last executing test programs: 12.382114959s ago: executing program 2 (id=11017): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 12.331586829s ago: executing program 2 (id=11020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xcd}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e000000004a7f000004"], 0x14}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) 12.232211958s ago: executing program 2 (id=11021): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xeffd, 0x0, @empty, 0x8}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r3, 0xfffffffc}}, 0x48) r4 = dup2(r2, r2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x4e22, 0x1b55, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x80}, r3}}, 0x38) 12.212499838s ago: executing program 2 (id=11022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x7cc5, 0x400, 0x2, 0x392}, &(0x7f0000000780)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040884, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_register(r2, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'recent\x00', 0x3a, 'syz1\x00', 0x3a, './file0/../file0/../file0/../file0', 0x3a, [0x50, 0x46, 0x50]}, 0x51) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) 12.168249958s ago: executing program 2 (id=11025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x2) 11.908600178s ago: executing program 2 (id=11032): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[0x0]) 11.908343698s ago: executing program 32 (id=11032): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[0x0]) 7.385480158s ago: executing program 4 (id=11098): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x22020600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 7.384060337s ago: executing program 4 (id=11100): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) modify_ldt$write(0x1, &(0x7f0000000080)={0x3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 7.329452237s ago: executing program 4 (id=11101): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000000010000000900000001000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000003197647543"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.300762267s ago: executing program 4 (id=11102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 7.145559587s ago: executing program 5 (id=11104): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 7.130552587s ago: executing program 4 (id=11105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@nogrpid}]}, 0x1, 0x504, &(0x7f0000001480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x3075c3, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r1, 0x20, 0x4000, 0x4000) r2 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r2, &(0x7f0000000880)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x81, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x300}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000600)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x20008000) unshare(0x64000600) 7.126573957s ago: executing program 5 (id=11106): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000040)={[], [{@measure}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x4, 0x569, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r4) 6.842893636s ago: executing program 3 (id=11108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 6.789507626s ago: executing program 3 (id=11109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) recvmsg$unix(r6, &(0x7f0000000400)={&(0x7f0000000280), 0x6e, &(0x7f0000000880)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f00000007c0)=""/139, 0x8b}], 0x6, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000044870000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x20000000000000}, 0x18) r11 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800007, 0x0, 0x80000000, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000000)='cpu\t>0&&\t') write$selinux_access(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='systmory_device_t:s0 /sbin/dhclient 0'], 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) 6.743906576s ago: executing program 4 (id=11110): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x9, 0x7, 0x3}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 6.730797896s ago: executing program 33 (id=11110): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x9, 0x7, 0x3}]}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 6.659651375s ago: executing program 3 (id=11112): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x2) 6.629493565s ago: executing program 3 (id=11113): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') write$binfmt_register(r0, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'recent\x00', 0x3a, 'syz1\x00', 0x3a, './file0/../file0/../file0/../file0', 0x3a, [0x50, 0x46, 0x50]}, 0x51) 6.612469506s ago: executing program 3 (id=11114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000092, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x45f, &(0x7f0000000440)="$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") 6.340497255s ago: executing program 3 (id=11116): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 6.340126865s ago: executing program 34 (id=11116): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) 6.162827054s ago: executing program 0 (id=11120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) open$dir(0x0, 0x1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0xcd}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.964777394s ago: executing program 5 (id=11122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 5.852442824s ago: executing program 5 (id=11124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x7cc5, 0x400, 0x2, 0x392}, &(0x7f0000000780)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040884, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_register(r2, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'recent\x00', 0x3a, 'syz1\x00', 0x3a, './file0/../file0/../file0/../file0', 0x3a, [0x50, 0x46, 0x50]}, 0x51) 5.814111974s ago: executing program 0 (id=11126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000092, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x45f, &(0x7f0000000440)="$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") (fail_nth: 1) 5.548992553s ago: executing program 5 (id=11127): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="170000000000000004000000ffe80a440323454d7a406549cab40000dfccbd98e57dead8583f15bcafde19bfd778656d7707a2e0bf04d2593eab01fc99a5ff162ac10cc8352da238b675488e", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 5.503830463s ago: executing program 0 (id=11128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 5.248584012s ago: executing program 5 (id=11132): r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, 0xffffffffffffffff, 0x0}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000004c0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x3}}, 0x10, 0x0}, 0x4c081) fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x3) 5.248322162s ago: executing program 35 (id=11132): r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, 0xffffffffffffffff, 0x0}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000004c0)={&(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x3}}, 0x10, 0x0}, 0x4c081) fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x3) 5.062131042s ago: executing program 0 (id=11135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x7cc5, 0x400, 0x2, 0x392}, &(0x7f0000000780)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040884, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_register(r2, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'recent\x00', 0x3a, 'syz1\x00', 0x3a, './file0/../file0/../file0/../file0', 0x3a, [0x50, 0x46, 0x50]}, 0x51) 4.676173321s ago: executing program 0 (id=11136): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x0, 0x80000000}, {0x2, 0x7d22}]}, 0x18, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) readv(r2, &(0x7f0000002380)=[{&(0x7f0000002180)=""/117, 0x75}], 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000005}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 4.47653278s ago: executing program 0 (id=11137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ff000000000006483d8a0700d600005980ffd6d2b82171374e47d78505b6e0bfa8a1fdc91309f535f7d28cdc9ddf3ef471052e16ac623c83db81b9f8e7ba000000a217888fcc414ebb6c453d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000000000000004000000000000000000000000000000000000000000000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000fff00000000008000300"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000700)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000000)="b9", 0x0, 0x5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x9, 0x2}, 0x10) 4.47613821s ago: executing program 36 (id=11137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1700000000000000ff000000000006483d8a0700d600005980ffd6d2b82171374e47d78505b6e0bfa8a1fdc91309f535f7d28cdc9ddf3ef471052e16ac623c83db81b9f8e7ba000000a217888fcc414ebb6c453d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x400000000000000}, 0x18) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000000000000004000000000000000000000000000000000000000000000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000fff00000000008000300"], 0x54}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000700)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1, 0x0, &(0x7f0000000000)="b9", 0x0, 0x5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={r10, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffc}, 0x9c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x9, 0x2}, 0x10) 3.393261618s ago: executing program 1 (id=11143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 3.352678238s ago: executing program 1 (id=11144): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000400), 0x4000) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) 2.445561386s ago: executing program 1 (id=11145): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioperm(0x80006, 0x0, 0x8000000000000001) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1.334890933s ago: executing program 1 (id=11146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002d80)={&(0x7f0000002dc0)='objagg_obj_parent_assign\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002e40)=@o_path={&(0x7f0000002e00)='./file0\x00', 0x0, 0x4014, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000012c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) pidfd_send_signal(r5, 0x20, &(0x7f0000000300)={0xb, 0x4, 0x6998}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="080001"], 0x90}, 0x1, 0x0, 0x0, 0x20024080}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) io_uring_setup(0x36ba, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x803, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.329423483s ago: executing program 6 (id=11147): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.272432003s ago: executing program 6 (id=11148): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4be, &(0x7f0000000ec0)="$eJzs3d9rW9cdAPDvlS3PTpzZ2faQBZaFLcMJWyQ7XhKzhyyDsT0FtmXvnmfLxliyjCUnsQnDYX/AYJS2tE996kuhf0Ch5E8ohUD7XkppCW2SPvShrYqkq8Z1/CuNbTXS5wPHOufea32/R+Ie6dx70Q2ga52OiKsR0RMR5yJiKF2eSUusN0t9u4cPbk/XSxK12vVPk0jSZa3nStLHo+m/9UfEP/4a8e/kybiV1bWFqWKxsJy289XSUr6yunZ+vjQ1V5grLI6Pj12auDxxcWJ03/p65c8fvfi/1/9y5e3f3fxg8pOz/6mnNZiu29iP/dTserbxWrT0RsTyQQRrg560P9l2JwIAwJ7Uv+P/JCJ+FRGPXml3NgAAAMBBqP1xML5MImoAAABAx8o0roFNMrn0WoDByGRyueY1vD+LI5liuVL97Wx5ZXGmea3scGQzs/PFwmh6rfBwZJN6e6xRf9y+sKk9HhHHI+KFoYFGOzddLs60++AHAAAAdImjm+b/nw815/8AAABAhxludwIAAADAgTP/BwAAgM637fw/6T3cRAAAAICD8Ldr1+ql1rr/9cyN1ZWF8o3zM4XKQq60Mp2bLi8v5ebK5bnGb/aVdnu+Yrm89PtYXLmVrxYq1XxldW2yVF5ZrE427us9WXCfaAAAADh8x3959/0kItb/MNAodX3pOnN16GyZp9s8Oag8gMPX0+4EgLZxgS90r73M8R0HgM6228S+/5DyAAAADs7Iz53/h271lOf/gQ7i/D90L+f/oXtl+9qdAdBeA9///P87+58NAABwMAYbJcnk0nOBg5HJ5HIRxxq3Bcgms/PFwmhE/Dgi3hvK/qjeHmt30gAAAAAAAAAAAAAAAAAAAAAAAADwnKnVkqgBAAAAHS0i83ES0bj/18jQmcHNxwf6ki+GGo8RcfPV6y/dmqpWl8fqyz/7dnn15XT5hXYcwQAAAAA2a83TW/N4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhPDx/cnm6Vw4x7/08RMfxE/J6I3uhvbNEf2Yg48iiJ3g3/lzQ3embrdyLixFb9T+ppxXCaxeb4mYgYaHP8o/sQH7rZ3fr4c7Wx/yXrzUXp/peJ043Hrfe/3rQ8q/untxz/GvFb41/PNuPfsVajb+cYJ++9md82/p2Ik71bjz+t+Mkzjr//+ufa2nbraq9FjGz5+ZN8J1a+WlrKV1bXzs+XpuYKc4XF8fGxSxOXJy5OjOZn54uF9O+WMf7/i7e+3qn/R7aJP7xL/8/ssf9f3bv14Kc7xD/7663f/xM7xK+/9r9JPwfq60da9fVmfaNTb7x7aqf+z2zT/93e/7N77P+5v//3wz1uCgAcgsrq2sJUsVhYVnlOK6UfRhoqHVZp98gEAADst8df+tudCQAAAAAAAAAAAAAAAAAAAHSvw/g5sY3x+tvXVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHX0TAAD//97Vz2I=") r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100000000}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400bb3e07824244552b3884994823605b0000a42262ae23313b71fef6b7b102a190b909aabc1ed53d13709480640a69c43da9810379560104958df62921e5162840752e9be1c8ca4a1e2bcbdbcbff1e818b3993140f09d71ebb0b81a81ee1103a33d47e", @ANYRES16=r4, @ANYBLOB="0505000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {0xffff, 0x5}, {0x7, 0xfff2}}}, 0x24}}, 0x0) 940.745872ms ago: executing program 1 (id=11149): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT], 0xac}}, 0x4040890) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom(r6, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x2}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_io_uring_setup(0x55fa, &(0x7f0000000500)={0x0, 0xdc9, 0xc6, 0x2, 0xe6}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) 707.709472ms ago: executing program 7 (id=11117): creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x0) read(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x40002060, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) 703.091342ms ago: executing program 6 (id=11150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 562.080881ms ago: executing program 6 (id=11151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f00000005c0)=[{0x0}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) 358.077461ms ago: executing program 6 (id=11152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x7cc5, 0x400, 0x2, 0x392}, &(0x7f0000000780)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040884, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f8, 0x0, 0x0, 0x0, 0x0) 298.010931ms ago: executing program 8 (id=11133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000000000001000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x2) 284.400231ms ago: executing program 6 (id=11153): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioperm(0x80006, 0x0, 0x8000000000000001) ioctl$EVIOCGBITSND(r6, 0x40044591, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 246.506201ms ago: executing program 8 (id=11154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), 0x0}, 0x20) 172.692501ms ago: executing program 8 (id=11155): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 172.308061ms ago: executing program 8 (id=11156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x0, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open(&(0x7f0000000680)='./file0\x00', 0x105800, 0xa) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xe02, &(0x7f0000000140)={0x0, 0x7cc5, 0x400, 0x2, 