][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2750'. [ 213.953110][T16836] veth1_vlan: entered promiscuous mode [ 213.968979][T16836] veth0_macvtap: entered promiscuous mode [ 213.969545][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'. [ 213.976553][T16836] veth1_macvtap: entered promiscuous mode [ 213.999178][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.009772][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.019690][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.030236][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.040091][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.050536][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.061169][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.071681][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.082367][T16836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.093589][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.104213][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.114151][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.124679][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.134566][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.145009][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.154976][T16836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.165492][T16836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.176843][T16836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.189621][T16836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.198538][T16836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.207296][T16836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.216118][T16836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.261004][T17126] loop1: detected capacity change from 0 to 2048 [ 214.278892][T17126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.285137][T17133] xt_TPROXY: Can be used only with -p tcp or -p udp [ 214.291088][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 214.291100][ T29] audit: type=1326 audit(1725775833.811:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.309023][T17133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2758'. [ 214.327552][ T29] audit: type=1326 audit(1725775833.811:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.360189][ T29] audit: type=1326 audit(1725775833.811:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.360237][ T29] audit: type=1326 audit(1725775833.811:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.404200][T17134] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 214.407419][ T29] audit: type=1326 audit(1725775833.811:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.407540][T17134] ================================================================== [ 214.407561][T17134] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 214.407582][T17134] [ 214.407589][T17134] write to 0xffffffff88b73c10 of 8 bytes by task 29 on cpu 0: [ 214.407605][T17134] data_alloc+0x216/0x2c0 [ 214.407622][T17134] prb_reserve+0x85e/0xb60 [ 214.407640][T17134] vprintk_store+0x53f/0x810 [ 214.407661][T17134] vprintk_emit+0x13a/0x610 [ 214.407682][T17134] vprintk_default+0x26/0x30 [ 214.407703][T17134] vprintk+0x75/0x80 [ 214.407731][T17134] _printk+0x7a/0xa0 [ 214.407751][T17134] kauditd_hold_skb+0x1a3/0x1b0 [ 214.407774][T17134] kauditd_send_queue+0x288/0x2e0 [ 214.407798][T17134] kauditd_thread+0x42a/0x650 [ 214.407823][T17134] kthread+0x1d1/0x210 [ 214.407843][T17134] ret_from_fork+0x4b/0x60 [ 214.407865][T17134] ret_from_fork_asm+0x1a/0x30 [ 214.407889][T17134] [ 214.407896][T17134] read to 0xffffffff88b73c10 of 8 bytes by task 17134 on cpu 1: [ 214.407913][T17134] data_push_tail+0x102/0x430 [ 214.407932][T17134] prb_reserve_in_last+0x773/0xc10 [ 214.407952][T17134] vprintk_store+0x45b/0x810 [ 214.407973][T17134] vprintk_emit+0x13a/0x610 [ 214.407997][T17134] vprintk_default+0x26/0x30 [ 214.408022][T17134] vprintk+0x75/0x80 [ 214.408049][T17134] _printk+0x7a/0xa0 [ 214.408070][T17134] __ext4_grp_locked_error+0x5b0/0x7b0 [ 214.408088][T17134] ext4_mb_generate_buddy+0x247/0x2d0 [ 214.408115][T17134] ext4_mb_init_cache+0x848/0xbc0 [ 214.408153][T17134] ext4_mb_init_group+0x210/0x3b0 [ 214.408180][T17134] ext4_mb_regular_allocator+0xb13/0x2370 [ 214.408210][T17134] ext4_mb_new_blocks+0x801/0x2020 [ 214.408238][T17134] ext4_ext_map_blocks+0x10a1/0x33b0 [ 214.408260][T17134] ext4_map_blocks+0x72a/0xf50 [ 214.408286][T17134] ext4_do_writepages+0xd85/0x2110 [ 214.408315][T17134] ext4_writepages+0x159/0x2e0 [ 214.408339][T17134] do_writepages+0x1d8/0x480 [ 214.408358][T17134] filemap_fdatawrite_wbc+0xdb/0x100 [ 