0x392}, &(0x7f0000000780)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20040884, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$binfmt_register(r2, &(0x7f00000005c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x10001, 0x3a, 'recent\x00', 0x3a, 'syz1\x00', 0x3a, './file0/../file0/../file0/../file0', 0x3a, [0x50, 0x46, 0x50]}, 0x51) 132.01577ms ago: executing program 8 (id=11157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), 0x0}, 0x20) 0s ago: executing program 1 (id=11158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='rxrpc_peer\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/150, 0x96, 0x2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000080)=[0x7fff]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): nknown main item tag 0x0 [ 1203.751913][ T3360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1203.759293][ T3360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1203.766817][ T3360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1203.774341][ T3360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1203.781713][ T3360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1203.789758][ T3360] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1203.807001][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1203.817608][ T8145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10421'. [ 1204.536281][ T8183] xt_CT: No such helper "netbios-ns" [ 1204.610400][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 1204.610413][ T29] audit: type=1326 audit(1736824396.490:32124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.656956][ T8188] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1204.668605][ T29] audit: type=1326 audit(1736824396.520:32125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.692876][ T29] audit: type=1326 audit(1736824396.520:32126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.717107][ T29] audit: type=1326 audit(1736824396.520:32127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.740671][ T29] audit: type=1326 audit(1736824396.520:32128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.764311][ T29] audit: type=1326 audit(1736824396.520:32129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.787941][ T29] audit: type=1326 audit(1736824396.520:32130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.812139][ T29] audit: type=1326 audit(1736824396.520:32131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.835842][ T29] audit: type=1326 audit(1736824396.520:32132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.859783][ T29] audit: type=1326 audit(1736824396.520:32133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.4.10435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1204.982599][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1205.000674][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1205.026484][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10436'. [ 1205.053628][ T8205] netlink: 'syz.0.10439': attribute type 10 has an invalid length. [ 1205.062453][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.069631][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.101667][ T8205] bridge0: left promiscuous mode [ 1205.113467][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10439'. [ 1205.158173][ T8205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.165305][ T8205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.172736][ T8205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.179876][ T8205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.189331][ T8205] bridge0: entered promiscuous mode [ 1205.196851][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1205.209570][ T8205] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1205.228784][ T8215] bridge_slave_1: left allmulticast mode [ 1205.234469][ T8215] bridge_slave_1: left promiscuous mode [ 1205.240246][ T8215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.255879][ T8215] bridge_slave_0: left allmulticast mode [ 1205.261598][ T8215] bridge_slave_0: left promiscuous mode [ 1205.267458][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.287718][ T8215] bridge0: left promiscuous mode [ 1205.310002][ T8215] bond0: (slave bridge0): Releasing backup interface [ 1205.583597][ T8276] netlink: 'syz.1.10443': attribute type 10 has an invalid length. [ 1205.592006][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.599371][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.624315][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.631436][ T8276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1205.638871][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.645926][ T8276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.664998][ T8276] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1205.668489][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10443'. [ 1205.683396][ T8287] bridge_slave_1: left allmulticast mode [ 1205.689169][ T8287] bridge_slave_1: left promiscuous mode [ 1205.694785][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.726609][ T8287] bridge_slave_0: left allmulticast mode [ 1205.732292][ T8287] bridge_slave_0: left promiscuous mode [ 1205.738058][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.763623][ T8287] bond0: (slave bridge0): Releasing backup interface [ 1205.775931][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.783413][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.790921][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.798397][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.805800][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.813327][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.820779][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.828296][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.835770][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.843252][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.850841][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.858275][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.865665][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.873106][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.880574][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.888007][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.895401][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.902881][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.910312][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.917741][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.925150][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.932673][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.940141][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.947623][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.955041][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.962482][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.969932][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.977351][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.984765][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1205.992186][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1206.000082][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1206.107095][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1206.307925][ T8367] Invalid ELF header magic: != ELF [ 1206.315982][ T8367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1206.651089][ T8423] xt_CT: No such helper "netbios-ns" [ 1206.945460][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1206.953047][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1206.960466][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1206.988984][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1206.996554][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.003960][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.011386][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.018862][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.026354][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.033751][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.041262][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.048716][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.056112][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.063605][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.076241][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.083746][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.091262][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.098698][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.106146][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.113557][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.121081][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.128506][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.135888][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.143348][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.150917][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.158389][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.165784][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.173196][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.180640][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.182951][ T8456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8456 comm=syz.0.10474 [ 1207.188063][T13807] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 1207.219051][T13807] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1207.476703][T31740] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1207.476721][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1208.013729][ T8513] netlink: 'syz.0.10492': attribute type 10 has an invalid length. [ 1208.027076][ T8510] __nla_validate_parse: 4 callbacks suppressed [ 1208.027165][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10490'. [ 1208.043620][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10492'. [ 1208.054380][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10493'. [ 1208.066873][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.074335][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.108839][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.116399][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.163608][ T8510] bridge_slave_1: left allmulticast mode [ 1208.169315][ T8510] bridge_slave_1: left promiscuous mode [ 1208.175008][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.183150][ T8510] bridge_slave_0: left allmulticast mode [ 1208.188906][ T8510] bridge_slave_0: left promiscuous mode [ 1208.194587][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.211817][ T8517] xt_CT: No such helper "netbios-ns" [ 1208.218260][ T8522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10496'. [ 1208.229847][ T8510] bridge0: left promiscuous mode [ 1208.346821][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1208.386373][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1208.550211][ T8546] xt_CT: No such helper "netbios-ns" [ 1208.611287][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1208.737855][ T8566] FAULT_INJECTION: forcing a failure. [ 1208.737855][ T8566] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.750679][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.3.10511 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1208.761483][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1208.771544][ T8566] Call Trace: [ 1208.774932][ T8566] [ 1208.777872][ T8566] dump_stack_lvl+0xf2/0x150 [ 1208.782484][ T8566] dump_stack+0x15/0x1a [ 1208.786666][ T8566] should_fail_ex+0x223/0x230 [ 1208.791367][ T8566] should_failslab+0x8f/0xb0 [ 1208.796019][ T8566] kmem_cache_alloc_noprof+0x52/0x320 [ 1208.801392][ T8566] ? audit_log_start+0x34c/0x6b0 [ 1208.806396][ T8566] audit_log_start+0x34c/0x6b0 [ 1208.811164][ T8566] audit_seccomp+0x4b/0x130 [ 1208.815662][ T8566] __seccomp_filter+0x6fa/0x1180 [ 1208.820671][ T8566] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1208.826361][ T8566] ? vfs_write+0x596/0x920 [ 1208.830790][ T8566] __secure_computing+0x9f/0x1c0 [ 1208.835823][ T8566] syscall_trace_enter+0xd1/0x1f0 [ 1208.840848][ T8566] ? fpregs_assert_state_consistent+0x83/0xa0 [ 1208.847098][ T8566] do_syscall_64+0xaa/0x1c0 [ 1208.851601][ T8566] ? clear_bhb_loop+0x55/0xb0 [ 1208.856274][ T8566] ? clear_bhb_loop+0x55/0xb0 [ 1208.860950][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.866872][ T8566] RIP: 0033:0x7f893b0c5d29 [ 1208.871324][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.890966][ T8566] RSP: 002b:00007f8939737038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1208.899371][ T8566] RAX: ffffffffffffffda RBX: 00007f893b2b5fa0 RCX: 00007f893b0c5d29 [ 1208.907396][ T8566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 1208.915371][ T8566] RBP: 00007f8939737090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.923358][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.931326][ T8566] R13: 0000000000000000 R14: 00007f893b2b5fa0 R15: 00007ffc70e6f488 [ 1208.939327][ T8566] [ 1208.955094][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10510'. [ 1209.267688][ T8591] syzkaller0: entered promiscuous mode [ 1209.273217][ T8591] syzkaller0: entered allmulticast mode [ 1209.626634][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1209.635084][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1209.667860][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 1209.667936][ T29] audit: type=1326 audit(1736824401.550:32584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.747396][ T29] audit: type=1326 audit(1736824401.580:32585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.815201][ T29] audit: type=1326 audit(1736824401.660:32586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.838779][ T29] audit: type=1326 audit(1736824401.660:32587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.862442][ T29] audit: type=1326 audit(1736824401.660:32588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.866646][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1209.886047][ T29] audit: type=1326 audit(1736824401.660:32589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.917552][ T29] audit: type=1400 audit(1736824401.660:32590): avc: denied { watch } for pid=8599 comm="syz.4.10525" path="/225" dev="tmpfs" ino=1183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1209.939679][ T29] audit: type=1326 audit(1736824401.660:32591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1209.963381][ T29] audit: type=1326 audit(1736824401.660:32592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8599 comm="syz.4.10525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1210.007941][ T29] audit: type=1400 audit(1736824401.690:32593): avc: denied { mount } for pid=8605 comm="syz.4.10527" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1210.118360][ T8613] netlink: 'syz.0.10529': attribute type 10 has an invalid length. [ 1210.137884][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10529'. [ 1210.178438][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.185927][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.193363][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.222981][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.230634][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.238136][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.245709][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.253176][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.260695][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.268134][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.275584][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.283266][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.290676][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.298088][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.305584][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.313015][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.320516][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.327950][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.332632][ T8625] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1210.335704][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.351405][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.358816][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.366206][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.373625][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.381055][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.388478][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.395863][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.403350][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.410753][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.418218][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.425725][ T3445] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1210.437886][ T3445] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1210.510817][ T8644] Invalid ELF header magic: != ELF [ 1210.513303][ T8648] syz.1.10542[8648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1210.516262][ T8648] syz.1.10542[8648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1210.528241][ T8648] syz.1.10542[8648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1210.877339][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1210.877536][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1211.067164][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1211.277205][ T8674] xt_CT: No such helper "netbios-ns" [ 1211.446574][ T8691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8691 comm=syz.2.10556 [ 1211.624787][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.632250][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.639806][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.676156][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.683603][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.691093][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.698538][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.698803][ T8709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10562'. [ 1211.705917][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.705942][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.705963][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.706033][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.744639][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.752065][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.759573][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.778327][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.785786][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.793230][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.800636][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.808061][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.815500][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.822919][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.830345][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.837840][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.845220][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.852697][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.860904][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.868804][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.876206][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.883727][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.891255][T13807] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1211.904246][T13807] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1211.914569][ T8711] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1211.955236][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10567'. [ 1212.018770][ T8728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8728 comm=syz.4.10571 [ 1212.187541][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10575'. [ 1212.291522][ T8763] syzkaller0: entered promiscuous mode [ 1212.297163][ T8763] syzkaller0: entered allmulticast mode [ 1212.542055][ T8789] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 1212.552204][ T8788] FAULT_INJECTION: forcing a failure. [ 1212.552204][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.565299][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.1.10589 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1212.576068][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1212.586129][ T8788] Call Trace: [ 1212.589402][ T8788] [ 1212.592325][ T8788] dump_stack_lvl+0xf2/0x150 [ 1212.596970][ T8788] dump_stack+0x15/0x1a [ 1212.601132][ T8788] should_fail_ex+0x223/0x230 [ 1212.605873][ T8788] should_fail+0xb/0x10 [ 1212.610028][ T8788] should_fail_usercopy+0x1a/0x20 [ 1212.615052][ T8788] _copy_from_user+0x1e/0xb0 [ 1212.619665][ T8788] do_ip_vs_set_ctl+0x191/0x810 [ 1212.624515][ T8788] ? __rcu_read_unlock+0x4e/0x70 [ 1212.629482][ T8788] ? ip4_datagram_release_cb+0x3f9/0x430 [ 1212.635194][ T8788] ? nf_setsockopt+0xff/0x1b0 [ 1212.639890][ T8788] nf_setsockopt+0x195/0x1b0 [ 1212.644546][ T8788] ip_setsockopt+0xea/0x100 [ 1212.649104][ T8788] raw_setsockopt+0x101/0x150 [ 1212.653795][ T8788] sock_common_setsockopt+0x64/0x80 [ 1212.659055][ T8788] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1212.665004][ T8788] __sys_setsockopt+0x187/0x200 [ 1212.669855][ T8788] __x64_sys_setsockopt+0x66/0x80 [ 1212.674873][ T8788] x64_sys_call+0x282e/0x2dc0 [ 1212.679580][ T8788] do_syscall_64+0xc9/0x1c0 [ 1212.684098][ T8788] ? clear_bhb_loop+0x55/0xb0 [ 1212.688816][ T8788] ? clear_bhb_loop+0x55/0xb0 [ 1212.693531][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.699432][ T8788] RIP: 0033:0x7f9b03f45d29 [ 1212.703837][ T8788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.723519][ T8788] RSP: 002b:00007f9b025b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1212.731924][ T8788] RAX: ffffffffffffffda RBX: 00007f9b04135fa0 RCX: 00007f9b03f45d29 [ 1212.739895][ T8788] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 1212.747857][ T8788] RBP: 00007f9b025b7090 R08: 0000000000000018 R09: 0000000000000000 [ 1212.755840][ T8788] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.763850][ T8788] R13: 0000000000000000 R14: 00007f9b04135fa0 R15: 00007ffc4d0f2708 [ 1212.771823][ T8788] [ 1212.834849][ T8791] netlink: 'syz.0.10588': attribute type 10 has an invalid length. [ 1212.843215][ T8800] netlink: 'syz.4.10587': attribute type 10 has an invalid length. [ 1213.051663][ T8826] __nla_validate_parse: 3 callbacks suppressed [ 1213.051678][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10601'. [ 1213.146987][ T8836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8836 comm=syz.1.10604 [ 1213.199098][ T8842] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1213.271942][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10609'. [ 1213.285518][ T8851] syzkaller0: entered promiscuous mode [ 1213.291179][ T8851] syzkaller0: entered allmulticast mode [ 1213.336870][ T3400] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1213.336889][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1213.350959][ T8857] netlink: 'syz.1.10608': attribute type 10 has an invalid length. [ 1213.359737][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10608'. [ 1213.446809][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1213.557132][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1213.903430][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10621'. [ 1213.936139][ T8895] syzkaller0: entered promiscuous mode [ 1213.941669][ T8895] syzkaller0: entered allmulticast mode [ 1214.038774][ T8897] netlink: 'syz.2.10623': attribute type 10 has an invalid length. [ 1214.047204][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10623'. [ 1214.065971][ T8899] Invalid ELF header magic: != ELF [ 1214.467403][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1214.578669][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1214.687102][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1214.785170][ T8931] xt_CT: No such helper "netbios-ns" [ 1214.846229][ T8934] syzkaller0: entered promiscuous mode [ 1214.851827][ T8934] syzkaller0: entered allmulticast mode [ 1215.041061][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 1215.041075][ T29] audit: type=1326 audit(1736824406.920:32956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8915 comm="syz.0.10631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1215.132950][ T29] audit: type=1326 audit(1736824407.010:32957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.192051][ T29] audit: type=1326 audit(1736824407.040:32958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.215776][ T29] audit: type=1326 audit(1736824407.040:32959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.239510][ T29] audit: type=1326 audit(1736824407.040:32960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.263219][ T29] audit: type=1326 audit(1736824407.040:32961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.286832][ T29] audit: type=1326 audit(1736824407.040:32962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.310514][ T29] audit: type=1326 audit(1736824407.040:32963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.334112][ T29] audit: type=1326 audit(1736824407.040:32964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.357730][ T29] audit: type=1326 audit(1736824407.040:32965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8944 comm="syz.1.10640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1215.388127][ T8955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8955 comm=syz.1.10641 [ 1215.407432][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10642'. [ 1215.489360][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10643'. [ 1215.526219][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.533712][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.541273][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.574453][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.581966][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.589421][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.596907][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.604290][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.611797][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.619242][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.626640][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.634015][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.641448][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.648854][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.657360][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1215.680857][ T8967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10645'. [ 1215.725411][ T8971] netlink: 'syz.1.10644': attribute type 10 has an invalid length. [ 1215.732059][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.735370][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10644'. [ 1215.740758][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.757308][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.764719][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.772281][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.772503][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1215.779712][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.779736][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.802439][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.810003][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.817503][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.824899][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.832324][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.839863][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.847353][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.854849][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.862335][ T6879] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1215.885606][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1215.894880][ T6879] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1216.756860][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1217.026373][ T9134] netlink: 'syz.3.10662': attribute type 10 has an invalid length. [ 1217.049784][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.057012][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.095731][ T9134] bridge0: left promiscuous mode [ 1217.100618][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10662'. [ 1217.110305][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.117451][ T9134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.124728][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.131807][ T9134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.141096][ T9134] bridge0: entered promiscuous mode [ 1217.150425][ T9134] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1217.172657][ T9140] bridge_slave_1: left allmulticast mode [ 1217.178368][ T9140] bridge_slave_1: left promiscuous mode [ 1217.184037][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.210962][ T9140] bridge_slave_0: left allmulticast mode [ 1217.216739][ T9140] bridge_slave_0: left promiscuous mode [ 1217.222433][ T9140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.238564][ T9140] bridge0: left promiscuous mode [ 1217.251793][ T9140] bond0: (slave bridge0): Releasing backup interface [ 1217.334343][ T9158] xt_CT: No such helper "netbios-ns" [ 1217.946854][ T9238] netlink: 'syz.0.10675': attribute type 10 has an invalid length. [ 1218.353815][ T9314] Invalid ELF header magic: != ELF [ 1218.481570][ T9332] __nla_validate_parse: 1 callbacks suppressed [ 1218.481617][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10680'. [ 1218.738733][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9380 comm=syz.0.10686 [ 1218.830580][ T9397] netlink: 'syz.4.10687': attribute type 10 has an invalid length. [ 1218.838862][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10687'. [ 1218.852155][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10690'. [ 1218.986742][T31740] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1218.986755][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1219.096643][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1219.207407][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1219.232987][ T9455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=9455 