214.408383][T17134] file_write_and_wait_range+0xc8/0x170 [ 214.408410][T17134] generic_buffers_fsync_noflush+0x4c/0x130 [ 214.408443][T17134] ext4_sync_file+0x20b/0x6c0 [ 214.408461][T17134] vfs_fsync_range+0x122/0x140 [ 214.408481][T17134] ext4_buffered_write_iter+0x338/0x380 [ 214.408499][T17134] ext4_file_write_iter+0x29f/0xe30 [ 214.408515][T17134] do_iter_readv_writev+0x3b0/0x470 [ 214.408538][T17134] vfs_writev+0x2e0/0x880 [ 214.408553][T17134] __se_sys_pwritev2+0x10c/0x1d0 [ 214.408580][T17134] __x64_sys_pwritev2+0x78/0x90 [ 214.408607][T17134] x64_sys_call+0x271f/0x2d60 [ 214.408631][T17134] do_syscall_64+0xc9/0x1c0 [ 214.408649][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.408680][T17134] [ 214.408685][T17134] value changed: 0x00000000fffff15c -> 0x00000000fffffd9b [ 214.408698][T17134] [ 214.408703][T17134] Reported by Kernel Concurrency Sanitizer on: [ 214.408713][T17134] CPU: 1 UID: 0 PID: 17134 Comm: syz.1.2757 Not tainted 6.11.0-rc6-syzkaller-00326-gd1f2d51b711a #0 [ 214.408738][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 214.408749][T17134] ================================================================== [ 214.407419][T17134] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.468010][ T29] audit: type=1326 audit(1725775833.831:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.482401][T17134] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 214.483486][ T29] audit: type=1326 audit(1725775833.831:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.488115][T17134] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.488115][T17134] [ 214.488133][T17134] EXT4-fs (loop1): Total free blocks count 0 [ 214.488144][T17134] EXT4-fs (loop1): Free/Dirty block details [ 214.488153][T17134] EXT4-fs (loop1): free_blocks=2415919104 [ 214.488164][T17134] EXT4-fs (loop1): dirty_blocks=48 [ 214.492069][ T29] audit: type=1326 audit(1725775833.831:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.496055][T17134] EXT4-fs (loop1): Block reservation details [ 214.496081][T17134] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 214.501080][ T29] audit: type=1326 audit(1725775833.831:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.523974][T17139] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 214.524176][ T29] audit: type=1326 audit(1725775833.831:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.2.2758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fa060adcef9 code=0x7ffc0000 [ 214.976754][T17126] loop1: detected capacity change from 2048 to 2047 [ 215.014508][T17134] syz.1.2757 (17134) used greatest stack depth: 7240 bytes left [ 215.025154][T14041] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /141/file1: bad entry in directory: rec_len is smaller than minimal - offset=2004, inode=0, rec_len=0, size=2048 fake=0 [ 215.050330][T14041] EXT4-fs error (device loop1): ext4_lookup:1811: inode #17: comm syz-executor: iget: bad extended attribute block 257297202722716 [ 215.064371][T14041] EXT4-fs error (device loop1): ext4_lookup:1811: inode #17: comm syz-executor: iget: bad extended attribute block 257297202722716 [ 215.342107][T17068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.388968][T17068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.460842][T17068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.519281][T17068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.590584][T17068] bridge_slave_1: left allmulticast mode [ 215.596267][T17068] bridge_slave_1: left promiscuous mode [ 215.601988][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.610796][T17068] bridge_slave_0: left allmulticast mode [ 215.616489][T17068] bridge_slave_0: left promiscuous mode [ 215.622125][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.720779][T17068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.732074][T17068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.742643][T17068] bond0 (unregistering): Released all slaves [ 215.838696][T17068] hsr_slave_0: left promiscuous mode [ 215.844397][T17068] hsr_slave_1: left promiscuous mode [ 215.850097][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.857532][T17068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.865371][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.872855][T17068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.881891][T17068] veth1_macvtap: left promiscuous mode [ 215.887568][T17068] veth0_macvtap: left promiscuous mode [ 215.893070][T17068] veth1_vlan: left promiscuous mode [ 216.001721][T17068] team0 (unregistering): Port device team_slave_1 removed [ 216.012958][T17068] team0 (unregistering): Port device team_slave_0 removed