comm=syz.0.10699 [ 1219.325432][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10701'. [ 1219.368010][ T9486] netlink: 'syz.0.10702': attribute type 10 has an invalid length. [ 1219.389624][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10702'. [ 1219.464804][ T9504] netlink: 'syz.3.10706': attribute type 10 has an invalid length. [ 1219.484383][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10706'. [ 1219.798510][ T9539] FAULT_INJECTION: forcing a failure. [ 1219.798510][ T9539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.811686][ T9539] CPU: 0 UID: 0 PID: 9539 Comm: syz.2.10711 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1219.822455][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1219.832605][ T9539] Call Trace: [ 1219.835885][ T9539] [ 1219.838893][ T9539] dump_stack_lvl+0xf2/0x150 [ 1219.843505][ T9539] dump_stack+0x15/0x1a [ 1219.847671][ T9539] should_fail_ex+0x223/0x230 [ 1219.852363][ T9539] should_fail+0xb/0x10 [ 1219.856529][ T9539] should_fail_usercopy+0x1a/0x20 [ 1219.861643][ T9539] copy_fpstate_to_sigframe+0x640/0x7e0 [ 1219.867277][ T9539] ? copy_fpstate_to_sigframe+0xea/0x7e0 [ 1219.872977][ T9539] ? dequeue_signal+0x364/0x370 [ 1219.877849][ T9539] ? fpu__alloc_mathframe+0x95/0xd0 [ 1219.883101][ T9539] get_sigframe+0x2f3/0x430 [ 1219.887798][ T9539] x64_setup_rt_frame+0xad/0x590 [ 1219.892878][ T9539] arch_do_signal_or_restart+0x287/0x4b0 [ 1219.898578][ T9539] syscall_exit_to_user_mode+0x62/0x120 [ 1219.904187][ T9539] do_syscall_64+0xd6/0x1c0 [ 1219.908710][ T9539] ? clear_bhb_loop+0x55/0xb0 [ 1219.913409][ T9539] ? clear_bhb_loop+0x55/0xb0 [ 1219.918109][ T9539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.924060][ T9539] RIP: 0033:0x7f416d515d27 [ 1219.928497][ T9539] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1219.948126][ T9539] RSP: 002b:00007f416bb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1219.956563][ T9539] RAX: 0000000000000127 RBX: 00007f416d705fa0 RCX: 00007f416d515d29 [ 1219.964560][ T9539] RDX: 0000000000000001 RSI: 0000000020000400 RDI: 0000000000000003 [ 1219.972601][ T9539] RBP: 00007f416bb87090 R08: 000000000000000c R09: 0000000000000000 [ 1219.980590][ T9539] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.988634][ T9539] R13: 0000000000000000 R14: 00007f416d705fa0 R15: 00007fff9e1af968 [ 1219.996623][ T9539] [ 1220.099822][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10713'. [ 1220.142273][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 1220.142289][ T29] audit: type=1326 audit(1736824412.020:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.174237][ T29] audit: type=1326 audit(1736824412.020:33256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.198188][ T29] audit: type=1326 audit(1736824412.020:33257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.221868][ T29] audit: type=1326 audit(1736824412.020:33258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.226554][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1220.245540][ T29] audit: type=1326 audit(1736824412.020:33259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.253833][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1220.276809][ T29] audit: type=1326 audit(1736824412.020:33260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.308125][ T29] audit: type=1326 audit(1736824412.020:33261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.331767][ T29] audit: type=1326 audit(1736824412.020:33262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.355340][ T29] audit: type=1326 audit(1736824412.020:33263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.378973][ T29] audit: type=1326 audit(1736824412.020:33264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.2.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f416d515d29 code=0x7ffc0000 [ 1220.386869][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1220.606230][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10715'. [ 1220.634743][ T9619] Invalid ELF header magic: != ELF [ 1220.979325][ T9674] netlink: 'syz.2.10722': attribute type 10 has an invalid length. [ 1220.989324][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10722'. [ 1221.020154][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.027102][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.037898][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.074730][ T9682] infiniband sz1: set active [ 1221.079584][ T9682] infiniband sz1: added lo [ 1221.084337][ T3445] lo speed is unknown, defaulting to 1000 [ 1221.117279][ T9682] RDS/IB: sz1: added [ 1221.123179][ T9682] smc: adding ib device sz1 with port count 1 [ 1221.145886][ T9682] smc: ib device sz1 port 1 has pnetid [ 1221.151994][ T6879] lo speed is unknown, defaulting to 1000 [ 1221.166019][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.197210][ T9705] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1221.209352][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.248922][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.282951][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.347676][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.376886][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1221.379848][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.397051][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1221.417136][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.449158][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.485838][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.520631][ T9682] lo speed is unknown, defaulting to 1000 [ 1221.536998][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1222.147269][ T9817] netlink: 'syz.2.10734': attribute type 10 has an invalid length. [ 1222.155557][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10734'. [ 1222.165658][ T9818] FAULT_INJECTION: forcing a failure. [ 1222.165658][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.178484][ T9818] CPU: 0 UID: 0 PID: 9818 Comm: syz.4.10730 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1222.189255][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1222.199387][ T9818] Call Trace: [ 1222.202671][ T9818] [ 1222.205599][ T9818] dump_stack_lvl+0xf2/0x150 [ 1222.210233][ T9818] dump_stack+0x15/0x1a [ 1222.214495][ T9818] should_fail_ex+0x223/0x230 [ 1222.219170][ T9818] ? alloc_pipe_info+0xb0/0x360 [ 1222.224022][ T9818] should_failslab+0x8f/0xb0 [ 1222.228616][ T9818] __kmalloc_cache_noprof+0x4e/0x320 [ 1222.234037][ T9818] alloc_pipe_info+0xb0/0x360 [ 1222.238732][ T9818] splice_direct_to_actor+0x60f/0x670 [ 1222.244199][ T9818] ? __pfx_direct_splice_actor+0x10/0x10 [ 1222.249839][ T9818] ? 0xffffffff81000000 [ 1222.253985][ T9818] ? selinux_file_permission+0x22a/0x360 [ 1222.259651][ T9818] ? __rcu_read_unlock+0x4e/0x70 [ 1222.264638][ T9818] ? avc_policy_seqno+0x15/0x20 [ 1222.269501][ T9818] ? selinux_file_permission+0x22a/0x360 [ 1222.275222][ T9818] do_splice_direct+0xd7/0x150 [ 1222.279993][ T9818] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1222.285936][ T9818] do_sendfile+0x398/0x660 [ 1222.290440][ T9818] __x64_sys_sendfile64+0x110/0x150 [ 1222.295649][ T9818] x64_sys_call+0xfbd/0x2dc0 [ 1222.300252][ T9818] do_syscall_64+0xc9/0x1c0 [ 1222.304795][ T9818] ? clear_bhb_loop+0x55/0xb0 [ 1222.309515][ T9818] ? clear_bhb_loop+0x55/0xb0 [ 1222.314188][ T9818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.320091][ T9818] RIP: 0033:0x7f3abccb5d29 [ 1222.324529][ T9818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.344128][ T9818] RSP: 002b:00007f3abb2e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1222.352542][ T9818] RAX: ffffffffffffffda RBX: 00007f3abcea6160 RCX: 00007f3abccb5d29 [ 1222.360509][ T9818] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1222.368512][ T9818] RBP: 00007f3abb2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.376486][ T9818] R10: 4000000000010046 R11: 0000000000000246 R12: 0000000000000001 [ 1222.384516][ T9818] R13: 0000000000000000 R14: 00007f3abcea6160 R15: 00007ffe4381fe68 [ 1222.392539][ T9818] [ 1222.737794][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1222.943211][ T9837] Invalid ELF header magic: != ELF [ 1223.162486][ T9851] vlan3: entered allmulticast mode [ 1223.167793][ T9851] bridge_slave_0: entered allmulticast mode [ 1223.468484][ T9865] syzkaller0: entered promiscuous mode [ 1223.473974][ T9865] syzkaller0: entered allmulticast mode [ 1223.509904][ T9867] syzkaller0: entered promiscuous mode [ 1223.515496][ T9867] syzkaller0: entered allmulticast mode [ 1223.561598][ T9871] Invalid ELF header magic: != ELF [ 1223.661288][ T9878] FAULT_INJECTION: forcing a failure. [ 1223.661288][ T9878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1223.674648][ T9878] CPU: 0 UID: 0 PID: 9878 Comm: syz.2.10756 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1223.685476][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1223.695806][ T9878] Call Trace: [ 1223.699097][ T9878] [ 1223.702031][ T9878] dump_stack_lvl+0xf2/0x150 [ 1223.706641][ T9878] dump_stack+0x15/0x1a [ 1223.710883][ T9878] should_fail_ex+0x223/0x230 [ 1223.715586][ T9878] should_fail_alloc_page+0xfd/0x110 [ 1223.720885][ T9878] __alloc_pages_noprof+0x109/0x340 [ 1223.726111][ T9878] alloc_pages_mpol_noprof+0xb8/0x260 [ 1223.731497][ T9878] folio_alloc_mpol_noprof+0x36/0x70 [ 1223.736792][ T9878] shmem_get_folio_gfp+0x3d1/0xd90 [ 1223.741925][ T9878] shmem_write_begin+0xa2/0x180 [ 1223.746922][ T9878] generic_perform_write+0x1a8/0x4a0 [ 1223.752292][ T9878] shmem_file_write_iter+0xc2/0xe0 [ 1223.757509][ T9878] do_iter_readv_writev+0x394/0x450 [ 1223.762726][ T9878] vfs_writev+0x2d4/0x880 [ 1223.767063][ T9878] ? proc_fail_nth_write+0x12a/0x150 [ 1223.772407][ T9878] __se_sys_pwritev2+0x100/0x1c0 [ 1223.777401][ T9878] __x64_sys_pwritev2+0x78/0x90 [ 1223.782317][ T9878] x64_sys_call+0x2afe/0x2dc0 [ 1223.787005][ T9878] do_syscall_64+0xc9/0x1c0 [ 1223.791521][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 1223.796216][ T9878] ? clear_bhb_loop+0x55/0xb0 [ 1223.800981][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.806900][ T9878] RIP: 0033:0x7f416d515d29 [ 1223.811327][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.830945][ T9878] RSP: 002b:00007f416bb87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1223.839365][ T9878] RAX: ffffffffffffffda RBX: 00007f416d705fa0 RCX: 00007f416d515d29 [ 1223.847348][ T9878] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000003 [ 1223.855414][ T9878] RBP: 00007f416bb87090 R08: 0000000000000005 R09: 0000000000000005 [ 1223.863396][ T9878] R10: 0000000000007fff R11: 0000000000000246 R12: 0000000000000001 [ 1223.871379][ T9878] R13: 0000000000000000 R14: 00007f416d705fa0 R15: 00007fff9e1af968 [ 1223.879369][ T9878] [ 1223.963636][ T9931] random: crng reseeded on system resumption [ 1223.965680][ T9916] vlan4: entered allmulticast mode [ 1223.974903][ T9916] bridge_slave_0: entered allmulticast mode [ 1223.983925][ T9916] bridge_slave_0: left allmulticast mode [ 1224.007631][T31755] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1224.007686][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1224.254527][ T9968] lo speed is unknown, defaulting to 1000 [ 1224.278324][ T9977] syzkaller0: entered promiscuous mode [ 1224.283815][ T9977] syzkaller0: entered allmulticast mode [ 1224.344057][ T9987] Invalid ELF header magic: != ELF [ 1224.502388][T10013] __nla_validate_parse: 1 callbacks suppressed [ 1224.502405][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10769'. [ 1224.520466][T10015] netlink: 'syz.1.10768': attribute type 10 has an invalid length. [ 1224.529315][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10768'. [ 1224.773782][T10036] lo speed is unknown, defaulting to 1000 [ 1224.924014][T10064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=10064 comm=syz.4.10773 [ 1225.016812][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1225.025208][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1225.127392][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1225.215410][T10075] lo speed is unknown, defaulting to 1000 [ 1225.233350][T10076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10775'. [ 1225.284321][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 1225.284336][ T29] audit: type=1326 audit(1736824417.160:33397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.314268][ T29] audit: type=1326 audit(1736824417.160:33398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.338050][ T29] audit: type=1326 audit(1736824417.160:33399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.361948][ T29] audit: type=1326 audit(1736824417.160:33400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.385609][ T29] audit: type=1326 audit(1736824417.220:33401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.409713][ T29] audit: type=1326 audit(1736824417.220:33402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.433493][ T29] audit: type=1326 audit(1736824417.260:33403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.457161][ T29] audit: type=1326 audit(1736824417.260:33404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.480841][ T29] audit: type=1326 audit(1736824417.260:33405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.540878][ T29] audit: type=1326 audit(1736824417.420:33406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10077 comm="syz.1.10776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b03f45d29 code=0x7ffc0000 [ 1225.615836][T10085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1225.849255][T10091] lo speed is unknown, defaulting to 1000 [ 1226.146834][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1226.147141][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1226.178808][T10106] vlan3: entered allmulticast mode [ 1226.183964][T10106] bridge_slave_0: entered allmulticast mode [ 1226.193226][T10106] bridge_slave_0: left allmulticast mode [ 1226.257378][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1226.336925][T10141] syzkaller0: entered promiscuous mode [ 1226.342418][T10141] syzkaller0: entered allmulticast mode [ 1226.503893][T10163] lo speed is unknown, defaulting to 1000 [ 1226.523871][T10173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10787'. [ 1226.589067][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10789'. [ 1226.994483][T10228] netlink: 'syz.2.10793': attribute type 10 has an invalid length. [ 1227.012658][T10228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10793'. [ 1227.098314][T10238] lo speed is unknown, defaulting to 1000 [ 1227.266740][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1227.267343][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1227.323202][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10798'. [ 1227.367164][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1227.735138][T10301] vlan3: entered allmulticast mode [ 1227.740338][T10301] bridge_slave_0: entered allmulticast mode [ 1227.747998][T10301] bridge_slave_0: left allmulticast mode [ 1228.022276][T10318] syzkaller0: entered promiscuous mode [ 1228.027911][T10318] syzkaller0: entered allmulticast mode [ 1228.037267][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10806'. [ 1228.074725][T10313] lo speed is unknown, defaulting to 1000 [ 1228.086514][T10316] hub 9-0:1.0: USB hub found [ 1228.095033][T10316] hub 9-0:1.0: 8 ports detected [ 1228.131828][T10316] smc: net device bond0 applied user defined pnetid SYZ0 [ 1228.154241][T10316] smc: net device bond0 erased user defined pnetid SYZ0 [ 1228.283012][T10332] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10811'. [ 1228.565564][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10824'. [ 1229.231346][T10469] lo speed is unknown, defaulting to 1000 [ 1229.251696][T10483] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1229.510727][T31740] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1229.510741][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.530115][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.547574][T10532] netlink: 'syz.0.10833': attribute type 10 has an invalid length. [ 1229.552684][T10523] vlan3: entered allmulticast mode [ 1229.560759][T10523] bridge_slave_0: entered allmulticast mode [ 1229.569050][T10523] bridge_slave_0: left allmulticast mode [ 1229.578398][T10532] __nla_validate_parse: 1 callbacks suppressed [ 1229.578413][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10833'. [ 1229.596495][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.624721][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10836'. [ 1229.677280][T10551] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 1229.681515][T10549] IPVS: stopping master sync thread 10551 ... [ 1229.721889][T10553] syzkaller0: entered promiscuous mode [ 1229.727431][T10553] syzkaller0: entered allmulticast mode [ 1230.485731][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10850'. [ 1230.575844][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10851'. [ 1230.687042][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.694858][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.727245][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.743762][T10587] vlan4: entered allmulticast mode [ 1230.749040][T10587] bridge_slave_0: entered allmulticast mode [ 1230.777745][T10587] bridge_slave_0: left allmulticast mode [ 1230.860278][T10596] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1230.880202][T10597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10855'. [ 1230.936169][T10594] lo speed is unknown, defaulting to 1000 [ 1231.025084][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10858'. [ 1231.205352][T10616] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1231.230801][T10617] netlink: 'syz.3.10860': attribute type 10 has an invalid length. [ 1231.239422][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10860'. [ 1231.290647][T10620] syz.1.10862[10620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.290708][T10620] syz.1.10862[10620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.303417][T10620] syz.1.10862[10620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.319735][T10622] syzkaller0: entered promiscuous mode [ 1231.336785][T10622] syzkaller0: entered allmulticast mode [ 1231.397605][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 1231.397619][ T29] audit: type=1326 audit(1736824423.280:33552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.449556][ T29] audit: type=1326 audit(1736824423.310:33553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.531400][ T29] audit: type=1326 audit(1736824423.410:33554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.581472][ T29] audit: type=1326 audit(1736824423.410:33555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.589586][T10634] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10867'. [ 1231.605171][ T29] audit: type=1326 audit(1736824423.410:33556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.605246][ T29] audit: type=1326 audit(1736824423.410:33557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.605270][ T29] audit: type=1326 audit(1736824423.410:33558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.685487][ T29] audit: type=1326 audit(1736824423.410:33559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.709297][ T29] audit: type=1326 audit(1736824423.410:33560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.732965][ T29] audit: type=1326 audit(1736824423.440:33561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10623 comm="syz.3.10864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893b0c5d29 code=0x7ffc0000 [ 1231.770441][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10868'. [ 1231.876476][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1231.876714][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1231.937063][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1231.982877][T10653] netlink: 'syz.2.10874': attribute type 10 has an invalid length. [ 1231.991324][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10874'. [ 1232.166410][T10670] syzkaller0: entered promiscuous mode [ 1232.171919][T10670] syzkaller0: entered allmulticast mode [ 1232.180128][T10667] lo speed is unknown, defaulting to 1000 [ 1232.313046][T10684] hub 9-0:1.0: USB hub found [ 1232.318042][T10684] hub 9-0:1.0: 8 ports detected [ 1232.402451][T10689] netlink: 'syz.0.10887': attribute type 10 has an invalid length. [ 1232.437822][T10698] syz.0.10891[10698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.437882][T10698] syz.0.10891[10698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.449904][T10698] syz.0.10891[10698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.986582][ T11] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1233.138558][T10711] hub 9-0:1.0: USB hub found [ 1233.149657][T10711] hub 9-0:1.0: 8 ports detected [ 1233.210509][T10713] SELinux: Context system_u:object_r:null_device_t:s0 is not valid (left unmapped). [ 1233.268345][T10719] hub 9-0:1.0: USB hub found [ 1233.283183][T10719] hub 9-0:1.0: 8 ports detected [ 1233.454207][T10731] Invalid ELF header magic: != ELF [ 1233.486179][T10727] lo speed is unknown, defaulting to 1000 [ 1233.710608][T10738] syzkaller0: entered promiscuous mode [ 1233.716161][T10738] syzkaller0: entered allmulticast mode [ 1233.831489][T10750] netlink: 'syz.2.10911': attribute type 4 has an invalid length. [ 1233.849827][T10744] lo speed is unknown, defaulting to 1000 [ 1233.882861][T10750] infiniband sz1: set down [ 1233.901347][ T3445] lo speed is unknown, defaulting to 1000 [ 1233.915040][ T3445] lo speed is unknown, defaulting to 1000 [ 1234.026967][T10772] syzkaller0: entered promiscuous mode [ 1234.032485][T10772] syzkaller0: entered allmulticast mode [ 1234.214657][T10786] hub 9-0:1.0: USB hub found [ 1234.222143][T10782] lo speed is unknown, defaulting to 1000 [ 1234.228129][T10786] hub 9-0:1.0: 8 ports detected [ 1234.550467][T10821] smc: net device bond0 applied user defined pnetid SYZ0 [ 1234.674609][T10835] hub 9-0:1.0: USB hub found [ 1234.684931][T10835] hub 9-0:1.0: 8 ports detected [ 1234.807676][T10855] __nla_validate_parse: 6 callbacks suppressed [ 1234.807693][T10855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10938'. [ 1234.850179][T10847] lo speed is unknown, defaulting to 1000 [ 1235.266744][T31745] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1235.266769][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1235.280599][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1235.280967][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1235.332721][T10906] Invalid ELF header magic: != ELF [ 1235.485081][T10926] hub 9-0:1.0: USB hub found [ 1235.490834][T10926] hub 9-0:1.0: 8 ports detected [ 1235.605783][T10915] block device autoloading is deprecated and will be removed. [ 1235.804030][T10964] hub 9-0:1.0: USB hub found [ 1235.820976][T10964] hub 9-0:1.0: 8 ports detected [ 1235.910311][T10973] ALSA: seq fatal error: cannot create timer (-19) [ 1236.417434][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1236.425157][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1236.425454][ T1253] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1236.908859][T11103] netlink: 'syz.4.10967': attribute type 10 has an invalid length. [ 1236.918167][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10967'. [ 1236.964199][T11115] Invalid ELF header magic: != ELF [ 1236.973085][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 1236.973135][ T29] audit: type=1326 audit(1736824428.860:33699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.003823][ T29] audit: type=1326 audit(1736824428.860:33700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.027518][ T29] audit: type=1326 audit(1736824428.860:33702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11118 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3abcce85e5 code=0x7ffc0000 [ 1237.051300][ T29] audit: type=1326 audit(1736824428.860:33701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.075059][ T29] audit: type=1326 audit(1736824428.860:33703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.098760][ T29] audit: type=1326 audit(1736824428.860:33704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.122714][ T29] audit: type=1326 audit(1736824428.860:33705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.146489][ T29] audit: type=1326 audit(1736824428.860:33706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.170187][ T29] audit: type=1326 audit(1736824428.860:33707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.193873][ T29] audit: type=1326 audit(1736824428.860:33708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11114 comm="syz.4.10969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1237.396243][T11186] Invalid ELF header magic: != ELF [ 1237.499562][T11195] netlink: 'syz.2.10978': attribute type 10 has an invalid length. [ 1237.519496][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10978'. [ 1237.566699][T11197] hub 9-0:1.0: USB hub found [ 1237.568438][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1237.571414][T11197] hub 9-0:1.0: 8 ports detected [ 1237.579937][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1237.586983][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1237.617589][T11201] smc: net device bond0 erased user defined pnetid SYZ0 [ 1237.670578][T11200] hub 9-0:1.0: USB hub found [ 1237.691561][T11200] hub 9-0:1.0: 8 ports detected [ 1237.708107][T11200] smc: net device bond0 applied user defined pnetid SYZ0 [ 1237.725478][T11200] smc: net device bond0 erased user defined pnetid SYZ0 [ 1237.908950][T11221] hub 9-0:1.0: USB hub found [ 1237.918655][T11221] hub 9-0:1.0: 8 ports detected [ 1238.084759][T11229] hub 9-0:1.0: USB hub found [ 1238.091664][T11229] hub 9-0:1.0: 8 ports detected [ 1238.102503][T11229] smc: net device bond0 applied user defined pnetid SYZ0 [ 1238.109870][T11229] smc: net device bond0 erased user defined pnetid SYZ0 [ 1238.164090][T11241] syz.0.10997[11241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1238.164154][T11241] syz.0.10997[11241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1238.176045][T11241] syz.0.10997[11241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1238.245336][T11243] vlan4: entered allmulticast mode [ 1238.262223][T11243] bridge_slave_0: entered allmulticast mode [ 1238.696589][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1239.282738][T11403] netlink: 'syz.0.11004': attribute type 10 has an invalid length. [ 1239.292206][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11004'. [ 1239.358200][T11413] smc: net device bond0 applied user defined pnetid SYZ0 [ 1239.493718][T11423] netlink: 'syz.2.11010': attribute type 10 has an invalid length. [ 1239.495174][T11422] lo speed is unknown, defaulting to 1000 [ 1239.508918][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11010'. [ 1239.556093][T11425] ALSA: seq fatal error: cannot create timer (-19) [ 1240.126246][T11442] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11016'. [ 1240.144656][T11444] hub 9-0:1.0: USB hub found [ 1240.149719][T11444] hub 9-0:1.0: 8 ports detected [ 1240.166529][T11448] Invalid ELF header magic: != ELF [ 1240.199870][T11451] hub 9-0:1.0: USB hub found [ 1240.204621][T11451] hub 9-0:1.0: 8 ports detected [ 1240.211888][T11451] smc: net device bond0 erased user defined pnetid SYZ0 [ 1240.305350][T11455] Cannot find del_set index 0 as target [ 1240.350363][T11460] smc: net device bond0 applied user defined pnetid SYZ0 [ 1240.380566][ T7916] syz_tun: left promiscuous mode [ 1240.542911][T11471] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11030'. [ 1240.696260][T11475] lo speed is unknown, defaulting to 1000 [ 1240.760255][T11475] chnl_net:caif_netlink_parms(): no params data found [ 1240.792805][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.799989][T11475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.807213][T11475] bridge_slave_0: entered allmulticast mode [ 1240.813669][T11475] bridge_slave_0: entered promiscuous mode [ 1240.820610][T11475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.827824][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.835205][T11475] bridge_slave_1: entered allmulticast mode [ 1240.841902][T11475] bridge_slave_1: entered promiscuous mode [ 1240.859671][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.866923][T11496] Invalid ELF header magic: != ELF [ 1240.870184][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.894033][T11475] team0: Port device team_slave_0 added [ 1240.900638][T11475] team0: Port device team_slave_1 added [ 1240.914885][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.921867][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.947930][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.956685][T31745] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1240.956699][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1240.959204][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.964339][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1240.972007][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.986570][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1240.986854][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.047058][T11475] hsr_slave_0: entered promiscuous mode [ 1241.053490][T11475] hsr_slave_1: entered promiscuous mode [ 1241.060913][T11475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.068594][T11475] Cannot create hsr debugfs directory [ 1241.134949][T11475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1241.144662][T11503] netlink: 'syz.4.11037': attribute type 10 has an invalid length. [ 1241.144683][T11475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1241.162881][T11475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1241.163118][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11037'. [ 1241.180938][T11475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1241.225811][T11475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1241.239182][T11475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.250844][T31755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.257988][T31755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.298043][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.305176][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.379522][T11475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.380032][T11515] hub 9-0:1.0: USB hub found [ 1241.406400][T11515] hub 9-0:1.0: 8 ports detected [ 1241.522291][T11475] veth0_vlan: entered promiscuous mode [ 1241.531959][T11475] veth1_vlan: entered promiscuous mode [ 1241.549087][T11475] veth0_macvtap: entered promiscuous mode [ 1241.559036][T11475] veth1_macvtap: entered promiscuous mode [ 1241.579049][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.589643][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.599565][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.610015][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.619934][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.630447][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.640517][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.651000][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.660865][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1241.671341][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.682670][T11475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.693122][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.703650][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.713622][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.724098][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.733945][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.744506][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.754349][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.764915][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.774843][T11475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.785411][T11475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.811699][T11475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.825036][T11547] lo speed is unknown, defaulting to 1000 [ 1241.826693][T11475] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.839655][T11475] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.848378][T11475] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.857131][T11475] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.949671][T11571] hub 9-0:1.0: USB hub found [ 1241.954500][T11571] hub 9-0:1.0: 8 ports detected [ 1241.966564][T11571] smc: net device bond0 erased user defined pnetid SYZ0 [ 1242.076799][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1242.086010][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1242.127249][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1242.234143][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 1242.234159][ T29] audit: type=1326 audit(1736824434.110:33886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.268332][ T29] audit: type=1326 audit(1736824434.110:33887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.292050][ T29] audit: type=1326 audit(1736824434.110:33888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.315907][ T29] audit: type=1326 audit(1736824434.110:33889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.339760][ T29] audit: type=1326 audit(1736824434.110:33890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.363640][ T29] audit: type=1326 audit(1736824434.110:33891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.387680][ T29] audit: type=1326 audit(1736824434.110:33892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.411465][ T29] audit: type=1326 audit(1736824434.110:33893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.435198][ T29] audit: type=1326 audit(1736824434.120:33894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.458820][ T29] audit: type=1326 audit(1736824434.130:33895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11598 comm="syz.4.11053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3abccb5d29 code=0x7ffc0000 [ 1242.498955][T11617] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11056'. [ 1242.576412][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1242.584275][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1242.649365][T11631] vlan3: entered allmulticast mode [ 1242.654513][T11631] bridge_slave_0: entered allmulticast mode [ 1242.697687][T11631] bridge_slave_0: left allmulticast mode [ 1242.706352][T11637] hub 9-0:1.0: USB hub found [ 1242.711152][T11637] hub 9-0:1.0: 8 ports detected [ 1242.720175][T11637] smc: net device bond0 applied user defined pnetid SYZ0 [ 1243.130609][T11719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1243.206523][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1243.214132][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1243.784719][T11771] vlan2: entered promiscuous mode [ 1243.789954][T11771] ip6gretap0: entered promiscuous mode [ 1243.804399][T11779] hub 9-0:1.0: USB hub found [ 1243.809178][T11779] hub 9-0:1.0: 8 ports detected [ 1243.863962][T11781] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1243.944450][T11783] vlan3: entered allmulticast mode [ 1243.949645][T11783] bridge_slave_0: entered allmulticast mode [ 1243.957423][T11783] bridge_slave_0: left allmulticast mode [ 1244.021269][T11786] Invalid ELF header magic: != ELF [ 1244.139145][T11791] hub 9-0:1.0: USB hub found [ 1244.143888][T11791] hub 9-0:1.0: 8 ports detected [ 1244.534020][T11859] hub 9-0:1.0: USB hub found [ 1244.539059][T11859] hub 9-0:1.0: 8 ports detected [ 1244.693347][T11891] FAULT_INJECTION: forcing a failure. [ 1244.693347][T11891] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.706029][T11891] CPU: 0 UID: 0 PID: 11891 Comm: syz.0.11095 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1244.716887][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1244.726945][T11891] Call Trace: [ 1244.730224][T11891] [ 1244.733198][T11891] dump_stack_lvl+0xf2/0x150 [ 1244.737803][T11891] dump_stack+0x15/0x1a [ 1244.741984][T11891] should_fail_ex+0x223/0x230 [ 1244.746672][T11891] should_failslab+0x8f/0xb0 [ 1244.751351][T11891] kmem_cache_alloc_node_noprof+0x59/0x320 [ 1244.757234][T11891] ? __alloc_skb+0x10b/0x310 [ 1244.761841][T11891] __alloc_skb+0x10b/0x310 [ 1244.766277][T11891] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 1244.771721][T11891] ? __pfx_rtnetlink_event+0x10/0x10 [ 1244.777013][T11891] rtnetlink_event+0x180/0x200 [ 1244.781780][T11891] raw_notifier_call_chain+0x6f/0x1d0 [ 1244.787183][T11891] call_netdevice_notifiers_info+0xae/0x100 [ 1244.793121][T11891] netdev_update_features+0x61/0x90 [ 1244.798333][T11891] veth_xdp+0x5f7/0x670 [ 1244.802498][T11891] dev_xdp_propagate+0x121/0x1c0 [ 1244.807450][T11891] bond_xdp+0x2a6/0x5f0 [ 1244.811623][T11891] dev_xdp_install+0x1b4/0x2a0 [ 1244.816458][T11891] ? __pfx_bond_xdp+0x10/0x10 [ 1244.821171][T11891] bpf_xdp_link_release+0x1a8/0x240 [ 1244.826425][T11891] bpf_link_free+0xb2/0x360 [ 1244.831002][T11891] bpf_link_release+0x52/0x70 [ 1244.835685][T11891] ? __pfx_bpf_link_release+0x10/0x10 [ 1244.841067][T11891] __fput+0x17a/0x6d0 [ 1244.845057][T11891] ____fput+0x1c/0x30 [ 1244.849051][T11891] task_work_run+0x13a/0x1a0 [ 1244.853672][T11891] syscall_exit_to_user_mode+0xa8/0x120 [ 1244.859240][T11891] do_syscall_64+0xd6/0x1c0 [ 1244.863750][T11891] ? clear_bhb_loop+0x55/0xb0 [ 1244.868515][T11891] ? clear_bhb_loop+0x55/0xb0 [ 1244.873201][T11891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.879132][T11891] RIP: 0033:0x7f150ed45d29 [ 1244.883554][T11891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.903168][T11891] RSP: 002b:00007f150d3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1244.911640][T11891] RAX: 0000000000000000 RBX: 00007f150ef35fa0 RCX: 00007f150ed45d29 [ 1244.919697][T11891] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1244.927675][T11891] RBP: 00007f150d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.935965][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.943952][T11891] R13: 0000000000000000 R14: 00007f150ef35fa0 R15: 00007fffff712788 [ 1244.951943][T11891] [ 1244.978315][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11096'. [ 1245.043506][T11938] lo speed is unknown, defaulting to 1000 [ 1245.131963][T11961] FAULT_INJECTION: forcing a failure. [ 1245.131963][T11961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.145224][T11961] CPU: 1 UID: 0 PID: 11961 Comm: syz.0.11099 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1245.156085][T11961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1245.166257][T11961] Call Trace: [ 1245.169616][T11961] [ 1245.172623][T11961] dump_stack_lvl+0xf2/0x150 [ 1245.177239][T11961] dump_stack+0x15/0x1a [ 1245.181464][T11961] should_fail_ex+0x223/0x230 [ 1245.186158][T11961] should_fail+0xb/0x10 [ 1245.190326][T11961] should_fail_usercopy+0x1a/0x20 [ 1245.195005][T11968] Cannot find del_set index 0 as target [ 1245.195358][T11961] _copy_from_user+0x1e/0xb0 [ 1245.205542][T11961] copy_msghdr_from_user+0x54/0x2a0 [ 1245.210752][T11961] ? __fget_files+0x17c/0x1c0 [ 1245.215446][T11961] __sys_sendmsg+0x13e/0x230 [ 1245.220062][T11961] __x64_sys_sendmsg+0x46/0x50 [ 1245.224943][T11961] x64_sys_call+0x2734/0x2dc0 [ 1245.229615][T11961] do_syscall_64+0xc9/0x1c0 [ 1245.234120][T11961] ? clear_bhb_loop+0x55/0xb0 [ 1245.238811][T11961] ? clear_bhb_loop+0x55/0xb0 [ 1245.243481][T11961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.249491][T11961] RIP: 0033:0x7f150ed45d29 [ 1245.253897][T11961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.273617][T11961] RSP: 002b:00007f150d3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1245.282096][T11961] RAX: ffffffffffffffda RBX: 00007f150ef35fa0 RCX: 00007f150ed45d29 [ 1245.290059][T11961] RDX: 0000000004008090 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1245.298075][T11961] RBP: 00007f150d3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1245.306051][T11961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1245.314625][T11961] R13: 0000000000000000 R14: 00007f150ef35fa0 R15: 00007fffff712788 [ 1245.322593][T11961] [ 1245.449538][T11977] syz.5.11106[11977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1245.449660][T11977] syz.5.11106[11977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1245.475114][T11977] syz.5.11106[11977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1245.616633][T11988] hub 9-0:1.0: USB hub found [ 1245.633001][T11988] hub 9-0:1.0: 8 ports detected [ 1245.643223][T11988] smc: net device bond0 erased user defined pnetid SYZ0 [ 1245.684073][T11991] hub 9-0:1.0: USB hub found [ 1245.688779][T11991] hub 9-0:1.0: 8 ports detected [ 1245.745495][ T1250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.805116][ T1250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.887342][ T1250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.958907][ T1250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.984070][ T8166] syz_tun: left promiscuous mode [ 1246.037650][ T1250] ip6gretap0: left promiscuous mode [ 1246.085761][ T1250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.095794][ T1250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.115639][ T1250] bond0 (unregistering): Released all slaves [ 1246.128480][T11997] lo speed is unknown, defaulting to 1000 [ 1246.298248][T11997] chnl_net:caif_netlink_parms(): no params data found [ 1246.360683][ T1250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1246.368464][ T1250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1246.387396][ T1250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1246.394939][ T1250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.403602][T12026] hub 9-0:1.0: USB hub found [ 1246.412351][T12026] hub 9-0:1.0: 8 ports detected [ 1246.425556][ T1250] veth1_macvtap: left promiscuous mode [ 1246.431124][ T1250] veth0_macvtap: left promiscuous mode [ 1246.436758][ T1250] veth1_vlan: left promiscuous mode [ 1246.441975][ T1250] veth0_vlan: left promiscuous mode [ 1246.517576][ T1250] team0 (unregistering): Port device team_slave_1 removed [ 1246.530236][ T1250] team0 (unregistering): Port device team_slave_0 removed [ 1246.581559][T12026] smc: net device bond0 applied user defined pnetid SYZ0 [ 1246.626834][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.633980][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.636631][T12044] Cannot find del_set index 0 as target [ 1246.642925][T11997] bridge_slave_0: entered allmulticast mode [ 1246.653037][T11997] bridge_slave_0: entered promiscuous mode [ 1246.667645][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.674720][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.689520][T11997] bridge_slave_1: entered allmulticast mode [ 1246.695996][T11997] bridge_slave_1: entered promiscuous mode [ 1246.711086][T12014] lo speed is unknown, defaulting to 1000 [ 1246.718949][T11997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1246.730783][T12048] FAULT_INJECTION: forcing a failure. [ 1246.730783][T12048] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.743668][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.0.11126 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1246.754522][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1246.764600][T12048] Call Trace: [ 1246.767891][T12048] [ 1246.770866][T12048] dump_stack_lvl+0xf2/0x150 [ 1246.774925][T12049] hub 9-0:1.0: USB hub found [ 1246.775475][T12048] dump_stack+0x15/0x1a [ 1246.784195][T12048] should_fail_ex+0x223/0x230 [ 1246.785086][T12049] hub 9-0:1.0: 8 ports detected [ 1246.788925][T12048] should_failslab+0x8f/0xb0 [ 1246.796456][T31745] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 1246.796469][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1246.798367][T12048] __kmalloc_noprof+0xab/0x3f0 [ 1246.816610][T10747] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1246.816640][T12048] ? __se_sys_memfd_create+0x230/0x5c0 [ 1246.829882][T12048] __se_sys_memfd_create+0x230/0x5c0 [ 1246.831435][T12049] smc: net device bond0 erased user defined pnetid SYZ0 [ 1246.835164][T12048] __x64_sys_memfd_create+0x31/0x40 [ 1246.843379][T11997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.847266][T12048] x64_sys_call+0x2d4c/0x2dc0 [ 1246.861026][T12048] do_syscall_64+0xc9/0x1c0 [ 1246.865536][T12048] ? clear_bhb_loop+0x55/0xb0 [ 1246.870277][T12048] ? clear_bhb_loop+0x55/0xb0 [ 1246.874971][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.880890][T12048] RIP: 0033:0x7f150ed45d29 [ 1246.885434][T12048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.905043][T12048] RSP: 002b:00007f150d3b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1246.913437][T12048] RAX: ffffffffffffffda RBX: 000000000000045f RCX: 00007f150ed45d29 [ 1246.921434][T12048] RDX: 00007f150d3b6ef0 RSI: 0000000000000000 RDI: 00007f150edc2469 [ 1246.929436][T12048] RBP: 0000000020000440 R08: 00007f150d3b6bb7 R09: 00007f150d3b6e40 [ 1246.937395][T12048] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000240 [ 1246.945347][T12048] R13: 00007f150d3b6ef0 R14: 00007f150d3b6eb0 R15: 00000000200008c0 [ 1246.953374][T12048] [ 1246.957884][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1246.989197][T11997] team0: Port device team_slave_0 added [ 1246.995907][T11997] team0: Port device team_slave_1 added [ 1247.022713][T12014] chnl_net:caif_netlink_parms(): no params data found [ 1247.079294][T11997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.086459][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.112427][T11997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.153853][T11997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.160940][T11997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.187032][T11997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.291528][T12065] netlink: 'syz.1.11131': attribute type 10 has an invalid length. [ 1247.319916][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11131'. [ 1247.332166][T11997] hsr_slave_0: entered promiscuous mode [ 1247.339792][T11997] hsr_slave_1: entered promiscuous mode [ 1247.345763][T11997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.353871][T11997] Cannot create hsr debugfs directory [ 1247.366317][T12014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.373419][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.399769][T12014] bridge_slave_0: entered allmulticast mode [ 1247.406474][T12014] bridge_slave_0: entered promiscuous mode [ 1247.438117][T12014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.445208][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.458879][T12014] bridge_slave_1: entered allmulticast mode [ 1247.466164][T12014] bridge_slave_1: entered promiscuous mode [ 1247.472854][T12077] Cannot find del_set index 0 as target [ 1247.480440][ T1250] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.492432][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 1247.492446][ T29] audit: type=1326 audit(1736824439.370:34149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.522353][ T29] audit: type=1326 audit(1736824439.370:34150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.547969][ T29] audit: type=1326 audit(1736824439.430:34151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.571609][ T29] audit: type=1326 audit(1736824439.430:34152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.595305][ T29] audit: type=1326 audit(1736824439.430:34153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.619272][ T29] audit: type=1326 audit(1736824439.430:34154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.643869][ T29] audit: type=1326 audit(1736824439.430:34155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.667719][ T29] audit: type=1326 audit(1736824439.430:34156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.691652][ T29] audit: type=1326 audit(1736824439.430:34157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.715621][ T29] audit: type=1326 audit(1736824439.430:34158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.0.11135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150ed45d29 code=0x7ffc0000 [ 1247.774576][T12014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.829618][ T1250] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.868915][T12014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.885428][T12066] lo speed is unknown, defaulting to 1000 [ 1247.906751][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1247.935665][ T1250] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.979751][T11997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.996517][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1248.010101][T12014] team0: Port device team_slave_0 added [ 1248.015800][T11997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1248.027207][ T1250] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.043267][T12014] team0: Port device team_slave_1 added [ 1248.071152][T11997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1248.082178][T11997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1248.092901][T12014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.099982][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.126004][T12014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.137443][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1248.148919][T12014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.155872][T12014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.182504][T12014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.247502][T12014] hsr_slave_0: entered promiscuous mode [ 1248.253657][T12014] hsr_slave_1: entered promiscuous mode [ 1248.262733][T12014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.270351][T12014] Cannot create hsr debugfs directory [ 1248.344931][ T1250] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.427148][ T1250] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.441925][T12101] hub 9-0:1.0: USB hub found [ 1248.443218][T12066] chnl_net:caif_netlink_parms(): no params data found [ 1248.446845][T12101] hub 9-0:1.0: 8 ports detected [ 1248.461000][T12085] lo speed is unknown, defaulting to 1000 [ 1248.462975][T11997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.487961][T12101] smc: net device bond0 applied user defined pnetid SYZ0 [ 1248.515105][ T1250] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.555190][T12066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.562362][T12066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.569536][T12066] bridge_slave_0: entered allmulticast mode [ 1248.576017][T12066] bridge_slave_0: entered promiscuous mode [ 1248.583194][T12108] netlink: 'syz.1.11141': attribute type 10 has an invalid length. [ 1248.599349][T11997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.607121][ T1250] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.617794][T12066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.624840][T12066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.632028][T12066] bridge_slave_1: entered allmulticast mode [ 1248.638269][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11141'. [ 1248.639111][T12066] bridge_slave_1: entered promiscuous mode [ 1248.684587][T12066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.697441][T31755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.704524][T31755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.738781][T12014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1248.750640][T12066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.761686][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.768888][T31745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.785384][T11997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1248.795851][T11997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1248.809318][ T1250] bridge_slave_1: left allmulticast mode [ 1248.814978][ T1250] bridge_slave_1: left promiscuous mode [ 1248.820994][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.836048][ T1250] bridge_slave_0: left allmulticast mode [ 1248.841936][ T1250] bridge_slave_0: left promiscuous mode [ 1248.847776][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.864690][ T1250] ip6gretap0: left promiscuous mode [ 1248.878265][ T1250] ip6gretap0: left promiscuous mode [ 1249.001803][ T1250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.012153][ T1250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.023643][ T1250] bond0 (unregistering): Released all slaves [ 1249.034284][ T1250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.044549][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1249.058205][ T1250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1249.072094][ T1250] bond0 (unregistering): Released all slaves [ 1249.083819][T12014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1249.094285][T12014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1249.125207][T12014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1249.146679][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1249.155908][T12066] team0: Port device team_slave_0 added [ 1249.245741][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.256992][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1249.269265][T12066] team0: Port device team_slave_1 added [ 1249.279742][ T1250] hsr_slave_0: left promiscuous mode [ 1249.285514][ T1250] hsr_slave_1: left promiscuous mode [ 1249.291392][ T1250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.298841][ T1250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.306544][ T1250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.314002][ T1250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.325821][ T1250] veth1_macvtap: left promiscuous mode [ 1249.331320][ T1250] veth0_macvtap: left promiscuous mode [ 1249.336897][ T1250] veth1_vlan: left promiscuous mode [ 1249.342102][ T1250] veth0_vlan: left promiscuous mode [ 1249.347792][ T1250] veth0_macvtap: left promiscuous mode [ 1249.353290][ T1250] veth1_vlan: left promiscuous mode [ 1249.358513][ T1250] veth0_vlan: left promiscuous mode [ 1249.432970][ T1250] team0 (unregistering): Port device team_slave_1 removed [ 1249.443683][ T1250] team0 (unregistering): Port device team_slave_0 removed [ 1249.491294][ T1250] team0 (unregistering): Port device team_slave_1 removed [ 1249.501353][ T1250] team0 (unregistering): Port device team_slave_0 removed [ 1249.528227][T12085] chnl_net:caif_netlink_parms(): no params data found [ 1249.549308][T12066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.556393][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.582445][T12066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.594664][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.612384][T12066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.619366][T12066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.645438][T12066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.665243][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.672328][T10747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.683886][T31745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.690954][T31745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.710264][T12085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.717566][T12085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.724821][T12085] bridge_slave_0: entered allmulticast mode [ 1249.731610][T12085] bridge_slave_0: entered promiscuous mode [ 1249.738588][T12085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.745646][T12085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.752914][T12085] bridge_slave_1: entered allmulticast mode [ 1249.759508][T12085] bridge_slave_1: entered promiscuous mode [ 1249.768356][T11997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.809404][T12085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.825476][T12066] hsr_slave_0: entered promiscuous mode [ 1249.833425][T12066] hsr_slave_1: entered promiscuous mode [ 1249.839394][T12066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.847056][T12066] Cannot create hsr debugfs directory [ 1249.858460][T12085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.883952][T12085] team0: Port device team_slave_0 added [ 1249.899778][T12085] team0: Port device team_slave_1 added [ 1249.928107][T12085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.935133][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.961675][T12085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.976128][T12085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.983192][T12085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.009202][T12085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.055114][T12085] hsr_slave_0: entered promiscuous mode [ 1250.061551][T12085] hsr_slave_1: entered promiscuous mode [ 1250.067801][T12085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1250.075361][T12085] Cannot create hsr debugfs directory [ 1250.085547][T12014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.086362][T12144] ALSA: seq fatal error: cannot create timer (-19) [ 1250.167373][T11997] veth0_vlan: entered promiscuous mode [ 1250.177277][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1250.182940][T12066] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1250.224797][T12066] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1250.235814][T11997] veth1_vlan: entered promiscuous mode [ 1250.245699][ T1250] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.259902][T12066] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1250.280453][T12066] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1250.296551][T11997] veth0_macvtap: entered promiscuous mode [ 1250.307617][ T1250] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.338727][T11997] veth1_macvtap: entered promiscuous mode [ 1250.348488][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.358990][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.368973][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.379409][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.389304][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.399812][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.409730][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1250.420211][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.431843][T11997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.442523][ T1250] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.456226][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.466853][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.476805][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.487272][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.497130][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.507590][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.517447][T11997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1250.527934][T11997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1250.538787][T11997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.559292][T11997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.568090][T11997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.576906][T11997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.585589][T11997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.599802][ T1250] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.642507][T12014] veth0_vlan: entered promiscuous mode [ 1250.649379][T12085] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1250.661220][T12085] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1250.676089][T12085] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1250.719706][T12085] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1250.736029][T12066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.746711][T12066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.765752][T12066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1250.776162][T12066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1250.815820][ T3400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.822914][ T3400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.847693][ T3400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.854796][ T3400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.894327][ T1250] ip6gretap0: left promiscuous mode [ 1250.953923][ T1250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.975359][ T1250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.995682][ T1250] bond0 (unregistering): Released all slaves [ 1251.018702][T12014] veth1_vlan: entered promiscuous mode [ 1251.093356][T12066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.147683][T12014] veth0_macvtap: entered promiscuous mode [ 1251.158816][ T1250] bridge_slave_0: left allmulticast mode [ 1251.164572][ T1250] veth1_macvtap: left promiscuous mode [ 1251.170295][ T1250] veth0_macvtap: left promiscuous mode [ 1251.175956][ T1250] veth1_vlan: left promiscuous mode [ 1251.181592][ T1250] veth0_vlan: left promiscuous mode [ 1251.208675][ T1250] infiniband syz!: set down [ 1251.216670][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11148'. [ 1251.249925][ T1250] team0 (unregistering): Port device team_slave_1 removed [ 1251.259980][ T1250] team0 (unregistering): Port device team_slave_0 removed [ 1251.267566][T31755] smc: removing ib device syz! [ 1251.292547][T12175] hsr_slave_0: left promiscuous mode [ 1251.321329][T12175] hsr_slave_1: left promiscuous mode [ 1251.342692][T12085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.352089][T12014] veth1_macvtap: entered promiscuous mode [ 1251.391503][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.402066][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.411911][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.422429][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.432872][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.443343][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.453235][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.463732][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.473642][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.484132][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.495249][T12014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.503872][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.514409][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.524265][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.534774][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.544745][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.555186][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.565038][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.575626][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.585551][T12014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.596111][T12014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.609148][T12014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.622269][T12085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.633639][T12014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.642436][T12014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.651184][T12014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.660083][T12014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.676904][T11005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.683970][T11005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.707622][T11005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.714684][T11005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.737759][T12066] veth0_vlan: entered promiscuous mode [ 1251.757986][T12066] veth1_vlan: entered promiscuous mode [ 1251.813680][T12066] veth0_macvtap: entered promiscuous mode [ 1251.821111][T12066] veth1_macvtap: entered promiscuous mode [ 1251.830583][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.841189][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.851072][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.861649][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.871555][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.882076][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.892139][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.902650][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.912543][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.922996][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.933302][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.943762][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.955645][T12066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.963877][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.974717][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.984626][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.995145][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.005060][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.015535][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.025458][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.035957][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.045846][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.056410][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.066222][T12066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.076695][T12066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.088018][T12066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.101566][T12066] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.110435][T12066] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.119218][T12066] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.128008][T12066] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1252.160994][T12085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.165429][T12234] Cannot find del_set index 0 as target [ 1252.332157][T12265] Cannot find del_set index 0 as target [ 1252.370149][T12085] veth0_vlan: entered promiscuous mode [ 1252.378157][T12085] veth1_vlan: entered promiscuous mode [ 1252.402255][T12085] veth0_macvtap: entered promiscuous mode [ 1252.409306][T11005] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1252.409384][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1252.412285][T12085] veth1_macvtap: entered promiscuous mode [ 1252.434293][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.445401][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.455323][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.465765][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.475597][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.486099][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.495966][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.506459][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.516498][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1252.516580][T12085] ================================================================== [ 1252.516604][T12085] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 1252.516627][T12085] [ 1252.516632][T12085] write to 0xffffffff8672c830 of 8 bytes by task 31745 on cpu 0: [ 1252.516645][T12085] prb_reserve+0x740/0xb60 [ 1252.516664][T12085] vprintk_store+0x558/0x870 [ 1252.516689][T12085] vprintk_emit+0x15e/0x680 [ 1252.516713][T12085] vprintk_default+0x26/0x30 [ 1252.516735][T12085] vprintk+0x75/0x80 [ 1252.516749][T12085] _printk+0x7a/0xa0 [ 1252.516767][T12085] ip6_tnl_xmit_ctl+0x3c6/0x3e0 [ 1252.516784][T12085] ip6gre_tunnel_xmit+0x158/0xc90 [ 1252.516806][T12085] dev_hard_start_xmit+0x119/0x3f0 [ 1252.516825][T12085] sch_direct_xmit+0x1a9/0x580 [ 1252.516844][T12085] __dev_queue_xmit+0xf6a/0x2090 [ 1252.516864][T12085] alb_send_lp_vid+0x1c8/0x1f0 [ 1252.516895][T12085] bond_alb_monitor+0x238/0xa30 [ 1252.516922][T12085] process_scheduled_works+0x483/0x9a0 [ 1252.516949][T12085] worker_thread+0x51d/0x6f0 [ 1252.516976][T12085] kthread+0x1d1/0x210 [ 1252.516992][T12085] ret_from_fork+0x4b/0x60 [ 1252.517007][T12085] ret_from_fork_asm+0x1a/0x30 [ 1252.517023][T12085] [ 1252.517027][T12085] read to 0xffffffff8672c830 of 8 bytes by task 12085 on cpu 1: [ 1252.517041][T12085] _prb_read_valid+0x3bb/0xba0 [ 1252.517060][T12085] prb_read_valid+0x3d/0x60 [ 1252.517086][T12085] printk_get_next_message+0xd4/0x710 [ 1252.517111][T12085] console_flush_all+0x28a/0x770 [ 1252.517137][T12085] console_unlock+0xab/0x330 [ 1252.517157][T12085] vprintk_emit+0x3f4/0x680 [ 1252.517176][T12085] vprintk_default+0x26/0x30 [ 1252.517199][T12085] vprintk+0x75/0x80 [ 1252.517213][T12085] _printk+0x7a/0xa0 [ 1252.517228][T12085] batadv_check_known_mac_addr+0x153/0x180 [ 1252.517269][T12085] batadv_hard_if_event+0x4b9/0xfb0 [ 1252.517294][T12085] raw_notifier_call_chain+0x6f/0x1d0 [ 1252.517320][T12085] call_netdevice_notifiers_info+0xae/0x100 [ 1252.517347][T12085] dev_set_mac_address+0x1ff/0x260 [ 1252.517377][T12085] dev_set_mac_address_user+0x31/0x50 [ 1252.517409][T12085] do_setlink+0x3ec/0x22c0 [ 1252.517431][T12085] rtnl_newlink+0xde9/0x1250 [ 1252.517449][T12085] rtnetlink_rcv_msg+0x651/0x710 [ 1252.517467][T12085] netlink_rcv_skb+0x12c/0x230 [ 1252.517486][T12085] rtnetlink_rcv+0x1c/0x30 [ 1252.517502][T12085] netlink_unicast+0x599/0x670 [ 1252.517519][T12085] netlink_sendmsg+0x5cc/0x6e0 [ 1252.517542][T12085] __sock_sendmsg+0x140/0x180 [ 1252.517569][T12085] __sys_sendto+0x1a8/0x230 [ 1252.517586][T12085] __x64_sys_sendto+0x78/0x90 [ 1252.517604][T12085] x64_sys_call+0x29fa/0x2dc0 [ 1252.517622][T12085] do_syscall_64+0xc9/0x1c0 [ 1252.517639][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.517669][T12085] [ 1252.517673][T12085] value changed: 0x0000000000003bba -> 0x0000000000005bba [ 1252.517683][T12085] [ 1252.517688][T12085] Reported by Kernel Concurrency Sanitizer on: [ 1252.517696][T12085] CPU: 1 UID: 0 PID: 12085 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 1252.517722][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1252.517735][T12085] ================================================================== [ 1252.626890][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1252.629831][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.845682][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.855519][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.865964][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.875821][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1252.886310][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.897140][T12085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1252.905517][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.916015][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.925865][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.936349][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.946251][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.956730][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.966639][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.977266][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1252.987334][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1252.997794][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.007641][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.018109][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.027956][T12085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1253.038402][T12085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.049086][T12085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.064234][T12085] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.073136][T12085] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.082117][T12085] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.090942][T12085] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.294397][T31740] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.527001][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1253.609586][T31740] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.637503][ T1250] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1253.658904][T31740] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.719390][T31740] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.747471][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1253.791743][T31740] bridge_slave_1: left allmulticast mode [ 1253.797448][T31740] bridge_slave_1: left promiscuous mode [ 1253.803086][T31740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.812962][T31740] bridge_slave_0: left allmulticast mode [ 1253.818735][T31740] bridge_slave_0: left promiscuous mode [ 1253.824471][T31740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.918424][T31740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.930424][T31740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.940321][T31740] bond0 (unregistering): Released all slaves [ 1254.006166][T31740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.013751][T31740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.024030][T31740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.031546][T31740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.044612][T31740] veth1_macvtap: left promiscuous mode [ 1254.050124][T31740] veth0_macvtap: left promiscuous mode [ 1254.055657][T31740] veth1_vlan: left promiscuous mode [ 1254.060984][T31740] veth0_vlan: left promiscuous mode [ 1254.126050][T31740] team0 (unregistering): Port device team_slave_1 removed [ 1254.135791][T31740] team0 (unregistering): Port device team_slave_0 removed [ 1254.429551][T31740] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.636740][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1254.746813][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1254.856642][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1255.746756][T31745] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1256.029697][T31740] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.089095][T31740] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.148840][T31740] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.221604][T31740] bridge_slave_1: left allmulticast mode [ 1256.227292][T31740] bridge_slave_1: left promiscuous mode [ 1256.232926][T31740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.242183][T31740] bridge_slave_0: left allmulticast mode [ 1256.247911][T31740] bridge_slave_0: left promiscuous mode [ 1256.253579][T31740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.338389][T31740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.349430][T31740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.358925][T31740] bond0 (unregistering): Released all slaves [ 1256.436083][T31740] hsr_slave_0: left promiscuous mode [ 1256.441933][T31740] hsr_slave_1: left promiscuous mode [ 1256.449060][T31740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.456553][T31740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.465331][T31740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.472843][T31740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.484304][T31740] veth1_macvtap: left promiscuous mode [ 1256.489932][T31740] veth0_macvtap: left promiscuous mode [ 1256.495452][T31740] veth1_vlan: left promiscuous mode [ 1256.500859][T31740] veth0_vlan: left promiscuous mode [ 1256.573715][T31740] team0 (unregistering): Port device team_slave_1 removed [ 1256.583289][T31740] team0 (unregistering): Port device team_slave_0 removed [ 1257.957394][T31755] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1257.957527][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1258.066755][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1258.186372][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1259.076538][T31740] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1259.166885][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1259.296570][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.176590][ T3400] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.276447][T11005] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1260.396586][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1261.276481][T31755] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!